Privacy & cookies

IBG Group B.V., Mariënhoef 21, 3851 ST Ermelo, The Netherlands, Chamber of Commerce 71154167, is the controller for the processing described here. Questions about privacy: info@ibggroup.nl or +31 (0)341 557 885.

IBG Group has not appointed a data protection officer.IBG to confirm

The public pages of this website use no analytics, no advertising or social media trackers and set no cookies. Fonts and images are served from this website itself; no third party receives your visit through them.

Our hosting provider processes the technical data that every web request contains (such as IP address, browser type and the page requested) to deliver the page and to protect the website against abuse. These server logs are kept by the hosting provider for a limited period and are not used to identify visitors.IBG to confirm the hosting provider's log retention in the processor agreement

If IBG Group decides to measure website use later, this statement is updated first, and measurement that requires consent only starts after you have given it.

When you use the contact form we process your name, company name, e-mail address, optionally your phone number and subject, the company you address your question to, your message and the time of sending. We use them only to answer your question and, where needed, to bring it to the right company within IBG Group.

Legal basis: our legitimate interest in answering questions sent to us (Article 6(1)(f) GDPR) and, where your question concerns a quotation or order, taking steps at your request before entering into a contract (Article 6(1)(b)).

Your request is stored in IBG Group's own database and sent by e-mail to the mailbox of Incotech, a company within IBG Group, with your e-mail address as the reply address. A record that the e-mail was delivered is kept with the request.

If your question is for another group company (Belko, IBG Industries or Becatech), it is passed on to that company, which then answers you.IBG to confirm how Incotech passes on questions for other group companies

We may send you a short e-mail confirming that we received your message. It does not repeat what you wrote.Only if IBG switches the confirmation e-mail on

To protect the form against abuse we count the number of messages per network address and per e-mail address per hour; the network address is stored only as a one-way (hashed) value. These counters are deleted after one day. Messages that look automated are not stored.Proposal — IBG to decide

Retention: a contact request and the record of its e-mail are deleted 12 months after your question has been handled, unless they lead to a quotation, order or contract; then they become part of our business records, which we keep for the statutory period of seven years.Proposal — IBG to decide

The notification in Incotech's mailbox follows Incotech's own e-mail retention.IBG to confirm the mailbox retention

The management dashboard is not public. Only people whom IBG Group has given an account can sign in; there is no public registration. For an account we process name, e-mail address, role, the companies the person may see and the time of the last sign-in.

Signing in works with a one-time code sent by e-mail. The code is valid for 10 minutes, can be used once and is stored only in a form from which it cannot be read back. A session lasts at most 12 hours; for each session we keep the browser type and a one-way (hashed) value of the network address.

For security we keep an access log: sign-ins (also failed attempts), sign-outs and changes made in the dashboard, with the time, the browser type and a one-way (hashed) value of the network address.

Legal basis: our legitimate interest in securing our systems and management information (Article 6(1)(f) GDPR).

Retention: an account is kept as long as the person has access and deleted within 30 days after access ends; expired sign-in codes and sessions are deleted after 30 days; the access log is kept for 12 months.Proposal — IBG to decide

The dashboard shows aggregated management figures of the group companies, read from their own systems without changing them. It does not show or copy the names or contact details of the people who contact those companies.

The public pages set no cookies. Only the secured login area uses three strictly necessary, first-party cookies: ibg_login (holds a sign-in request for at most 15 minutes), ibg_session (keeps you signed in for at most 12 hours) and ibg_data_mode (remembers the dashboard view for at most 12 hours). They are not used for tracking and need no consent.

We use processors that act only on our instructions: Vercel Inc. (hosting; the website runs in the Frankfurt region), Neon (database, Frankfurt region), Resend (sending e-mail, from the Ireland region) and Microsoft (the mailboxes of IBG Group and Incotech). Where a provider is established outside the European Economic Area, personal data may be transferred there on the basis of the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.IBG to confirm that processor agreements are in place with each provider

We do not sell personal data and do not share it with others, unless the law requires us to.

All connections are encrypted (HTTPS). Access to personal data is limited to the people who need it, checked on every request, and logged.

You have the right to access, rectify and erase your personal data, to restrict or object to its processing and to data portability. Send your request to info@ibggroup.nl; we answer within one month. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

We update this statement when the website or our processing changes. The date at the top shows the latest version.