Last updated 8 October 2026. This notice explains what personal data this website handles, why, and what you can ask of us. It is written to meet the EU General Data Protection Regulation (in the Netherlands, the AVG).
Who is responsible
Nothing To Eat, Amsterdam, is the controller of the personal data described here. Legal name: XXX. KvK number: XXX. Address: XXX. Contact: contact@nothingtoeat.online.
What this site collects
Very little. The site has no forms, no accounts, no ordering, no newsletter, no analytics, no advertising and no tracking of any kind. Its fonts, pictures and the map are stored on the site itself, so showing a page sends no request to any other company.
When you open a page, the server that sends it records an ordinary access log: your IP address, the date and time, the page asked for, the browser’s description of itself and the answer given. We use these logs only to keep the site running and secure (to find faults and stop abuse). Our basis is our legitimate interest in a working, safe website (article 6(1)(f) GDPR).
Storage in your browser
The site keeps one small note in your browser that holds no information about you. It is explained on the Cookies page.
Who processes the data for us
The site runs on a server rented from our hosting provider, XXX (name and location of the hosting provider and its data centre), which stores the access logs on our behalf under a data processing agreement. We do not sell, share or pass your data to anyone else, and we do not transfer it outside the European Economic Area. XXX (confirm with the hosting contract).
How long we keep it
Access logs are deleted automatically after XXX days, unless a log is needed to investigate a specific security incident, in which case it is kept only until that is settled.
Your rights
You may ask us for access to the personal data we hold about you, to correct it, to erase it, to restrict its use, to object to its use, and to receive it in a portable form. Write to the contact address above; we answer within one month. Because the logs do not name anyone, we may ask for details (such as the date, time and IP address of your visit) to find the entries concerned.
Complaints
If you think we handle your data wrongly, please tell us first. You also have the right to complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens: autoriteitpersoonsgegevens.nl.
Changes to this notice
If what the site does changes, for example if it ever adds a form or ordering, this notice will change with it before that happens. The date at the top always shows the latest version.