Bruco IC respects your privacy and ensures that the personal information you provide to us is treated confidentially. In this privacy policy, we explain what data we collect via our website, why we do this, and what your rights are. This policy has been drawn up in accordance with the General Data Protection Regulation (GDPR).

1. Identity of the Data Controller

The party responsible for the processing of your personal data (Data Controller) is:

Bruco IC

• Adress: ‍Oostermaat 2, 7623 CS, Borne, The Netherlands
• Phone: +31 (0) 74 2406 690
• Email: info@bruco-ic.com‍
• Chamber of Commerce (KvK) number: 08215715

2. What data do we process and for what purpose?

We process your personal data when you use the contact form on our website.

Contact Form

When you fill out the contact form, we ask for the following information:

• First name and Last name
• Company name
• Phone number
• Email address
• Content of your message

Purpose: The purpose of this processing is to be able to contact you in response to your message. We use this data to assess your customer inquiry and determine to what extent it aligns with the services of Bruco IC.

3. Legal Basis

We process your data based on legitimate interest (Article 6(1)(f) GDPR).

Without this data, we cannot contact you to answer your question or discuss a potential collaboration. Processing this data is necessary for our normal business operations and service provision. If this contact leads to an assignment, further processing will be based on the performance of a contract and/or legal obligations.

4. Retention Periods

Bruco IC does not retain your personal data longer than strictly necessary to achieve the purposes for which your data is collected. We apply the following retention periods:

• Contact Inquiries: Data submitted via the contact form is managed manually. If no customer relationship is established, we retain your data for a maximum of 12 months after the last moment of contact. We do this to be able to answer any follow-up questions efficiently.
• Administrative Obligation: If you become a client of Bruco IC, we are legally required to retain invoice and transaction data for 7 years for the Tax and Customs Administration (fiscal retention obligation).

5. Sharing Personal Data with Third Parties

Bruco IC does not sell your data to third parties and only provides it if this is necessary for the execution of our agreement with you or to comply with a legal obligation.

We conclude a data processing agreement with companies that process your data on our behalf to ensure the same level of security and confidentiality of your data. Bruco IC remains responsible for these processing operations.

We use the following suppliers (processors):

• Webflow: For hosting our website and the Content Management System (CMS). Your data is stored on Webflow's servers.
• Frank & Forward: As a marketing agency responsible for building and maintaining the website. If necessary, they have access to the backend of the website for technical maintenance.

Transfer outside the EEA:Since we use international services such as Webflow, data may be stored on servers outside the European Economic Area (EEA), including the United States.

Webflow is certified under the EU–U.S. Data Privacy Framework. This means that the European Commission has determined that Webflow provides an adequate level of data protection. Additionally, our Data Processing Addendum (DPA) with Webflow explicitly includes the European Commission's Standard Contractual Clauses (SCCs) as a transfer mechanism to ensure the security of your data.

6. Security

Bruco IC takes the protection of your data seriously and takes appropriate measures to prevent misuse, loss, unauthorized access, unwanted disclosure, and unauthorized modification. If you have the impression that your data is not properly secured or there are indications of misuse, please contact us at info@bruco-ic.com.

7. Your Rights

Under the GDPR, you have various rights regarding your personal data:

• Right of access: You have the right to see what personal data we process about you.
• Right to rectification: You may ask us to correct or supplement incorrect data.
• Right to erasure: You may ask us to delete your data (right to be forgotten), insofar as this does not conflict with a legal retention obligation.
• Right to restriction of processing: You can ask to temporarily process less data.
• Right to object: You can object to the processing of your data based on our legitimate interest.
• Right to data portability: You have the right to receive your data in a common digital format.

Exercising your rights:You can send a request for access, correction, deletion, or data transfer to info@bruco-ic.com. To be sure that the request for access has been made by you, we may ask you to identify yourself. We will respond to your request as quickly as possible, but within four weeks.

8. Complaints

If you have a complaint about the processing of your personal data, we ask you to contact us directly about this. If we cannot resolve the issue together, you always have the right to file a complaint with the supervisory authority, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

This privacy policy is tailored to the situation as of November 2025.

‍