Privacy policy

This Privacy Policy describes how The Roots Barendrecht (we, our, us) collects, uses, and shares (hereinafter: processes) your personal data. 

We are the owners of the website for The Roots Barendrecht (hereinafter referred to as the Website). We are committed to protecting the privacy of our customers and online users such as website visitors and job applicants. For this reason, we consider the protection of your personal data of fundamental importance. In this Privacy Policy we describe how we deal with the personal data that we process via this Website managed by us and the products (the Products) and services (the Services) offered thereon. This Privacy Policy applies to your use of our Website, the Products and Services offered thereon and should be read together with our Cookie Policy Cookie Policy If you have any questions regarding this Privacy Policy or our Cookie Policy, please contact us at info@therootsbarendrecht.nl.

All personal data processed by us is in compliance with the European General Data Protection Regulation (Regulation (EU) 2016/679) (GDPR).

Controller

We are the controllers of the processed personal data within the meaning of article 4 (7) and article 24 of the GDPR. We are located at Havenhoofd 31, 2993 EK Barendrecht and are registered at the Dutch Chamber of Commerce with registration number 96317310.

The Personal Data we Process

We process personal data from customers and online users. This includes personal data that is collected from placing bookings through our booking platform, subscribing to our newsletter, responding to job vacancies and/or receiving information from us through either the form on our Website or by email with your request for information. 

In that context, we may collect your personal data such as your name, home address, telephone number, e-mail address, age, gender, nationality and payment information. If necessary for providing our Products or Services, we may request personal data in relation to your health, such as for providing access for disabled people or for accommodating your dietary requirements. We will only process such information if you will consent to this.

Furthermore, we analyse your website usage to improve functionalities of our Website and Products and Services. For this purpose, we use Google Analytics. For more information, we refer to the privacy policy of Google. When placing a booking through TableAgent, we will keep your personal data collected for analytics purposes.

Purposes and Processing Grounds

We process your personal data, for the following purposes and we have also indicated the relevant ground for processing: to fulfil our obligations to provide you with our Services and Products or other requests you may make (based on contract according to art. 6(1)(b) GDPR); to contact you to answer your questions, and provide requested information (based on consent, contract and legitimate interest according to art. 6(1)(a), (b) or (f) GDPR); to secure your booking information (based on contract according to art. 6(1)(b) GDPR); to secure our business goals (based on legitimate interest according to art. 6(1)(f) GDPR); for analysis of personal data (e.g. booking history, address and/or city, language) to provide personalised Products and Services (based on consent or legitimate interest according to art. 6(1)(a) or (f) GDPR). 

Retention

We shall process the personal data for a period as long as legally required or necessary and allowed for the purpose(s) for which it was obtained. Immediately after these periods we will destroy the personal data and/or anonymise it.

The criteria used to determine our retention periods include, but may not be limited to: the duration of our ongoing relationship with you and the Products and Services we offer you; whether or not we are subject to any legal obligation(s); and any other legal necessity (such as applicable limitation period(s), litigation, or internal or external investigations).

Furthermore, we may process the personal data for a longer period: when you apply with us for a job and we ask you if we can retain your data for another one (1) year period, in order to comply with statutory retention periods (such as those required by tax legislation), or in order to prove compliance with applicable statutory obligations (such as the GDPR or email marketing legislation).

If you request deletion of your personal data by contacting us, all of your personal data collected by us shall be deleted, unless we are obligated to retain such information, whether by law, to provide the Products and Services for which the information was processed, or for internal use.

Sharing Personal Data

We will only make personal data available to third parties that are involved in providing our Website and the execution of our Products and Services. These third parties process personal data according to our instructions and any such use shall be our full responsibility. We do not pass on your personal data to other third parties without your explicit permission, unless we are legally obliged to do so, or in case of a business transaction, such as (but not limited to) a transfer of shares, merger or consolidation with another entity or transfer of business assets.

We will not transfer your personal data outside of the European Economic Area. 

Your Rights

Under the GDPR, you have several rights with regard to the personal data we process from you. These rights are listed below.
The right to obtain confirmation as to whether or not we process your personal data. The right to request access, receive, transfer, rectify, erase or withdraw your consent for processing personal data in cases where our processing is based on consent. The right to (temporarily) object to our processing of your personal data.

If you wish to exercise one of the above rights, please contact us at info@therootsbarendrecht.nl.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time, so we recommend to check it each time you subit personal information to us. The date of the most recent update is Mei 8 2025.