Legal · GDPR
Privacy Policy
Version 1.0 · Last updated 19 April 2026
This privacy policy explains how BV Adrona, trading as BBQ Deals on Weels, processes the personal data of customers, prospects and visitors of bbqdealsonweels.com. We apply the General Data Protection Regulation (GDPR) and Belgian privacy legislation.
1. Data controller
The data controller is:
We have not appointed a Data Protection Officer (DPO). This is not a legal obligation for a company of our scale. For any privacy questions you can contact us directly using the details above.
2. Which data we collect
Depending on your interaction with us, we process the following categories of personal data:
- Quote and contact forms: name, email address, phone number, event date, location, number of guests, dietary requirements, free message.
- Menu brochure requests: name, email address, optionally event date.
- Order / contractual relationship: billing details (name, address, VAT number for business customers), payment details (account number for refunds), services delivered and date.
- Phone contacts: summary of the conversation (no recordings), possibly a return number.
- Website usage (only after cookie consent): anonymised IP address, pages visited, browser, device type, time spent. See section 8 for details.
We do not collect any special categories of personal data (health, religion, political opinion, etc.) other than dietary allergens you provide yourself for your event.
3. Purposes of processing
We process your data solely for:
- Preparing and delivering a quote, processing is necessary to handle your request.
- Performance of the catering contract, planning, confirmation, invoicing, follow-up.
- Customer relationship and service, answering questions, handling complaints, resolving any incidents.
- Legal obligations, accounting, taxation, FAVV reporting if required.
- Anonymised statistics, to improve how our website works (only with consent).
We do not use your data for profiling, automated decision-making or resale to third parties.
4. Legal basis
We process your data on the basis of one of the following legal grounds under Article 6 GDPR:
- Art. 6.1.b, performance of a contract: for quotes, orders, contracts and invoicing.
- Art. 6.1.c, legal obligation: for accounting retention periods and tax filings.
- Art. 6.1.a, consent: for analytics cookies (Google Analytics 4). You can withdraw this consent at any time via Manage cookies.
- Art. 6.1.f, legitimate interest: for securing our website and answering customer queries.
5. Retention periods
We do not keep your data longer than strictly necessary:
- Quotes and invoices: 7 years (statutory tax retention obligation).
- Customer data from completed events: 7 years after the last interaction (warranty + accounting).
- Prospect data (quote requested, no contract): maximum 1 year.
- Menu brochure requesters: maximum 6 months.
- Google Analytics data: 14 months, anonymised.
- Cookie consent: 6 months, after which we ask for consent again.
After these periods, data is permanently deleted or anonymised.
6. Recipients and processors
We share your data only with parties who need it for the purposes above, and always under a data processing agreement:
- Formspree LLC (USA), processes quote and contact form submissions once the online form is technically connected. Formspree privacy policy.
- Google Ireland Ltd (EU), Google Analytics 4 for anonymised website statistics (only after consent).
- Our hosting provider, for the operation of the website (servers within the EU).
- Bookkeeper and accountant, for statutory tax obligations.
- Belgian government bodies, only on legal request (FPS Finance, FAVV, etc.).
We never sell your data to third parties.
7. Transfers outside the European Economic Area
Some of our processors (Formspree, where active, and Google) are established in the United States. For these transfers we rely on:
- The EU-US Data Privacy Framework (DPF), where the processor is certified, and
- Standard Contractual Clauses (SCCs) approved by the European Commission as an additional safeguard.
You can request a copy of these safeguards.
8. Cookies and similar technologies
Our website places only necessary cookies by default. Other cookies (analytics, marketing) are placed only after your explicit consent via the cookie banner.
- Necessary, remembering cookie consent, session functionality. Retention: 6 months. No consent required.
- Analytics, Google Analytics 4 (`_ga`, `_gid`) for anonymised visitor statistics. Retention: up to 14 months. Consent required.
- Marketing, currently not active on this site.
You can change or withdraw your consent at any time via the button below. Cookies stored by your browser can always be removed via your browser settings.
Manage cookies
9. Your rights
Under the GDPR you have the following rights regarding your personal data:
- Right of access, knowing what data we have about you.
- Right to rectification, having incorrect data corrected.
- Right to erasure ("right to be forgotten"), having data deleted, subject to statutory retention periods.
- Right to restriction of processing.
- Right to data portability, receiving your data in a readable format or having it transferred to another data controller.
- Right to object to processing based on legitimate interest.
- Right to withdraw consent, for processing for which consent is the legal basis (e.g. analytics cookies).
- Right not to be subject to automated decision-making, we do not do this.
10. How to exercise your rights
Send an email to [email protected] or a letter to BBQ Deals on Weels (BV Adrona), Prinsenpad 63 bus 001, 2310 Rijkevorsel. Clearly indicate which right you wish to exercise.
To verify your identity, we may ask for a copy of your ID card, with the national register number and passport photo blacked out. We answer your request within 30 days. For complex requests this period may be extended by 2 months, in that case we will inform you within 30 days.
11. Right to lodge a complaint
If you believe we do not process your data correctly and we cannot resolve it together, you can always file a complaint with the Belgian supervisory authority:
We do appreciate it if you contact us directly first, in nine out of ten cases we resolve it together.
12. Security
We take appropriate technical and organisational measures to protect your data against unauthorised access, loss or misuse:
- Encrypted connections (HTTPS/TLS) for all web forms.
- Access to customer data limited to owners Robin and Nadine.
- Strong passwords and regular updates to software and systems.
- Data processing agreements with all our external partners.
- No sale, rental or exchange of data with third parties for commercial purposes.
In the event of a data breach that poses a risk to your rights or freedoms, we will notify you and the Data Protection Authority within 72 hours, as required by the GDPR.
13. Changes to this policy
We may update this privacy policy to reflect legal changes or new processing activities. The date of the most recent change is always shown at the top of this page. For significant changes we will request your consent again via the cookie banner and/or notify you by email if you are a customer.
Version 1.0, adopted on 19 April 2026 by the owner of BV Adrona.