Last updated 26 October 2026
Privacy policy
How Fooditive B.V. uses personal data when you visit this website, send us a form or email us.
In short
We collect what you send us through a form or by email, and the technical data our hosting needs. We use it to answer you and never sell it.
- Google Analytics runs only if you click “Accept” in the cookie banner. You can change your choice any time under “Cookie settings”.
- No advertising cookies. Fonts and images come from our own website.
- One small setting in your browser remembers that you have seen the news pop-up.
- You can ask us to see, correct or delete your data at any time.
Who is responsible
The controller for the personal data described here is Fooditive B.V., Van Vollenhovenstraat 1C, 3016 BE Rotterdam, the Netherlands.
Chamber of Commerce (KvK) number: 72967013.
For privacy questions, email info@fooditivegroup.com with “Privacy” in the subject line.
What we collect
When you send a form
Our contact, sample, pilot and application forms ask for:
- the topic of your enquiry, your name and your email address;
- your company or institution and country, if you give them;
- your message, and the extra answers for your topic, such as a technology of interest, an outlet and deadline, or a link to your CV;
- on the sample form, also your company website, position, phone number (optional) and the products, markets and timing you have in mind;
- the boxes you tick to confirm the form.
Your browser sends the form to a small program on our hosting (a Cloudflare Pages Function). It checks the form and passes it to our email delivery provider (Resend, United States). Resend emails it to info@fooditivegroup.com. The program does not store or log what you send.
If the form cannot be sent, the page offers to open your own email program with your text filled in. Your own email provider then handles the message.
When you sign up for the newsletter
The careers page has a newsletter box. It asks only for your email address and a tick to confirm you want the newsletter. Sign-ups reach us by email, the same way as the forms. We will name any newsletter service here before we start using one.
When you email us
Your email address, your name, the content of your email and any attachments, such as a CV.
When you visit the website
Our hosting provider, Cloudflare, processes technical data to deliver the pages and protect them from attacks. This includes your IP address, browser type, the page requested and the time. If you accept analytics cookies, Google Analytics also measures your visit: the pages you view, when, your approximate location (country or city, not your exact address), device and browser. Google does not store your full IP address. Nothing is sent to Google before you accept, and Google signals and ad personalisation are switched off.
Fonts, images and scripts all come from our own domain. Links to LinkedIn and Instagram are plain links: those sites apply their own policies once you go there.
Our content editor (staff only)
Our staff edit the news and some page settings through an editor at /admin. They log in with their GitHub account (GitHub, Inc., United States). Their changes are saved in our GitHub repository under their GitHub name. Visitors never use this editor.
We do not ask for special categories of personal data, such as health data. Please do not send them to us.
Why, and on what lawful basis
| Purpose | Lawful basis (GDPR) |
|---|---|
| Answering your enquiry, sample or pilot request | Our legitimate interest in answering business enquiries (art. 6(1)(f)); steps before a contract at your request (art. 6(1)(b)) |
| Following up on licensing, sample, investor or press contacts | Our legitimate interest in building business relationships (art. 6(1)(f)) |
| Assessing a job or internship application | Steps before an employment contract at your request (art. 6(1)(b)) |
| Sending the newsletter you signed up for | Your consent (art. 6(1)(a)), which you can withdraw at any time |
| Counting visits with Google Analytics, if you accept analytics cookies | Your consent (art. 6(1)(a)), which you can withdraw at any time under “Cookie settings” at the bottom of every page |
| Delivering the website and protecting it from abuse | Our legitimate interest in a working, secure website (art. 6(1)(f)) |
| Letting our staff edit the website | Our legitimate interest in running our website (art. 6(1)(f)) |
| Keeping business and tax records | Legal obligation (art. 6(1)(c)) |
We do not sell your data. We do not use it for advertising, profiling or automated decisions.
Who processes data for us
These service providers process personal data on our instructions only:
- Cloudflare, Inc. (United States) hosts the website, runs the form program and protects the site from attacks.
- Resend (United States), our email delivery provider, delivers form submissions to our inbox.
- Google (Google Workspace) runs our business email and documents, where your messages arrive.
- Google Ireland Limited (Ireland), with Google LLC (United States), provides Google Analytics, only if you accept analytics cookies.
- GitHub, Inc. (United States) stores the website’s source and handles our staff’s editor login. It receives no visitor data.
We may share data with our advisers, such as lawyers or accountants, when needed. We disclose data to authorities only when the law requires it.
Transfers outside the EEA
Some of these providers are based in the United States, or use servers outside the European Economic Area.
For Cloudflare, Google and GitHub we rely on the EU–U.S. Data Privacy Framework or the European Commission’s standard contractual clauses, as set out in their data processing terms.
Resend is certified under the EU–U.S. Data Privacy Framework, including the UK Extension, and its Data Processing Addendum also includes the EU Standard Contractual Clauses (Commission Decision 2021/914).
How long we keep data
We keep personal data for as long as we need it for the purposes above, and for these periods:
| Data | How long |
|---|---|
| Enquiries that lead to no further contact | 2 years after our last message |
| Business contacts | While the relationship lasts, then 2 years |
| Job and internship applications | 4 weeks after the procedure ends; 1 year if you agree |
| Newsletter sign-ups | Until you unsubscribe |
| Copies kept by our email delivery provider | As set in that provider’s account settings |
| Visit statistics in Google Analytics (only with your consent) | At most 14 months, the Google Analytics data-retention setting |
| Request data processed by our hosting provider | As set in Cloudflare’s policies; we keep no visitor logs ourselves |
| Records we must keep for tax purposes | 7 years, as Dutch tax law requires |
Cookies and similar technologies
We use Google Analytics cookies only if you accept them in the cookie banner. We use no advertising cookies.
You choose when you first visit, with two equal buttons: “Accept” or “Refuse”. Change your choice any time with “Cookie settings” at the bottom of every page; if you refuse later, we remove the analytics cookies. The other items below are needed for the website to work and do not need consent.
| Name | Type | Who | Purpose | How long |
|---|---|---|---|---|
fooditive-consent | Local storage | Visitors | Remembers your choice in the cookie banner (accept or refuse) and when you made it. No personal data. Stays on your device. | 12 months, then we ask again |
_ga, _ga_XN23H0E8W5 | Cookies (Google Analytics) | Visitors who accept analytics | Distinguish visits so we can count pages viewed and returning visitors. Set only after you click “Accept”; removed when you refuse later. | Up to 2 years, as set by Google |
fooditive-news-popup-seen | Local storage | Visitors | Remembers that the news pop-up has been shown, so it does not open again. Holds the value “1”, no personal data. Stays on your device and is never sent to us. | Until you clear your browser’s site data |
__cf_bm, cf_clearance | Cookie (Cloudflare) | Visitors, only when needed | Strictly necessary security cookies. Cloudflare may set one if its bot protection is active or your browser must pass a security check. | Short; set by Cloudflare (about 30 minutes for __cf_bm) |
__Host-fooditive_editor_state | Cookie (HttpOnly, Secure) | Staff only | Protects the content editor’s GitHub login against forgery. Holds a random one-time value. | 10 minutes; deleted when the login completes |
CF_Authorization | Cookie (Cloudflare Access) | Staff only | Proves that a staff member has passed the login in front of the content editor. | 24 hours |
decap-cms-user and editor settings | Local storage and IndexedDB | Staff only | The content editor keeps the staff member’s login, display settings and unsaved drafts in their own browser. | Until the staff member logs out or clears site data |
You can delete these items at any time in your browser’s settings. The website keeps working without them.
Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- correct data that is wrong or incomplete;
- erase your data;
- restrict how we process it;
- receive your data in a common format, or have it sent to another organisation;
- object to processing based on our legitimate interest;
- withdraw your consent at any time, for example for the newsletter, or for analytics under “Cookie settings” at the bottom of every page.
Email info@fooditivegroup.com to use these rights. We may ask you to confirm who you are. We reply within one month.
You may also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or to the authority in your own EU country. We would welcome the chance to resolve your concern first.
Children, security and changes
Children
This website is for businesses and professionals. We do not knowingly collect data from children under 16. If a child has sent us data, email us and we will delete it.
Security
The website is served over HTTPS only, with strict security headers. The form program refuses posts from other websites. Only the staff who need it can read enquiries.
Changes to this policy
We will update this policy when the website or our providers change. The date at the top shows the current version.
Contact
Fooditive B.V., Van Vollenhovenstraat 1C, 3016 BE Rotterdam, the Netherlands. Email: info@fooditivegroup.com.
Questions about your data?
Email us with “Privacy” in the subject line. We reply within one month.