This is the Privacy Policy of:

• Surya B.V. (Chamber of Commerce: 50455567) (trade name Surya)
• Surya Restaurant (Chamber of Commerce: 32091776) (trade name Surya)
• Surya Janskerkhof B.V. (Chamber of Commerce: 72669063) (trade name Surya)
• Franchisee Surya Bodegraven B.V. (Chamber of Commerce: 73931969) (trade name Surya)

This privacy policy applies to our guests, website visitors, suppliers and applicants.

Surya values your privacy. Personal data is processed in accordance with the General Data Protection Regulation.

The personal data we process

Depending on the situation, we process different personal data from you, including:

When you make a reservation at one of our restaurants              

You can make a reservation with us either online (think of Google and our reservation system Formitable), by e-mail or by telephone. As part of the reservation process, we collect your name, email address, and telephone number. We will also record any special dietary requirements, allergies, or other comments that you may have. In the event that you require a down payment, we will process your payment and billing information.

When you order take-away or delivery via our online Sitedish shop

Sitedish is a third party we work with regarding online take-away and delivery orders from our website. Data such as your first and last name, home address, e-mail address and telephone number are processed. It is also possible that dietary requirements are processed for your order. You can also sign up for the newsletter, which you can withdraw from at any time by clicking on the link at the bottom of each newsletter. 

When you order take-away or delivery via Ubereats or Thuisbezorgd.nl    

 When ordering for take-away or delivery our the third parties Ubereats or Thuisbezorgd, data such as your first and last name, home address, e-mail address and telephone number are processed. It is also possible that dietary requirements are processed for your order. 

When you sign up for our newsletter                      

When making a reservation with our reservation system Formidable, you can also sign up for our newsletter. In this case, we will register your first name, last name, and email address. You can unsubscribe from the newsletter at any time by clicking on the link at the bottom of each newsletter.

When you visit our restaurants   

 If we agree with you that you will not pay your bill when you leave our restaurant, but at a later date, we will register your data in order to send you an invoice. This method of payment is only available if we have agreed to it with you in advance. In this case, we will collect the following personal data from you: first name, last name, e-mail address, telephone number, address/postal code, and other payment and billing information.

Surya uses cameras to ensure the safety of its employees and visitors, as well as to prevent the theft of its property. At our restaurants, you will be able to identify these cameras as such.

When you are our supplier or when you place an order in our webshop    

We can also process personal data from our suppliers. The same applies if you place an order in our webshop. In both cases, we process, among other things, the following data: first name, last name, e-mail address, telephone number, address/postal code, place of residence/business and payment and billing information.

When you apply for a job with us  

 If you apply for a job at Surya, your first name, last name, address/postal code, place of residence/establishment, telephone number, e-mail address and curriculum vitae (CV) are collected, among other things.

When you visit our website 

Our website uses cookies, which store technical information. Cookies are small information files that a website leaves on your device that track your activities within our website. It concerns, for example:

• the visitor’s IP address;
• the date and time of the visit;
• the URL of the referring site (the site the visitor came from);
• the pages visited on our website;
• information about the browser used (type and version, operating system, etc.).

We use four types of cookies, which we describe in this section.

• Essential – cookies that are essential to provide you with services you have requested. If you set your browser to block these cookies, then some basic functions and services will not work for you. In particular, we won’t be able to save your preferences about cookies.
• Performance – cookies which measure how often you visit our sites and how you use them. We use this information to get a better sense of how users engage with our content and to improve our site, so that users have a better experience. For example, we collect information about which of our pages are most frequently visited, and by which types of users.
• Functionality – cookies that are used to recognize you and remember your preferences or settings when you return to our site, so that we can provide you with a more personalized experience. For example, the social sharing widget embedded on certain pages of our website enables visitors to easily share content with networking and sharing platforms, if they wish.
• Advertising – cookies that are used to collect information about your visit to our site, the content you have viewed, the links you have followed and information about your browser, device and your IP address.

The length of time a cookie will stay on your computer or mobile device depends on whether it is a “persistent” or “session” cookie. Session cookies will only stay on your device until you stop browsing. Persistent cookies stay on your computer or mobile device until they expire or are deleted.

Social media 

Surya uses social media for marketing purposes. Our website includes buttons and/or links to promote or share on social (media) networks or third-party websites, such as Instagram, LinkedIn or Facebook. Surya does not monitor and is not responsible for the processing of your personal data by and through such third parties. The use of these social media is at your own risk. Before using the services of third parties, it is advisable to read the privacy statement of these third parties.

Purpose of processing personal data

Your personal data may be processed for the following purposes:

• To properly execute the agreement we have with you;
• To manage our internal administration;
• Processing orders and purchases of our products and services;
• To be able to contact you in the context of your reservation, order or questions; handling payments;handling disputes;
• To inform you about our services, products, promotions and other activities
• Recruitment and selection;
• To improve our services;
• For the purpose of conducting data analysis and customer satisfaction surveys;
• To comply with our legal (fiscal) administration obligations.

Basis for processing personal data

Surya only processes personal data to the extent permitted. For example, Surya only processes your personal data when:

• you have given explicit permission for this (you can always withdraw permission);
• this is necessary to perform the agreement concluded with you;
• this is necessary to comply with a legal obligation;
• this is necessary for the purposes of our legitimate interests.

Retention period

Your personal data will not be kept longer than is necessary for the purpose for which Surya collects or processes the data, unless the longer storage of your data is necessary to comply with a statutory retention obligation of Surya.

If you have registered for our newsletter, we will store the data we need to send it until you unsubscribe from our newsletter.

Recipients of your data

Your personal data may be provided by us to the following categories of recipients:

• Those charged with or necessarily involved in the performance of the agreement;
• Those charged with or necessarily involved in communicating with you;
• Others, if you have given your unambiguous consent;
• Others, if the data processing is necessary for the fulfillment of a legal obligation by Surya;
• Others, if the data is (exclusively) processed for statistical or historical purposes.

   

We may provide your personal data to the following parties, among others:

– Google Inc., in connection with the use of Google Analytics, a web analytics service;

– Formitable B.V., in connection with the use of the reservation module of Formitable, for sending emails to our guests or when guests purchase a gift card.

– Telefoonaanname B.V., in connection with making telephone reservations.

– SiteDish.nl B.V., in connection with ordering takeaway or delivery orders via our own website. 

– UberEats and Thuisbezorgd.nl., in connection with ordering takeaway or delivery orders. 

A processing agreement is concluded with the third party that processes your personal data on behalf of and on behalf of Surya, as a result of which that third party is also obliged to comply with privacy legislation.

The third parties engaged by Surya, who offer services as controllers, are responsible for compliance with privacy legislation for the (further) processing of your personal data.

Transfer to other countries

Your personal data will not be transferred to countries outside the EU or EEA. An exception to this applies to the above-mentioned recipient Google Inc. Google Inc. has signed up to the EU-US Privacy Shield Framework (www.privacyshield.gov/EU-US-Framework), which guarantees your privacy.

Your rights

You can object free of charge to the use of your personal data for direct marketing purposes, without having to give a reason, by sending an e-mail to info@suryarestaurant.nl. Surya will terminate the use at the first request.

You also have the right to have your personal data:

• to correct;
• to view;
• to delete, and;
• to be transferred.

You can also limit the processing of your personal data and you have the right not to be subject to automated decision-making.

If you wish to make use of the aforementioned rights, you can send an e-mail to info@suryarestaurant.nl. Surya will inform you by email within four weeks to what extent it can comply with the relevant request. Correction will take place if the personal data are factually incorrect, incomplete or irrelevant for the purpose for which they are processed or have otherwise been processed in violation of the privacy regulations. Your rights may also be limited where this is necessary to ensure your protection, the rights or freedoms of others, or the collection of civil claims.

Complaints

You have the right to submit a complaint about the processing of your personal data by us to the Dutch Data Protection Authority, if your complaint has not been or will not be handled satisfactorily by us.

Security of personal data

Surya has taken appropriate technical and organizational measures in accordance with the state of the art to prevent loss of data or unlawful processing of your personal data.

Change privacy statement

Changes may be made to this privacy statement in the future. The last update to this privacy statement was made in January 2023.

Contact details

Our website provides contact information for each Surya location, or you may contact us by email at info@suryarestaurant.nl.

If you have any questions regarding our privacy policy, please do not hesitate to contact us.