Privacy policy

Briso EcoTrade B.V. — last updated 15 April 2026

1. Who we are

Briso EcoTrade B.V. (KvK 90574915, "Briso", "we", "our") operates the B2B marketplace at briso-ecotrade.com. We are the data controller for personal data processed through the platform.

2. What data we collect

Account data: name, email address, company name, KvK number, VAT number, phone number, country
Transaction data: bids, deal values, payment references, material quantities
Usage data: login timestamps, pages visited, actions taken on the platform
Communication data: messages, notifications, support requests
Compliance data: EURAL codes, EVOA/DIWASS documents, transport records

3. Why we process your data

Purpose	Legal basis
Providing the marketplace service	Contract performance (art. 6(1)(b) GDPR)
Processing payments	Contract performance
EVOA/DIWASS compliance reporting	Legal obligation (art. 6(1)(c) GDPR)
Platform security and fraud prevention	Legitimate interest (art. 6(1)(f) GDPR)
Sending transactional emails	Contract performance

4. Data sharing

We share your data only where necessary:

Trading counterparty: company name and country visible to matched trading parties
Mollie: payment processing (see mollie.com/privacy)
Resend / Amazon SES: email delivery
Supabase: database and authentication infrastructure
DIWASS / EC: mandatory waste shipment reporting from 21 May 2026
ILT (NL): regulatory reporting on cross-border waste shipments

We do not sell personal data. We do not use data for advertising.

5. Retention

Account data is retained for the duration of your account plus 2 years. Transaction and compliance records are retained for 7 years (Dutch accounting law) and 5 years (EVOA minimum). You may request deletion of non-legally-required data at any time.

6. Your rights (GDPR)

Right of access — request a copy of your data
Right to rectification — correct inaccurate data
Right to erasure — delete data not subject to retention obligations
Right to portability — receive your data in a machine-readable format
Right to object — object to processing based on legitimate interest

Exercise your rights: privacy@briso-ecotrade.com

7. Contact & complaints

Data protection questions: privacy@briso-ecotrade.com
You have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): autoriteitpersoonsgegevens.nl