Privacy Policy

grouselllu B.V. ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website grouselllu.top or use our catering services.

Data Controller

grouselllu B.V. is the data controller for the purposes of the General Data Protection Regulation (GDPR). Our contact details are:

Data Collection

The data we collect includes personal information such as your name, email address, phone number, event details, and any other information you provide when contacting us or using our services. We collect this information when you:

• Submit enquiries through our website contact forms
• Contact us by email or telephone
• Request quotes for our catering services
• Book our services for events
• Subscribe to our communications
• Visit our website (through cookies and similar technologies)

How We Use Your Information

We explain how we use your information to provide and improve our catering services. Specifically, we use your personal data for the following purposes:

• To respond to your enquiries and provide quotes
• To deliver our catering services and manage events
• To process payments and maintain financial records
• To communicate with you about your events and our services
• To improve our website and services
• To comply with legal obligations
• To send marketing communications (with your consent)

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Contract Performance: To fulfil our catering service agreements
• Legitimate Interest: To respond to enquiries and improve our services
• Consent: For marketing communications and non-essential cookies
• Legal Obligation: To comply with tax, accounting, and other legal requirements

Data Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except in the following circumstances:

• Service providers who assist us in operating our business (under strict confidentiality agreements)
• Professional advisors such as lawyers, accountants, and auditors
• Government authorities when required by law
• Emergency situations to protect safety or prevent harm

Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy. Specifically:

• Customer data: 7 years after the last service (for tax and legal purposes)
• Marketing data: Until you withdraw consent or unsubscribe
• Website data: 2 years for analytics purposes
• Enquiry data: 3 years from initial contact

Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of Access: Request copies of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data (subject to legal obligations)
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Opt-out of marketing communications and certain processing
• Right to Withdraw Consent: Remove consent for processing based on consent

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• SSL encryption for data transmission
• Secure storage systems with access controls
• Regular security assessments and updates
• Staff training on data protection
• Incident response procedures

International Data Transfers

Your personal data is primarily processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses approved by the European Commission.

Cookies and Tracking

Our website uses cookies and similar tracking technologies. For detailed information about our use of cookies, please refer to our Cookie Policy.

Children's Privacy

Our services are not directed to children under 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on our website and updating the "Last updated" date. We encourage you to review this policy periodically.

Contact Information

If you have questions about this Privacy Policy, wish to exercise your rights, or need to contact us regarding data protection matters, please contact us at:

Supervisory Authority

If you are not satisfied with our response to your data protection concerns, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):

By using our website and services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein.