Privacy Policy

Last updated: December 2024

1. Introduction

headphmlrn B.V. ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website headphmlrn.top or visit our restaurant located at Hoofdstraat 213, 9753 AC Groningen, Netherlands.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Make a reservation at our restaurant
• Contact us through our contact form
• Subscribe to our newsletter
• Provide feedback or reviews
• Participate in promotions or surveys

This information may include:

• Name and contact information (email address, phone number)
• Reservation details and dining preferences
• Dietary restrictions and allergies
• Payment information (processed securely by third-party providers)
• Communication preferences

2.2 Automatically Collected Information

When you visit our website, we may automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To process and manage your restaurant reservations
• To accommodate dietary restrictions and preferences
• To communicate with you about your reservations or enquiries
• To improve our website and restaurant services
• To send you marketing communications (with your consent)
• To comply with legal obligations
• To protect against fraudulent or illegal activity

4. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Consent: When you provide explicit consent for marketing communications
• Contract: To fulfil our contractual obligations for restaurant services
• Legitimate Interest: To improve our services and ensure restaurant security
• Legal Obligation: To comply with applicable laws and regulations

5. Information Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except as described in this Privacy Policy. We may share your information with:

• Service providers who assist us in operating our website and restaurant
• Payment processors for secure transaction processing
• Legal authorities when required by law or to protect our rights
• Business partners for joint marketing efforts (with your consent)

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience. For detailed information about our use of cookies, please see our Cookie Policy.

7. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation of data processing
• Right to Data Portability: Request transfer of your data
• Right to Object: Object to processing of your personal data
• Right to Withdraw Consent: Withdraw consent at any time

8. Data Security

We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure.

9. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Reservation data is typically retained for accounting and customer service purposes.

10. International Data Transfers

Your personal data is primarily processed within the European Union. If we transfer data outside the EU, we ensure appropriate safeguards are in place to protect your information in accordance with GDPR requirements.

11. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

13. Contact Information

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

14. Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates applicable data protection laws. In the Netherlands, you can contact the Autoriteit Persoonsgegevens (Dutch Data Protection Authority).