{"id":1280,"date":"2026-06-22T08:21:54","date_gmt":"2026-06-22T06:21:54","guid":{"rendered":"https:\/\/ilovesla.reijerstevens.dev\/privacy\/"},"modified":"2026-09-08T12:41:52","modified_gmt":"2026-09-08T10:41:52","slug":"privacy","status":"publish","type":"page","link":"https:\/\/ilovesla.com\/en\/privacy\/","title":{"rendered":"Privacy"},"content":{"rendered":"\n<section  class=\"section textblock theme-white extra-padding\" data-theme-section=\"white\">\n    <div class=\"container\">\n        <div class=\"row align-left\">\n            <div class=\"col\">\n                                                                <h1>\n                            SLA Privacy Statement                        <\/h1>\n                                                          <div class=\"\">\n                        <p><em>Last modified: 14 July 2026<\/em><\/p>\n<p>&nbsp;<\/p>\n<p><strong>1. Who are we?<\/strong><\/p>\n<p>&nbsp;<\/p>\n<p>SLA Holding B.V. (&#8220;SLA&#8221;) is the controller for the processing of personal data as described in this<br \/>\nstatement. Where an SLA location is operated by a group company or franchisee, SLA Holding B.V. acts as<br \/>\nthe central point of contact, and internal arrangements have been made regarding the division of<br \/>\nresponsibilities.<\/p>\n<p>&nbsp;<\/p>\n<p>Address: Amstelveenseweg 124, 1075 XL Amsterdam<br \/>\nChamber of Commerce (KvK): 57641188 \u2014 VAT: NL852670941B01<\/p>\n<p>&nbsp;<\/p>\n<p>Contact: info@ilovesla.com<\/p>\n<p>&nbsp;<\/p>\n<p>This statement applies to data we process from visitors to our website and ordering environment,<br \/>\ncustomers at our locations, and participants in Club SLA.<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p><strong>2. What data do we process and why?<\/strong><\/p>\n<p>&nbsp;<\/p>\n<p><strong>a. Orders (pickup, delivery, catering)<\/strong><br \/>\nWe process your name, contact details, delivery\/invoice address, and order and payment details in order<br \/>\nto fulfil your order.<br \/>\n<em>Legal basis: performance of the contract.<\/em><\/p>\n<p>&nbsp;<\/p>\n<p><strong>b. Club SLA<\/strong><br \/>\nWe process your name and e-mail address, and \u2014 if you provide them yourself \u2014 your phone number<br \/>\nand date of birth (both optional), as well as your purchase and savings data, in order to award points,<br \/>\nprovide rewards, and operate the programme.<br \/>\n<em>Legal basis: performance of the contract.<\/em><\/p>\n<p>&nbsp;<\/p>\n<p>We use your date of birth to give you a surprise on your birthday.<br \/>\n<em>Legal basis: consent.<\/em><\/p>\n<p>&nbsp;<\/p>\n<p><strong>c. Personalised offers and profiling<\/strong><br \/>\nBased on your purchase and usage data, we compile personalised offers (profiling). We do this on the<br \/>\nbasis of your consent. You can withdraw that consent at any time via info@ilovesla.com.<\/p>\n<p>&nbsp;<\/p>\n<p><strong>d. Newsletter and direct marketing<\/strong><br \/>\nIf you sign up, we use your e-mail address to send you our newsletter and offers. You can unsubscribe at<br \/>\nany time via the link at the bottom of every e-mail.<br \/>\n<em>Legal basis: consent, or legitimate interest for existing customers.<\/em><\/p>\n<p>&nbsp;<\/p>\n<p><strong>e. Website, statistics, and advertising<\/strong><\/p>\n<p>When you visit the website, we process your IP address, device and browsing data, and the pages you<br \/>\nview, in order to improve the website, measure visits, and \u2014 with your consent \u2014 show relevant<br \/>\nadvertisements (see cookies).<br \/>\n<em>Legal basis: legitimate interest (functional\/statistics) and consent (marketing).<\/em><\/p>\n<p>&nbsp;<\/p>\n<p><strong>f. CCTV at our locations<\/strong><\/p>\n<p>Our locations may have camera surveillance to protect guests, staff, and property. This is indicated at the<br \/>\nlocation. We retain camera footage for a maximum of four weeks, or longer if footage is needed to<br \/>\nhandle a reported incident.<br \/>\n<em>Legal basis: legitimate interest (security).<\/em><\/p>\n<p>&nbsp;<\/p>\n<p><strong>g. AI-assisted communication and customer service<\/strong><br \/>\nWe use AI-assisted software to draft and send informational e-mails (such as order confirmations) and to<br \/>\nanswer incoming questions and complaints (for example about allergens, opening hours, or orders). In<br \/>\ndoing so, data such as your name, order details, and the content of your message are processed to<br \/>\npersonalise and automate communication.<\/p>\n<p>&nbsp;<\/p>\n<p>If the matter concerns a sensitive topic, such as a report of an allergic reaction, we ensure that it is<br \/>\nreviewed by an employee. You can always ask to be put in touch with an employee instead of receiving<br \/>\nan automated response.<br \/>\n<em>Legal basis: performance of the contract (for order-related communication) or legitimate interest (for<\/em><br \/>\n<em>other questions and customer service).<\/em><\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p><strong>3. Cookies and similar technologies<\/strong><br \/>\nWe use cookies on the website. On your first visit, we ask for your consent to non-essential cookies via<br \/>\nthe cookie banner. You can adjust your preferences at any time via the cookie settings, found in the<br \/>\nbottom left of the page.<\/p>\n<p>&nbsp;<\/p>\n<ul>\n<li>\u00a0Functional and necessary cookies \u2014 needed to make the website and ordering environment<br \/>\nwork (including language preference, logging in). No consent required.<\/li>\n<li>\nAnalytical cookies (Google Analytics) \u2014 to measure and improve website usage. We have a data<br \/>\nprocessing agreement with Google. Placed after consent.<\/li>\n<li>\nMarketing cookies (Meta Pixel from Meta Platforms, for Facebook and Instagram) \u2014 to<br \/>\nmeasure the effectiveness of our advertisements and show you relevant ads on Facebook and<br \/>\nInstagram. Data may be shared with Meta as (joint) controller. Placed after consent.<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p>You can delete or block cookies via your browser settings. Without certain cookies, the website may not<br \/>\nfunction optimally.<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p><strong>4. Who do we share data with?<\/strong><\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>We only share data with parties that perform services for us, including our ordering\/POS provider (Vita<br \/>\nMojo), payment service provider, delivery partners, e-mail and marketing service providers, providers of<br \/>\nAI-assisted tools, Google, and Meta. We enter into processing or cooperation agreements with these<br \/>\nparties. Where data is processed outside the EEA (for example by Google, Meta, or our AI provider in the<br \/>\nUS), this is done on the basis of appropriate safeguards, such as certification under the EU-U.S. Data<br \/>\nPrivacy Framework or the European Commission&#8217;s standard contractual clauses.<\/p>\n<p>&nbsp;<\/p>\n<p><strong>5. How long do we retain data?<\/strong><br \/>\nWe do not retain your data longer than necessary for the purpose for which it was collected, or as long<br \/>\nas required by law. Specifically: we retain order and invoice data for 7 years (statutory tax retention<br \/>\nobligation); Club SLA accounts that have been inactive for 24 months are deleted, including the points<br \/>\nbalance; newsletter data is retained until you unsubscribe; camera footage for a maximum of four weeks<br \/>\n(see above).<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p><strong>6. Minors<\/strong><br \/>\nIf you are under 16, only provide data with the consent of a parent or guardian.<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p><strong>7. Security<\/strong><br \/>\nWe take appropriate technical and organisational measures to protect your data against loss and<br \/>\nunlawful processing.<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p><strong>8. Your rights<\/strong><br \/>\nYou have the right to access, rectify, erase, restrict, and object, and the right to data portability, as well as<br \/>\nthe right to withdraw your consent. You can also object to direct marketing. Submit your request via<br \/>\ninfo@ilovesla.com. We respond within one month (with a possible extension of two months). If you<br \/>\ndisagree with how your request was handled, you can file a complaint with the Dutch Data Protection<br \/>\nAuthority (Autoriteit Persoonsgegevens).<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p><strong>9. Changes<\/strong><br \/>\nWe may amend this statement. The current version is always available at www.ilovesla.com.<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p><strong>10. Contact<\/strong><br \/>\nQuestions about privacy or cookies? E-mail info@ilovesla.com.<\/p>\n                    <\/div>\n                                            <\/div>\n            \n                        <\/div>\n    <\/div> <!-- End of .container -->\n<\/section>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-1280","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/ilovesla.com\/en\/wp-json\/wp\/v2\/pages\/1280","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ilovesla.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/ilovesla.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/ilovesla.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ilovesla.com\/en\/wp-json\/wp\/v2\/comments?post=1280"}],"version-history":[{"count":4,"href":"https:\/\/ilovesla.com\/en\/wp-json\/wp\/v2\/pages\/1280\/revisions"}],"predecessor-version":[{"id":1655,"href":"https:\/\/ilovesla.com\/en\/wp-json\/wp\/v2\/pages\/1280\/revisions\/1655"}],"wp:attachment":[{"href":"https:\/\/ilovesla.com\/en\/wp-json\/wp\/v2\/media?parent=1280"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}