Privacy Policy.

Last updated: 10 September 2026

This policy explains what personal data Gebrema Metaalwaren B.V. collects through this website, why we collect it, how long we keep it, and the rights you have. We collect only what we need to answer your request and run our business, and we never sell your data.

Who is responsible for your data.

The data controller is Gebrema Metaalwaren B.V., Bloemendalerweg 28, 1382 KC Weesp, Netherlands. For any question about this policy or your personal data, contact us at metal [at] gebrema [dot] eu or +31 294 415 151.

What we collect and when.

We only receive personal data when you choose to send it to us. Specifically:

• Quote requests: when you use our request-a-quote form, we receive your name, company, email address, estimated annual volume, part type, and your message, plus any drawing or files you choose to attach.
• Job applications: when you apply through our careers form, we receive the contact details and information you submit, plus any CV or motivation letter you choose to attach, so we can assess and respond to your application.
• Email and phone: if you contact us directly, we receive whatever you include in that message or call.
• Website statistics: Cloudflare Web Analytics measures aggregate, anonymised use of the site (page views, referring sources). It uses no cookies and does not identify you individually.
• Statistics and advertising, only with your consent: Google Analytics 4, Google Ads conversion measurement and remarketing, and Microsoft Clarity. These set cookies and process your IP address and browsing behaviour on this site once you accept them in the cookie banner. Clarity goes further: it records your clicks and scrolling so we can replay a visit and see where the site is unclear. Before that, Google's tags load with every signal denied: they set no cookies, but they do send Google a cookieless ping that carries your IP address, your browser, the page you are on and the page you came from.
• Business visitor identification: Snitcher matches the network address of a visit to the organisation it belongs to, so we can see which companies look at our site. It reports at company level, not by name. To do that its tracker still tells devices apart, with an identifier and with hashes of your browser and graphics settings, and that counts as personal data. Until you choose, it keeps only a session id and those short-lived hashes in this browser's session storage, gone when you close the tab; we only allow it to recognise a returning visit across sessions after you accept marketing cookies, and we remove any such identifier its tracker sets earlier.

Why we use it, and our legal basis.

• To answer your quote request and assess technical and commercial fit. Legal basis: taking steps at your request before entering into a contract, and our legitimate interest in responding to enquiries.
• To handle and respond to job applications. Legal basis: taking steps at your request prior to a possible employment relationship, and our legitimate interest in recruitment.
• To understand, in aggregate, how the site is used so we can improve it, and to see which organisations visit us. Legal basis: our legitimate interest for the cookieless analytics, the cookieless pings and the lookup of the organisation behind your network address. Before you choose, Snitcher's tracker also writes a session id and short-lived hashes of your browser and graphics settings to this browser's session storage, so it can tell devices apart. That storage is gone when you close the tab.
• To see which pages lead to a quote request or an application, to show you our ads on other websites, and to recognise a returning visit from your organisation. Legal basis: your consent, given in the cookie banner and withdrawable at any time through the cookie settings below.

Who processes it for us.

We use a small number of trusted service providers, acting as our processors under data-processing agreements. Form submissions are first received on our own Cloudflare infrastructure. The text fields of your message are then forwarded to us by email through Web3Forms, a form-processing service based in the United States. Any file you attach is not sent to Web3Forms: it is stored privately on Cloudflare, and only a private download link for our team travels with the email. The website is hosted, delivered and protected by Cloudflare, which also provides our cookieless analytics. Google Ireland Limited (Google Tag Manager, Google Analytics 4, Google Ads) and Snitcher B.V. (Netherlands) already receive the cookieless data described above before you choose; with your consent they also use cookies, Google to measure and to advertise, Snitcher to recognise the organisations behind returning business visits. Microsoft Ireland Operations Limited (Microsoft Clarity) only runs after you accept statistics cookies. Because some of these providers may process data outside the European Economic Area, including in the United States, such transfers rely on the European Commission's standard contractual clauses and, where applicable, the EU-US Data Privacy Framework. We do not sell your data. Beyond the cookieless ping described above, Google only uses this visit for our advertising when you accept marketing cookies, and we never share it with anyone else for their own advertising.

How long we keep it.

We keep quote-request data for the duration of your enquiry and any resulting business relationship, plus the periods we are legally required to observe afterwards (for example, seven years for records that fall under our tax obligations). We keep job-application data for up to four weeks after the application process closes, or up to one year if you give us permission, and we delete it sooner if you ask. Files uploaded with a form (drawings, CVs) are automatically deleted from our file storage 60 days after upload. Our cookieless analytics data contains no personal identifiers. The data you allow with your consent is kept by Google, Microsoft and Snitcher for the retention period set in our account with each of them, and the cookies and browser storage they use expire as shown in the table below.

Cookies and your choice.

Essential cookies keep the site secure and available and remember the cookie choice you make; they need no consent. Our forms use Cloudflare Turnstile to block automated spam, which checks signals from your browser and processes your IP address for that purpose. Statistics and marketing cookies (Google Analytics 4, Google Ads, Microsoft Clarity, Snitcher) are only set after you accept them in the banner. You can change or withdraw that choice at any time: open the cookie settings. The banner is ours, and so is the record: your choice is stored in a first-party cookie named gebrema_consent for up to twelve months, with a random consent id and the time you made it. Some browsers, Safari among them, shorten cookies written this way to about a week, so there we ask you again sooner. Nothing is sent to a consent vendor. The table below is ours too. It covers the cookies and browser storage that the tools named on this page set on gebrema.eu, with what sets each one, why, and how long it lasts.

Cookies in use.

Your rights.

Under the GDPR you have the right to:

• Access the personal data we hold about you, and receive a copy of it.
• Have inaccurate data corrected, and incomplete data completed.
• Have your data erased where there is no overriding reason for us to keep it.
• Restrict or object to how we process your data.
• Receive your data in a portable format where applicable.

To exercise any of these rights, email us at metal [at] gebrema [dot] eu. You also have the right to lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

How we protect your data.

Data you submit through our forms is transmitted over an encrypted (HTTPS) connection, and we apply reasonable technical and organisational measures to protect it against loss, misuse and unauthorised access.

Changes to this policy.

We may update this policy as our practices or the law evolve. The current version, with its date, is always the one published on this page.

Disclaimer.

This website has been put together with great care. Its texts, figures and images are for general information only: they are not an offer, and Gebrema Metaalwaren B.V. accepts no promise or obligation on the basis of them. Despite that care, the site may contain errors or omissions, and we may change its content at any time without notice. What we supply, and on what terms, is set out in our quotation, our order confirmation and our general terms and conditions.