Privacy policy
🔒 PRIVACY NOTICE – THE DUTCH SNACKSHOP / THE DUTCH SNACKBAR B.V.
Version: 27 October 2025 | Last revised: 27 October 2025
Scope & Acceptance
This Privacy Notice applies to all brands, domains and logistics operations conducted under DutchSnackbar, The Dutch Snackbar, DutchSnackshop, The Dutch Snackshop and TDS.
By accessing our website, placing an order or using any of our services, you acknowledge this Privacy Notice.
This Privacy Notice applies to all brands, domains and logistics operations conducted under DutchSnackbar, The Dutch Snackbar, DutchSnackshop, The Dutch Snackshop and TDS.
By accessing our website, placing an order or using any of our services, you acknowledge this Privacy Notice.
1. Data Controller
The Dutch Snackbar B.V.
Oogstweg 26B
8256 SB Biddinghuizen
The Netherlands
Chamber of Commerce (KvK): 97996602
VAT: NL868317779B01
Email: legal.affairs@dutchsnackbar.com
Website: www.dutchsnackbar.com
The Dutch Snackbar B.V.
Oogstweg 26B
8256 SB Biddinghuizen
The Netherlands
Chamber of Commerce (KvK): 97996602
VAT: NL868317779B01
Email: legal.affairs@dutchsnackbar.com
Website: www.dutchsnackbar.com
2. Categories of Personal Data
2.1 Identity & Contact Data
Name, delivery address, billing address, email address, telephone number and other contact details you provide to us.
2.2 Order & Transaction Data
Order contents, order history, payment method, transaction references, invoice data, shipping method, delivery method and tracking information.
2.3 Communication Records
Emails, customer service correspondence, WhatsApp or direct messages, complaint files and internal notes relevant to dispute handling, safety procedures, quality control or legal follow-up.
2.4 Technical & Website Data
IP address, browser type, device type, login metadata, cookie identifiers and website interaction data, where applicable.
2.5 Export & Compliance Data
Where required, we may process HS codes, export or health documentation data, consignee or importer details and mandatory customs, food safety or regulatory declarations.
2.6 Fraud, Security & Dispute Data
Data relevant to fraud prevention, chargeback handling, abuse prevention, access control, delivery incidents and legal defence of claims.
2.1 Identity & Contact Data
Name, delivery address, billing address, email address, telephone number and other contact details you provide to us.
2.2 Order & Transaction Data
Order contents, order history, payment method, transaction references, invoice data, shipping method, delivery method and tracking information.
2.3 Communication Records
Emails, customer service correspondence, WhatsApp or direct messages, complaint files and internal notes relevant to dispute handling, safety procedures, quality control or legal follow-up.
2.4 Technical & Website Data
IP address, browser type, device type, login metadata, cookie identifiers and website interaction data, where applicable.
2.5 Export & Compliance Data
Where required, we may process HS codes, export or health documentation data, consignee or importer details and mandatory customs, food safety or regulatory declarations.
2.6 Fraud, Security & Dispute Data
Data relevant to fraud prevention, chargeback handling, abuse prevention, access control, delivery incidents and legal defence of claims.
3. Legal Grounds for Processing
Contractual necessity
We process personal data where necessary to accept, process, fulfil and manage orders, arrange shipping or route delivery, handle customer service requests and investigate complaints.
Legal obligation
We process personal data where necessary to comply with tax law, customs and export rules, food safety obligations, accounting duties, fraud reporting obligations and other legal requirements.
Legitimate interests
We may process personal data where necessary for fraud prevention, platform and account security, dispute management, operational improvement, route and delivery coordination, internal quality control and protection of our business, staff, systems and logistics processes.
Consent
Where required, we rely on consent for marketing communications, optional cookies and similar non-essential technologies. Consent may be withdrawn at any time, without affecting the lawfulness of processing based on consent before withdrawal.
Contractual necessity
We process personal data where necessary to accept, process, fulfil and manage orders, arrange shipping or route delivery, handle customer service requests and investigate complaints.
Legal obligation
We process personal data where necessary to comply with tax law, customs and export rules, food safety obligations, accounting duties, fraud reporting obligations and other legal requirements.
Legitimate interests
We may process personal data where necessary for fraud prevention, platform and account security, dispute management, operational improvement, route and delivery coordination, internal quality control and protection of our business, staff, systems and logistics processes.
Consent
Where required, we rely on consent for marketing communications, optional cookies and similar non-essential technologies. Consent may be withdrawn at any time, without affecting the lawfulness of processing based on consent before withdrawal.
4. Purposes of Processing
We process personal data for order fulfilment, payment handling, shipping and delivery coordination, customer support, complaint handling, dispute resolution, fraud and chargeback prevention, legal and regulatory compliance, export documentation, website optimisation, record keeping and internal quality and process management.
Personal data is never sold.
We process personal data for order fulfilment, payment handling, shipping and delivery coordination, customer support, complaint handling, dispute resolution, fraud and chargeback prevention, legal and regulatory compliance, export documentation, website optimisation, record keeping and internal quality and process management.
Personal data is never sold.
5. Export Documents & Regulatory Processing
For shipments requiring customs, veterinary, regulatory or export documentation, additional data may be processed strictly for compliance, documentation and shipment handling purposes only. Such data is not used for marketing purposes solely because it was collected for export or compliance handling.
For shipments requiring customs, veterinary, regulatory or export documentation, additional data may be processed strictly for compliance, documentation and shipment handling purposes only. Such data is not used for marketing purposes solely because it was collected for export or compliance handling.
6. International Data Transfers
Personal data may be processed inside or outside the EEA, depending on the service providers, software providers, payment providers or logistics partners involved in a specific activity.
Where personal data is transferred outside the EEA, we rely where applicable on an adequacy decision, Standard Contractual Clauses, or another lawful transfer mechanism or safeguard recognised under applicable data protection law.
We also apply appropriate technical and organisational measures such as encryption, access restriction, secure hosting and need-to-know access controls.
Personal data may be processed inside or outside the EEA, depending on the service providers, software providers, payment providers or logistics partners involved in a specific activity.
Where personal data is transferred outside the EEA, we rely where applicable on an adequacy decision, Standard Contractual Clauses, or another lawful transfer mechanism or safeguard recognised under applicable data protection law.
We also apply appropriate technical and organisational measures such as encryption, access restriction, secure hosting and need-to-know access controls.
7. Data Retention
Orders & invoices: 7 years, based on tax and accounting law.
Export documentation: as long as legally required or operationally necessary for compliance and audit purposes.
Complaints & disputes: up to 2 years after closure, unless longer retention is necessary for legal defence.
General communications: up to 1 year, unless the communication becomes part of an order, complaint, legal or compliance file.
Marketing consent records: until withdrawn or no longer required.
Fraud, legal and compliance records: as long as reasonably or legally necessary.
Orders & invoices: 7 years, based on tax and accounting law.
Export documentation: as long as legally required or operationally necessary for compliance and audit purposes.
Complaints & disputes: up to 2 years after closure, unless longer retention is necessary for legal defence.
General communications: up to 1 year, unless the communication becomes part of an order, complaint, legal or compliance file.
Marketing consent records: until withdrawn or no longer required.
Fraud, legal and compliance records: as long as reasonably or legally necessary.
8. Data Sharing
Personal data is shared only where necessary with payment providers, logistics partners, customs authorities, IT and hosting providers, software providers, auditors, professional advisers, legal representatives, insurers or debt collection agencies, where legally permitted and operationally necessary.
Personal data is shared only where necessary with payment providers, logistics partners, customs authorities, IT and hosting providers, software providers, auditors, professional advisers, legal representatives, insurers or debt collection agencies, where legally permitted and operationally necessary.
9. Security & Personal Data Breaches
We apply appropriate security measures including encryption, access controls, secure hosting, restricted permissions, internal process controls and incident monitoring.
Where required by law, personal data breaches are documented and notified to the competent supervisory authority without undue delay and, where feasible, within 72 hours after becoming aware of the breach. Where a breach is likely to result in a high risk to individuals, affected individuals will also be informed without undue delay where legally required.
We apply appropriate security measures including encryption, access controls, secure hosting, restricted permissions, internal process controls and incident monitoring.
Where required by law, personal data breaches are documented and notified to the competent supervisory authority without undue delay and, where feasible, within 72 hours after becoming aware of the breach. Where a breach is likely to result in a high risk to individuals, affected individuals will also be informed without undue delay where legally required.
10. Cookies
We may use essential cookies, analytics cookies and marketing cookies or similar technologies.
Essential cookies are necessary for the functioning, security and basic operation of the website and related services.
Analytics and marketing cookies are used only where required under applicable law and, where necessary, based on consent. Preferences can be managed through the cookie banner, consent settings or browser settings.
We may use essential cookies, analytics cookies and marketing cookies or similar technologies.
Essential cookies are necessary for the functioning, security and basic operation of the website and related services.
Analytics and marketing cookies are used only where required under applicable law and, where necessary, based on consent. Preferences can be managed through the cookie banner, consent settings or browser settings.
11. Your Rights
Depending on the circumstances and applicable law, you may have the right to request access, rectification, erasure, restriction of processing, objection, withdrawal of consent and data portability.
Requests can be sent to legal.affairs@dutchsnackbar.com. We aim to respond within 30 days, subject to identity verification, the complexity of the request and any lawful extension rights available to us.
Depending on the circumstances and applicable law, you may have the right to request access, rectification, erasure, restriction of processing, objection, withdrawal of consent and data portability.
Requests can be sent to legal.affairs@dutchsnackbar.com. We aim to respond within 30 days, subject to identity verification, the complexity of the request and any lawful extension rights available to us.
12. Whether You Must Provide Data
Certain personal data is required for us to enter into and perform a contract with you, including delivery details, billing details, contact information and order-related data.
If you do not provide required data, we may be unable to accept, process, deliver or support your order, or comply with legal obligations linked to the transaction.
Certain personal data is required for us to enter into and perform a contract with you, including delivery details, billing details, contact information and order-related data.
If you do not provide required data, we may be unable to accept, process, deliver or support your order, or comply with legal obligations linked to the transaction.
13. Automated Decision-Making
We do not currently make decisions producing legal or similarly significant effects based solely on automated processing, including profiling, unless expressly stated otherwise in a specific context and where legally permitted.
We do not currently make decisions producing legal or similarly significant effects based solely on automated processing, including profiling, unless expressly stated otherwise in a specific context and where legally permitted.
14. Complaints
If you believe your personal data has been processed unlawfully or if you are not satisfied with our response, you may lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.
If you believe your personal data has been processed unlawfully or if you are not satisfied with our response, you may lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.
15. External Links
Our website may contain links to third-party websites or services. We are not responsible for the privacy practices, content or security of those third parties.
Our website may contain links to third-party websites or services. We are not responsible for the privacy practices, content or security of those third parties.
16. Updates to this Notice
This Privacy Notice may be updated from time to time. The latest version is always published on our website. Changes take effect from the date of publication unless stated otherwise.
This Privacy Notice may be updated from time to time. The latest version is always published on our website. Changes take effect from the date of publication unless stated otherwise.
17. Summary
We process personal data with care, transparency and integrity, in accordance with the GDPR, Dutch law and applicable international regulations.
We process personal data with care, transparency and integrity, in accordance with the GDPR, Dutch law and applicable international regulations.