Privacy policy
Protection of personal data at Food Factory Leuven BV, Riddersstraat 141, 3000 Leuven. This privacy policy explains how we handle personal data in accordance with the General Data Protection Regulation (GDPR). Version: August 2026 — last amended on 14 August 2026. This English translation is provided for information only; in the event of any discrepancy, the Dutch version prevails.
Article 1. Introduction
Food Factory Leuven BV (hereinafter “Food Factory”, “we” or “us”) attaches great importance to the protection of your personal data and to respecting your privacy. In this privacy policy we explain which personal data we collect, why we do so, how long we keep it and what rights you have.
This policy applies to our customers, prospects, suppliers, contact persons, job applicants and visitors to our website. We always process your personal data in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679, hereinafter “GDPR”) and the applicable Belgian legislation.
By using our services or our website, you acknowledge this privacy policy. We recommend that you read it carefully.
Article 2. Data controller
The controller of your personal data is Food Factory Leuven BV, with registered office at Riddersstraat 141, 3000 Leuven, Belgium.
For any questions about this privacy policy or the processing of your personal data, you can contact us by email or by post at the above address. You’ll find the specific contact details at the bottom of this policy.
Article 3. Which personal data we process
Depending on your relationship with Food Factory, we may process the following categories of personal data:
Identification and contact details: surname, first name, job title, company name, email address, phone number, billing and delivery address.
Order and customer data: data about your quotes, orders, events, the dietary and allergy preferences you share with us, and your communication with us.
Financial and administrative data: VAT number, billing details and payment details.
Technical and website data: IP address, browser type, device information and data about your use of our website via cookies and similar technologies.
In principle, we do not process special categories of personal data. When you provide us with dietary or allergy information for an event, we process it solely to carry out your order correctly.
Article 4. Purposes and legal bases of the processing
We only process your personal data for specific and legitimate purposes, each time based on a valid legal basis:
To draw up quotes, conclude and perform agreements and provide our catering services. Legal basis: performance of the contract or pre-contractual measures.
For our customer administration, invoicing and accounting. Legal basis: compliance with a legal obligation and our legitimate interest.
To answer your questions and maintain the customer relationship. Legal basis: our legitimate interest in ensuring good service.
For direct marketing, such as sending newsletters or promotions to existing customers. Legal basis: our legitimate interest or your consent, which you can withdraw at any time.
For the security and improvement of our website. Legal basis: our legitimate interest and, for non-essential cookies, your consent.
Article 5. Cookies and website data
Our website uses cookies and similar technologies. Essential cookies ensure the website works properly and are always placed. For analytical and marketing cookies, we ask for your consent in advance via the cookie notice.
You can change or withdraw your cookie preferences at any time via your browser settings or via the cookie notice on our website. Refusing certain cookies may affect how the website works.
Article 6. Recipients and processors
We never share your personal data with third parties for commercial purposes without your consent. Your data may, however, be disclosed to the following recipients, only to the extent necessary:
Service providers and processors who support us, such as IT and hosting partners, accountants, payment service providers and suppliers. We conclude a data processing agreement with these processors that guarantees the protection of your data.
Public authorities and bodies, where we are legally obliged to do so.
We ensure that all recipients treat your personal data confidentially and securely.
Article 7. Transfers outside the European Economic Area
In principle, your personal data is processed within the European Economic Area (EEA). If we were to transfer data to a country outside the EEA, for example via certain service providers, this will only happen if that country offers an adequate level of protection or subject to the necessary safeguards, such as the European Commission’s standard contractual clauses.
Article 8. Retention periods
We do not keep your personal data longer than necessary for the purposes for which it was collected, or for as long as required by law.
We keep customer and order data for the duration of the customer relationship. We keep invoicing and accounting data in accordance with the statutory retention period of seven years.
We keep data of prospects and job applicants no longer than reasonably necessary, after which it is deleted or anonymised.
Article 9. Security of your data
Food Factory takes appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access. These measures include access security, restricted access to data on a need-to-know basis and agreements with our service providers.
Should a data breach occur despite our efforts that poses a risk to your rights and freedoms, we will take the appropriate measures and, where required, inform the Data Protection Authority and the persons concerned.
Article 10. Your rights
In accordance with the GDPR, you have the following rights regarding your personal data:
Right of access to the data we process about you.
Right to rectification of inaccurate or incomplete data.
Right to erasure (the right to be forgotten), insofar as no statutory retention obligation applies.
Right to restriction of processing and right to data portability.
Right to object to certain processing, and the right to withdraw consent at any time.
You can exercise these rights by contacting us via the details at the bottom of this policy. We may ask you to confirm your identity and will respond to your request within the statutory period.
Article 11. Complaints
If you have a question or complaint about the processing of your personal data, please feel free to contact us. We’ll be happy to help.
If you believe we are not processing your data correctly, you have the right to lodge a complaint with the Data Protection Authority, Drukpersstraat 35, 1000 Brussels (contact@apd-gba.be).
Article 12. Changes to this privacy policy
Food Factory may amend this privacy policy from time to time, for example to comply with changes in legislation or in our services. The most recent version is always available on our website, stating the date of the last amendment.
Article 13. Contact
For questions about this privacy policy or the processing of your personal data, you can always reach us:
Food Factory Leuven BV, Riddersstraat 141, 3000 Leuven. You’ll find our current email and phone details on the contact page of our website.