Deeghuis Merwede (“we”, “us”) operates the website disuapodes.beauty and the bakery at Merwedekade 22, 3521 AZ Utrecht, the Netherlands. This policy explains how we process personal data under Regulation (EU) 2016/679 (GDPR) and the Dutch Uitvoeringswet AVG (UAVG).
Controller
Deeghuis Merwede
Merwedekade 22, 3521 AZ Utrecht, Netherlands
Email: [email protected]
Phone: +31 30 271 84 16
Data we collect
We may process:
- Identity and contact details you send via the contact form or email (name, email address, preferred date, message content).
- Order or reservation details when you ask us to hold loaves or pastries.
- Technical data needed to run the site (such as cookie preferences stored locally on your device).
- Optional analytics data only if you accept analytics cookies.
Purposes and legal bases
- Responding to enquiries and reservations — legitimate interest and/or steps prior to a contract (Art. 6(1)(b) and (f) GDPR).
- Running the website and security — legitimate interest (Art. 6(1)(f)).
- Optional analytics — consent (Art. 6(1)(a)), withdrawn at any time via cookie settings.
- Legal obligations — where Dutch or EU law requires retention (Art. 6(1)(c)).
Retention
Contact messages are kept only as long as needed to reply and follow up, then deleted or archived with limited access. Cookie preferences remain on your device until you clear them. Records related to purchases, if any, are retained as required by Dutch law.
Recipients
We do not sell personal data. Hosting or email providers acting as processors may process data on our instructions under appropriate agreements. Transfers outside the EEA occur only with suitable safeguards where required.
Your rights
You may request access, rectification, erasure, restriction, portability, and objection where applicable, and you may withdraw consent without affecting prior lawful processing. Contact us at [email protected].
You may lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens (AP), P.O. Box 93374, 2509 AJ The Hague, www.autoriteitpersoonsgegevens.nl.
Children
Our website is aimed at adults. We do not knowingly collect data from children under 16 through this site.
Updates
We may update this policy to reflect legal or operational changes. The date at the top will change when we do.