1. Who We Are
Arsa Food B.V. is a pan-European food distributor registered in The Netherlands, specialising in Indian and Asian food products. We act as a data controller in respect of personal data we collect and process in connection with our business activities.
Registered address: Arsa Food B.V., The Netherlands · Email: info@arsafood.com · Chamber of Commerce (KVK): Available upon request
2. What Data We Collect
We collect and process personal data only where we have a lawful basis to do so. The categories of data we may collect include:
Business Contact Data
- Full name, job title, and company name
- Business email address and telephone number
- Business address, postcode, and city
- VAT number and Chamber of Commerce registration number
Website Usage Data
- IP address and browser type (collected via cookies — see our Cookie Policy)
- Pages visited, time on site, and referral source
- Device type and operating system
Communication Data
- Content of emails, contact form submissions, and enquiries
- Records of your consent where required
3. How We Use Your Data
We process your personal data for the following purposes and on the following legal bases:
- Fulfilment of a contract — To process trade account applications, fulfil orders, and manage our business relationship with you.
- Legitimate interests — To respond to enquiries, send relevant product updates, and improve our services, where our interests are not overridden by your rights.
- Legal obligation — To comply with applicable EU and Dutch laws, including tax, financial reporting, and food safety regulations.
- Consent — To send marketing communications where you have opted in. You may withdraw consent at any time.
4. How We Share Your Data
We do not sell your personal data to third parties. We may share your data with:
- Logistics and delivery partners — For order fulfilment and delivery management
- IT and software providers — Who process data on our behalf under GDPR-compliant data processing agreements
- Regulatory authorities — Where required by Dutch or EU law (e.g. the Dutch Tax Authority, NVWA)
- Professional advisors — Such as accountants and legal advisors, bound by confidentiality obligations
5. Data Retention
We retain personal data only as long as necessary for the purpose it was collected or as required by law. In general:
- Customer account data is retained for the duration of the business relationship plus 7 years (Dutch statutory requirement)
- Marketing consent records are retained until consent is withdrawn plus 3 years
- Website analytics data is retained for up to 26 months
- Contact form submissions are retained for up to 2 years
6. Your Rights Under GDPR
As a data subject, you have the following rights:
- Right of access — Request a copy of the personal data we hold about you
- Right to rectification — Request correction of inaccurate or incomplete data
- Right to erasure — Request deletion of your data where there is no compelling reason for continued processing
- Right to restrict processing — Request that we limit how we use your data
- Right to data portability — Receive your data in a structured, commonly used format
- Right to object — Object to processing based on legitimate interests or for direct marketing
- Right to withdraw consent — Where processing is based on consent, withdraw it at any time
To exercise any of these rights, contact us at info@arsafood.com. We will respond within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.
7. International Transfers
Where we transfer personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place — such as Standard Contractual Clauses (SCCs) approved by the European Commission — to protect your data to the same standard as within the EU.
8. Security
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it from unauthorised access, loss, or disclosure. These include encrypted data transmission (HTTPS), access controls, and regular security reviews.
9. Changes to This Policy
We may update this Privacy Policy from time to time. The most current version will always be available on our website. Where changes are significant, we will notify you by email or through a prominent notice on our site.
10. Contact
For any privacy-related questions or to exercise your rights, contact us at:
Email: info@arsafood.com
Post: Arsa Food B.V., The Netherlands