Privacy

Who is responsible

Every club that sets up a dinner decides itself what data it asks for and what it uses it for: the club is the controller for its guests' orders. nealvdv makes and hosts Eetfestijn and processes that data on the club's behalf, only to make the dinner work. For the website itself (these pages, nealvdv's admin) nealvdv is responsible.

What we keep from guests

Your name (as you fill it in, e.g. The Peeters family), what you order, your sitting, the total and the structured communication. If you fill them in yourself, also an e-mail address or mobile number and a note (e.g. an allergy). An allergy is health data: only fill in what the kitchen really needs to know.

The organisers of that one dinner see your order; other clubs don't. Whether you have paid, the organisers mark themselves in their overview.

What we keep from organisers

What you fill in when setting up: your club's name, the dinner, date and hall, menu, sittings, the account holder and account number, and a contact for your guests. Of your secret organiser link we keep only an irreversible fingerprint (a hash), not the link itself. If you ask for a paid plan, we keep your e-mail address for the invoice.

Payments

Eetfestijn never touches the money and sees no guests' bank details. The QR code is made from the club's account number, the amount and the communication. When an organiser pastes a bank statement, it's read only to find communications; the statement itself isn't kept.

How long

Sixty days after the date of the dinner we wipe names, contact details and notes from all orders; the numbers and amounts stay, so the club can close its accounts. Thirteen months after the dinner we delete the whole dinner. Organisers can also delete their dinner themselves straight away, under Settings.

What there isn't

No account, no ads, no tracking and no analytics. The public pages set no cookies. The fonts are on our own server. Your choice of light or dark and your reading comfort settings are in your browser's local storage and don't leave your device.

Hosting

The website runs on Vercel and the data is in a Postgres database at Neon, both processors working for us, in a data centre in the European Union (Frankfurt). Like any web server, Vercel sees technical data such as your IP address to be able to send the page, and keeps it briefly in logs to keep the site safe. To limit abuse we keep only an unrecognisable hash of your IP address, for a few days. Transfers outside Europe happen only with the safeguards the GDPR requires.

Your rights

You can see your data, have it corrected or deleted, or object. As a guest, best ask the organisers of your dinner first: they can change or cancel your order. If that doesn't work, or it's about the website itself, mail contact@nealvdv.be. We answer within a month. Not satisfied? You can complain to the Belgian Data Protection Authority (dataprotectionauthority.be).

Questions

Eetfestijn is made by nealvdv. Questions about privacy: contact@nealvdv.be.