FineBites (Stefan Wagemans) is the data controller for the personal data collected via finebites.eu.
| Business address | Het Wielsem 12 E, 5231 BW 's-Hertogenbosch, The Netherlands |
| contact@finebites.eu | |
| Chamber of Commerce (KvK) no. | 91527163 |
| VAT identification number | NL004894707B66 |
We are a sole proprietorship in the start-up phase; no separate data protection officer has been appointed. Questions about privacy can be addressed directly to Stefan via the email address above.
We only collect data that you actively enter on the website yourself, plus one limited technical data point that is recorded automatically:
| Function on the website | Data collected |
|---|---|
| Pre-order / reservation | First name or full name, email address, desired number of bags per flavor, IP address |
| Waitlist sign-up (“keep me updated”) | Name (optional), email address, IP address |
The IP address is recorded solely to prevent abuse, spam and duplicate registrations, and is not used for profiling, tracking or marketing purposes. No payment data is collected: FineBites operates in the pre-order phase with payment on delivery, and no credit card, iDEAL or other payment data is processed via the website.
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Processing your pre-order/reservation and keeping you informed about it | Performance of (preparatory steps for) a contract – Art. 6(1)(b) |
| Keeping you updated via the waitlist once you have signed up for it | Consent – Art. 6(1)(a) |
| Preventing spam, abuse and duplicate sign-ups (IP address) | Legitimate interest – Art. 6(1)(f) |
| Complying with statutory (tax) retention obligations once an actual purchase is made | Legal obligation – Art. 6(1)(c) |
Your data is never sold to third parties and is not used for advertising purposes unless you have given separate, explicit consent for this.
4.1 Reservations: we retain your reservation data until your order has been completed (delivered) or withdrawn, and in any case no longer than 24 months after your last contact with us, unless you request deletion earlier. Once a reservation turns into an actual, invoiced sale, the statutory tax retention period of 7 years applies to the resulting administrative/tax records.
4.2 Waitlist (opt-in): we retain your data until you unsubscribe, or until 24 months have passed without any relevant activity or contact, after which we delete or anonymize your data.
4.3 You may request deletion at any earlier time, see article 9.
We process your data ourselves in principle. For the website to function and for sending email, we use the following parties, which act solely as processors and do not use your data for their own purposes:
We do not share your data with social media platforms (such as Meta/Instagram, TikTok or YouTube) for advertising purposes. See article 7 for the current status of any tracking technologies.
Data is only provided to other third parties where we are legally obliged to do so, for example at the request of a competent authority.
6.1 Our website loads fonts (Fraunces and DM Sans) from Google Fonts' servers. In doing so, your IP address is transferred to Google LLC, based in the United States. Google is certified under the EU-US Data Privacy Framework, which aims to provide an adequate level of protection. We are working on serving this font request locally (without an external connection) in the future to avoid this transfer entirely.
6.2 As of July 19, 2026 we use Google Analytics 4, TikTok Pixel and Meta Pixel, only after you have given consent via the cookie banner (see article 7). This involves a transfer of data to Google LLC (United States, certified under the EU-US Data Privacy Framework), TikTok Technology Limited/TikTok Inc. and Meta Platforms Ireland Ltd./Meta Platforms, Inc. (also certified under the EU-US Data Privacy Framework) respectively.
7.1 What are cookies: cookies are small text files that a website can place on your device. By "similar technologies" we mean, among other things, local storage: information a website can store in your browser that is not technically a cookie, but is treated similarly under the Dutch Telecommunications Act and the GDPR.
7.2 What we actually use right now:
| Name | Type | Purpose | Retention period | Consent required? |
|---|---|---|---|---|
fb_fm_count |
Local storage (functional) | Locally remembers, in your browser, a counter value for displaying the founding member promotion. Contains no personal data and is not sent to our server. | Until you clear your browser data | No – strictly functional/technically necessary |
| Google Fonts font request | External server connection (not a cookie) | Correctly displaying the FineBites typeface | N/A (no storage on your device) | No, but see 6.1 for the note on IP transfer |
_ga / _ga_* |
Analytics cookie (Google Analytics 4) | Distinguishes unique visitors and sessions, so we can see in aggregate how the website is used. | Up to 2 years | Yes – only placed once you choose this in the cookie banner |
_ttp |
Marketing cookie (TikTok Pixel) | Measures which TikTok ad or post led to a visit/sign-up. | Up to 13 months | Yes – only placed once you choose this in the cookie banner |
_fbp |
Marketing cookie (Meta Pixel) | Measures which Instagram/Facebook post led to a visit/sign-up. | Up to 90 days | Yes – only placed once you choose this in the cookie banner |
The _ga cookies are therefore only placed if you consent to this via the cookie banner (see article 7.3 and 7.4). As long as you do not give consent, we do not set any analytical, tracking or advertising cookies.
7.3 Consent for analytics and marketing (opt-in): as of July 19, 2026, a cookie banner is in place on the website. It asks for your consent in advance, specifically and per category (opt-in), before the relevant cookies are placed. Google Analytics 4 is only loaded once you give consent for the "Analytics" category; TikTok Pixel and Meta Pixel only once you give consent for the "Marketing" category.
7.4 Managing cookie preferences: every page has a "Cookie settings" link in the footer. You can use it at any time to view, change or withdraw your consent per category (Analytics/Marketing), just as easily as giving it. Your choice is remembered locally in your browser (local storage). If you also wish to delete all data locally stored by your browser for our website, you can do so via your browser settings (usually under "Privacy" or "Site settings").
We take appropriate technical and organizational measures to protect your personal data against loss or unlawful processing, including the use of a secure (HTTPS) connection, restricted access to the website administration, and up-to-date security plugins. Should a data breach nevertheless occur that poses a risk to your rights and freedoms, we will report this within the statutory time limits to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) and, if required, to you.
Under the GDPR you have the following rights regarding your personal data:
You can submit a request via contact@finebites.eu. We respond within one month of receiving your request. To verify your identity we may ask for additional information.
If you are not satisfied with how we handle your data, you have the right to file a complaint with the Dutch supervisory authority:
Autoriteit Persoonsgegevens (Dutch Data Protection Authority)
www.autoriteitpersoonsgegevens.nl
Our website and products are not specifically aimed at collecting data from persons under the age of 16. If you suspect that we have collected data from a minor without parental or guardian consent, please contact us so that we can delete this data.
We may amend this privacy policy from time to time, for example when we add new functionality (such as analytics or a webshop integration). The date at the top of this page indicates when the policy was last changed. In the event of significant changes, we will, where relevant, also actively bring this to your attention.
FineBites (Stefan Wagemans)
Het Wielsem 12 E, 5231 BW 's-Hertogenbosch, The Netherlands
Email: contact@finebites.eu
KvK: 91527163 · VAT: NL004894707B66