Privacy & Cookie Policy

Adbrains B.V. processes personal data in connection with its AI-driven Google Ads automation services. In this statement we explain which data we process, for what purpose, on what legal basis, and how long we retain it.

Data controller

Adbrains B.V.
Wilhelminaplein 1
3072 DE Rotterdam
Nederland
KvK: 89161394 · BTW: NL864896803B01
[email protected]

What data do we process?

• Contact: name, email, phone number, company name
• Subscription: contact details, Chamber of Commerce number, IBAN, customer and invoice number
• Website: IP address, browser type, pages visited, date/time
• Portal/dashboard: Google Ads data (via OAuth2), campaign, keyword and conversion data

Purposes & legal bases (GDPR)

• Contract performance, delivering and managing our services
• Legitimate interest, website analytics, security, product development
• Consent, marketing and newsletter
• Legal obligation, tax and administrative record-keeping

Google API Services, Limited Use

Our use of Google API data complies with the Google API Services User Data Policy, including its Limited Use requirements. We do not sell Google user data and do not use it for advertising purposes.

Third parties & sub-processors

• Google, API for campaign changes and conversions
• Anthropic, anonymised data for AI analyses
• Hosting providers, server infrastructure
• Payment processors, certified parties for invoice handling

We never sell personal data to third parties.

Security

We apply HTTPS/TLS, encryption of OAuth tokens, two-factor authentication, and strict access control.

Retention periods

• Account data: duration of the account + 90 days
• Invoice data: 7 years (statutory tax retention obligation)
• Website data: max. 26 months
• Contact form data: max. 12 months

Cookies

• Functional, session and language preference
• Analytical, Google Analytics (anonymised IP)
• Conversion tracking, first-party GCLID/gbraid/wbraid cookies, max. 90 days

Your GDPR rights

Right of access, rectification, erasure, restriction, data portability, objection, and withdrawal of consent. Requests via [email protected]. Response within 30 days. You can lodge a complaint with the Dutch Data Protection Authority.

Changes

We may amend this statement. Significant changes will be communicated to you by email.