About us

Bright & Company is part of De Galan Groep, located at Rutgers van Rozenburglaan 2, 3744 MC Baarn, and is the data controller for the processing of personal data as described in this privacy statement.

For questions about privacy, you can contact us at privacy@galangroep.nl.

Overview of processing activities

We only process your personal data where there is a legal basis for doing so. For each category of data, we state why we process it, on what legal basis, and how long we retain it:

Customer data

• Data: name, email address, phone number, job title
• Purpose: delivery of our services and performance of agreements
• Legal basis: performance of a contract
• Retention period: 7 years (statutory retention requirement for administrative records)

Job application data

• Data: CV, cover letter, contact details
• Purpose: recruitment and selection
• Legal basis: consent
• Retention period: 4 weeks after the procedure has been completed, or 1 year with your consent

Training data

• Data: progress, results, evaluations
• Purpose: delivery of training and certification
• Legal basis: performance of a contract
• Retention period: 2 years after completion of the training

Website visits

• Data: IP address, browser data
• Purpose: website optimization and security
• Legal basis: legitimate interest (information security)
• Retention period: up to 6 months in the logs, after which the data is anonymized in analytics tools

Your privacy rights

You have the following rights:

• Access to your data
• Rectification of inaccurate data
• Erasure of data
• Restriction of processing
• Data portability
• Right to object
• Withdrawal of consent

You can submit requests via privacy@galangroep.nl. We will respond within one month.

Complaints

• We prefer to resolve complaints through dialogue
• You can reach our Data Protection Officer at: privacy@cohedron.nl
• You can also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens)

Changes

This privacy statement may be amended.
Last updated: June 2025

Data breaches

If you receive data from Galan that is not intended for you, please let us know so that we can take appropriate steps.

You can report the incident via privacy@galangroep.nl.

Contact

Bright & Company
Rutgers van Rozenburglaan 2
3744 MC Baarn
privacy@galangroep.nl