Privacy Policy.

Last updated: 4 July 2026

This policy explains what personal data Gebrema Metaalwaren B.V. collects through this website, why we collect it, how long we keep it, and the rights you have. We collect only what we need to answer your request and run our business, and we never sell your data.

Who is responsible for your data.

The data controller is Gebrema Metaalwaren B.V., Bloemendalerweg 28, 1382 KC Weesp, Netherlands. For any question about this policy or your personal data, contact us at metal [at] gebrema [dot] eu or +31 294 415 151.

What we collect and when.

We only receive personal data when you choose to send it to us. Specifically:

• Quote requests: when you use our request-a-quote form, we receive your name, company, email address, estimated annual volume, part type, and your message, plus any drawing or files you choose to attach.
• Job applications: when you apply through our careers form, we receive the contact details and information you submit, plus any CV or motivation letter you choose to attach, so we can assess and respond to your application.
• Email and phone: if you contact us directly, we receive whatever you include in that message or call.
• Website analytics: we use Cloudflare Web Analytics to measure aggregate, anonymised usage of the site (such as page views and referring sources). It uses no cookies and does not identify you individually.

Why we use it, and our legal basis.

• To answer your quote request and assess technical and commercial fit. Legal basis: taking steps at your request before entering into a contract, and our legitimate interest in responding to enquiries.
• To handle and respond to job applications. Legal basis: taking steps at your request prior to a possible employment relationship, and our legitimate interest in recruitment.
• To understand, in aggregate, how the site is used so we can improve it. Legal basis: our legitimate interest, using analytics that do not identify individuals.

Who processes it for us.

We use a small number of trusted service providers, acting as our processors under data-processing agreements. Form submissions are first received on our own Cloudflare infrastructure. The text fields of your message are then forwarded to us by email through Web3Forms, a form-processing service based in the United States. Any file you attach is not sent to Web3Forms: it is stored privately on Cloudflare, and only a private download link for our team travels with the email. The website is hosted, delivered and protected by Cloudflare, which also provides our cookieless analytics. Because some of these providers may process data outside the European Economic Area, including in the United States, such transfers rely on the European Commission's standard contractual clauses and, where applicable, the EU-US Data Privacy Framework. We do not sell your data, and we do not share it for advertising.

How long we keep it.

We keep quote-request data for the duration of your enquiry and any resulting business relationship, plus the periods we are legally required to observe afterwards (for example, seven years for records that fall under our tax obligations). We keep job-application data for up to four weeks after the application process closes, or up to one year if you give us permission, and we delete it sooner if you ask. Files uploaded with a form (drawings, CVs) are automatically deleted from our file storage 60 days after upload. Aggregate analytics data contains no personal identifiers.

Cookies.

This website uses no advertising or tracking cookies, and our analytics (Cloudflare Web Analytics) are cookieless. Cloudflare, as our security and content-delivery provider, may set strictly necessary cookies to keep the site secure and available. These do not track you across other websites. Our forms use Cloudflare Turnstile to block automated spam. It checks signals from your browser and processes your IP address for that purpose.

Your rights.

Under the GDPR you have the right to:

• Access the personal data we hold about you, and receive a copy of it.
• Have inaccurate data corrected, and incomplete data completed.
• Have your data erased where there is no overriding reason for us to keep it.
• Restrict or object to how we process your data.
• Receive your data in a portable format where applicable.

To exercise any of these rights, email us at metal [at] gebrema [dot] eu. You also have the right to lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

How we protect your data.

Data you submit through our forms is transmitted over an encrypted (HTTPS) connection, and we apply reasonable technical and organisational measures to protect it against loss, misuse and unauthorised access.

Changes to this policy.

We may update this policy as our practices or the law evolve. The current version, with its date, is always the one published on this page.

Disclaimer.

This website has been put together with great care. Its texts, figures and images are for general information only: they are not an offer, and Gebrema Metaalwaren B.V. accepts no promise or obligation on the basis of them. Despite that care, the site may contain errors or omissions, and we may change its content at any time without notice. What we supply, and on what terms, is set out in our quotation, our order confirmation and our general terms and conditions.