Privacy and Cookie Statement
Last updated: 3 October 2026
In short. bAwear B.V. is responsible for the personal data in this statement. We use business contact and account data to deliver bAwear Score, run our business and share relevant news. Product and LCA data in bAwear Score is confidential business data. We set analytics and marketing cookies only with your consent. We do not sell personal data. Questions: info@bawear.eu.
1. Who we are
bAwear B.V., De Aa 31, 7642 HA Wierden, the Netherlands (Chamber of Commerce 80977650) is the controller for the personal data in this statement. We offer bAwear Score, an LCA-based impact measurement platform for the textile and apparel industry (Quick Score, Expert and API), and bAcademy, our educational programme. This statement applies to website visitors, customers and users, prospects, partners, suppliers and subscribers. Contact: info@bawear.eu.
2. What we process and why
| Purpose | Personal data | Legal basis (Art. 6(1) GDPR) |
|---|---|---|
| Contact, demo and help requests | Name, work email, company, company type, message, help assistant conversations | Legitimate interest (f), or steps before a contract (b) |
| Deliver bAwear Score (account, platform, API, support) | Name, work email, company, job title, login details (passwords are hashed), registration answers such as role and LCA knowledge level, usage and log data | Contract (b) |
| Quotes, invoicing and bookkeeping | Name, company, business contact and billing details | Contract (b), legal obligation (c) |
| bAcademy and webinars | Name, work email, company, attendance, certificates | Contract (b) or consent (a) |
| Newsletter | Name, email address, preferences | Consent (a) |
| Business development | Name, job title, company, work email, professional profile, contact history | Legitimate interest (f) |
| Website analytics | Cookie identifiers, pseudonymised usage and device data | Consent (a). Cookieless Vercel Web Analytics: legitimate interest (f) |
| Security and legal compliance | Log data, IP address, data needed for a legal claim | Legitimate interest (f), legal obligation (c) |
When we rely on legitimate interest, we balance our interest against your interests and rights. You can object at any time (section 11).
3. Data from other sources
For B2B outreach, we can collect business contact details from public professional sources, such as company websites and LinkedIn, and from B2B data providers. We use only data about your professional role. Every message tells you how to opt out. If you opt out, we keep only your email address on a suppression list, so that we do not contact you again.
4. Your data in bAwear Score
Product, material, supplier and LCA data that you enter is confidential business data. We use it only to deliver our services under your contract, and we do not share it with other customers. If your uploads contain personal data, for example names of supplier contacts, you are the controller and we act as your processor under a data processing agreement.
5. AI-supported features
We use AI services, including Claude by Anthropic. Examples are the help assistant on our website, explaining results and structuring information. We send only the data that is necessary. Under our commercial terms, the AI provider does not use this data to train its models. When you send a help assistant conversation to our team, a person handles it. We do not make decisions about you that are based only on automated processing and that have legal or similarly significant effects.
6. Who we share data with
Only employees who need the data for their work have access. We use these processors under data processing agreements:
| Service | Provider |
|---|---|
| Website hosting and cookieless analytics | Vercel |
| Website image delivery | Storyblok |
| Tag management, analytics (with consent) and scheduling | Google Ireland Ltd. |
| Platform development and hosting | Lovable, and the hosting provider of our Laravel platform |
| AI services | Anthropic |
| Newsletter | Brevo |
| CRM, knowledge base and help centre | Notion |
| Internal notifications about website requests | Slack |
| B2B data enrichment and outreach | Clay, Instantly, HeyReach |
| Workflow automation | n8n |
| Accounting | Moneybird |
We also share data when the law requires it (for example with the tax authority), with our accountant and advisers, and with a buyer or investor in case of a merger or sale, under the same level of protection. For our LinkedIn page, LinkedIn and bAwear are joint controllers for page statistics. We do not sell personal data.
7. International transfers
Some processors process data in the United States. For these transfers we use the EU-US Data Privacy Framework or the EU Standard Contractual Clauses, with additional measures where necessary. You can ask us for a copy.
8. How long we keep data
| Data | Retention period |
|---|---|
| Contracts, invoices and financial records | 7 years (Dutch statutory obligation) |
| Account and support data | During the contract and up to 5 years after it ends (limitation period) |
| Contact, demo and prospect data | Up to 2 years after the last contact |
| Newsletter subscription | Until you unsubscribe |
| Log data | Up to 12 months |
| Suppression list | As long as necessary to respect your opt-out |
After this period we delete or anonymise the data.
9. Security
We apply measures aligned with ISO/IEC 27001, such as need-to-know access, hashed passwords, encrypted connections and backups. If a data breach occurs, we report it to the Dutch Data Protection Authority within 72 hours when required, and we inform you if the risk to you is high.
10. Cookies
Essential storage works without consent. We set analytics and marketing cookies only after you click Accept. We use Google Tag Manager with Google Consent Mode v2: by default, all analytics and advertising storage is denied. If you click Decline, we set no analytics or marketing cookies and we remove existing _ga cookies. You can change your choice at any time via Cookie settings.
| Name | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
| bawear_consent (local storage) | bAwear | Stores your cookie choice | Until you change it | Essential |
| Language preference (local storage) | bAwear | Stores your language choice | Until you clear it | Essential |
| Session and XSRF-TOKEN cookies | bAwear | Keep you logged in to the platform and secure forms | Session | Essential |
| Vercel Web Analytics | Vercel | Counts page views without cookies or personal data | No cookie | Cookieless |
| _ga, _ga_<ID> | Visitor statistics | 2 years | Analytics, with consent |
If we add marketing cookies, we list them here and set them only with your consent. Links to LinkedIn, Google Calendar and our help centre on Notion take you to sites with their own policies.
11. Your rights
You can ask us for access to your data, correction, deletion, restriction, or a copy in a machine-readable format. You can object to processing based on legitimate interest, and you can always object to direct marketing. You can withdraw your consent at any time. Send your request to info@bawear.eu. We can ask you to confirm your identity. We reply within one month, or within three months for complex requests, and we tell you if we need the extra time. Requests are free of charge.
12. Complaints
Please contact us first, so that we can help. You can also file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at any time: https://autoriteitpersoonsgegevens.nl.
13. Changes
We update this statement when our services or the law change. We inform customers by email about significant changes. The latest version is always on this page.