We handle personal data carefully and explain below what we process and why.
Last updated: 26 September 2026
1. Who is responsible?
Comrat, trading as COMRAT NL – Catering & Events, is the controller of personal data processed through this website and in enquiries and assignments.
Address: Burgemeester van der Borchlaan 11-A, 3722 GZ Bilthoven
Chamber of Commerce: 53446739
Email: info@comrat.nl
2. What data do we process?
- name, email address, phone number and message;
- information needed for a quotation, assignment or event, such as date, location, number of guests and preferences;
- invoice and payment details;
- dietary preferences and allergy information that you provide voluntarily and that we need;
- limited technical and security data, such as IP address and server logs.
3. Purposes and legal bases
We process data to answer questions, prepare quotations, perform agreements, issue invoices and maintain records, secure our website and meet legal obligations. Depending on the purpose, the legal basis is steps toward or performance of an agreement, a legal obligation, or our legitimate interest in safe and effective service.
Allergy information may contain health data. We process it only when you voluntarily and explicitly provide it for a specific order or event. You may withdraw this consent, but without essential information we may be unable to carry out an assignment safely and appropriately.
4. Sharing with third parties
We do not sell personal data or use it for advertising profiles. Where necessary, supporting parties may process data, for example hosting, email, administration, payments or professional advisers. Where required, we conclude agreements with processors on security and processing.
5. Transfers outside the EEA
If a service provider processes data outside the European Economic Area, we use a valid transfer mechanism and appropriate safeguards, such as an adequacy decision or standard contractual clauses.
6. Retention periods
- enquiries without an assignment: up to 12 months;
- quotation and assignment correspondence: generally up to 2 years after completion;
- invoices and tax records: 7 years;
- allergy and dietary data: deleted no later than 30 days after the event, unless an incident, dispute or legal obligation requires longer retention;
- security logs: normally up to 90 days, unless an incident investigation requires longer retention.
7. Cookies and external services
More information is in our Cookie statement. Only with your consent through the cookie notice do we use Google Analytics to measure site visits; we do not use Meta Pixel or similar advertising tracking. Fonts are served from our own server.
8. Your rights
You may request access, correction, deletion, restriction, portability or object to processing. Where processing is based on consent, you may withdraw it. Send your request to info@comrat.nl. We may ask for reasonable proof of identity and generally respond within one month.
You can also lodge a complaint with the Dutch Data Protection Authority.
9. Security and decision-making
We take appropriate technical and organisational measures. We do not use solely automated decision-making with legal or similarly significant effects.