Privacy Policy

Last updated: April 2026

Brookhuis Applied Technologies B.V. ("Brookhuis", "we", "us", "our"), registered at Twentepoort West 17, 7609 RD Almelo, the Netherlands (KvK 06000507), is committed to protecting your personal data. This Privacy Statement explains how we collect, use, store, and protect personal data in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, "GDPR") and the Dutch Implementation Act (Uitvoeringswet AVG).

1. Data Controller

The data controller responsible for the processing of your personal data is Brookhuis Applied Technologies B.V., Twentepoort West 17, 7609 RD Almelo, the Netherlands. Brookhuis has not designated a Data Protection Officer, as we do not meet the thresholds for mandatory appointment under Article 37 GDPR. Questions or requests relating to the processing of personal data may be directed to our privacy contact at info@brookhuis.com, with the subject line "Privacy".

2. Personal Data We Collect

Brookhuis collects personal data only to the extent necessary for the purposes described in this statement. Depending on your interaction with us, this may include: contact information (name, job title, employer, email address, telephone number) provided when submitting enquiries, requesting documentation, or entering into a commercial relationship; technical data collected automatically when you visit our website, including IP address, browser type, and pages visited; and correspondence data from emails, contact forms, and support communications.

3. Purposes and Legal Bases for Processing

We process your personal data for the following purposes and on the following legal bases under Article 6 GDPR: to respond to enquiries and provide information about our products and services (legitimate interest, Article 6(1)(f)); to fulfil contractual obligations and manage customer relationships (performance of a contract, Article 6(1)(b)); to send product updates, white papers, and technical communications to existing contacts in the wood processing industry and cleanroom (legitimate interest, Article 6(1)(f)); to comply with legal obligations, including tax and accounting requirements (legal obligation, Article 6(1)(c)); and to improve the performance and content of our website through anonymised analytics (legitimate interest, Article 6(1)(f)). Where we rely on legitimate interest as a legal basis, we have assessed that our interests are not overridden by your rights and freedoms. You may object to processing based on legitimate interest at any time.

4. Retention

We retain personal data for no longer than is necessary for the purposes for which it was collected, or as required by applicable law. Contact and correspondence data is retained for a maximum of two years following the last interaction, unless a longer retention period is required by a contractual or legal obligation. Financial and transactional records are retained for seven years in accordance with Dutch fiscal law. Technical data collected automatically via the website, such as IP addresses and browsing data, is retained for a maximum of thirteen months in anonymised or aggregated form, in accordance with guidance from the Dutch Data Protection Authority.

5. Sharing of Personal Data

Brookhuis does not sell personal data to third parties. We may share personal data with carefully selected service providers who process data on our behalf (processors), such as IT infrastructure providers, CRM platform operators, and email service providers. These parties are contractually bound to process data only on our instructions and in accordance with GDPR. Where personal data is transferred outside the European Economic Area, we ensure that adequate safeguards are in place, including the use of Standard Contractual Clauses approved by the European Commission. We may also disclose personal data where required by law or in response to a lawful request from a competent authority.

6. Your Rights

Under the GDPR, you have the right to access your personal data, to request correction of inaccurate data, to request erasure of data that is no longer necessary, to object to processing based on legitimate interest, to request restriction of processing in certain circumstances, and to receive your data in a portable format where technically feasible. Where processing is based on your consent (Article 6(1)(a) GDPR), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Consent for cookies may be withdrawn via the cookie settings on our website. To exercise any of your rights, please contact us at info@brookhuis.com with the subject line "Privacy". We will respond within one month of receiving your request, as required by Article 12 GDPR. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe your personal data has been processed unlawfully. The Authority can be reached via www.autoriteitpersoonsgegevens.nl or by telephone at +31 (0)88 1805 250.

7. Cookies

Our website may use cookies and similar tracking technologies. Functional cookies necessary for the operation of the website are placed on the basis of legitimate interest. Analytical and marketing cookies are placed only with your explicit consent, which you may withdraw at any time via the cookie settings on our website. We do not use cookies to build individual profiles for advertising purposes.

8. Security

Brookhuis implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse, in accordance with our ISO 27001 information security management certification. Access to personal data is restricted to authorised personnel who require it to perform their duties. In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of individuals, Brookhuis will notify the Dutch Data Protection Authority within 72 hours of becoming aware, in accordance with Article 33 GDPR. Where required, affected individuals will also be informed without undue delay.

9. Changes to This Statement

We may update this Privacy Statement from time to time to reflect changes in our practices or applicable law. The current version is published on this page with the date of the most recent revision indicated. We encourage you to review this statement periodically.