Privacy policy

1. Who is responsible?

De Deegsmid is the controller of your personal data for the purposes described below. Contact us with questions or privacy requests:

2. Which data do we use and why?

Enquiries and reservations: we use your name, email address, any telephone number, message and booking details to answer your enquiry and organise your visit. This is necessary to take steps at your request before entering into a contract or to perform it. For other enquiries, our legal basis is our legitimate interest in helping you.

Job applications: the form collects your name, email address, selected vacancy and motivation. We use this information to assess your application and contact you, taking steps towards a possible employment contract. Your application is emailed to us through Resend.

Website accounts: we process your name, email address, securely stored password, role and session details, such as IP address and browser information. We use these to manage and protect access. Our legal basis is our legitimate interest in a secure website and restricted staff area. This policy does not replace separate information about employment records.

Technical data: our hosting service processes information including IP addresses and request details to deliver the website, resolve faults and prevent abuse. Our legitimate interest is a reliable and secure website. Where the law requires us to keep records, we process them to meet that legal obligation.

We ask only for information needed for your request. Without the required details, we cannot process a reservation, application or account. Do not send a citizen service number, identity document or medical information through the application form. We do not make decisions with legal or similarly significant effects based solely on automated processing.

3. Service providers and external websites

The website uses Vercel for hosting and analytics, a database for accounts and an email service for messages. Only staff and service providers who need the data for their work may use it. We do not sell your personal data.

The reservation button opens the Zenchef booking service in a new tab. Information you enter there is processed for your reservation. Please also read the privacy information and any additional terms shown in that booking service.

More information about our service providers: Vercel, Resend.

Service providers may process data outside the European Economic Area, including in the United States. Transfers may only take place with a valid GDPR transfer mechanism, such as an adequacy decision or the European Commission’s Standard Contractual Clauses with additional measures where needed. Contact us by email for information about the applicable safeguards and a copy of them.

4. Cookies, analytics and Google Maps

We remember your language and display preferences using functional cookies and browser storage. Preference cookies are kept for up to one year. We also use session cookies for sign-in. You can delete cookies and stored preferences in your browser; you may then need to sign in again or reset your preferences.

Vercel Web Analytics provides statistics about pages visited, referring websites, device type, browser and approximate location. According to Vercel, this service uses no tracking cookies and discards its temporary visitor identification after 24 hours. We use the statistics to improve the website. Read about Vercel Web Analytics.

The contact page contains an embedded Google Maps map. When it loads, your browser connects to Google, which receives information including your IP address and browser details. Google may also use cookies. Google’s privacy policy explains how it processes this data. Google’s privacy policy.

5. How long do we keep data?

Retention depends on the purpose. We keep enquiry and reservation data as needed to handle your enquiry or visit and resolve follow-up questions or disputes. We keep application data for the recruitment process; retaining it for future vacancies requires a separate agreement on consent and duration. We keep account data while the account is needed. We then delete or anonymise data unless a legal retention requirement or ongoing dispute makes longer retention necessary.

6. Your rights and complaints

You can request access to, correction or deletion of your personal data and restriction of processing. You can object to processing based on legitimate interests. Where the GDPR provides this right, you can receive your data in a portable format. If we ask for consent, you can withdraw it at any time; this does not affect the lawfulness of earlier processing.

Email your request to info@dedeegsmid.nl. We may ask for appropriate information to verify your identity. We normally respond within one month. For complex or multiple requests, we may extend the period by up to two months and will tell you within the first month.

You can also lodge a complaint with the Autoriteit Persoonsgegevens or the data protection authority in the EU country where you live or work.

7. Changes

We update this policy when our services or the rules change. The date below shows when this text was last updated.