Doña Mala
This page explains what personal data this website collects, why, and what say you have over it. It's written to be read by a visitor, not a lawyer — if anything is unclear, the contact details at the end are the fastest way to ask.
In short
- We collect only two things: anonymised website analytics, and your email address if you sign up for our newsletter.
- We never sell your data, and we don't share it with anyone else.
- Because we operate in Belgium, you're protected by the GDPR — you can see, correct, or delete your data at any time, and unsubscribe from emails with one click.
1. Who we are
The data controller responsible for this website is:
Burp BV
Zwagershullestraat 28, 9881 Aalter, Belgium
Enterprise number (BTW/TVA): BE 1024.877.848
Email: privacy@burp-foods.be
We haven't appointed a formal Data Protection Officer, as it isn't required at our size — the email above reaches the person responsible for privacy questions.
2. What personal data we collect
We keep this deliberately narrow. We do not run an online store or checkout on this site, so we don't collect payment or shipping details here. The only personal data we collect is:
Website analytics
When you browse the site, we automatically collect technical data such as your approximate location (city/country level, derived from IP address), device and browser type, pages viewed, and how you arrived at the site. This is collected through cookies and similar technologies — see section 4 for details on how you can control this.
Newsletter sign-up
If you subscribe to our newsletter, we collect your email address and, if you provide it, your first name. We don't ask for anything beyond what's needed to send you the newsletter.
We do not knowingly collect any special category data (health, religion, political views, etc.) through this website.
3. Why we use it, and on what legal basis
| Data | Purpose | Legal basis (GDPR Art. 6) |
|---|---|---|
| Analytics / cookie data | Understand how the site is used, so we can improve it | Your consent (Art. 6(1)(a)), given via the cookie banner |
| Email address (newsletter) | Send you news, offers and updates about Doña Mala | Your consent (Art. 6(1)(a)), given when you subscribe |
Because both uses rely on your consent, you can withdraw it at any time — through the cookie settings for analytics, or the unsubscribe link for the newsletter — without affecting anything you did before withdrawing.
4. Cookies
Cookies are small text files stored on your device. We use two categories:
Strictly necessary cookies
These keep the site working correctly (for example, remembering your cookie preference itself). They don't require consent under Belgian/EU ePrivacy rules, and can't be switched off.
Analytics cookies
These help us understand traffic and usage patterns. They are only set after you accept them in our cookie banner, in line with Belgian ePrivacy rules on non-essential cookies.
You can withdraw or change your cookie consent at any time by reopening the cookie settings , or by blocking or deleting cookies in your browser settings. Blocking necessary cookies may affect how the site works.
5. How long we keep it
- General retention: we keep personal data for up to 12 months from when it was collected, after which it's deleted or fully anonymised.
- Deletion on request: if you ask us to delete your data — for example, by unsubscribing from the newsletter or submitting an erasure request — we delete it within 30 days.
We only keep data for as long as it serves the purpose it was collected for, unless we're required to keep it longer by law.
6. Who we share it with
We don't share, sell, or rent your personal data to anyone. The analytics and newsletter data described in section 2 is used only by us, for the purposes described in this policy, and isn't passed on to any third party.
The only exception is if we're legally required to disclose data — for example, in response to a valid request from a Belgian or EU authority.
7. Keeping it secure
We use reasonable technical and organisational measures — such as encrypted connections (HTTPS), restricted access to our tools, and working only with reputable providers — to protect your data against loss, misuse or unauthorised access. No system is completely risk-free, but we take this seriously and review it periodically.
8. Your rights
As a resident of Belgium, the GDPR gives you the following rights over your personal data. To use any of them, contact us at the email in section 11.
- Access — ask for a copy of the personal data we hold about you.
- Rectification — ask us to correct data that's inaccurate or incomplete.
- Erasure — ask us to delete your data, where there's no legal reason for us to keep it.
- Restriction — ask us to pause processing your data in certain situations.
- Objection — object to processing based on our legitimate interests or for direct marketing.
- Portability — ask for your data in a portable format to transfer elsewhere.
- Withdraw consent — for analytics or the newsletter, at any time, as described above.
We'll respond within one month of a verified request. If you're not satisfied with our response, you can lodge a complaint with the Belgian Data Protection Authority — details in section 11.
9. Children's privacy
This website isn't directed at children, and we don't knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we'll delete it.
10. Changes to this policy
We may update this policy from time to time, for example if we start using a new tool or offer online ordering in future. The "last updated" date at the top will always reflect the latest version. For significant changes, we'll highlight this on the site or notify newsletter subscribers directly.
11. Contact us & complaints
Questions, requests, or concerns about your data:
If you feel your data protection rights haven't been respected, you have the right to lodge a complaint with Belgium's supervisory authority:
Autorité de protection des données / Gegevensbeschermingsautoriteit (APD–GBA)
Rue de la Presse 35 / Drukpersstraat 35, 1000 Brussels, Belgium
Phone: +32 2 274 48 00
Email: contact@apd-gba.be
Website: dataprotectionauthority.be