Privacy and cookie policy
Last updated: October 2026
1. Data controller
I&J Concept's and Supplies V.O.F. (Tinajero's Venezuelan Cuisine), Generaal Barberstraat 127, 5025 XB Tilburg, Netherlands · KvK 58498680. For any questions about your data: tinajeroscatering@gmail.com.
We process your personal data in accordance with the General Data Protection Regulation (GDPR; in Dutch, AVG).
2. What data we process
- Contact and delivery details: name, email, phone number, address.
- Order details: products, amounts, delivery method and date, any notes you leave us.
- Payment details: payment status and method used. Your card or account details are processed by myPOS; we do not see or store them.
- Customer account (if you register): email, password (stored encrypted), name, saved addresses, favourites and order history.
- Business customers: company name, KvK number, BTW-id, contact person and billing details.
- Age: if you buy alcoholic drinks, we record that you confirmed you are 18 or over.
- Messages: what you write to us by email, WhatsApp or the website form.
3. What we use it for and on what legal basis
| Purpose | Legal basis |
|---|---|
| Preparing, delivering and charging for your order; helping you | Performance of the contract |
| Invoicing and accounting | Legal obligation (tax) |
| Managing your customer account | Performance of the contract |
| Checking age when selling alcohol | Legal obligation |
| Emailing you offers for products similar to those you have already bought | Legitimate interest (you can unsubscribe in every email) |
| Newsletter for people who are not yet customers | Consent |
| Website security and fraud prevention | Legitimate interest |
We do not sell your data to anyone and we do not make automated decisions about you.
4. Who we share it with
Only with the providers we need in order to operate, with whom we have data processing agreements:
- Supabase: database and customer accounts.
- Vercel: website hosting.
- myPOS: payment processing.
- PostNL: delivery of shipments (name, address, phone number and email).
- Google (Gmail): email.
- WhatsApp (Meta): only if you message us on WhatsApp.
- Email tool: if we send you offers or newsletters.
- Our accountant: for bookkeeping.
Some of these providers may process data outside the European Economic Area (for example, in the United States). In that case they do so with the safeguards provided for by law, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
5. How long we keep it
- Orders and invoices: 7 years, as required by tax law.
- Customer account: for as long as it is active; if you delete it, we erase the data we are not required to keep.
- Email offers list: until you unsubscribe.
- Messages and enquiries: up to 2 years after the last contact.
6. Your rights
You can ask us at any time to:
- see what data we hold about you;
- correct or delete it;
- restrict its use or object to it (for example, to email offers);
- receive it in a file so you can take it to another provider;
- withdraw your consent, if you gave it.
Write to us at tinajeroscatering@gmail.com. We reply within one month. If you disagree with how we handle your data, you can lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
7. Security
The website uses an encrypted connection (https). Access to customer data is limited to the people at Tinajero's who need it for their work.
8. Cookies
Our website only uses strictly necessary cookies and storage, to:
- keep you logged in;
- remember your shopping basket;
- protect the website and the checkout process.
We do not use advertising or tracking cookies, which is why we don't ask for your permission for cookies. If we add analytics or advertising tools in the future, we will ask for your consent before activating them and update this page.
At checkout, myPOS may use its own necessary cookies to process your payment securely.
9. Minors
Our website is not aimed at children under 16. Alcoholic drinks are only sold to people aged 18 or over.
10. Changes
We may update this policy. The version in force is always the one published on this page, with its update date.