About GDPR
The General Data Protection Regulation (GDPR) is a comprehensive data protection law that came into effect across the European Union on 25 May 2018. It gives individuals greater control over their personal data and establishes strict requirements for organisations that collect and process personal information.
As a business operating in the Netherlands, Dutch Bakery is fully committed to complying with GDPR requirements and ensuring the protection of your personal data.
Data Controller
Dutch Bakery acts as the data controller for personal information collected through this website. This means we determine how and why your personal data is processed.
Contact details:
Dutch Bakery
Oudegracht 127
3511 AG Utrecht
Netherlands
Email: [email protected]
Your Rights Under GDPR
The GDPR provides you with the following rights regarding your personal data:
Right to Be Informed
You have the right to know how your personal data is being collected and used. This information is provided in our Privacy Policy and this GDPR information page.
Right of Access
You can request a copy of the personal data we hold about you. We will respond to such requests within one month and provide the information free of charge.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. We will act on such requests within one month.
Right to Erasure
Also known as the "right to be forgotten", you can request that we delete your personal data when:
- The data is no longer necessary for its original purpose
- You withdraw consent (where consent was the legal basis)
- You object to processing and there are no overriding legitimate grounds
- The data has been unlawfully processed
Right to Restrict Processing
You can request that we limit the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing.
Right to Data Portability
Where processing is based on consent or contract, and is carried out by automated means, you can request your data in a structured, commonly used, machine-readable format.
Right to Object
You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds.
Rights Related to Automated Decision-Making
You have rights regarding automated decision-making and profiling. We do not currently use automated decision-making processes that significantly affect you.
How to Exercise Your Rights
To exercise any of your GDPR rights, please contact us via email at [email protected]. Please provide sufficient information to verify your identity and specify which right you wish to exercise.
We will respond to your request within one month. If your request is complex, we may extend this period by two months, but we will inform you of any delay within the initial one-month period.
Complaints
If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the Dutch Data Protection Authority:
Autoriteit Persoonsgegevens
Bezuidenhoutseweg 30
2594 AV Den Haag
Netherlands
Website: autoriteitpersoonsgegevens.nl
Data Protection Measures
We implement appropriate technical and organisational measures to ensure data security, including:
- Secure transmission of data using encryption
- Limited access to personal data on a need-to-know basis
- Regular review of data processing activities
- Staff training on data protection obligations
Updates to This Information
We may update this GDPR information page to reflect changes in our practices or legal requirements. Please check this page periodically for updates.