Privacy statement
What we record about you when you order from us, why that is necessary, and what you can do about it.
Who are we?
- Company
- Dönerland Havermarkt Breda Centrum
- Address
- Havermarkt 3, 4811 WG Breda
- Phone
- 076 514 4011
- info@donerlandbreda.nl
- Chamber of Commerce
- 83006648
- VAT number
- NL003760987B19
We are the controller for the data that reaches us through this website.
What we keep and why
When you order
Name, address, postcode, town, phone number, email address, what you ordered and what you paid. We need that in order to deliver your order or have it ready, and to call you if the driver cannot find your door. Legal basis: performance of the contract.
Your phone number is required for an order. Without a number, a failed delivery cannot be resolved.
When you enter your postcode
To determine whether we deliver to you, we send your postcode – and at checkout your house number as well – to the PDOK Locatieserver. That is the address service of the Dutch government (Kadaster), fed by the official register of addresses and buildings. Nothing else goes there: no name, no email address, no link to your IP. We deliberately do not use Google Places, so that no address data goes to an advertising company. Legal basis: performance of the contract.
Statistics on postcodes
We count how often a postcode is entered, so that we can see where there is demand for us and whether we should adjust our delivery area. For that we keep only the postcode with a counter – no house number, no IP address and nothing that can be traced back to you. A postcode on its own, without a house number, does not identify a household. Legal basis: legitimate interest.
When you pay
Payment runs through Mollie B.V. (Amsterdam). Your payment details go to Mollie, not to us; all we see is whether the payment succeeded and by which method. Mollie is our processor. Legal basis: performance of the contract.
When you submit a complaint
Your name, email address, any phone number and order number, and what you write. We keep that in order to handle the complaint and to be able to show that we did so. For security we keep an encrypted representation (hash) of your IP address for thirty days, purely to limit abuse of the form; after that it is deleted. Legal basis: legitimate interest and legal obligation.
When you create an account
That is not required – you can also order as a guest. If you do create one, we keep your details so that you do not have to fill everything in again next time. You can have your account deleted yourself.
Cookies
Necessary – always on
WooCommerce places cookies to remember your basket and to maintain your session. Without those cookies you cannot order. No consent is required for them.
Statistics – only with your consent
We use Google Analytics 4 to see which dishes are viewed and how the site is used. That happens only after you have given consent. If you give no consent or refuse, the Google code is not even loaded. Ordering works perfectly well without it.
The map in the footer
At the bottom of every page there is a Google Maps map. It loads only when you click on it, because a Google map sets cookies the moment it appears. The address and the directions link work without loading the map.
How long do we keep it?
- Order and invoice data: seven years. That is not a choice; Dutch tax law requires it (article 52 of the General State Taxes Act).
- Complaints: two years after they are settled.
- IP hash with a complaint: thirty days.
- Postcode statistics: indefinitely, because they contain no person.
- Account details: until you have the account deleted.
Who do we share it with?
Only with parties that are needed to carry out your order:
- Mollie B.V. – the payment.
- PDOK / Kadaster – postcode and house number only, to find your address.
- Google Ireland Ltd. – only if you have given consent for statistics.
- Our hosting provider – they manage the server the site runs on.
We do not sell your data and we do not pass it on for other people’s advertising.
Your rights
You may ask us for access to your data, to have it corrected, erased or transferred, and you may object to processing based on legitimate interest. Send a message to info@donerlandbreda.nl; we respond within a month.
If you disagree with how we handle your data, you can lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens, Postbus 93374, 2509 AJ The Hague – autoriteitpersoonsgegevens.nl.
Security
The site runs entirely over a secure connection (https). Payment details never reach our server. Access to the administration is limited to the owner.
Last updated on 21 October 2026. If anything changes in this statement, we will update this date.
