Privacy policy
Briso EcoTrade B.V. — last updated 15 April 2026
1. Who we are
Briso EcoTrade B.V. (KvK 90574915, "Briso", "we", "our") operates the B2B marketplace at briso-ecotrade.com. We are the data controller for personal data processed through the platform.
2. What data we collect
- Account data: name, email address, company name, KvK number, VAT number, phone number, country
- Transaction data: bids, deal values, payment references, material quantities
- Usage data: login timestamps, pages visited, actions taken on the platform
- Communication data: messages, notifications, support requests
- Compliance data: EURAL codes, EVOA/DIWASS documents, transport records
- Analytics data (consent only): aggregated page views, country, device type, traffic source — collected via Google Analytics 4 only after you accept analytics cookies
3. Why we process your data
| Purpose | Legal basis |
|---|
| Providing the marketplace service | Contract performance (art. 6(1)(b) GDPR) |
| Processing payments | Contract performance |
| EVOA/DIWASS compliance reporting | Legal obligation (art. 6(1)(c) GDPR) |
| Platform security and fraud prevention | Legitimate interest (art. 6(1)(f) GDPR) |
| Sending transactional emails | Contract performance |
4. Data sharing
We share your data only where necessary:
- Trading counterparty: company name and country visible to matched trading parties
- Mollie: payment processing (see mollie.com/privacy)
- Resend / Amazon SES: email delivery
- Supabase: database and authentication infrastructure
- Google Analytics: aggregated website usage statistics — only with your consent (see our Cookie Policy). IP addresses are anonymised.
- DIWASS / EC: mandatory waste shipment reporting from 21 May 2026
- ILT (NL): regulatory reporting on cross-border waste shipments
We do not sell personal data. We do not use data for advertising.
5. Retention
Account data is retained for the duration of your account plus 2 years. Transaction and compliance records are retained for 7 years (Dutch accounting law) and 5 years (EVOA minimum). You may request deletion of non-legally-required data at any time.
6. Your rights (GDPR)
- Right of access — request a copy of your data
- Right to rectification — correct inaccurate data
- Right to erasure — delete data not subject to retention obligations
- Right to portability — receive your data in a machine-readable format
- Right to object — object to processing based on legitimate interest
Exercise your rights: privacy@briso-ecotrade.com