Privacy policy
Restaurant Oost handles your data with care. This page explains which data we collect, why, how long we keep it and what your rights are. It applies to oosteten.nl and to reservations, takeaway and catering at Oost.
Who we are
Restaurant Oost is a general partnership under Dutch law (vennootschap onder firma, vof), based at Zijlweg 82, 2013 DL Haarlem, the Netherlands. Chamber of Commerce (KvK) 42064913, VAT NL869546223B01. We are responsible for processing your personal data. Questions about privacy? Email info@oosteten.nl or call +31 23 785 1562.
Which data we use and why
Reservations
Reservations go through the Zenchef booking widget (formerly Formitable). You enter your name, email address, phone number, date, time and party size, plus an optional note. We use this to record your reservation, send you a confirmation and contact you if anything changes. Only mention allergies if you want the kitchen to take them into account.
Legal basis: performance of a contract. Retention: your reservation details stay in our Zenchef account for as long as you are a guest with us, so we recognise you the next time you book. Want them deleted? Email info@oosteten.nl.
After your visit you may get one email from us asking how it was. We do this on the basis of our legitimate interest in improving our service. Don't want that email? Unsubscribe via the link at the bottom of it or let us know.
Takeaway and orders
Takeaway orders are placed by WhatsApp or phone. We then see your name, phone number and your order. We use these only to prepare your order and reach you if we need to. WhatsApp is a service of Meta Platforms Ireland; WhatsApp's own privacy policy also applies to your messages.
Legal basis: performance of a contract. Retention: we keep WhatsApp conversations on our business phone for as long as we need them for orders and questions. Want a conversation deleted? Let us know.
Catering
If you request a catering quote through the form on our website, we ask for your name, email address, phone number, the date, the number of guests and your wishes. The form runs on Webflow; we receive the request by email. We use the data to prepare a quote and stay in touch with you.
Legal basis: steps taken before entering into a contract. Retention: requests that do not lead to a booking are kept for up to 1 year; for confirmed bookings we keep the invoice details for 7 years (statutory tax retention period).
Visiting the website
The website is hosted by Webflow. On every visit the server records technical data such as your IP address, browser type and the page requested, to keep the site secure and available. Our own scripts load through the jsDelivr network, which sees your IP address when it serves them. Legal basis: legitimate interest (a working, secure website).
With your consent we use Google Analytics 4 to see how the site is used: which pages are visited, from which type of device and from which region. Without consent these cookies are not set. Google processes this data in Ireland and the United States; the transfer relies on the EU-US Data Privacy Framework. We also use Google Search Console, which shows how the site appears in Google search; it contains no visitor data about you.
Cookies
The site uses cookies and similar techniques. On your first visit you choose what you allow. You can change your choice at any time via Cookie settings at the bottom of every page.
Consent Pro cookie: remembers your cookie choice. Essential, 1 year.
_ga: Google Analytics, distinguishes visitors. Analytics, only after consent, 2 years.
_ga_6Y731MKYLH: Google Analytics, sessions and visits. Analytics, only after consent, 2 years.
Who we share data with
We never sell your data. We share it only with parties that help us deliver the service: Zenchef (reservations), Webflow (hosting and forms), Meta/WhatsApp (orders via WhatsApp), Google (statistics, only with consent), jsDelivr (loading scripts) and Consent Pro (cookie choice). We work with parties outside the EU only if the transfer is covered by the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. Beyond that, we share data only when the law requires it.
How long we keep data
No longer than needed for the purpose we received it for, unless the law prescribes a longer period. The periods per purpose are listed above.
Security
The website runs over a secure connection (https). Only people who need it for their work can access reservations, orders and requests.
Your rights
You may access your data, have it corrected or deleted, restrict its processing, object to it and have it transferred. You can withdraw consent at any time. Email info@oosteten.nl; we respond within a month. Not happy with how we handle your data? You can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.
Changes
We update this policy when our working methods or the law change. The date at the top shows when it was last updated.