Legal
Privacy Policy
Last updated: · Brazen BV · KvK 83241740
Manage cookie settings? Go to our cookie policy
1. Data Controller
Brazen BV - Iepenlaan 108, 2061 GN Bloemendaal, Netherlands · CoC: 42006676
Email: privacy@brazen.nl · Phone: +31 23 36 99 075
2. Personal data we process
2.1 Contact form
- First and last name
- Email address
- Phone number (optional)
- Company name (optional)
- Message content
2.2 Website usage (analytics consent required)
- Anonymised IP address
- Pages visited and click behaviour
- Device and browser type
- Session duration and page views
2.3 Marketing & retargeting (marketing consent required)
- Ad interactions (clicks, impressions)
- Conversion events
- LinkedIn profile data for matched audiences (pseudonymised)
3. Legal bases (GDPR art. 6)
| Processing | Legal basis |
|---|---|
| Contact form handling | Contract performance (art. 6(1)(b)) |
| Google Analytics 4 | Consent (art. 6(1)(a)) |
| Google Ads / LinkedIn Ads | Consent (art. 6(1)(a)) |
| HubSpot CRM | Legitimate interest (art. 6(1)(f)) |
| Functional cookies | Legitimate interest (art. 6(1)(f)) |
4. Retention periods
| Data | Retention |
|---|---|
| Contact form messages | 2 years after last contact |
| Google Analytics 4 | 14 months |
| HubSpot CRM | 3 years after last interaction |
| Consent records | 3 years (audit requirement) |
| Financial records | 7 years (statutory) |
5. Third parties and processors
| Party | Role | Country | Transfer basis |
|---|---|---|---|
| Google LLC (Analytics & Ads) | Processor | US | SCC + Data Privacy Framework |
| LinkedIn Ireland Unlimited | Processor | IE / US | SCC |
| HubSpot Inc. | Processor | US | SCC + Data Privacy Framework |
| Vercel Inc. | Processor (hosting) | US | SCC + Data Privacy Framework |
| Sanity.io | Processor (CMS) | US | SCC |
6. Your rights
Submit requests to privacy@brazen.nl. We respond within 30 days. Withdraw cookie consent at any time via our cookie policy.
- Access (art. 15) — request what data we hold
- Rectification (art. 16) — correct inaccurate data
- Erasure (art. 17) — request deletion of your data
- Restriction (art. 18) — temporarily halt processing
- Objection (art. 21) — object to legitimate interest processing
- Portability (art. 20) — receive data in machine-readable format
You may lodge a complaint with the Dutch Data Protection Authority.
7. Security
All connections are encrypted via HTTPS (TLS 1.3). Vercel Inc. is ISO 27001 certified and SOC 2 Type II audited.
8. Automated decision-making
We do not use fully automated decision-making as described in GDPR article 22.
9. Minors
Our website targets business users and is not directed at persons under 16 years of age.
10. Changes
We reserve the right to update this policy. The date at the top of this page indicates the most recent version.
11. Contact
Brazen BV - Iepenlaan 108, 2061 GN Bloemendaal · privacy@brazen.nl · +31 23 36 99 075