Privacy Policy
Last updated: 20 August 2026
1. Who is responsible for your data
VAN DE VLIET, BENJAMIN, trading as bnjmn Kitchen, is the data controller for the personal data processed through this website and in the course of our services.
Name: VAN DE VLIET, BENJAMIN
Address: Liersesteenweg 187 b1, 2640 Mortsel, Belgium
Company number: BE 1002.056.421
Email:hello@bnjmn.be
Website:www.bnjmn.be
If you have a question about your data or want to exercise any of your rights, email hello@bnjmn.be.
2. What data we collect, and why
Contact form and email
When you fill in the contact form or send us an email, we process your name, email address, phone number (if you provide it) and the content of your message. We use this data solely to answer your question and, if it leads to a booking, to prepare that booking.
Legal basis: performance of a contract or taking steps at your request prior to entering into one (Art. 6(1)(b) GDPR), and our legitimate interest in being able to respond to enquiries (Art. 6(1)(f) GDPR).
Newsletter
If you subscribe to our newsletter, we process your email address and, where provided, your name, along with the date you subscribed and data on whether you open our emails. We use the latter only to understand whether our newsletter is being read.
Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time via the unsubscribe link at the bottom of every newsletter, or by emailing hello@bnjmn.be. Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew it.
Client data for private dining and catering
When you book a private dining or catering service, we process the data needed to carry out and invoice the job: name, billing and delivery address, email address, phone number, number of guests, the date and location of the event, and your payment details.
Legal basis: performance of the contract (Art. 6(1)(b) GDPR) and, for invoicing and accounting, compliance with a legal obligation (Art. 6(1)(c) GDPR).
Allergies and dietary requirements
So that we can cook safely for you, we ask about allergies, intolerances and dietary preferences for you and your guests. Information about allergies is health data and receives additional protection under the GDPR.
We process this data solely in order to prepare your meal safely, we do not share it with third parties, and we delete it once the event has taken place.
Legal basis: your explicit consent (Art. 9(2)(a) GDPR), which you give by providing us with the information. If you share data about your guests, you agree to inform them of this.
Website use and analytics
Our website collects technical data about your visit, such as your IP address, browser type, device, the pages you view and how you arrived at our site. This data is used to operate, secure and improve the website.
Legal basis: our legitimate interest in a functioning and secure website (Art. 6(1)(f) GDPR) for strictly necessary data, and your consent (Art. 6(1)(a) GDPR) for analytics and other non-essential cookies. See section 6 below.
3. How long we keep your data
DataRetention periodContact form and email correspondence without a booking1 year after last contactClient and event data3 years after the last jobAllergies and dietary requirementsUntil the event has taken placeInvoices and accounting records7 years, as legally requiredNewsletter dataUntil you unsubscribeAnalyticsMaximum 2 years
Once these periods expire, your data is deleted or anonymised.
4. Who we share your data with
We never sell your data and do not share it with third parties for commercial purposes. We do rely on a number of service providers who act as processors on our behalf:
Squarespace Ireland Ltd. — hosting of the website, the contact form, the newsletter and any online payments
our accountant — for processing invoices
our payment service provider — for handling payments
Appropriate agreements are in place with each of them regarding the protection of your data. We may also share data where we are legally required to do so.
5. Transfers outside the European Economic Area
Some of our service providers process data on servers outside the EEA, including in the United States. Where this happens, the transfer takes place on the basis of the European Commission's Standard Contractual Clauses or an adequacy decision, so that your data enjoys an equivalent level of protection.
6. Cookies
Our website uses cookies: small files placed on your device.
Necessary cookies make the site work and keep it secure. These are always placed.
Analytics cookies help us understand how visitors use the site. We place these only with your consent.
On your first visit, a banner asks which cookies you allow. You can change your choice at any time through the cookie settings on our site, or delete and block cookies through your browser settings.
7. Security
We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. Our website runs over a secure connection (HTTPS) and access to your data is limited to those who need it. No transmission over the internet is entirely without risk, however.
8. Your rights
Under the GDPR you have the following rights:
Access — to find out what data we hold about you
Rectification — to have inaccurate data corrected
Erasure — to have your data deleted, unless we are legally required to keep it
Restriction — to have processing temporarily suspended
Portability — to receive your data in a commonly used format
Objection — to object to processing based on legitimate interest
Withdrawal of consent — where we rely on consent, you can withdraw it at any time
Send your request to hello@bnjmn.be. We will respond within one month. To protect you, we may ask you to verify your identity.
If you are unhappy with how we handle your data, you can lodge a complaint with the Belgian Data Protection Authority:
Gegevensbeschermingsautoriteit / Autorité de protection des données Drukpersstraat 35, 1000 Brussels, Belgium contact@apd-gba.be — www.dataprotectionauthority.be
9. Changes to this privacy policy
We may update this privacy policy when our operations or the law change. The date at the top shows when we last made a change. In the event of significant changes, we will notify you via the website or by email.