Privacy policy

Data protection contact

For enquiries about your data, contact Bren-nholz at kontakt@brennholz-direk.de or at Franciscusweg 16, 1216SK Hilversum, Netherlands. The data controller is Leylines, operator of the brand Bren-nholz, represented by Joey van Wettum and Thijs Vorstman. KvK registration number: 34250234.

Data collected and purposes

Orders collect your first and last name, billing and delivery addresses, email address, optional phone number, items, quantities and total. This information is used to record and fulfil your order, arrange delivery and handle after-sales enquiries (Article 6(1)(b) GDPR). Documents and information required for accounting are retained in accordance with legal obligations (Article 6(1)(c) GDPR).

Creating an account is optional. It enables sign-in and access to your customer area. We store your email, the name provided during registration and account activity information (first and last activity, number of sign-ins) to administer accounts and secure the service on the basis of our legitimate interests (Article 6(1)(f) GDPR).

Contact and quote forms collect the details and content you provide so we can respond. Bank transfer receipts are used only to match a payment to its order. Please conceal unrelated bank information. A receipt does not confirm that funds have been received.

Service providers and recipients

Vercel hosts the website and may process technical data such as IP addresses and request logs. A technical provider supplies account authentication, the database and private storage for payment receipts. Authorised administrators and accounting staff access the data needed for their duties. The carrier receives the details needed for delivery.

When address search is enabled, the street and town entered are sent to Geoapify to suggest addresses in Germany. You can also enter your address manually. Map data comes from sources including OpenStreetMap.

If the email acknowledgement service is configured, Resend processes your name, email address and cancellation statement to send you a copy. The operator must specify hosting regions, further subprocessors and safeguards for transfers outside the European Economic Area according to the actual provider configuration. All transfers remain subject to the safeguards required by the GDPR.

Storage in your browser

The cart is stored in your browser's local storage, with session storage as a fallback. Order confirmation information remains in the browser session. Sign-in uses browser storage to maintain your session. These mechanisms support the functions you request. The current code has no active advertising or analytics tools; adding them requires information and, where necessary, prior consent.

Retention and security

Data is retained for as long as needed to handle enquiries, fulfil orders and manage complaints, then in accordance with the German retention obligations applicable to the documents concerned. Unresolved enquiries and unnecessary receipts must not be retained indefinitely. The operator still needs to formalise the detailed retention schedule and deletion procedures; the website does not currently perform automatic deletion.

Payment receipts are stored privately and viewed by authorised administrators through temporary links. Passwords are managed by the secure authentication service. Only send information necessary for your enquiry.

Your rights

Subject to the GDPR, you have rights of access, rectification, erasure, restriction, portability and objection, particularly where processing relies on legitimate interests. You may withdraw consent without affecting the lawfulness of prior processing. Retention obligations may limit the deletion of certain documents.

Send your request to kontakt@brennholz-direk.de or through the contact form. You may also lodge a complaint with a supervisory authority, including the Autoriteit Persoonsgegevens in the Netherlands.