Data controller
Brusax LLC is the controller of personal data collected through brusax.com. Identification details are in the Legal notice. Privacy contact: hello@brusax.com (or the localized alias shown in your language).
Data we process
Depending on how you use the site, we may process: identification and contact data (name, email, subject, message) via the contact form; technical data (IP address, browser type, timestamps) in security and server logs; recruitment data if you apply by email; and your cookie-banner preference stored locally on your device.
Purposes and legal basis
Contact form: to handle your enquiry (GDPR Art. 6(1)(b) pre-contractual steps or Art. 6(1)(f) legitimate interest in responding to institutional requests). Security (Cloudflare Turnstile and infrastructure logs): Art. 6(1)(f) legitimate interest in protecting the site. Legal compliance: Art. 6(1)(c). Recruitment by email: Art. 6(1)(b) and/or Art. 6(1)(f) in managing candidacies. We do not use non-essential analytics or marketing cookies.
Processors and recipients
We use GDPR Article 28 processors, including: Railway (hosting); Cloudflare Turnstile (bot protection); Resend (United States) for transactional delivery of contact-form emails; Mapbox (United States) when you view interactive maps. Emails may be received by the Brusax team and, where relevant, the appropriate group company. We do not sell personal data.
Retention
Contact enquiries: up to 24 months from the last interaction, then deletion or blocking as required by law. Security logs: typically up to 12 months. Recruitment data: up to 24 months from receipt unless a longer period is justified by an ongoing process or legal obligation. Cookie preference in localStorage: until you clear it in your browser.
International transfers
Where a provider is outside the EEA (for example Resend, Cloudflare, or Mapbox in the United States), we rely on appropriate safeguards such as the EU–US Data Privacy Framework, Standard Contractual Clauses, or other recognized measures offered by the provider.
Recruitment
Open roles and spontaneous applications are submitted via mailto links and therefore through your own email provider. Include only information relevant to your application. Data may be shared within the Brusax group when necessary to assess your candidacy for a specific company or division.
Your rights
You may request access, rectification, erasure, restriction, objection, and portability, and withdraw consent where processing is consent-based. Contact the privacy address above. You may lodge a complaint with your supervisory authority. We do not make automated decisions with legal or similarly significant effects based on your data.