Privacy Policy

Last updated: December 2024

glipzioomb B.V. ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our restaurant, use our services, or interact with our website at glipzioomb.top.

Data Controller

glipzioomb B.V. acts as the Data Controller for the personal data we process. We are registered in the Netherlands with registration number 50729418 and VAT number NL861304975B01. Our registered address is Berkenlaan 148, 4869 TF Breda, North Brabant, Netherlands.

Data Collection

The data we collect includes personal information such as your name, email address, phone number, and order preferences when you place orders, contact us, or subscribe to our communications. We also collect technical information about your device and browsing behaviour when you visit our website, including IP addresses, browser types, and pages visited. Additionally, we may collect payment information when processing transactions, though sensitive payment data is handled securely by our payment processors and not stored on our systems.

How We Use Your Information

We explain how we use your information to provide and improve our restaurant services, including processing your food orders, managing reservations, and communicating with you about your orders and our services. We use of your data is based on legitimate business interests and, where required, your consent. We may use your information to send you promotional communications about new menu items, special offers, and events, but only with your explicit consent. We also use aggregated and anonymised data to analyse customer preferences and improve our menu offerings and service quality.

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds: performance of a contract when processing orders and providing services; legitimate interests for improving our services and business operations; consent for marketing communications and cookies; and legal obligation where required by applicable laws and regulations.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information with trusted service providers who assist us in operating our business, such as payment processors, delivery partners, and IT service providers. These parties are contractually bound to protect your information and use it only for the purposes we specify. We may also disclose your information if required by law or to protect our rights and safety.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy. Order information is typically retained for accounting and legal compliance purposes for up to 7 years. Marketing consent and communication preferences are retained until you withdraw consent. Website analytics data is retained for up to 26 months. We regularly review and delete data that is no longer necessary.

Your Rights Under GDPR

As a data subject under GDPR, you have several rights regarding your personal data:

• Right of Access: You can request a copy of the personal data we hold about you
• Right of Rectification: You can ask us to correct inaccurate or incomplete data
• Right of Erasure: You can request deletion of your personal data in certain circumstances
• Right to Restrict Processing: You can ask us to limit how we use your data
• Right to Data Portability: You can request your data in a portable format
• Right to Object: You can object to processing based on legitimate interests
• Right to Withdraw Consent: You can withdraw consent for marketing communications at any time

Cookies and Tracking

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyse website usage. We implement Google Consent Mode v2 to respect your privacy choices. Essential cookies are necessary for basic website functionality, while analytics and marketing cookies require your consent. You can manage your cookie preferences through our cookie banner or browser settings. For detailed information about our cookie usage, please see our Cookie Policy.

Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes encryption of data in transit and at rest, regular security assessments, staff training on data protection, and secure payment processing systems. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

International Data Transfers

Your personal data is primarily processed within the European Union. If we transfer data outside the EU, we ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses approved by the European Commission.

Children's Privacy

Our services are not directed to children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will delete such information promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

Contact Us

If you have any questions about this Privacy Policy, want to exercise your rights, or have concerns about how we handle your personal data, please contact us at privacy@glipzioomb.top or reach out to us at our restaurant location. You can also contact us by phone at +31 204005061 or visit us at Berkenlaan 148, 4869 TF Breda, North Brabant, Netherlands.

Supervisory Authority

If you believe we have not adequately addressed your concerns, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local supervisory authority.