Legal
Privacy Policy.
How we handle the personal data you share with us, and the rights you have over it under the General Data Protection Regulation (GDPR).
Last updated: 3 September 2026
This policy explains what personal data Gebrema Metaalwaren B.V. collects through this website, why we collect it, how long we keep it, and the rights you have. We collect only what we need to answer your request and run our business, and we never sell your data.
Who is responsible for your data.
The data controller is Gebrema Metaalwaren B.V., Bloemendalerweg 28, 1382 KC Weesp, Netherlands. For any question about this policy or your personal data, contact us at metal [at] gebrema [dot] eu or +31 294 415 151.
What we collect and when.
We only receive personal data when you choose to send it to us. Specifically:
- Quote requests: when you use our request-a-quote form, we receive your name, company, email address, estimated annual volume, part type, and your message, plus any drawing or files you choose to attach.
- Job applications: when you apply through our careers form, we receive the contact details and information you submit, plus any CV or motivation letter you choose to attach, so we can assess and respond to your application.
- Email and phone: if you contact us directly, we receive whatever you include in that message or call.
- Website statistics: Cloudflare Web Analytics measures aggregate, anonymised use of the site (page views, referring sources). It uses no cookies and does not identify you individually.
- Statistics and advertising measurement, only with your consent: Google Analytics 4, Google Ads conversion measurement and Microsoft Clarity. These do set cookies and process your IP address and browsing behaviour on this site. None of them runs until you accept them in the cookie banner.
- Business visitor identification: Snitcher matches the network address of a visit to the organisation it belongs to, so we can see which companies look at our site. It identifies organisations, not people, and it only recognises a returning visitor across sessions after you accept marketing cookies.
Why we use it, and our legal basis.
- To answer your quote request and assess technical and commercial fit. Legal basis: taking steps at your request before entering into a contract, and our legitimate interest in responding to enquiries.
- To handle and respond to job applications. Legal basis: taking steps at your request prior to a possible employment relationship, and our legitimate interest in recruitment.
- To understand, in aggregate, how the site is used so we can improve it. Legal basis: our legitimate interest, using cookieless analytics that do not identify individuals.
- To see which pages lead to a quote request or an application, and whether our advertising works. Legal basis: your consent, given in the cookie banner and withdrawable at any time through the cookie settings below.
Who processes it for us.
We use a small number of trusted service providers, acting as our processors under data-processing agreements. Form submissions are first received on our own Cloudflare infrastructure. The text fields of your message are then forwarded to us by email through Web3Forms, a form-processing service based in the United States. Any file you attach is not sent to Web3Forms: it is stored privately on Cloudflare, and only a private download link for our team travels with the email. The website is hosted, delivered and protected by Cloudflare, which also provides our cookieless analytics. With your consent, Google Ireland Limited (Google Tag Manager, Google Analytics 4, Google Ads) and Microsoft Ireland Operations Limited (Microsoft Clarity) process usage data on our behalf, Snitcher B.V. (Netherlands) identifies the organisations behind business visits, and Usercentrics A/S (Cookiebot) records the choice you make in the banner. Because some of these providers may process data outside the European Economic Area, including in the United States, such transfers rely on the European Commission's standard contractual clauses and, where applicable, the EU-US Data Privacy Framework. We do not sell your data, and we do not share it for advertising.
How long we keep it.
We keep quote-request data for the duration of your enquiry and any resulting business relationship, plus the periods we are legally required to observe afterwards (for example, seven years for records that fall under our tax obligations). We keep job-application data for up to four weeks after the application process closes, or up to one year if you give us permission, and we delete it sooner if you ask. Files uploaded with a form (drawings, CVs) are automatically deleted from our file storage 60 days after upload. Aggregate analytics data contains no personal identifiers.
Cookies and your choice.
Strictly necessary cookies keep the site secure and available and remember the cookie choice you make; they need no consent. Our forms use Cloudflare Turnstile to block automated spam, which checks signals from your browser and processes your IP address for that purpose. Statistics and marketing cookies (Google Analytics 4, Google Ads, Microsoft Clarity, Snitcher) are only set after you accept them in the banner. You can change or withdraw that choice at any time: open the cookie settings. The declaration below is generated by our consent tool and lists every cookie in use, with its purpose and lifetime.
Your rights.
Under the GDPR you have the right to:
- Access the personal data we hold about you, and receive a copy of it.
- Have inaccurate data corrected, and incomplete data completed.
- Have your data erased where there is no overriding reason for us to keep it.
- Restrict or object to how we process your data.
- Receive your data in a portable format where applicable.
To exercise any of these rights, email us at metal [at] gebrema [dot] eu. You also have the right to lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
How we protect your data.
Data you submit through our forms is transmitted over an encrypted (HTTPS) connection, and we apply reasonable technical and organisational measures to protect it against loss, misuse and unauthorised access.
Changes to this policy.
We may update this policy as our practices or the law evolve. The current version, with its date, is always the one published on this page.
Disclaimer.
This website has been put together with great care. Its texts, figures and images are for general information only: they are not an offer, and Gebrema Metaalwaren B.V. accepts no promise or obligation on the basis of them. Despite that care, the site may contain errors or omissions, and we may change its content at any time without notice. What we supply, and on what terms, is set out in our quotation, our order confirmation and our general terms and conditions.