Skip to content
Legal

Privacy statement

How FoodInsights handles personal data, what we process and why, and the rights you have.

Last updated 13 October 2026.

Who is responsible

FoodInsights, Helftheuvelweg 11, 5222 AV ’s-Hertogenbosch, the Netherlands, registered with the Dutch Chamber of Commerce under KvK 72063416, is the controller for the personal data described here. You can reach us at [email protected] or +31 6 12521119.

We have not appointed a Data Protection Officer; this is not required for an organisation of our size and activities.

What we process, and why

When you visit this website

This website places no cookies and runs no analytics, advertising or tracking scripts. See our cookie statement.

Our web server records ordinary technical request data: your IP address, the page requested, the time, and the browser identification your device sends. We use this only to keep the site running and secure. The legal basis is our legitimate interest in operating a working, secure website (Article 6(1)(f) GDPR).

The typefaces, images and stylesheet are all served from our own server. Viewing a page on this site makes no request to any third party, so nothing about your visit is disclosed to anyone but us. The only outside party involved anywhere on the site is the form-delivery service named under “When you contact us”, and only at the moment you submit the contact form.

When you contact us

You can reach us through the contact form, by email or by telephone. If you use the form we process the name, organisation, email address, telephone number and message you enter, in order to answer you. The fields marked as required are the minimum we need to reply; anything else is optional. We use these details for no other purpose, add them to no mailing list, and pass them to no one else.

The legal basis is our legitimate interest in responding to enquiries, or the steps taken at your request before entering a contract (Article 6(1)(b) and (f) GDPR).

Messages sent through the form are delivered to us by Web3Forms (web3forms.com), which acts as a processor for that step and may handle the data outside the European Economic Area. It receives only the fields you complete, keeps them no longer than needed to deliver the message, and uses them for nothing else. Writing to [email protected] directly avoids that step entirely.

When we work together

In an assignment or a collaborative project we process the contact details of the people we work with at your organisation, and whatever is needed to perform the agreement and meet our administrative and tax obligations (Article 6(1)(b) and (c) GDPR).

The chain data we work with for customers is generally about products, batches, measurements and organisations rather than about people. Where an assignment does involve personal data, we act as a processor on your instructions and record that in a data processing agreement.

How long we keep it

Server logs are kept only as long as needed for operation and security. Correspondence is kept for as long as it is useful for the relationship. Records with a statutory retention period — invoices and the supporting administration — are kept for the seven years Dutch tax law requires.

Who else sees it

We do not sell personal data and we do not share it for advertising. We share it only with parties that help us operate — such as our hosting and email providers — and only under a processing agreement, or where the law obliges us to.

A current list of the processors we use can be requested at [email protected]. This list still needs to be drawn up and named here.

Your rights

You can ask us for access to the personal data we hold about you, and for its rectification or erasure. You can ask us to restrict processing, object to it, or receive your data in a portable form. Where processing rests on consent, you can withdraw that consent at any time.

Write to [email protected] and we will respond within one month. If you are not satisfied, you have the right to complain to the Dutch supervisory authority, the Autoriteit Persoonsgegevens.

Security

We take appropriate technical and organisational measures to protect personal data against loss and unlawful processing, and we limit access to those who need it for their work.

Changes

We may update this statement as our services or the law change. The date at the top shows when it was last revised.