Last updated: 14 September 2026
This policy explains which personal data we process when you use our website or fill in one of our forms, why we do so, how long we keep it and what rights you have.
Who processes your data
Winsol Brebo is the trading name of BREBO BV. We are the controller for the data that reaches us through this website.
BREBO BV, Bergensesteenweg 488, 1600 Sint-Pieters-Leeuw, Belgium
Company and VAT number: BE 0538.971.491
Email: info@winsol-brebo.be
Phone: +32 2 308 02 26 (Dilbeek and Sint-Pieters-Leeuw) or +32 3 880 85 65 (Aartselaar)
We have not appointed a data protection officer; for a company of this nature and size that is not required. Questions about this policy reach us at the email address above.
What we collect
Data you give us yourself
We only ask for what we need to handle your request. The table below sets out what that means per form.
Form | Data |
|---|---|
Quote request | Name, phone number, email address, address, the product ranges you tick, the showroom you choose, your description of the project and any photos or plans you add |
Repair request | Name, phone number, email address, address, details about the product and the fault, the showroom you choose and any photos and your original invoice |
Brochure request | Name, phone number, email address, address and the brochures you ask for |
If you put extra information in a description or in a photo yourself, we process that too. So do not add anything you would rather not share.
Data that arrives automatically
Our server records which pages are requested, along with the IP address and the browser type. That is needed to run the site and to spot abuse. We also measure how the site is used with Google Analytics, but only if you consent. See our cookie policy for the details.
Why we use it, and on what basis
The GDPR requires a legal basis for every processing activity. These are ours.
Purpose | Legal basis |
|---|---|
Handling your quote or repair request and getting in touch | Steps taken at your request before entering into a contract (Article 6(1)(b) GDPR) |
Carrying out a job: measuring, fitting, aftercare and warranty | Performance of the contract (Article 6(1)(b) GDPR) |
Sending you the brochures you ask for | Your consent (Article 6(1)(a) GDPR) |
Keeping invoices and accounting records | Legal obligation (Article 6(1)(c) GDPR) |
Protecting our forms against abuse and spam | Our legitimate interest in keeping the site usable (Article 6(1)(f) GDPR) |
Measuring how the site is used, so we can improve it | Your consent (Article 6(1)(a) GDPR) |
Where we rely on consent, you can withdraw it at any time. That does not affect what we did before you withdrew it.
How long we keep it
Data | Retention period |
|---|---|
Quote and repair requests that do not lead to a job | 5 years from your last contact with us |
Files on completed jobs | 5 years after handover, so we can honour warranty and aftercare |
Brochure requests | 2 years |
Invoices and accounting records | 7 years, as the law requires |
Your cookie choice | 180 days, after which we ask again |
After that we delete the data, unless the law requires us to keep it longer or we need it in an ongoing dispute.
Who we share it with
We do not sell your data and we do not pass it to other companies for their own purposes. Not to Winsol NV either, the manufacturer of the products we fit: your request stays with us.
We do work with suppliers who carry out part of the processing on our behalf and on our instructions. A data processing agreement is in place with each of them.
Party | What for | Where the data sits |
|---|---|---|
DigitalOcean | Hosting the website and the submissions | European Union |
Cloudflare | Storing images and the files you upload | European Union |
Google Ireland Limited | Website statistics, only after your consent | European Union, with a possible transfer to the United States |
We may also share data with our accountant, with a lawyer or with the authorities, where the law obliges us to or where it is necessary to defend our rights.
For the transfer to the United States, Google relies on the EU-US Data Privacy Framework and on the European Commission’s standard contractual clauses. If you do not consent to analytics cookies, that transfer does not take place.
How we protect it
The whole site runs over an encrypted connection.
Files you upload land in separated storage. They get no public web address, so nobody can retrieve them by guessing a link.
Only staff who need to follow up a request can see the submissions.
The forms are protected against automated abuse.
If something were to go wrong anyway and put you at high risk, we will tell you, as the GDPR requires.
Your rights
You have the following rights in relation to us:
Access — ask which data we hold about you.
Rectification — have inaccurate or incomplete data corrected.
Erasure — have your data deleted, as far as we are not required to keep it.
Restriction — have the processing paused, for instance while we look into a dispute.
Portability — receive the data you gave us in a readable file.
Objection — object to processing based on our legitimate interest.
Withdrawing consent — at any time, without giving a reason.
Send your request to info@winsol-brebo.be. We may ask you to prove your identity, so that we do not hand your data to someone else. You will hear from us within one month. If your request is complex we may extend that by two months, but we will tell you within the first month. It costs you nothing.
Making a complaint
If you disagree with how we handle your data, tell us first. If we cannot resolve it together, you can lodge a complaint with the supervisory authority:
Belgian Data Protection Authority, Drukpersstraat 35, 1000 Brussels, Belgium
Phone: +32 2 274 48 00
Email: contact@apd-gba.be
Changes
If the way we work or the rules change, we update this policy. The date at the top says when that last happened. For a significant change we will say so on the website itself.