Privacy policy

Last updated on October 22, 2026.

This policy explains which personal data Yitch processes via yitch-landing-pages.ddev.site/food, why, for how long, with whom we share it and what your rights are. We follow the General Data Protection Regulation (GDPR) and Belgian privacy law.

1. Who is responsible?

The controller is:

Yitch bv
Lodderstraat 4, 2880 Bornem, Belgium
Company number (VAT): BE0465.581.489
Email: info@yitch.be
Phone: +32 3 711 32 93

For questions about your data, you can contact info@yitch.be.

2. Which data do we process, why and on what basis?

Visiting the website

We keep statistics on how the website is used, without cookies. On every page visit, our server only counts totals: which page, from which website or campaign you arrived, and the type of device and browser, as well as the country, which we derive from your IP address and then discard immediately. We do not recognise you and store nothing about you as a person. Basis: our legitimate interest in improving the website (art. 6.1.f GDPR).

If you consent to statistics, a script on this website also measures how you use the website: how long you view a page, which links and buttons you click and which pages you visit one after another. To group visits within the same day, we create a code from your IP address and browser data with a key that changes every day. That code is deleted after two days, your IP address is not stored and no cookies are set. Basis: your consent (art. 6.1.a GDPR), which you can withdraw at any time via .

The statistics themselves are totals per day, without data about you as a person. If you use the "Do Not Track" or "Global Privacy Control" setting in your browser, we do not measure your visit.

Our hosting partner (Combell NV, Belgium) keeps technical log files, including your IP address, to keep the website secure and available. Those log files are kept no longer than needed for security and are then deleted by our hosting partner. Basis: our legitimate interest in a secure website (art. 6.1.f GDPR).

Cookies and similar techniques

With your consent, we use services that place cookies or read data from your browser. Basis: your consent (art. 6.1.a GDPR), which you can withdraw at any time via . You can read which cookies these are in our cookie policy.

To be able to demonstrate that you gave consent (art. 7.1 GDPR), we store your choice with a random consent ID, the version of the banner and the time, without IP address. Basis: our legal obligation to be able to demonstrate consent (art. 6.1.c GDPR).

Google Analytics 4 (Google Ireland Ltd.): statistics on how the website is used.
Google Ads (Google Ireland Ltd.): measuring ads and conversions.
HubSpot (HubSpot Ireland Ltd.): marketing automation and following up visitors.

3. With whom do we share your data?

We do not sell your data. We only share it with parties that help us run the website and our services, and that may only use it on our behalf (processors):

Hosting: Combell NV, Belgium.
Sending emails, e.g. form confirmations: Postmark (ActiveCampaign LLC), United States, under the EU-U.S. Data Privacy Framework.
Google Analytics 4: Google Ireland Ltd., Ireland, with possible transfer to the United States.
HubSpot: HubSpot Ireland Ltd., Ireland, with possible transfer to the United States.
HubSpot Ireland Ltd. (forms), Google Ireland Ltd. (statistics and advertising), LinkedIn Ireland Unlimited Company (advertising)

Other parties are themselves responsible for what they do with your data, and also use it for their own purposes. For the collection and transfer of data via our website, we are jointly responsible with them (art. 26 GDPR); for what they do afterwards, their own privacy policy applies. You can exercise your rights with us and with them.

Google reCAPTCHA: Google Ireland Ltd., Ireland, with possible transfer to the United States. Privacy policy: policies.google.com/privacy.
Google Ads: Google Ireland Ltd., Ireland, with possible transfer to the United States. Privacy policy: policies.google.com/privacy.

We also pass on data when the law requires us to.

You can read how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites.

4. Transfers outside the European Economic Area

Some services (also) process data outside the EEA. This only happens with the safeguards the GDPR requires:

Google reCAPTCHA (Google Ireland Ltd.): EU-U.S. Data Privacy Framework and standard contractual clauses.
Google Analytics 4 (Google Ireland Ltd.): EU-U.S. Data Privacy Framework and standard contractual clauses.
Google Ads (Google Ireland Ltd.): EU-U.S. Data Privacy Framework and standard contractual clauses.
HubSpot (HubSpot Ireland Ltd.): EU-U.S. Data Privacy Framework and standard contractual clauses.

5. How long do we keep your data?

We do not keep data longer than needed for the purpose for which we collected it, or as long as the law requires. The periods are listed above for each processing activity. We keep the website statistics for 13 months, as totals without personal data. We keep your choice in the cookie banner for 12 months in your browser, and for one more year as proof of your consent, without IP address.

6. Your rights

You have the right to:

access your data and receive a copy of it;
have incorrect data corrected;
have your data erased when there is no longer a reason to keep it;
have the processing restricted;
have your data transferred, if we process it on the basis of consent or a contract;
object to processing based on our legitimate interest, and always to direct marketing;
withdraw your consent at any time, without affecting what happened before.

You are not obliged to give us data. Without the data in a form, however, we cannot answer your question.

We do not take decisions based solely on automated processing that have consequences for you. Advertising services you consented to may, however, build a profile to show you relevant ads; more about this in their privacy policies.

Send your request to info@yitch.be. We reply within one month. We may ask you to prove your identity, so that we do not give data to the wrong person.

7. Complaints

If you are not satisfied with how we handle your data, please let us know. You can also lodge a complaint with the Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels, www.dataprotectionauthority.be, contact@apd-gba.be.

8. Security

We take appropriate technical and organisational measures to protect your data, such as an encrypted connection (https), limited access and regular software updates.

9. Changes

We update this policy when the way we work changes. The date at the top shows when that last happened.