Legal
Our privacy statement is in English - let us know if you need any help.
Thank you for taking the time to read our privacy statement. DIS values your privacy and is committed to protecting your personal data. This statement explains how we collect, use, and protect your personal data when you visit our website, use our services, or get in touch with us. We want to ensure transparency, so you know exactly what data we collect, why we need it, and how we handle it.
Last updated: January 2026
Company names: DIS DAILY CATERING B.V. (Chamber of Commerce or KvK number: 77103920), DIS B.V. (61657557) and DIS & Co. CATERING B.V. (96285141).
Contact person: Wouter van der Krol.
Email address: e-mail.
Hereinafter collectively referred to as "DIS".
We process your personal data to provide and manage our services for you and your company. This includes handling your requests, orders, organising full-service catering, and ensuring clear communication throughout the process. We also process data to improve our services, enhance the client experience, and ensure the smooth running of our website and ordering platform.
We try to limit our data processing as much as possible, so any information we request from you will be necessary to provide our services.
Please note that this privacy statement only pertains to our processing of personal data regarding website visitors, contact persons of clients and potential clients, and users of our ordering platform.
We process personal data of individuals, such as website visitors, contact persons of (potential) clients and users of our ordering platform.
With regard to visitors of our website, we may collect, store and process the following categories of personal data: personal data processed through cookies; and other personal information you have provided to us.
When you use the delivery-area checker on our website, we record the 4-digit postcode area you enter together with the result, so we can understand demand and plan our service area. We do not store the full postcode, your IP address, or any other personal data from this checker.
With regard to contact persons of our clients and of potential clients, including users of our ordering platform, we may collect, store and process the following categories of (personal) data: name of the contact person; e-mail address; telephone number; company name; general information about your company and the request or order, such as the delivery address (street name, postal code, and city), date, and the number of people; and any additional information you choose to provide in the request.
With regard to individuals for whom the orders are intended, we may collect, store and process the following categories of (personal) data: name; company which places their order; and dietary preferences.
With regard to newsletter subscribers, we may collect, store and process the following categories of personal data: name; and e-mail address.
Where possible, we collect the data directly from you. For rendering our services we may also collect your personal data through the use of cookies.
In the event that you are not willing to provide information we request, you may experience limited functionality of our website or platform and we may not be able to provide all our services to you or the company with which you are affiliated.
The personal data listed above are being processed under the following legal basis:
Your consent (which you may withdraw at any time), for storing and accessing cookies, which we use for the purposes listed under section 5 below.
Processing is necessary for the performance of an agreement between your company and DIS.
Processing is necessary for the purposes of our legitimate interests, including: enhancing your experience of our website, improving our services, responding to your enquiries and resolving disputes; performing an agreement between a client and DIS to which your company is a party; and direct marketing purposes, if we believe that you or your company could be a potential client of DIS.
We use cookies on our website, meaning that we store and access personal and anonymous information on your device while you are visiting our website or using our platform, such as the number of visitors, the duration of visits, which parts of the website and the platform are being accessed and which options are being used or clicked. We use these data to improve our website and platform and to make our services more user-friendly, meaning that using these data is necessary for the purposes of our legitimate interests. The data will only be used by authorised employees who perform research work with the goal of improving our services. In the event that you are not willing to provide information we request, you may experience limited functionality of our website.
We use the following types of cookies: necessary cookies, which are essential for the functioning and security of our website; analytic cookies, which we use to analyse the use of our website and the provenance of our visitors; and marketing cookies, which enable us to target you on other websites.
An overview of the cookies we use, including their purposes and retention times, can be found on our cookies page (eatdis.nl/cookies).
We will share your personal data with third parties as little as possible. However, in some cases, it is necessary to carry out legal obligations or to achieve processing purposes. This means that we may transfer your personal data to external partners involved in providing our services.
For the purposes of our business operations, we make use of the services of several processors. These processors include: CaterMonkey; Google Drive; Google Mail; Google Docs; and VTiger.
Parties we share your personal data with can be based in countries where the GDPR does not apply, meaning that less protective data protection laws may apply. We will ensure that if this is the case, the parties we share your data with will agree to contractual terms or other measures to protect your personal data.
Once your personal data has been transferred to a third party, that third party is responsible for processing your personal data. DIS is in no event liable for any unlawful processing of your personal data by third parties.
We take appropriate measures to secure your personal data. We do this in accordance with applicable legal requirements and guidelines. We do not use automated decision-making.
In addition to state-of-the-art technical security measures, we require all our employees who have access to personal data to agree to a confidentiality agreement.
Your personal data will be retained as long as necessary with regard to the purposes for which the data was collected, unless a longer retention period is required by law.
In the event that we do not have a legitimate interest in storing or processing any data relating to you, we will delete all such information immediately.
In respect of your personal data, you always have the right to request access, as well as to request rectification, erasure or restriction of processing. Furthermore, you may object to any of our processing and you have the right to data portability. You also have the right not to be subject to automated decision-making.
You can exercise these rights by submitting a (written) request via the contact details in this privacy statement. All requests will be processed in accordance with applicable data protection laws.
If you have any complaints about the processing of your personal data by DIS, we would appreciate it if you could let us know (see contact details). You also have the right to file a complaint with the supervisory authority, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). For more information, please visit www.autoriteitpersoonsgegevens.nl.
Through our referral programme, people who know DIS can put us in touch with businesses they believe would benefit from our catering. When someone submits a referral, we receive two sets of personal data: the contact details of the person making the referral, and the contact details of the business and contact person being referred.
Data we collect. From the referrer: name, email address or phone number, and optionally their company. About the referred contact: name, business name, and an email address or phone number.
Why we process this data. We use the referrer’s data to follow up on the referral, keep them informed, and inform them of any reward they have earned. We process this on the basis of their consent and the performance of the referral arrangement. We use the referred contact’s data to make contact once and explore whether a working relationship is a good fit. We do this on the basis of our legitimate interest in acquiring new business clients. We have weighed this interest against the privacy of the person concerned: the data is limited to business contact details, contact is made only once, and the recipient can decline at any point.
Where we obtained the data. We receive the referred contact’s details from a third party who introduced them to us, namely the person who submitted the referral. We will tell you this when we first make contact.
How long we keep it. If the referred business does not wish to be contacted, or no contact materialises, we delete their data promptly. If a conversation follows, the data is retained under the same terms as our other prospect and client data, as described elsewhere in this privacy statement.
Your rights. If you are the person who was referred, you have the right to object to this processing, to request access to your data, and to have it deleted. You can do so at any time via the contact details in this statement. We will stop processing your data on request unless we have a compelling legitimate ground to continue.
If you have any questions about the content of this statement or about your rights as a data subject, please contact us via e-mail.