Privacy notice

Who is responsible

Nimbus Logistics bv, trading as Nimbus Forwarding, is the controller of your personal data. For our transport offer to forwarders we use the name Nimbus Logistics and the address salih.durmaz@nimbus-logistics.be. It is the same company.

Send questions about your data to quotes@nimbusforwarding.be with ‘Privacy’ as the subject, or simply reply to the email you received from us. We have not appointed a data protection officer; the law does not require us to have one.

• Nimbus Logistics bv, trading as Nimbus Forwarding
• Sint-Rochusstraat 6, 3550 Heusden-Zolder, Belgium
• Enterprise number 0787.337.518 · RLE Antwerp, Hasselt division
• quotes@nimbusforwarding.be · +32 476 83 19 90

Your right to object, and business email from us (STOP)

We write to companies at a general business address that is publicly listed, such as info@ or sales@, about services that fall within their professional activity. We do not email a personal address (one in a person’s name) or a sole trader’s address without consent.

Every email in which we present our services says which public source we took the address from: the Port of Antwerp-Bruges company guide, the FORWARD Belgium member list or, for Turkish companies, the UTIKAD member list.

You can object at any time, free of charge and without giving a reason: reply STOP to our email, or send STOP to the address our email came from, or to quotes@nimbusforwarding.be. You can also just say so when we call you. One STOP covers email, phone, WhatsApp and post. We will process your STOP within one working day and confirm it by email; after that, we will not contact you again on any channel to present our services. If you are a customer, you will still receive emails about your current orders and invoices.

To keep honouring a STOP, our do-not-contact list holds only what that requires: the address or domain, the company name and VAT number, the date and how you said STOP.

If you have placed an order with us, you may receive email about similar services; you can stop it in the same way. Our emails do not track whether you open them or click their links.

You can also object, on grounds relating to your particular situation, to any other use of your data based on our legitimate interest (see ‘What for, and on what basis’). We will then stop, unless we can show compelling legitimate grounds that override your interests, or need the data for a legal claim.

What data we process

We process the following data:

• Through the contact form on this website: your company name, name, email address and request, which we need to answer you; your phone number, if you give it; whatever you include in your request; and which page you sent the form from, when, and in which language. We use your IP address only briefly, without storing it, to stop misuse of the form.
• By email, phone and WhatsApp: your contact details and what you send or tell us, such as the documents for a shipment.
• For an order: the loading and unloading address, the contact person on site and the shipment’s documents, such as transport documents, invoices and customs declarations. Without these details we cannot carry out your order or the customs declaration.
• Business contact details of companies we work with or write to, and of their staff: company name, name and job title, business email address, phone number and address. Where a public list names a contact person, that name may be in our records, but we do not email that person without their consent.
• Where this data comes from: from you; from the company you work for, for example when a colleague names you as a contact person; or from public sources: the Port of Antwerp-Bruges company guide, the FORWARD Belgium member list, the list of customs representatives of the Belgian FPS Finance, the UTIKAD member list and the company’s own website.
• Technical data our hosting provider needs to deliver pages: IP address, time, page requested and browser type (see ‘Cookies and analytics’).

What for, and on what basis

We use your data for six purposes, each with a legal basis under the General Data Protection Regulation (GDPR).

Our legitimate interest: letting companies know what we do, working smoothly with the companies you work for, organising our work with an AI assistant (see ‘AI assistance’), and keeping the website secure. You can always object (see ‘Your right to object’).

• Answering your request, preparing a quotation if you ask for one, and following it up. Basis: steps taken at your request before a contract (Art. 6(1)(b) GDPR); when you write on behalf of your company, our legitimate interest in answering (Art. 6(1)(f) GDPR).
• Planning, carrying out and following up your order until the file is fully closed. Basis: the contract (Art. 6(1)(b) GDPR); if you are an employee or contact person of a customer, supplier or partner, our legitimate interest in working with your company (Art. 6(1)(f) GDPR).
• Accounting, invoicing and customs declarations. Basis: legal obligation (Art. 6(1)(c) GDPR).
• Business contact with companies: presenting our services and following up, by email, phone or post. Basis: legitimate interest (Art. 6(1)(f) GDPR); email to a personal address: only with your consent (Art. 6(1)(a) GDPR).
• Continuing to honour your objection through our do-not-contact list. Basis: legal obligation (Art. 6(1)(c) GDPR, with Art. 21 GDPR and Article 2 of the Belgian Royal Decree of 4 April 2003).
• Delivering the website and stopping misuse of the form. Basis: legitimate interest (Art. 6(1)(f) GDPR).

Our service providers

We use these providers for hosting, email, storage and invoicing:

• DigitalOcean — hosting of the website and the contact form, in data centres in the European Union (Amsterdam).
• Cloudflare — delivers the pages through its network, for DigitalOcean.
• Resend — sends a request from the contact form to our mailbox as an email and keeps a copy for 30 days.
• Microsoft 365 — our email and files.
• GitHub — stores our working files, including our lists of companies and our do-not-contact list.
• Billit — invoicing.

Who else receives your data

These parties receive data and use it for their own tasks, under their own terms or legal rules:

• Anthropic (Claude) — our AI assistant; see ‘AI assistance’ below.
• WhatsApp Ireland — when we are in touch with you on WhatsApp, and for the numbers in the contact list of the phones on which we use WhatsApp; WhatsApp’s terms and privacy policy then apply.
• For an order: the customs representative we work with, the hauliers, the shipping line, the terminal, the container release platform (Certified Pick up) and our partner agent in the country of origin or destination — each receiving the data it needs for the shipment.
• Our accountant, and customs and other authorities where the law requires it.

Outside the European Economic Area

The website runs in Amsterdam, but some of the parties above also process data in the United States: Microsoft, DigitalOcean, Cloudflare, Resend (which stores its copies there), GitHub, Anthropic and Meta (WhatsApp’s parent company).

For our providers, these transfers rely on the EU-US Data Privacy Framework, the European Commission’s standard contractual clauses (Decision 2021/914) or both, as each provider’s terms set out. Anthropic and WhatsApp transfer data under their own policies.

For a shipment to or from a country outside the European Economic Area, the parties in that country receive the data the shipment requires; that transfer is necessary to carry out your order.

A copy of these safeguards is available from quotes@nimbusforwarding.be.

How long we keep data

We keep data no longer than its purpose requires:

• A request or business contact that does not lead to an order: 12 months after the last contact, then deleted; 24 months if we had a real conversation.
• Details from a public list or directory: if we write to the company and it does not reply, 12 months after our last email; if we do not write to it, 12 months after we took the details.
• Contact details of customers, suppliers and partners: for as long as we work together; after that, 12 months after the last contact, except what belongs to an order file.
• Invoices, accounting records and customs documents: 10 years, to comply with accounting and VAT law. We keep the rest of an order’s file, including the emails that belong to it, for the same period in case of a dispute.
• Our do-not-contact list: for as long as we send business email.
• Resend’s copy of a form request: 30 days. The log line our hosting provider keeps for each form request, which includes the company name: at most 3 days.
• Technical data: the __cf_bm cookie expires after 30 minutes; we keep no access logs of our own; the logs of DigitalOcean and Cloudflare are governed by their own terms.
• What we delete may remain for a short time in our providers’ backups: up to 30 days at Microsoft 365 and up to 90 days at GitHub.

AI assistance

We use Claude, an AI assistant from Anthropic Ireland Limited, to help us read, sort and draft emails and to keep our order and contact records up to date. Claude therefore also sees your emails and details.

Anthropic Ireland Limited processes that data as an independent controller, under its own privacy policy (anthropic.com/legal/privacy), and may process it in the United States.

A member of our team checks every quotation and every email before it is sent. We make no fully automated decisions about you.

Cookies and analytics

We set no cookies of our own and use no analytics, pixels or other tracking. The pages load nothing from other websites: no fonts, maps, videos or social media buttons.

Cloudflare, which delivers the pages for our hosting provider DigitalOcean, sets one technical cookie: __cf_bm. It tells people apart from automated traffic, works only on this website and expires after 30 minutes. Under Belgian law (Article 10/2 of the Law of 30 July 2018), a cookie that is strictly necessary to provide the website you request needs no consent; that is why you see no cookie banner here.

On the language page, your browser remembers during your visit which language the page chose for you (nf-lang-choice). It stays in your browser and disappears when you close the tab.

Security

The website runs entirely over HTTPS and has no database. A request from the contact form travels as an email through Resend to our mailbox; Resend keeps a copy for 30 days, and our hosting provider keeps a log line with the company name for at most 3 days.

Our order and contact records are kept on our own server in Belgium. Only our own team, and the AI assistant we use for this work (see ‘AI assistance’), have access to our mailboxes and systems; the providers listed above have access only as far as their service requires.

Your rights

To use any of the rights below, email quotes@nimbusforwarding.be with ‘Privacy’ as the subject. We will reply within one month; a complex request may take up to two months longer, and if so we will tell you within the first month. Where needed, we first ask who you are, so that your data reaches the right person.

If you have given us consent, for example to email you at your personal address, you can withdraw it at any time; this does not affect what we did before.

You can:

• access the data we hold about you;
• have anything that is wrong corrected;
• have your data erased — what the law requires us to keep, we erase once that period ends;
• have the use of your data restricted;
• object to use based on our legitimate interest — and to business email always, without conditions (see ‘Your right to object’);
• receive your data in a common file format, to pass it on (portability).

Making a complaint

Unhappy with how we handle your data? Let us know at quotes@nimbusforwarding.be.

You also have the right to complain to the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit), Drukpersstraat 35, 1000 Brussels, +32 2 274 48 00, contact@apd-gba.be. Complaints are filed through gegevensbeschermingsautoriteit.be/burger/acties/klacht-indienen, only in Dutch, French or German. You can also complain to the supervisory authority of the country in the European Economic Area where you live or work, or where the infringement took place.

Changes

This version applies from 6 October 2026. It adds Resend, which now delivers the contact form, names all our providers and other recipients, including Anthropic (our AI assistant) and GitHub, lists the sources of our company lists and the name Nimbus Logistics, and sets out concrete retention periods. If anything changes in what we do with your data, we will update this page and its date. We will send you an earlier version on request.