Privacy Policy

RestoCheck (restocheck.nl) is an ad-free platform that displays NVWA inspection results for restaurants in the Netherlands. RestoCheck is not a government body. We are an independent platform that makes public government data accessible.

Contact for privacy questions: info@restocheck.nl

Account data: When you create an account, we collect your name, email address and (hashed) password.

Usage logs: We collect server logs (IP address, browser, pages visited) for security and debugging purposes. These logs are retained for a maximum of 30 days.

Favourites: If you mark restaurants as favourites, we store this linked to your account.

Newsletter: If you subscribe to the newsletter, we store your email address and the date of your consent.

Contact form: When you send a message via the contact form, we receive your name, email address and message content.

RestoCheck uses the following external service providers (processors). We have data processing agreements with all parties where required.

For American service providers, data may be stored and processed outside the European Economic Area (EEA). This transfer is based on EU Standard Contractual Clauses (SCCs) as approved by the European Commission.

Restaurant images (logos and photos) are stored exclusively within the EU — on Bunny.net servers in Frankfurt, Germany.

RestoCheck does not use advertising trackers, social media pixels or analytics tools that share data with third parties. We do not sell data. We do not use third-party advertising networks.

Vercel Analytics, which we use for anonymous visitor statistics, is cookieless and does not track individual users or share data with third parties.

We use only strictly necessary cookies: a session cookie for authentication (when you are logged in), and preference cookies for your language and theme settings. No tracking cookies, no advertising cookies.

Because RestoCheck only places strictly necessary cookies, no cookie consent banner is required.

More information: our cookie policy.

Under the GDPR (General Data Protection Regulation) you have the following rights:

• Right of access: You can request what data we hold about you.
• Right to rectification: You can correct your name directly via your profile page.
• Right to erasure: You can delete your account yourself via the profile page. This anonymises your account and removes all personal data.
• Right to data portability: You can export your personal data directly via your profile page. You will receive it by email within a few minutes.
• Right to object: You can object to processing for marketing purposes. You can manage this via your notification preferences in your profile.

For requests or questions, contact us at info@restocheck.nl.

• Account data: Retained until the account is deleted by the user. Email address is retained for a maximum of 30 days after deletion for security purposes.
• Newsletter email addresses: Retained until unsubscription.
• Server logs: Maximum 30 days.
• NVWA data: Public data, no personal data, retained indefinitely.
• Restaurant images: Retained until deletion by the restaurant owner.

Passwords are stored as bcrypt hashes (never as plain text). All connections are encrypted via HTTPS. Access to the database is limited to the application server.

If you have a complaint about how we handle your personal data, you have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):

autoriteitpersoonsgegevens.nl

We always prefer to resolve any issue with you directly first. Feel free to contact us at info@restocheck.nl.

We may update this privacy policy. Material changes will be announced on the website. The date at the top of this page indicates when this version was last updated.