Privacy Policy

This privacy and cookie statement was last revised on: 27 October 2022

Your privacy is very important to Mealplanner B.V. So we adhere to the General Data Protection Regulation (GDPR).

This means that we:

• Clearly set out our aims before we process your personal data, via this privacy and cookie statement;
• Store as little personal data as possible and only the data that is necessary for our purposes;
• Request explicit consent for the processing of your personal data, should consent be required;
• Take the necessary security measures to protect your personal data. We also impose these obligations on parties that process your personal data for us;
• Respect your rights, such as the right to inspect, correct or delete your personal that we process.

In this privacy and cookie statement we explain what we at Guac.com do with your information that we receive.

If you have any questions or want to know precisely what data we keep about you, then contact Guac.com via the contact details at the end of this statement.

Processing personal data

When you make use of our service on Guac.com we obtain various types of personal data from you. For each purpose we state what data we obtain from you, what the purpose and the basis of this is, and the retention period that applies.

Provision of services

We offer an online environment where you can compose your own Meal Plans. In order to deliver this service we use data that you provide in your profile. We do this in performance of our contract with you. We keep this data until the service has been delivered, unless we are required to keep the data longer in order to comply with our (fiscal) legal obligations. We have a duty to keep our accounting records for tax purposes for 7 years, and for 10 years in some cases.

Account

If you want to compose your own Meal Plans, you have to register first. In order to do so you provide your first name and surname, email address, your choice of user name and password (login details). In addition, while you are using the account we collect your IP address and a record of all your activity. We need your login details in order to be able to provide the account environment to you that you have requested (contract). We retain information about what you have done, and when, (in combination with your email address and IP address), so that proof exists of this. We retain this information for the duration of your account and for a maximum of three months once your account has ended. Via your account you can adjust your login details and your first name and surname if you wish to.

Profile

In order to compose your personal Meal Plans, you need to add information to your account about yourself, your preferences and goals. We use the following data for this:

• Goal (lose weight/healthy lifestyle/muscle building);
• Allergies;
• Eating pattern/diet (Paleo/Ketogenic/Vegetarian);
• Measurements (kg, g, cm);
• Gender;
• Date of birth;
• Activity level.

We process this (special) personal data because it is necessary for the provision of our services. Because without this data we would not be able to present any personalized Meal Plans. We only process this (special) personal data with your express prior consent and we retain this data until the end of our provision of services to you. You can always withdraw your consent by contacting us or by cancelling your account and/or by contacting us via the contact details at the end of this statement.

Subscription

You can take out a paid subscription for our website Guac.com, in which case we use your personal data to process the payment. For this we use your name, invoice address, email address and payment details. We need this for the contract that we enter into with you, for the provision of our subscription service. We retain this information until you cancel your subscription. You can cancel your subscription via the mail or email, via the contact details at the end of this statement. We retain certain customer information longer in connection with the statutory fiscal retention obligation. We have a duty to keep our accounting records for tax purposes for 7 years, and for 10 years in some cases.

Contact

Via our chat function you can ask us questions and make requests. You can also give us your feedback. In order to make this possible we use a feedback system and a customer service platform. For this we use your IP address, contact details and the information you fill in as the content of a message. We need this in order to respond to your request for contact and/or to process your feedback. We keep this information until we are sure that you are satisfied with our response, and then for a further three months. This way if there are any follow-up questions we have the information readily at hand. It also enables us to train our customer service personnel so that we can continue to improve.

Sending newsletters

We have a newsletter and you will only be added to the subscribers list with your consent. In the (weekly/monthly) newsletter you can read the latest news, tips and information about our products and services. We use your email address for this. We do this on the basis of your consent. We retain this information until you cancel your subscription. You can cancel your subscription for the newsletter at any time. Every newsletter has an 'unsubscribe' link.

Recruitment and selection of new personnel

You can apply to come and work with us. If you apply to work here we collect your name and address details, gender, date and country of birth, contact details, CV, the content of your application letter, salary indication (optional), your availability (optional) and any references supplied. We process this data in order to deal with your application, and - if you come and work here - in order to administer your employment contract.

NB: A social media and Google search may form part of the application procedure. This is necessary in order to ensure that our image is preserved when we take on new personnel. In order to do this we search for your name on Google, and for your profile on various diverse social media. Naturally this is to the extent that these profiles are public. We will not ask you to grant us access to any protected social media page or to create a connection with us. The results of this search will be discussed with you.

Besides a social media and Google search, an assessment may also form part of the application procedure. This is because for some functions it is necessary to ensure that applicants possess certain qualities which are important for the function in question. Should an assessment be necessary we will inform you prior to the assessment about the way we will handle your data for this purpose.

We retain the application details for a maximum of four weeks once the position has been filled. We retain this data so that we can still contact you, if the position should become vacant again during the trial period. If we are not able to offer you a position at present, but expect that a suitable position for you will become available in the near future, we may - with your consent - retain your application details for one more year. You can withdraw this consent at any time by sending us an email.

If you come to work for us we retain your application data in the personnel file. This file is retained for as long as it is needed.

Advertising

We would like to send you advertisements for special offers and new products or services. We do this: via email and/or advertisements and/or advertisements via Facebook, Google or other platforms.

You can object to receiving this advertising material at any time. Every publication includes an 'unsubscribe' link.

Disclosure of data to other businesses or organizations

It can happen that we provide your personal data to other businesses or organizations, because:

• We have engaged their services to process certain data;
• It is necessary in order to perform the contract with you;
• You have given us your consent for this;
• We have a justifiable interest in doing so;
• We are legally bound to do so (for example if called upon to do so by the police if crime is suspected).

The following third parties process your personal data:

• Our cookie service providers (see below);
• Our dietary consultants and suppliers;
• Our hosting party;
• Our IT service providers;
• Our payment service provider;
• Our feedback and communication platform.

Cookies

We make use of cookies on this website. A cookie is a small, simple file that is sent with pages of this website and is saved by your browser on the hard disk of your device. The information stored in it can be sent back to our servers on a subsequent visit. The table below provides a summary of the cookies that we use:

When you visit our website for the first time we display a message with an explanation about cookies. We then ask for your consent for the use of these cookies.

We have made agreements with other companies that place cookies, about the use of the cookies. However, we do not have complete control over what they do with the cookies. You should therefore read their privacy statements as well.

Enabling and blocking cookies

Via your browser it is possible to block the placing of cookies, but some of the options on our website will not function well in that case. You will find more information relating to enabling and blocking cookies in the instructions and/or via your browser's Help function.”

Social media buttons

We make use of social media buttons on our website. This means that, by clicking on these, you can be connected to the social media networks in question. This gives website visitors the option of sharing content with their own network. Social media buttons function using bits of code which come from the social media networks. We have no influence over these and we are not required to request consent for them. You can also opt to login via your social media profile. In that case we will receive information from your profile to enable you to open an account, so that you do not need to fill this in manually. We advise you to read the privacy statements of these websites before making use of them:

• Facebook (privacy statement);
• Twitter (privacy statement);
• Pinterest (privacy statement).

The information that social media networks collect is anonymized as far as possible. The information is transferred to and stored by Twitter, Facebook and Pinterest on servers in the United States. These parties affirm that they adhere to the Privacy Shield principles and are affiliated to the Privacy Shield-program of the American Department of Commerce. This means that a suitable level of protection is in place for the processing of any personal data.

Security

The security of personal data is extremely important to us. We ensure that your data with us is well protected. We continually adapt our security measures and pay careful attention to what could go wrong.

Changes to this privacy and cookie statement

If our website is revised, we revise the privacy and cookie statement as well. So always note the date above and check regularly to see if there are any new versions.

Your rights

If you have any questions or want to know what personal data we have about you, you can always contact us. See the contact details below.

You have the following rights:

• Right of inspection: you have the right to inspect your personal data that we process.
• Right of rectification: you have the right to correct or add to your personal data that we process, if it is incorrect or incomplete.
• Right to withdraw your consent: you can always easily withdraw your consent.
• Right of objection: you can object to the processing of your personal data.
• Right of removal: you can request us to delete your personal data.
• Right of transferability of data: if it is technically feasible, you have the right to have your personal data that we are processing transferred to a third party.
• Right to limit the processing: in some cases you can request the processing of your personal data (temporarily or otherwise) to be limited, which means that we process less of your data.

Upon making a request we may ask you to identify yourself. We ask for information in this case in order to be sure that you are the right person to whom the personal data relates. Depending on the information that we have from you, we may ask you to do this by enclosing a copy of a valid identity document. It is important here that you mask your Citizen Service Number (BSN) and passport photograph.

We will comply with your request within 30 days, in principle. However, this period may be extended for reasons relating to the specific rights of parties involved or the complexity of the request. If we need to extend this period we will inform you of this in good time.

Submitting a complaint

If you believe that we are not helping you correctly, then you have the right to submit a complaint to the privacy supervisor. For the Netherlands this is the Dutch Data Protection Authority.

Contact details

Mealplanner B.V.
Hazepad 15-A4
4825AV, Breda
Netherlands

Email: hello@guac.com