Last updated: 3 October 2026
This privacy statement explains what personal data we collect through bmcshift.com, why we collect it, how long we keep it and what your rights are. We keep this short and clear. If anything is unclear, just email us.
1. Who we are
BMC Shift is a product of Breinhaven, a sole proprietorship registered in the Netherlands.
- Address: Vossenburglaan 171, 9613 EA Meerstad, the Netherlands
- Chamber of Commerce (KvK) number: 50233408
- Email: info@bmcshift.com
Breinhaven is the data controller for the personal data described in this statement.
2. What data we collect
When you join the waitlist or fill in a form
- Your name (optional)
- Your email address
- Your country
When you visit the website
- Only if you accept statistics cookies: anonymised usage data via Google Analytics, such as the pages you visit, how you arrived at our site (for example via a search engine or social media), your approximate location (country and city), and your device and browser type. Google Analytics does not store your IP address.
- Your cookie choice, so we do not have to ask you again on every page.
- Technical data that our hosting provider automatically logs for security, such as IP address, date and time of the request and browser type.
We do not collect sensitive personal data and we do not knowingly collect data from children under 16.
3. Why we use your data and on what legal basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Letting you know when BMC Shift is available in English in your country, and sending related updates about BMC Shift | Name, email, country | Your consent (Art. 6(1)(a)) |
| Understanding how visitors use the website so we can improve it | Anonymised usage data | Your consent via the cookie banner (Art. 6(1)(a)) |
| Remembering your cookie choice | Consent preference | Legal obligation (Art. 6(1)(c)) |
| Keeping the website secure and working | Technical log data | Our legitimate interest (Art. 6(1)(f)) |
We never sell your data and we do not use it for automated decision-making or profiling.
4. How long we keep your data
- Waitlist data: until you ask us to remove it, and no longer than 24 months after you signed up.
- Website statistics (Google Analytics): 14 months.
- Logs of emails sent by the website: 14 days.
- Your cookie choice: 12 months, after which we ask again.
5. Who we share your data with
We only share data with service providers that help us run this website. They process data on our behalf and under our instructions:
- Our web hosting provider, based in the European Union, which hosts the website and stores form submissions.
- Google, for Google Analytics (only with your consent) and Gmail, which we use to send and receive form notifications.
Google may process data outside the European Economic Area, including in the United States. Google is certified under the EU-US Data Privacy Framework, which the European Commission recognises as providing an adequate level of protection.
We may also share data if we are legally required to do so.
6. Cookies
We only place analytics cookies after you give permission through our cookie banner. You can change or withdraw your choice at any time. Read our Cookie Policy for a full overview.
7. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- have your data corrected or deleted;
- restrict or object to the processing of your data;
- receive your data in a commonly used format (data portability);
- withdraw your consent at any time, without affecting the lawfulness of processing before withdrawal.
Want to leave the waitlist? Simply send an email to info@bmcshift.com and we will remove your details from our database. For any other request, email us at the same address. We respond within one month. We may ask you to confirm your identity before we act on a request.
If you believe we handle your data incorrectly, please contact us first. You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the data protection authority in your own country.
8. Security
We take appropriate technical and organisational measures to protect your data against loss and unauthorised access. The website uses an encrypted connection (HTTPS), access to our systems is restricted, and our forms are protected against spam.
9. Changes to this statement
We may update this privacy statement from time to time, for example when we start using a new service. The date at the top shows when it was last changed. We recommend checking this page occasionally.