Data Protection Policy bringme.com

Version 2026-05

Bringme (Bringme Finance NV and its affiliated companies) is committed to processing your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (hereinafter "GDPR") and other applicable legislation.

This data protection policy applies to all of Bringme's digital channels and services, including the main website (bringme.com), the Bringme Helpcenter (help.bringme.com), the Bringme Digital Reception application (digitalreception.bringme.com), and any other websites, apps or digital services offered or operated by Bringme. Where this policy refers to 'the website' or 'our services', this encompasses all of the aforementioned channels.

1. The Controller

Bringme Finance NV and its affiliated companies (hereinafter 'Bringme', 'we', 'us' or 'our') with registered office at Bondgenotenlaan 138, 3000 Leuven, Belgium and registration number 0471.705.258, is the controller for the processing of your personal data for the purposes described in this data protection policy.

"Affiliated company" means any entity that directly or indirectly controls, is controlled by, or is under common control with Bringme, where "control" means the ownership of more than 50% of the voting rights or the right to direct the policy and management of that entity.

2. Contact Details

If you wish to contact us regarding this policy, you may do so by emailing our DPO: legal@bringme.com.

Our Data Protection Officer (DPO) can be reached at legal@bringme.com or by post at: Bringme, for the attention of the DPO, Bondgenotenlaan 138, 3000 Leuven, Belgium.

When you contact us to exercise any of your rights (see section 9), we kindly ask you to clearly indicate which right you wish to invoke. Please be as specific as possible when exercising your rights.

3. The personal data we process

Depending on your role or capacity, we collect the following data:

• Clients (and their representatives): general identification data (such as name, title / function, address, mobile or telephone number, email, assigned identification data), financial identification data (such as identification and bank account numbers), financial transactions (such as amounts paid or payable), remuneration, professional activities (including the company, nature of activity, nature of goods / services used, business relationships), contracts and agreements with Bringme, all other personal data lawfully provided to Bringme. The source of these personal data is you or your employer.
• Prospects (and their representatives): general identification data (such as name, title / function, address, mobile or telephone number, email), professional activities (including the nature of activity, nature of goods / services used, business relationships), data submitted via a contact form and all other personal data lawfully provided to Bringme. The source of these personal data is you or your employer.
• Suppliers (and their representatives): general identification data (such as name, title / function, address, mobile or telephone number, email, assigned identification data), financial identification data (such as identification and bank account numbers), financial transactions (such as amounts paid or payable), remuneration, professional activities (including the nature of activity, nature of goods / services used), contracts and agreements with Bringme, all other personal data lawfully provided to Bringme. The source of these personal data is you or your employer.
• Job applicants: all personal data lawfully provided to Bringme (such as a CV and / or cover letter);
• Website visitors: personal data collected via cookies (see our cookie policy), data submitted via a contact form and, for visitors using our AI chatbot (name, email address and conversation content);
• Social media users: advertising via the personal data they have provided on social media channels.

In the course of its activities, Bringme may also act as a processor of your personal data (for example when you use Bringme products). In that case, the processing of personal data by Bringme as a processor forms part of the agreements between Bringme and the controller(s). This data processing does not fall within the scope of this data protection policy. In this regard, we refer you to the data protection policy for end users.

If you provide us with personal data of a third party, such as your staff, freelancers, clients, suppliers or partners, you warrant to Bringme that you have (a) lawfully obtained such personal data from the third party and lawfully provided them to Bringme, (b) provided Bringme with personal data that are accurate and up to date, and (c) provided the relevant person with information about the existence and content of this policy.

4. Purposes

You are not obliged to share your personal data with us, but if you do not share the requested personal data, we may not be able to provide you with the desired services and/or products. We process personal data for the following purposes:

• Performance of contract: creating a personal account and / or profile, correctly performing and fulfilling agreements (including communication), invoicing, customer service and support (so that we can assist you with questions and / or problems).
• Purchases via the website: correctly performing and fulfilling agreements regarding purchases via the website (including communication), processing orders and any after-sales service, invoicing.
• Direct marketing: sending notifications by email and / or newsletters. If you no longer wish to receive these messages, you may use the opt-out facility provided. You will then no longer receive the unwanted direct marketing messages and we will no longer process your personal data for these direct marketing purposes.
• Applicant management: to assess the suitability of applicants for open positions, for recruitment, selection and, where applicable, the conclusion of an employment contract.
• Necessary for the operation of our business: to improve and optimise our services (including by means of cookies and social media advertising), to maintain and improve the website (including by means of cookies), to ensure the security of our website and services, to prevent abuse or misuse of our services, to store personal data as evidence or for judicial, administrative or out-of-court proceedings, to store personal data for the purpose of obtaining or maintaining insurance cover, managing risks or obtaining expert advice, to store personal data to ensure attendance at / participation in events.
• To comply with legal obligations(for example in connection with anti-money laundering and counter-terrorism legislation).
• User support via AI chatbot: to help you as well and as quickly as possible, our Helpcenter is supported by an AI chatbot. When you use it, your name and email address (if you are logged in to the Bringme Helpcenter or the Bringme App) and the content of your conversation are recorded, so that we can provide you with the best possible support. In this way, every user can receive support outside our regular office hours, 24/7 and in a fast and efficient manner.
• Responding to contact forms: to assist you as best as possible when you complete a contact form on our website or contact us in any other way, we process the data provided in the context of your enquiry.

5. Legal basis

The processing of personal data under sections 4.1 and 4.2 is based on the performance of a contract to which the data subject is party, or in order to take steps at the request of the data subject prior to entering into a contract.

The processing of personal data of prospects under sections 4.3 and 4.8 and the processing of personal data by means of cookies (other than strictly necessary and functional cookies) under section 4.5 is based on the consent of the data subject.

The processing of personal data of clients under section 4.3 and for the first contact with prospects, as well as the other processing of personal data under sections 4.4 and 4.5 is based on our legitimate interests (only where the legitimate interest of our business prevails over the interests of the data subjects). The interests are set out under sections 4.3 – 4.5.

The processing of personal data under section 4.6 is necessary to comply with a legal obligation to which we are subject.

The processing of personal data under section 4.7 is based on our legitimate interests (only where the legitimate interest of our business prevails over the interests of the data subjects).

6. Sharing personal data with third parties / international transfers

We only disclose relevant aspects of personal data to third parties where those parties are contractually bound to Bringme or act on behalf of or under contract with Bringme. We have of course made arrangements with these parties regarding the protection of your personal data.

Bringme may disclose personal data where this is necessary to comply with a legal obligation to which we are subject, or to protect (vital) interests. We may also disclose personal data where such disclosure is necessary for the establishment, exercise or defence of legal claims, in judicial proceedings or in administrative or out-of-court proceedings.

We do not transfer personal data to companies outside the European Economic Area, unless there is an adequacy decision, standard contractual clauses, appropriate safeguards, binding corporate rules or transfers as referred to in Article 49(1) GDPR.

In the event of a full or partial reorganisation, merger, demerger, acquisition or sale of assets, we are entitled to transfer personal data to the relevant third party.

You accept that personal data you submit for publication via our website or services may be available globally via the internet. We cannot prevent the use (or misuse) of such personal information by others.

7. Storage and deletion of personal data

We only retain personal data for as long as is necessary to achieve the purpose set out above. As the retention period depends on the purpose, but also on the type of personal data, these retention periods vary.

8. Automated decision-making & profiling

Bringme does not use automated decision-making or profiling that produces legal effects or similarly significantly affects you within the meaning of Article 22 GDPR.

9. Your data protection rights

All requests regarding the exercise of your data protection rights must be addressed to legal@bringme.com.

For information purposes and for the sake of clarity, we have summarised your rights under the GDPR in this section. As some of these rights are complex, not all details are included in this summary. You may therefore read the relevant legislation and regulations for a full explanation of these rights, or contact the Controller.

To exercise your rights, you must also prove your identity adequately. In this regard, we recommend that you attach a secure copy of your identity document to your request. A secure copy means that all non-essential information is redacted and a watermark is added. This watermark must contain the purpose of the copy, the recipient and the date of issue. The only information that is necessary is your name (so all other information can be redacted).

• Right of access: you have the right to be informed as to whether or not we are processing your personal data, and if so, to access those personal data, along with the supplementary information referred to in Article 15 GDPR. Where the protection of the rights and freedoms of others is not adversely affected, we will provide you with a copy of your personal data.
• Right to rectification: you have the right to have inaccurate and / or incomplete personal data rectified and / or completed.
• Right to erasure: you have the right to have your personal data erased in the circumstances set out in Article 17(1) GDPR, such as when you withdraw your consent to consent-based processing or object to processing for direct marketing purposes.

Bringme will then erase your personal data without undue delay, unless the exceptions set out in Article 17(3) GDPR apply. For example, Bringme is not required to erase your data if processing is necessary to comply with a legal obligation.

• Right to restriction of processing: you have the right to restrict the processing of your personal data in the circumstances set out in Article 18(1) GDPR, such as where you contest the accuracy of the personal data.
• Right to data portability: you have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format, and to transmit those data to another controller, where (a) the processing is based on consent or is necessary for the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract, and (b) the processing is carried out by automated means. This right does not apply, however, if it would adversely affect the rights and freedoms of others.
• Right to withdraw consent: to the extent that the legal basis for the processing of your personal data by Bringme is consent, you have the right to withdraw that consent at any time. The withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.
• Right to lodge a complaint with the supervisory authority: we always encourage you to forward any questions, comments or complaints regarding the processing of your personal data in accordance with point 8. In any event, in particular if you disagree with Bringme's position following a complaint/request or the way in which your request was handled by Bringme (for example if you believe that our processing of your personal data is contrary to data protection legislation or if you have comments about the use of your personal data), you have the right to lodge a complaint with the competent supervisory authority, including the Belgian Data Protection Authority (GBA) (online or by letter to the Data Protection Authority at 35 Drukpersstraat, 1000 Brussels).
• Right to object to processing: you have the right at any time to object to our processing of your personal data for direct marketing purposes. In practical terms, you can do this via the 'opt-out' option. You will then no longer receive the unwanted direct marketing messages and we will no longer process your personal data for these direct marketing purposes. If the processing of your personal data is necessary for another purpose, you may of course still receive communications in the context of that purpose.

You also have the right to object to the processing of your personal data by Bringme on the basis of Article 6(1)(e) or (f) GDPR on grounds relating to your particular situation. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims.

In addition, you have the right to object to our processing of your personal data for scientific, historical or statistical (research) purposes on grounds relating to your particular situation, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

10. Cookies

You can read more about our use of cookies via the following link.

11. Updates

Bringme reserves the right to make changes and/or updates to this Data Protection Policy in order to take account of technological advances, changes in legislation and regulations, and good business practices.