Privacy policy

BBakker Culinair handles your personal data with care. Below you can read which data we use, why, how long we keep it and what rights you have. We never ask for more than we need and we never sell your data to anyone.

This is a translation of our Dutch privacy policy. In case of any difference, the Dutch version prevails.

Who we are

BBakker Culinair is responsible for the processing of the personal data described in this privacy policy.

What data we use and why

Contact form and culinary boat trip enquiries

Data

First and last name, email address, phone number (if you provide it) and your message.

Purpose

To answer your question and, if you wish, to make a proposal or quotation.

Legal basis

Your request for contact or a quotation, and our legitimate interest in being able to answer questions.

Retention

Up to two years after our last contact. If it leads to an assignment, the periods below apply.

Booking a package

Data

Name, phone number, email address, address, the requested date and time, the chosen package and your comments.

Purpose

To carry out your booking: purchasing, preparing, delivering to the right address, staying in touch with you and invoicing.

Legal basis

The performance of our agreement with you, and our legal obligation to keep financial records.

Retention

Data that appears on the invoice is kept for seven years, as required by law. Other data is kept for up to two years after the booking.

Allergies and dietary requirements

Allergies and some dietary requirements say something about your health. The law calls this special category data, and we treat it with extra care. We only use it to prepare your dishes safely and do not share it with anyone, not even with other guests. You give us your consent by providing this information yourself; you can withdraw that consent at any time. We delete this information no later than three months after the date of the booking.

Visiting the website

We want to know how often our pages are viewed so that we can improve the website. For this we use Fathom Analytics. Fathom works without cookies and does not store your IP address. It uses your IP address and browser only briefly to count a visit; what remains is a scrambled code that changes every day. This means you are not tracked across websites, and the next day Fathom no longer recognises you. We only see totals, such as the number of visitors per page and the country they come from. The legal basis for this is our legitimate interest in a website that meets visitors' needs.

Our website runs on Cloudflare. This makes the site fast and protects it against attacks. To do so, Cloudflare processes technical data about your visit, such as your IP address and browser. Cloudflare also keeps technical log files that include the time and the page requested. We only use these to detect faults and misuse; they are deleted automatically after a few days. The legal basis for this is our legitimate interest in a secure, working website.

Protecting the forms

To protect the forms against spam and misuse, we use Cloudflare Turnstile. Turnstile uses technical data, such as your IP address and browser characteristics, to check whether a human is filling in the form. Usually you will not notice this. Cloudflare uses this data only for that check and not for advertising.

In addition, Cloudflare counts how often a form is sent from the same IP address, so that nobody can flood the forms. That count applies for one minute and is then forgotten; we do not store anything for this ourselves.

Cookies

A cookie is a small file that a website stores in your browser. We do not place any cookies ourselves, whether for statistics, advertising or social media. Fathom does not use cookies either, and its statistics have little or no impact on your privacy. That is why we do not ask for your consent for this. Only Cloudflare may place a cookie that is needed for the website to work securely:

• Cloudflare security cookie (such as __cf_bm): may be placed to tell automated traffic apart from real visitors. It expires after 30 minutes at most.

Our website contains links to Instagram, Facebook, our catering web shop and Truckfood. Only when you click such a link do you go to that website, and the privacy policy of that party applies. The photos from our Instagram feed are stored on our own website, so Instagram cannot see that you are visiting our website.

Who we share data with

We only share your data with the parties we use for the website and our services. We have made agreements with these parties about handling your data with care.

• Cloudflare (United States): hosting, domain management, security and speed of the website, Turnstile, and sending the completed forms to our mailbox.
• Fathom Analytics (Canada): visitor statistics, without cookies and without storing your IP address.
• Our email provider: the mailbox in which your messages and bookings arrive.

Cloudflare is based in the United States. For these transfers, the safeguards laid down by the European Commission apply, such as the EU-US Data Privacy Framework or the standard contractual clauses. Fathom is a Canadian company. Visits from the EU are first processed on European servers and anonymised there; only then is the anonymised data sent to and stored on servers in the United States.

Apart from this, we only pass on data when the law requires us to, for example to the Dutch Tax and Customs Administration.

Security

We take appropriate measures to protect your data. The website uses an encrypted connection (HTTPS), the forms are protected against misuse and access codes are kept out of reach of the website. Only those who need the data to handle your question or booking have access to it.

Your rights

You have the right to:

• access your data;
• have incorrect data corrected;
• have your data deleted when we no longer need it or are no longer allowed to keep it;
• have the use of your data restricted;
• object to the use of your data;
• receive your data in a common file format, to pass it on to someone else;
• withdraw consent you have given.

Send your request to info@bbakkerculinair.nl. We will respond within one month. To prevent someone else from requesting your data, we may ask you to show that the request really comes from you.

Not happy with how we handle your data? Please let us know first, and we will look for a solution together. You can also lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens, or with the supervisory authority in your own country.

Changes

If our website or way of working changes, we will update this privacy policy. The latest version is always on this page, with the date of the last change at the top.