Privacy and Cookie Policy

General

Hutten attaches great importance to protecting your privacy and the security of your personal data. We handle your personal data responsibly and will process it in accordance with the General Data Protection Regulation. We want to inform you about the way we handle and protect your personal data.

Applicability

This privacy statement applies to our companies in the Netherlands and Belgium and provides an overview of the collection and processing of personal data by our Dutch services, including that of (potential) visitors to the Hutten website and users of apps that Hutten offers to businesses and consumers (hereinafter: “guests”).

When you visit the Hutten website, order or use products or services (such as apps) from Hutten, or when you get in touch with Hutten, Hutten collects personal data from you. It does so in the manner and for the purposes described below.

Who is responsible for processing personal data?

Hutten is responsible for processing the personal data of its guests and employees. Hutten is based at Mountbattenweg 2, 5466 AX Veghel.

Why do we collect your data?

Hutten collects your personal data only to the extent necessary for a predetermined purpose, such as:

to provide you with the Hutten website
to offer you Hutten’s products, apps, and services
to facilitate your access to and stay at Hutten locations
to maintain an effective security policy at Hutten locations
to send you (where you have given your consent) our general email newsletter or to keep you informed of general promotions and offers from Hutten
to inform you (where you have given your consent) about specific Hutten products and services based on preferences known to Hutten
to comply with legal obligations that apply to Hutten
to handle your requests and enquiries
to invite you to participate in research relating to Hutten
in the event of a future acquisition of (part of) the shares in, or parts of, (part of) Hutten, to share personal data with the acquiring party (after the acquisition)

What personal data do we collect from you?

Hutten may process the following personal data from our guests, contractors, and clients:

Name, date of birth, gender, country of residence, and contact details (such as address, city, phone number, and email address)
Photos, camera footage, and audio
Date and location of your visit
Transaction data for bank transfers, including account number
Preferences and lifestyle characteristics you share with us, such as family composition, living situation, interests, or demographic characteristics
Device information
User preferences and information about previous purchases

How do we collect personal data from you?

You may share personal data with us in various ways, for example when you:

visit the Hutten website or get in touch with Hutten
directly or indirectly purchase products, apps, or services from Hutten
take part in promotions, campaigns, or competitions held by Hutten
visit a Hutten location
register for an event
apply for a job or internship

Why do we collect personal data from you?

When you provide such data, we will only use it for the purpose for which you provided it. We may also use such information for notification purposes, to resolve issues with services provided to you, to process orders and other matters you submit, to fulfil or carry out our obligations under any agreement with you, and to respond to questions or comments you raise.
When using apps, we may create marketing profiles of guests. The aim is to offer you better and more targeted deals, provide better service, and optimise our business operations.
When using apps, we may collect device information related to your interactions with us, such as geolocation, browser type and operating system, Internet Protocol (IP) address (a unique number that identifies your internet access), cookie information, pages viewed and visited (including those viewed before and after interacting with our websites), how long you visited our websites and other technology in a given session, and the date and time of access.
When using apps, we may collect user preferences such as food preferences, dietary restrictions and related information, purchasing preferences, sizes, and favourite Hutten locations. We may also track preferred times, such as when you receive services, when you make purchases through us, and when you interact with our websites and other technology. We may also collect preferences when you choose to share them with us, for example by participating in surveys or other interactions or communications with us.
When using apps, we may collect information about guests’ previous purchases and use this to improve our services, respond to guest requests, and offer guests a more personalised experience. We may use this information, for example, to ensure we offer the right products at the right time, and to understand ordering trends, which products are most popular, and the general state of our business. We also use information about previous purchases to provide our guests with more tailored offers for marketing purposes. When we use this information, it is generally aggregated and pseudonymised.
When using apps, we may process payment information, such as payment method (e.g. credit card or iDEAL) and payment details (such as account number, account holder, payment amount, time of transactions, applicable taxes, etc.) so that we can process payments and record them in our financial administration in order to comply with tax authority regulations. We are permitted to process this data because we need it to execute our contract with you and to comply with the rules of the Tax Authority.
Hutten does not make significant decisions based on automated decision-making. This means that when we create a profile, the way in which we do so does not have legal consequences with a significant impact on you.
Partner programmes: Hutten may sometimes partner with a third party to offer deals, promotions, or run a rewards programme. These partner programmes may be offered on our websites, apps, or at one of our physical locations. When you provide information in connection with these partner programmes, you may be providing it directly to one or more external affiliated companies, and its use is subject to that third party’s privacy statement. While the way we process your personal data is governed by this privacy statement, you can consult the privacy statement of the external affiliated companies for information on how they process your data.

Legal basis for processing personal data

The legal bases on which Hutten processes your personal data are:

the performance of a contract
your consent
a legal obligation
a legitimate interest

These bases are explained below.

The performance of a contract with you, such as participation in a loyalty programme or use of one of our apps, where we have entered into an agreement with you. In this context, we ask for your preferences and, for example, name, address, city, date of birth, and email address.
Your consent relates primarily to the commercial emails and post we send you. You can withdraw this consent at any time by clicking the ‘unsubscribe’ link in the email or by contacting privacy@hutten.eu.
The legal obligation covers exceptional cases where we are required to share data in order to comply with laws and regulations or in connection with a court order or other compulsory order from, for example, the police or public prosecutor.
In other cases, the legal basis for processing personal data lies in our legitimate interest. For example, we use our apps to carry out trend analyses within different groups of people and to identify needs within our target audience. We use this to improve our services to you. Relying on legitimate interest requires a balancing of Hutten’s legitimate interest against your interests, rights, and freedoms. In this context, it is relevant that we pseudonymise and aggregate wherever possible. In addition, Hutten continuously monitors its quality. Furthermore, only a limited number of employees have access to your personal data, and Hutten keeps your personal data well secured.

Newsletters and other commercial communications from Hutten

Hutten is happy to keep you informed about its products and services, for example via email, post, telephone, or other communication channels. You always have the option to opt out and stop receiving commercial communications from us by using one of the following options:

by clicking the ‘unsubscribe’ link at the bottom of emails sent by Hutten
by using the contact form on the Hutten website to indicate that you no longer wish to receive commercial communications from Hutten
by sending an email to privacy@hutten.eu with the subject line: unsubscribe from newsletter

Once you unsubscribe from commercial communications, we will remove you from the mailing list as soon as possible.

Camera surveillance

Hutten may use camera surveillance at its locations to ensure the safety of its guests and employees and to comply with its legal obligations.

Footage is automatically deleted after 14 days, unless an incident has occurred, in which case the retention period may be extended under strict conditions.

Only a limited number of employees have access to the footage and recordings, and this data is well secured.

Cookie policy

When you visit the Hutten website, Hutten uses so-called “cookies” to make your visit easier. Cookies are small text files stored on the hard drive or in the memory of your computer. Hutten uses cookies, among other things, to store the preferences you have set for a particular service or web page, so that you do not have to enter them again on your next visit to our site. Hutten currently uses the following cookies on its website, among others:

Facebook – to show you personalised messages and advertisements
Google Ad Services and Doubleclick – to share and display relevant products on Google platforms
Google Analytics – to collect and display detailed statistics about our website(s). The purpose of this service is to give us a clear overview of visitor flows, traffic sources, and page views. Based on this information, we can improve our website(s) and enhance your shopping experience on our website(s) and app(s)
Google Tag Manager – to measure events on our website and add tags to our website. Each tag represents a piece of code from other programmes that measure events on our website, such as the Facebook Pixel
Hubspot – to track your interactions with our website and email campaigns
LinkedIn – to show you targeted advertisements

The most up-to-date information about cookies can be found in the cookie declaration on the website.

How do we protect your personal data?

Hutten has implemented appropriate technical and organisational measures to protect your personal data against loss and unlawful processing. We protect your personal data in various ways, including secure storage.

Our information security policy is based on the ISO 27001 standards and includes provisions on the organisation of personal data security, such as assigning responsibilities to roles, physical security, access management, employee authorisations, system maintenance and development, incident response, monitoring, and periodic security testing (penetration testing) by an external party.

Do we share your personal data?

Our starting point is that we do not share your personal data with third parties.

In some cases it is necessary to pass your data on to third parties, for example in connection with the performance of a contract or the sending of marketing messages. This usually involves external service providers, such as marketing or IT and development companies. We enter into a data processing agreement with these parties that meets all requirements of the General Data Protection Regulation.

We may also share your personal data with third parties in order to comply with laws and regulations or in connection with legal proceedings, a court order, or other compulsory order.

Retention periods

Hutten does not retain your personal data for longer than is necessary for the purpose of the processing. For example:

Order information: When you place an order for our products, we retain that information for a minimum period of seven years after the end of the financial year in which you placed your order. This is in line with our legal obligation to keep records for tax purposes.
Correspondence and enquiries: When you submit a question or contact us via email or our contact form, we retain your data for 24 months after your query has been fully resolved.
Mailing list: We retain the information you used to sign up for our newsletter until you unsubscribe or we decide to discontinue our newsletter service, whichever comes first.

In all other circumstances, we will not retain your data for longer than necessary, taking into account the following:

The purposes and use of your data, now and in the future (such as whether it is necessary to continue retaining that data in order to continue fulfilling our obligations under an agreement with you, or to contact you in the future)
Whether we have a legal obligation to continue processing your information (such as any archiving obligations imposed by relevant laws or regulations)
Whether we have a legal basis to continue processing your information (such as your consent)
All relevant practices regarding how long information should be retained

Your privacy rights, complaints, and contact

You can at any time request Hutten to provide access to the personal data that Hutten processes about you. You have the right to have it corrected, supplemented, or deleted. Hutten will honour such requests to the extent permitted by law. A request for access and/or correction must be submitted in writing, accompanied by a copy of your proof of identity. This may be done via the secure KopieID app provided by the Dutch government.

Requests can preferably be submitted by email to privacy@hutten.eu.

If you do not have an email address or prefer not to submit your request by email, you can send a signed letter with a copy of your proof of identity to the postal address:
Hutten, attn. Legal Department, Mountbattenweg 2, 5466 AX Veghel.

For questions or comments about this privacy statement, please contact us at the above address. You can also use the contact form on the website or get in touch with our privacy team at privacy@hutten.eu.

If you are not satisfied with how your request has been handled, or if you have a complaint about the way Hutten processes your personal data, you can contact the supervisory authority, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). We would appreciate the opportunity to address your complaint first, so that we can resolve the issue.

Social media and other websites

Hutten cannot be held responsible for the privacy policy or practices of other websites or social media platforms, such as Facebook, Instagram, LinkedIn, or Twitter, even if:

you reached that external website by following links on our website
you reached our website by following a link from an external website

We recommend that you consult the privacy policy of every site or social media platform you visit, and contact the owner of the relevant website with any questions or comments.

Information about minors providing personal data

Hutten does not generally direct its websites, services, or products at children, and does not knowingly collect personal information from children under the age of thirteen (13). If Hutten becomes aware that a child under the age of thirteen (13) has posted personal information on Hutten’s websites without parental consent, Hutten will take all reasonable steps to remove such information from our databases and not use it for any purpose (except where necessary to protect the safety of the child or others, as required or permitted by law). If you become aware of personal information we have collected from children under the age of thirteen, please contact us at privacy@hutten.eu.

Minors under the age of eighteen may send us an email at privacy@hutten.eu to have the personal information they have provided to us removed, subject to applicable legislation.

To the extent that Hutten does develop apps aimed at children, Hutten ensures that such apps are built in such a way that no personal data from children is collected, as children deserve specific protection with regard to their personal data. Such specific protection must apply in particular to the use of children’s personal data for marketing purposes, the creation of personality or user profiles, and the collection of personal data relating to children when using services offered directly to a child.

Changes to this privacy statement

Hutten may update this privacy statement from time to time. The latest version of this privacy statement is always available at www.hutten.eu/privacy-en-cookiebeleid. We recommend that you check regularly whether you have the most recent version of the privacy statement, and in any case at the moment you provide personal data to Hutten.

This privacy statement was last updated on 4 March 2026.