Privacy Statement
- Back
This privacy policy applies to all services, reservations, orders, job applications, website visits and other contact with La Vespa, including the locations in Laren, Bussum and Zeist. La Vespa attaches great importance to the protection of your personal data. We process personal data carefully, confidentially and in accordance with the General Data Protection Regulation (GDPR).
1. Controller responsible for processing
Depending on the location you contact or use, your personal data is processed by the relevant company within the La Vespa formula.
For questions about privacy or data processing, you can contact the relevant location using the contact details at the bottom of this privacy policy. For general questions about the website or this privacy policy, you can contact us via info@lavespa.nl.
2. What personal data do we process?
We only process personal data that is necessary for our services, business operations, security, communication or legal obligations. Below you can read per situation which data we process, why we process it and how long we retain it.
A. Reservations
Data: name, telephone number, number of guests, date and time of the reservation and any comments you provide yourself.
Purpose: to record your reservation, keep your table available and contact you if anything changes regarding your reservation.
Legal basis: performance of an agreement and legitimate interest.
Retention period: reservation data is not kept longer than necessary for the reservation and its handling. In principle, this data is deleted after the relevant reservation day, unless longer retention is necessary for handling complaints, incidents or a dispute.
If a reservation system or other external service provider is used, more information about this party can be requested from the relevant location.
B. Contact form and e-mail contact
Data: name, e-mail address, telephone number, content of your message and any other data you provide yourself.
Purpose: to answer and handle your question, request, complaint or comment.
Legal basis: legitimate interest and, if the contact relates to a reservation, order or agreement, performance of an agreement.
Retention period: we retain contact data for as long as necessary to fully answer and handle your message. If the contact results in a reservation, order, complaint, agreement or dispute, data may be retained longer for as long as necessary.
Contact forms may be received by e-mail and through the website environment, including WordPress/Elementor.
C. Job applications
Data: name, date of birth, telephone number, e-mail address, position applied for, preferred location, desired number of hours per week, availability, work experience, previous employers or workplaces if provided, level of Dutch and/or Italian, CV if voluntarily submitted, passport photo if voluntarily submitted and any other data you provide yourself.
Purpose: to assess your application, contact you and carry out the application procedure.
Legal basis: legitimate interest and taking pre-contractual steps.
Retention period: application data is deleted no later than 4 weeks after completion of the application procedure, unless you give permission to retain your data for future vacancies. If La Vespa wishes to retain data for longer, separate consent will be requested.
D. Camera security in and around the locations
Data: video footage of guests, employees, suppliers and other visitors in and around the locations.
Purpose: security of guests, employees and property, prevention and recording of theft, fraud, nuisance or other incidents, and investigation of incidents.
Legal basis: legitimate interest.
Retention period: camera footage is automatically overwritten after a maximum of 5 days, unless an incident has occurred. In that case, relevant footage may be retained for longer for as long as necessary for investigation, handling of the incident, an insurance matter, police investigation or legal proceedings.
Camera footage is only viewed when there is a reason to do so. Access to camera footage is limited to the owners and, where necessary, authorised persons involved in handling an incident.
E. Orders, payments and invoicing
Data: name, telephone number, e-mail address, address if required for the order or invoice, order details, payment details, invoice details and any preferences, dietary requirements or allergies that you voluntarily provide.
Purpose: to process orders, correctly and safely prepare or handle your order, process payments and maintain financial records.
Legal basis: performance of an agreement, legal obligation and, for voluntarily provided dietary requirements or allergies, your voluntary provision of this information in the context of your order.
Retention period: financial and administrative data is retained for 7 years due to the statutory tax retention obligation. Other order data is not retained longer than necessary for the performance and handling of the order, unless longer retention is legally required or necessary.
Orders may relate to takeaway or consumption at the location. For larger orders, contact may take place by e-mail or through the contact form.
F. Website visits and cookies
Data: IP address, browser data, device data, pages visited, click behaviour and data about the functioning of the website.
Purpose: to ensure the website functions properly, analyse and improve the website, manage cookie preferences and, where applicable, enable external content or social media functions.
Legal basis: legitimate interest for strictly necessary and functional cookies. For cookies requiring consent, the legal basis is consent.
Retention period: depends on the specific cookie or service. The current retention periods are stated in our cookie policy.
For website analytics, cookie management, online visibility and possible marketing measurements, La Vespa may use services such as Google Analytics, Google Tag Manager, Google Search Console, Complianz and similar analytics or marketing services.
For cookies that are not strictly necessary, such as certain analytical, marketing or tracking cookies, we ask for prior consent via our cookie banner. You can change or withdraw your consent at any time. More information about the specific cookies, services, purposes and retention periods can be found in our cookie policy.
G. Social media, photos and reviews
Data: name, public profile information, comments, messages, photos, videos, reviews and other data that you provide yourself or publish publicly.
Purpose: to manage social media contact, show atmosphere impressions, promotional content and reviews.
Legal basis: legitimate interest or consent, depending on the situation.
Retention period: data is not retained or published longer than necessary for the purpose for which it was posted. Upon request, we will assess whether removal is possible and appropriate.
If individuals are clearly recognisable and the publication does not fall under a general atmosphere impression, we will request consent where necessary.
3. Purposes of processing
We process personal data for the following purposes:
- accepting and managing reservations;
- processing orders;
- answering questions, messages and contact requests;
- performing agreements;
- maintaining administration and invoicing;
- complying with legal obligations;
- assessing job applications;
- securing our locations;
- securing and technically operating our website;
- analysing and improving our website;
- managing cookie preferences;
- displaying or using reviews;
- managing social media contact and promotional content;
- handling complaints, incidents or disputes.
We only process personal data when there is a valid legal basis, such as performance of an agreement, legal obligation, legitimate interest or consent.
4. Disclosure to third parties
La Vespa never sells your personal data to third parties. We only share personal data with external parties when this is necessary for our services, business operations, administration, security, website functionality or legal obligations.
This may include parties such as:
- reservation systems, where applicable;
- cash register systems and payment providers;
- accounting and administration systems;
- hosting and website suppliers;
- e-mail providers;
- IT and security suppliers;
- cookie and consent management tools;
- analytics, cookie and marketing services, such as Google Analytics, Google Tag Manager, Google Search Console, Complianz and similar services, where used via the website;
- social media platforms, where personal data is processed via our website or social media channels;
- delivery or order partners, where applicable;
- government authorities when we are legally required to do so.
To the extent that La Vespa uses external systems, such as reservation systems, cash register systems, payment providers, accounting software, delivery services, hosting parties or website suppliers, personal data is only shared insofar as necessary. More information about the processors or suppliers used can be requested from the relevant location.
Where external parties process personal data on our behalf, we make arrangements where necessary to safeguard the security and confidentiality of your personal data.
Some third parties process personal data as independent controllers. This may apply, for example, to social media platforms or certain external services. In that case, the privacy policy of that party also applies.
5. Transfers outside the European Economic Area
Some external service providers may process personal data outside the European Economic Area (EEA). Where this is the case, we ensure that appropriate safeguards are in place, for example on the basis of an adequacy decision, the EU-U.S. Data Privacy Framework or standard contractual clauses of the European Commission.
6. Security of personal data
La Vespa takes the protection of your data seriously. We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, unwanted disclosure and unauthorised modification.
These measures include:
- secure access to systems;
- restricting access to personal data to owners, management and authorised employees where access is necessary;
- use of secure digital systems;
- website security via SSL/HTTPS;
- careful handling of camera footage;
- appropriate arrangements with external service providers.
If you believe that your data is not properly secured or there are indications of misuse, please contact the relevant location or e-mail info@lavespa.nl.
7. Minors
Our website and services are not intended to collect personal data from persons under the age of 16, unless consent has been given by a parent or guardian. However, we cannot always verify whether a visitor is older than 16.
If you are convinced that we have collected personal data from a minor without parental consent, please contact the relevant location or e-mail info@lavespa.nl. We will then delete this data insofar as we are required to do so.
8. Your rights
Under the GDPR, you have the following rights:
- the right to access your personal data;
- the right to correct inaccurate or incomplete data;
- the right to delete personal data;
- the right to restrict processing;
- the right to data portability;
- the right to object to processing;
- the right to withdraw consent when processing is based on consent.
You can submit a request via the contact details of the relevant location or via info@lavespa.nl.
To make sure the request was made by you, we may ask you to identify yourself. If we ask for a copy of your identity document, we request that you black out your passport photo, MRZ, passport number and citizen service number to protect your privacy.
We will respond as soon as possible, but no later than within one month, to your request. In some cases, this period may be extended in accordance with the GDPR.
9. Complaints
Do you have a complaint about the way we handle your personal data? Please contact the relevant location or e-mail info@lavespa.nl. We will try to resolve your complaint carefully and as quickly as possible.
If we cannot resolve the matter together, you have the right to lodge a complaint with the Dutch Data Protection Authority.
10. Changes to this privacy policy
La Vespa may amend this privacy policy when our services, working methods, systems used, cookies or legislation change. The most current version is always available via our website.
11. Contact details per location
General contact: info@lavespa.nl