Privacy Policy

Below we inform you that the service provider Bridge Marketing (registered seat: Netherlands, Socrateslaan 23 3522 ED Utrecht, Company Registration Number: 82320098) handles your personal data in the following ways and for the following purposes.

During data processing, we act in accordance with the relevant legislation – especially Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

This Privacy Policy covers the following website: https://bridge-marketing.nl

We reserve the right to modify this Privacy Policy at any time, and any modifications become effective upon publication.

Data Controller

• Name: Bridge Marketing
• Registered Seat: Netherlands, Socrateslaan 23 3522 ED Utrecht
• E-mail: info@bridge-marketing.nl

Legal Bases of Data Processing

1. Performance of a contract (GDPR Article 6(1)(b))
2. Compliance with a legal obligation (GDPR Article 6(1)(c))
3. Legitimate interests of the controller or a third party (GDPR Article 6(1)(f))
4. Consent of the data subject (GDPR Article 6(1)(a))
5. Public interest or exercise of official authority (GDPR Article 6(1)(e))
6. Fulfillment of accounting and tax obligations (e.g., GDPR Article 6(1)(c), other relevant national legislation)
7. Enforcement of legal claims or defenses (GDPR Article 6(1)(f))

Data Processed During Use of the Website:

Hosting Provider Information

The data is processed and stored by the following hosting provider for the operation of the service.

• Provider Name: HOSTINGER FR
• Address: Hostinger International Ltd., 61 Lordou Vyronos, Lumiel Building, 4th floor, 6023, Larnaca, CYPRUS

Cookies

While browsing the website, so-called cookies may be placed on the user’s computer. These cookies contain technical information, and their primary purpose is to ensure convenient, personalized browsing. However, the site may also use cookies for analytics, remarketing, or media elements.

Essential

Required

Analytics

Marketing

Media

Other services

Cookies Used on This Website

Users can regulate or disable the use of cookies in their browser settings; however, this may affect certain functions of the site.

Data of Minors

Our service is not specifically directed at minors under the age of 16. If we do collect and process data of minors, we do so only if the law prescribes consent or parental/guardian authorization.

Parents and guardians may request the modification or deletion of any recorded data about themselves or the minors under their supervision at any time.

Contact Forms

The forms on the website record the data voluntarily provided by the user, which we use for contact or case handling.

• e-mail
• name
• device
• behavior
• IP address
• phone number
• address

Data Retention Periods

We only store data for the necessary period or for the deadlines prescribed by the relevant legislation. After that, the data is deleted or anonymized.

Data Transfer to Third Parties

We only transfer your data to third parties if you have explicitly consented to this, or if it is required by law or an authority order.

Data Security Measures

During data processing, both the data controller and the data processor employ organizational and technical protection measures that take into account modern technological possibilities and the nature of data processing (purpose, scope, circumstances), as well as the varying degrees of risk faced by natural persons. These safeguards aim to maintain data protection proportionate to the risks continuously.

These measures may include data encryption, maintaining the availability, confidentiality, and integrity of systems and services, and ensuring sufficient resilience. We pay particular attention to restoring the availability of and access to data as soon as possible in the event of any physical or technical incident.

By regularly reviewing and testing security measures, we ensure that the guarantees provided are not merely theoretical but actually provide an adequate level of protection in practice. We store data so that unauthorized persons cannot access it; for this purpose, paper-based documents are kept in a closed, secure environment, while electronic data is accessible only to persons with properly regulated access rights.

We also ensure that data can be deleted in a way that makes it impossible to restore once the retention period has ended or for any other reason that makes deletion necessary. In the case of paper-based documents, destruction is carried out using a specialized shredder or by involving an external partner specializing in this. When decommissioning or scrapping electronic media, we also ensure that data is irretrievably removed.

Protection of Paper-Based Documents

We provide physical protection for printed data to ensure secure, dry storage and adequately lockable rooms. Only authorized personnel have access to these documents. If the paper-based documents are also digitized, the rules for digital processing apply to them. Anyone handling data must not leave the work area without ensuring that the materials entrusted to them are locked and protected from unauthorized access.

The building and rooms where paper-based records are located have adequate fire and property protection systems, thus reducing the possibility of physical damage.

IT Protection

The computers and mobile devices involved in data processing are equipped with appropriate antivirus protection and access control. To secure the electronically stored information, we apply up-to-date backups and archiving solutions, ensuring these backups are accessible if needed.

Only authorized individuals with defined authorization levels can connect to the central server. The computers used for work and the data stored on them are protected by passwords and other access-protection measures against unauthorized access.

Management and Reporting of Data Protection Incidents

If an event occurs that threatens personal data with unauthorized access, damage, or loss, we immediately take steps to further protect the affected data and mitigate damages. If the situation suggests that the incident poses a significant risk to individuals’ rights or freedoms, we notify the affected individuals without undue delay, explaining the nature of the incident in understandable terms, as well as the measures we have taken or plan to take to address it.

We may omit notifying the affected individuals if we have previously implemented security solutions (e.g., encryption) that render the personal data unintelligible to unauthorized persons, or if further measures significantly reduce the probability of risk. In some cases, public disclosure may suffice instead of direct notification if individual notification would involve disproportionate effort.

In accordance with applicable regulations, if a data protection incident occurs that is likely to result in a risk to the rights and freedoms of natural persons, the data controller reports it to the competent supervisory authority within 72 hours of becoming aware of it. If the notification is made beyond this period, the reasons for the delay must also be provided.

User Rights

As a data subject (user), you have the following rights regarding the processing of your personal data:

• Right of access (GDPR Article 15)
  You can find out whether we store information about you, and if so, what details, and you can request information about the purpose, legal basis, and other relevant circumstances of data processing.
• Right to rectification (GDPR Article 16)
  You have the right to request the correction or completion of inaccurate or incomplete data.
• Right to erasure (“right to be forgotten”) (GDPR Article 17)
  If the data is no longer needed or if the legal conditions for erasure are met, you can request that it be deleted as soon as possible.
• Right to restriction of processing (GDPR Article 18)
  In certain cases, you can request that we only store the data and not use it otherwise (for example, if you dispute the accuracy of the data but do not want them to be deleted immediately).
• Right to data portability (GDPR Article 20)
  You have the right to receive the data we hold about you in a machine-readable format, or to request that we transfer it to another service provider if technically feasible.
• Right to object (GDPR Article 21)
  You may object to the further processing of your personal data if you believe that our legitimate interests (or any other legal basis) do not sufficiently justify such processing.

To exercise these rights, please contact us (e-mail: info@bridge-marketing.nl). We strive to respond to incoming requests as quickly as possible. Typically, we will respond within one month of receiving your request, but if necessary—e.g., if the request is complex—this period may be extended by a further two months. We will inform you of the reasons for the extension within that initial one-month period.

If we cannot fulfill your request, we will also inform you of this and the reasons why within the above deadline. In this case, you have the right to lodge a complaint with the supervisory authority or seek judicial remedy.

Complaints and Remedies

If you believe there has been an abuse of your personal data, you can make an official report at the following contact details:

• E-mail: info@bridge-marketing.nl
• By post: Netherlands, Socrateslaan 23 3522 ED Utrecht

We thoroughly investigate incoming complaints and inform you about the results of our investigation and any measures taken. If there is no specific time period prescribed by law for handling complaints, then at least once every three years, we review how the investigation of complaints and our process meet the purpose of data processing and the applicable legal requirements.

You are also entitled to file a complaint with the competent data protection authority:

• Authority Name: Autoriteit Persoonsgegevens
• Address: Bezuidenhoutseweg 30, 2594 AV Den Haag, Netherlands
• Phone: +31-70-888-8500
• E-mail: info@autoriteitpersoonsgegevens.nl

Date of last update: October 15, 2025