Privacy Policy

1. Who is responsible

The controller for this website is Sterklight BV, Ikaroslaan 1, 1930 Zaventem, Belgium (enterprise number 0805.945.482, VAT BE 0805.945.482).

For anything about your personal data, write to privacy@sterklight.be. Our full company details are in the Legal notice.

2. What this notice covers, and what it does not

It covers visitors to sterkchef.com and people who send us a demo or contact request.

It does not cover the guest, order, staff or payment data that a restaurant processes inside SterkChef. For that data the restaurant is the controller and Sterklight acts as its processor under a data processing agreement (GDPR Article 28). The subprocessors we use are listed on the Subprocessors page.

3. What we collect, why, and on what legal basis

We collect only what is listed here. We do not buy data, and we do not build advertising or behavioural profiles.

• Demo and contact forms: your name, email address, restaurant or company name, country, covers per night, phone number (optional), your message, your language, the time of the request and, if you came from the ROI calculator, the figures you entered. Purpose: to answer you and arrange the demo. Legal basis: steps taken at your request before a contract (Article 6(1)(b)) and our legitimate interest in following up a business enquiry you sent us (Article 6(1)(f)).
• Emails you send us: the same data, purpose and legal bases as the forms.
• Technical connection data: like any web server, the server that delivers this site processes your IP address, the time and the page requested. Purpose: delivering the site and keeping it secure. Legal basis: legitimate interest (Article 6(1)(f)).
• Strictly necessary browser storage: your language choice, your cookie choice and a counter that limits form spam. Purpose: making the site work. Storage that is strictly necessary to provide what you asked for needs no consent; see the Cookie Policy.
• Analytics, only if you allow it: error monitoring (Sentry) and cookie-less page-view counting (Plausible). Legal basis: your consent (Article 6(1)(a)), which you can withdraw at any time without affecting what happened before.

4. Do you have to give us this data?

The fields marked as required on the forms are needed to answer you; without them we cannot reply. Everything else is optional. Nothing on this site requires you to create an account.

5. Who receives your data

Your request is read only by the people at Sterklight who handle sales and onboarding. Forms are delivered to us by email through a relay we operate on our own infrastructure, using Amazon Web Services SES in Frankfurt for email delivery. The site is hosted by Hetzner Online GmbH in the European Union. Sentry and Plausible receive data only if you consent.

We do not sell personal data and we do not share it for advertising. We may disclose it where the law or a competent authority requires it. The current list of processors is on the Subprocessors page.

6. Transfers outside the EEA

We keep website data inside the European Union. Where a provider processes data outside the European Economic Area, we rely on a European Commission adequacy decision or on the Standard Contractual Clauses (GDPR Articles 45 and 46) and on additional safeguards where needed. You can ask for a copy of the safeguards at privacy@sterklight.be.

7. How long we keep it

A demo or contact request is kept for as long as it takes to handle it and to follow up the business conversation it starts. After that it is deleted or anonymised, unless the law requires us to keep it or you have become a customer, in which case the contract documentation applies instead.

Your cookie choice stays in your browser until you change it or the policy changes. Error and page-view data held by Sentry and Plausible is kept for the period those services apply to our account, which you can ask us about.

8. Your rights

Under the GDPR you have the following rights. To use any of them, email privacy@sterklight.be. We answer within one month, which can be extended by two further months for complex requests, and we tell you why. It is free, and we may ask you to prove who you are before we act.

• Access: to know whether we process your data and to get a copy (Article 15).
• Rectification: to correct inaccurate or incomplete data (Article 16).
• Erasure: to have your data deleted where no ground to keep it remains (Article 17).
• Restriction: to have processing paused while a dispute is settled (Article 18).
• Portability: to receive the data you gave us in a common machine-readable format (Article 20).
• Objection: to object at any time to processing based on our legitimate interest (Article 21).
• Withdrawal of consent: to withdraw an analytics consent at any time, as easily as you gave it, through Cookie settings in the footer (Article 7(3)).

9. Automated decisions

We do not take decisions about you based solely on automated processing, and we do not profile you.

10. Complaints

If you think we are not handling your data correctly, please tell us first so we can put it right. You also have the right to lodge a complaint with a supervisory authority, in particular in the EU country where you live or work. In Belgium that is the Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Drukpersstraat 35, 1000 Brussels, contact@apd-gba.be, www.gegevensbeschermingsautoriteit.be.

11. Security

The site is served over an encrypted connection, hosted in the EU, and access to enquiries is limited to the people who need it. If a personal data breach is likely to put you at risk, we notify the authority and, where required, you.

12. Children

This website is aimed at restaurant professionals and is not directed at children. We do not knowingly collect data from anyone under 16.

13. Changes to this notice

When we change how we process data we update this page and the date at the bottom. If a change affects a choice you made, such as analytics consent, we ask you again.