Privacy & Cookie Statement

Brightways handles personal data and cookies with care.

In this statement, we explain what data we collect, why we collect it, how long we keep it and how we use cookies.

Clear and straightforward. So you know where you stand.

1. Who are we?

Brightways B.V. is responsible for the processing of personal data through this website.

Our details:

Brightways B.V.
Stationsplein 45 A4.004
3013 AK Rotterdam
The Netherlands

Chamber of Commerce: 75926296
VAT number: NL860444314B01
Email: info@brightways.nl
Phone: +31 (0)85 130 85 76

Do you have questions about this statement or do you want to exercise your privacy rights? You can contact us at info@brightways.nl.

Brightways has not appointed an official Data Protection Officer. For privacy questions, you can reach us through the email address above.

2. Who does this statement apply to?

This Privacy & Cookie Statement applies to personal data that Brightways processes in connection with:

• contact requests through our website
• communication with prospects, clients, suppliers and partners
• offering and performing our services
• marketing, newsletters and commercial communication
• job applications
• visits to and use of our website
• administration, security, compliance and legal obligations

This statement is mainly intended for website visitors, business contacts, clients, suppliers, applicants and other people we are in contact with.

3. Marketplace and client data

Brightways works with clients, marketplaces, advertising platforms and other tools. Because of this, we may process personal data in different roles.

Sometimes we decide why and how personal data is processed. In that case, we are the controller.

Sometimes we process personal data on behalf of a client, platform or another party. In that case, that party may be the primary controller and its privacy statement may also apply.

This may be relevant, for example, in marketplace operations, customer service, returns, logistics, payments, advertising, reporting, compliance or platform management.

This privacy statement does not replace the privacy statement of a marketplace, platform, client, payment provider, carrier or any other party that is itself responsible for processing personal data.

4. What personal data do we process?

The personal data we process depends on how you interact with us.

We may process the following data:

• Name
• Company name
• Job title
• Email address
• Phone number
• Address details
• Billing details
• Messages, requests and correspondence
• Meeting notes and follow-up information
• Job application data, such as a CV, motivation letter and interview notes
• Website data, such as IP address, browser, device, pages visited and cookie preferences
• Technical data needed for the security and operation of the website
• Client, project and contract data needed to perform our services

We do not collect more data than we need for the purpose for which we use it.

5. How do we collect personal data?

We collect personal data in different ways.

For example:

• when you fill in a form on our website
• when you email us, call us or send us a message
• when you are a client, supplier or partner of Brightways
• when you apply for a job
• when you visit our website
• when we receive data through a client, marketplace, platform, tool or partner
• when data is publicly available and relevant to our business relationship

We may also receive data through tools we use for communication, marketing, sales, operations, administration and service delivery.

6. Why do we use personal data?

We only use personal data when there is a proper reason to do so.

We use data, among other things, for:

• answering questions
• following up contact requests
• planning meetings
• preparing proposals
• performing agreements and contracts
• delivering and improving our services
• managing client relationships
• keeping administration
• sending service messages and business updates
• sending marketing communication, where permitted
• handling job applications
• securing and improving our website
• complying with legal obligations
• preventing misuse, fraud or security issues
• handling complaints, disputes or legal claims

We do not use personal data for purposes that do not fit the reason for which we received it.

7. On what legal basis do we process data?

We only process personal data if there is a lawful basis for doing so.

Usually, this is one of the following legal bases:

Consent
For example, for certain cookies, marketing or keeping job application data for longer.

Performance of a contract
For example, when we provide services, perform agreements or communicate about an ongoing collaboration.

Steps before entering into a contract
For example, when you request information, want to receive a proposal or apply for a job.

Legal obligation
For example, for administration, tax obligations or statutory retention obligations.

Legitimate interest
For example, to follow up business contacts, secure our website, improve our services or send relevant B2B communication.

If we need your consent, we ask for it in advance. You can withdraw your consent later.

8. Marketing and business communication

We may send you business updates, invitations, insights or other commercial information if this fits within our relationship or if you have given your consent.

You can always unsubscribe from marketing communication.

We may still send important service messages or contractual communication if this is necessary for our collaboration or service delivery.

9. Do we share data with others?

We do not sell your personal data.

We only share personal data if this is needed for our work, our website, our administration or our legal obligations.

This may include parties such as:

• hosting providers
• website and IT suppliers
• cloud and software providers
• CRM and email systems
• analytics and advertising platforms, if consent is required and that consent has been given
• accounting and administrative service providers
• legal, tax and professional advisers
• marketplaces, platforms, fulfilment parties, carriers or other operational partners, if needed for our services
• public authorities, regulators or courts if legally required or necessary to protect our rights

If a party processes personal data on our behalf, we make appropriate arrangements about security, confidentiality and use of data.

Some parties are responsible for their own processing of personal data. Think of marketplaces, payment providers, advertising platforms or carriers. In that case, their own privacy statement also applies.

10. International transfers

We try to process personal data within the European Economic Area as much as possible.

Sometimes we use tools or service providers that process data outside the EEA. For example, international software, cloud, CRM, analytics or advertising platforms.

If personal data is processed outside the EEA, we make sure there is a valid legal basis for this. For example, an adequacy decision by the European Commission, Standard Contractual Clauses or other appropriate safeguards.

11. How long do we keep data?

We do not keep personal data longer than necessary.

For most data, we use the following starting points:

Contact requests are kept for a maximum of 24 months, unless earlier deletion is logical or necessary.

Client, contract and administrative data are kept for as long as the client relationship continues and after that for as long as needed for administration, tax, evidence or legal obligations. Administrative data is usually kept for 7 years.

Job application data is kept for a maximum of 4 weeks after the end of the application process, unless you give consent to keep your data for longer. In that case, we keep it for a maximum of 1 year.

Marketing consent is kept until you withdraw that consent or until it is clear that the data is no longer needed.

Technical logs are kept for as short a period as possible, unless longer retention is needed for security, investigation or legal obligations.

Data needed for complaints, disputes or legal claims is kept for as long as necessary to handle the matter properly and protect our rights.

If data is no longer needed, we delete it or anonymise it.

12. Security

We take appropriate technical and organisational measures to protect personal data.

This means that we take measures against loss, misuse, unauthorised access, unwanted disclosure and unlawful changes.

Examples include secure connections, access restrictions, appropriate permission structures, secure systems, monitoring, backups and internal agreements about careful handling of data.

No system is completely risk-free. Do you think data is not properly secured or do you see signs of misuse? Contact us at info@brightways.nl.

13. Your privacy rights

You have rights regarding your personal data.

You can ask us for:

• access to your personal data
• correction of incorrect data
• deletion of your data
• restriction of processing
• transfer of your data
• objection to processing
• withdrawal of previously given consent

Do you want to exercise your rights? Email us at info@brightways.nl.

We may ask you to confirm your identity in an appropriate way. This helps us prevent someone else from accessing your data.

We respond within the timeframe required under the GDPR.

Are you not satisfied with how we handle your personal data? We would like to hear from you. You also have the right to file a complaint with the Dutch Data Protection Authority.

14. Children

Our website and services are not aimed at children.

We do not knowingly collect personal data from children through our website, unless this is specifically necessary and legally permitted.

Do you think we have received personal data from a child without a valid reason? Contact us. We will then review what needs to be done.

15. Cookies

Our website uses cookies. Cookies are small files that are placed on or read from your device when you visit our website.

Some cookies are needed to make the website work properly. Other cookies help us understand how the website is used or make advertisements more relevant.

We only place cookies that require consent after you have given that consent.

16. Necessary cookies

Some cookies are needed to make the website work properly.

Think of cookies for security, page navigation, basic settings and remembering your cookie preferences.

We do not ask for consent for necessary cookies. These cookies do not collect more data than needed to make the website work.

17. Analytical cookies

We may use analytical cookies to see how visitors use our website.

For example, this helps us understand which pages are visited often, how visitors click through the website and where the website can be improved.

Where possible, we configure analytical cookies in a privacy-friendly way. This means that we do not use this data to personally identify you.

Consent is not required for limited analytical cookies if they have no or only limited impact on your privacy. If we use analytical cookies that do more than measure privacy-friendly statistics, we ask for your consent in advance.

18. Tracking and remarketing

We may use tracking and remarketing cookies. These help us measure website visits, improve campaigns and make advertisements more relevant.

This may include cookies, pixels or similar technologies from parties such as Google, LinkedIn or Meta.

We only place these cookies after you have given your consent. If you do not give consent, we do not place these cookies.

You can always change or withdraw your consent later through the cookie settings on our website.

19. Social media and external content

Our website may contain links, buttons or content from external parties, such as LinkedIn, Meta, X, YouTube or other platforms.

If it is only a regular link, these parties do not place cookies through our website before you click on it.

If external content is loaded that places cookies or reads data, we only show that content after you have given consent.

For information about what these parties do with your data, we refer to their own privacy and cookie statements.

20. Cookie overview

We keep an overview of the cookies used by our website. This overview explains which cookies are placed, who places them, what they are used for and how long they are kept.

We use at least cookies that are needed to make the website work properly. Think of cookies for security, basic settings and remembering cookie preferences.

We may also use analytical cookies to see how our website is used. This helps us improve the website. Where possible, we configure these cookies in a privacy-friendly way.

We may also use tracking and remarketing cookies, for example to measure campaigns or make advertisements more relevant. We only place these cookies after you have given consent.

Because cookies can change due to updates to our website or tools from external parties, we regularly check which cookies are active. If our cookie use changes, we update this statement and the cookie overview.

21. Changing or deleting cookies

You can delete or block cookies through your browser settings.

Have you given consent for cookies? You can change or withdraw that consent later through the cookie settings on our website.

Please note: if you block cookies, some parts of the website may not work properly.

22. More information about cookies

Do you want to know more about cookies, consent and privacy? You can visit the websites of the Dutch Data Protection Authority and the Netherlands Authority for Consumers and Markets.

Dutch Data Protection Authority: cookies and privacy
Netherlands Authority for Consumers and Markets: placing cookies

This information is general. For what Brightways specifically does with cookies and personal data, this Privacy & Cookie Statement applies.

23. Other websites and platforms

Our website may contain links to websites, platforms or tools of other parties.

We are not responsible for how these parties handle personal data if they decide themselves why and how they process that data.

Please also read the privacy statement of those parties when you use their website, platform or service.

24. Changes

We may update this Privacy & Cookie Statement. For example, if our website, cookies, services, tools or legal obligations change.

The latest version is always available on this page.

If we make important changes, we will make this clear on our website or inform affected people in another appropriate way.

Last updated: 26 August 2026

25. Contact

Do you have questions about this statement or about how we handle personal data and cookies? Please contact us at:

Brightways B.V.
Stationsplein 45 A4.004
3013 AK Rotterdam
The Netherlands

Email: info@brightways.nl
Phone: +31 (0)85 130 85 76