Privacy Policy

Last Updated: June 8, 2026

Website: www.teddysburger.nl

At Teddy’s Burger, we take your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website, order a burger, book a table, or visit our physical restaurant in the Netherlands. We handle all data in strict compliance with the European General Data Protection Regulation (GDPR) and the Dutch Algemene Verordening Gegevensbescherming (AVG).

1. Who We Are (Data Controller)

Teddy’s is responsible for the processing of your personal data.

  • Company Name: TEDDY’S

  • Address: Westerstraat 10, 3016 DH Rotterdam

  • Chamber of Commerce (KVK) Number: ********

  • Email Contact: info@teddysburger.nl

2. What Personal Data We Collect & Why

We only collect data that is strictly necessary to give you the best burger experience or to fulfill a legal obligation.

A. Making a Table Reservation

  • Data collected: Full name, email address, phone number, date/time of reservation, and any optional dietary preferences/allergies you choose to share.

  • Purpose: To manage your booking and contact you if there are changes.

  • Legal basis: Performance of a contract. (Note: If you provide health/allergy data voluntarily, we process this based on your explicit consent).

B. Online Ordering & Delivery (Directly or via partners like Thuisbezorgd/UberEats)

  • Data collected: Full name, delivery address, phone number, email address, and order history.

  • Purpose: To prepare your meal, handle secure payment, and deliver it to your doorstep.

  • Legal basis: Performance of a contract.

C. Marketing & Newsletters

  • Data collected: First name and email address.

  • Purpose: To send you updates, special discounts, or burger of the month promotions.

  • Legal basis: Consent. We never use pre-checked boxes; you must actively opt-in. You can unsubscribe instantly via the link at the bottom of any email.

D. Visiting our Restaurant (CCTV / Camera Surveillance)

  • Data collected: Video footage from our security cameras.

  • Purpose: To protect the safety of our guests, staff, and properties, and prevent theft.

  • Legal basis: Legitimate interest. Clear signs at our entrance notify guests that cameras are active.

E. Free Guest Wi-Fi in the Restaurant

  • Data collected: MAC address or device name (if you connect to our local guest network).

  • Purpose: To grant internet access and protect our network against cyber abuse. We do not track your browsing history.

  • Legal basis: Legitimate interest.

3. How Long We Keep Your Data (Retention Periods)

Under the AVG, we don't hold onto your information longer than necessary:

  • Reservations & Orders: Retained temporarily to execute the service. Basic financial records (invoices/orders) are legally kept for 7 years to comply with the Dutch Tax Authority (Belastingdienst) statutory retention requirement.

  • Newsletters: Kept until you withdraw consent (unsubscribe).

  • CCTV Footage: Automatically overwritten within max. 28 days, unless an incident occurred (like a break-in) where the footage is legally required by the police.

4. Sharing Data with Third Parties

We don't trade, rent, or sell your data to marketing companies. We only share data with essential partners who help us run our restaurant, including:

  • Online reservation systems and POS provider software.

  • Delivery partners (if fulfilling orders via external fleets).

  • Payment gateway providers (to process secure iDEAL or credit card transactions).

  • Email marketing tools (like Mailchimp).

We sign Data Processing Agreements (Verwerkersovereenkomsten) with all third parties processing data on our behalf to guarantee they keep your data just as secure as we do. We do not transfer data outside the European Economic Area (EEA) unless appropriate safeguards are in place.

5. Cookies

Our website uses functional and analytical cookies to ensure everything runs smoothly and to see how visitors interact with our site (using anonymous data like Google Analytics with anonymized IPs). For tracking or marketing cookies, we will always ask your permission via our cookie banner.

6. Your Privacy Rights

Under the AVG, you hold the power over your data. You have the right to:

  1. Access: Request a copy of the data we hold about you.

  2. Correction: Fix any incorrect information (e.g., a misspelled address).

  3. Deletion ("Right to be Forgotten"): Ask us to erase your personal data, provided it doesn't conflict with a legal retention law (like tax administration).

  4. Restriction: Ask us to temporarily halt processing your data.

  5. Object: Object to us processing data based on "legitimate interest" (like CCTV or Wi-Fi logs).

To exercise any of these rights, send a clear email to [your privacy contact email]. We will respond to your request within 30 days.

7. Data Protection Authority

If you feel Teddy’s Burger is not handling your data properly, you have the right to lodge an official complaint with the Dutch national supervisor. You can do this via the website of the Autoriteit Persoonsgegevens (AP).