Privacy Policy

Collection, Use, Storage, Security, and Rights Regarding Personal Data

‍

Beyond Ordering BV, with its registered office at 9090 Melle, Brusselsesteenweg 255, registered with the Crossroads Bank for Enterprises under number 0760.305.893 (hereinafter Beyond Ordering), values your privacy. Regarding the processing of your personal data, Beyond Ordering complies with the applicable legislation on the processing of personal data, including the General Data Protection Regulation (GDPR) and the law of 30 July 2018 concerning the protection of natural persons with regard to the processing of personal data. Personal data refers to data by which a natural person can be directly or indirectly identified within the meaning of the GDPR (hereinafter: Personal Data).

In this Privacy Policy (hereinafter: Privacy Policy), we inform you about how Beyond Ordering collects, uses, stores, communicates, and discloses Personal Data, and what your rights are.

Article 1 - What does this privacy policy apply to?

This privacy policy applies to the processing of personal data of customers who place an order via the Beyond Ordering platform, request a refund via the QR refund platform, and to every visit to and use of the websites (https://beyondordering.com, https://watdrinkje.be and https://qrrefund.com, hereinafter referred to as: "Websites"), as well as to all (commercial) relationships (and the exchange of data that may be related thereto) between Beyond Ordering and its (potential) customers, suppliers, and/or business partners.

Article 2 - Who are "Beyond Ordering", "Wat Drink Je?" and "QR refund" and who is the data controller for the (Personal) Data?

“Beyond Ordering”, “Wat Drink Je?” and “QR refund” are products of:

Beyond Ordering BV
Brusselsesteenweg 255
9090 Melle
BE0760305893
info(at)beyondordering.com

Beyond Ordering is responsible for processing your Personal Data. The data controller is the party that determines the purpose and means (the 'what', the 'how', and the 'why') for processing Personal Data.

Beyond Ordering can be reached by mail, email, or via a contact form on one of its websites.

For specific inquiries regarding this Privacy Policy, in addition to the contact details mentioned above, Wouter Bauwens can also be contacted directly at wouter(at)beyondordering.com.

Article 3 - How is Personal Data collected?

Beyond Ordering collects Personal Data in or in connection with, among other things:

Making an offer;
Visiting our websites or filling out the contact form on the websites;
Creating a professional account on the Beyond Ordering platform;
Exchanging business cards
Any other form of correspondence or contact (e.g., by phone, email, mail, LinkedIn);
A collaboration with a commercial partner;
A spontaneous offer or request;
Your use of and/or interaction with the Beyond Ordering platform;
Your use of and/or interaction with the QR refund platform.

Article 4 - Which Personal Data does Beyond Ordering process and why?

Which Personal Data we collect depends on the context of your interaction with us, the method of contact, and the information you provide.

Beyond Ordering will at all times limit the amount of Personal Data processed to what is necessary to provide high-quality services.

In the circumstances mentioned below, the following Personal Data may be processed by Beyond Ordering, among others, for the stated purposes:

During the ordering process via the Wat Drink Je? / Beyond Ordering platform
Beyond Ordering processes Personal Data that you provide to us when placing an order via the Wat Drink Je? / Beyond Ordering platform. This Personal Data is necessary for the execution, confirmation, and potential payment of your order. The legal basis for processing this Personal Data is that the processing is necessary for the performance of a contract. This includes the following Personal Data:

Order confirmation code;
Order contents;
Name (if applicable);
Contact details (if applicable);
Address details (if applicable);
Payment details (if applicable);
Comments (if applicable).

During the online top-up process of a cashless carrier

Beyond Ordering processes Personal Data that you provide to us when you top up funds online on a cashless carrier via the Wat Drink Je? / Beyond Ordering platform. This Personal Data is necessary for executing, confirming, and administering your top-up, linking the credit to the correct carrier, and processing the payment. The legal basis for processing this Personal Data is that the processing is necessary for the performance of a contract. This includes the following Personal Data:

identification code or number of the cashless carrier;
top-up amount and time;
transaction and payment references (including encrypted/masked payment data via the payment provider);
name and email address (if applicable, e.g., for account registration or confirmation);
technical data required for security and fraud prevention (such as IP address and device ID).

When requesting a refund of the remaining balance on a cashless carrier

Beyond Ordering processes Personal Data that you provide to us when you request a refund of the remaining balance on your cashless carrier via the Wat Drink Je? / Beyond Ordering platform. This Personal Data is necessary for the verification of the request, determining the balance to be refunded, the execution of the refund, and any follow-up in case of questions or disputes. The legal basis for processing this Personal Data is that the processing is necessary for the performance of a contract. This includes the following Personal Data:

identification code or number of the cashless carrier;
balance and transaction data required to calculate the remaining amount;
IBAN and account holder name for payment;
email address (if applicable, e.g., for confirmation and communication);
time of request;
and technical log data required to securely process the request and prevent abuse (such as IP address and device ID).

During the redemption process of a QR refund

Beyond Ordering processes Personal Data that you provide to us when requesting a refund via QR refund. This Personal Data is necessary for the execution, confirmation, and payment of your refund. The legal basis for processing this Personal Data is that the processing is necessary for the performance of a contract. This includes the following Personal Data:

Identification code of the QR refund;
Content of the QR refund;
IBAN and account holder name for payment;
email address (if applicable, e.g., for confirmation and communication);
time of request;
and technical log data necessary to securely process the request and prevent abuse (such as IP address and device ID).

When contacting our customer service

When you contact our customer service, we use the (Personal) data you provide to answer your question or resolve your issue. The legal basis for processing this (Personal) data is that the processing is necessary for the performance of a contract. This includes the following (Personal) data:

Order confirmation code;
Order content;
Name (if applicable);
Contact details (if applicable);
Address details (if applicable);
Payment details (if applicable);
Remarks (if applicable).

When visiting our Websites, the Beyond Ordering / Wat Drink Je? platform, or the QR refund platform

When visiting our Websites, the Beyond Ordering / Wat Drink Je? platform, or the QR refund platform, electronic identification information is stored, such as:

IP address, app IDs, browser, operating system, and other information about the device used to access the Websites or about the external link that led to the Websites;
Domain name;
Location;
Time of connection and visits to links or content on our Websites.

When you fill out the contact form on our Websites, the data you enter is stored. Your first name, last name, possibly your phone number, email address, message, IP address, and the time of submission are securely stored. This is necessary to contact you appropriately.

Upon registration on the Beyond Ordering platform and/or the QR refund platform, certain (personal) data is stored, such as professional or personal identification data, billing data, profile information, and preferences. This is necessary for the performance of the agreement.

Beyond Ordering generally processes your Personal Data for, among other things, the following purposes:

Management of prospects, customers, and suppliers (creating lists of (potential) customers, partners, and suppliers);
Communication with the data subject;
Processing orders and deliveries, preparing quotes, delivery or order forms, after-sales service
General administration, accounting, and invoicing;
Compliance with administrative, financial, and tax obligations;
Marketing purposes, including direct marketing, such as keeping stakeholders informed and specifically notifying them about promotions, campaigns, or changes related to products or services in which they have previously shown interest, by sending mailings, newsletters, and/or promotional brochures;
Making the Websites easily accessible and improving the quality of our services;
Evaluation, analysis, reporting, satisfaction surveys;
Fraud prevention and abuse prevention;
Creating a professional account on the Beyond Ordering platform;
Organizing your use of and/or interaction with the Beyond Ordering platform;
Creating a professional account on the QR refund platform;
Organizing your use of and/or interaction with the QR refund platform;
Managing disputes;
Recruitment and selection.

If Beyond Ordering uses your Personal Data for direct marketing, you always have the right to object to this by means of a simple request (opt-out option). Depending on the information you have provided to us (phone number, postal address, mobile number, email address), we may contact you via the relevant channels (phone, post, SMS, or email) with the aim of informing you about our products or about future events, promotions, or offers. When sending direct marketing, Beyond Ordering may rely on its legitimate interest to inform existing partners about similar products or services for which Beyond Ordering and the relevant partners have previously had contact.

For each purpose, the legal basis for processing may be one of the following:

Your voluntary consent for processing;
The preparation or performance of a contract;
A legal obligation;
A compelling legitimate interest of Beyond Ordering, in which case we will endeavor to weigh that interest against the respect for your privacy. For processing this (personal) data for purposes such as fraud prevention and anti-abuse, or for analysis and reporting purposes, we rely on Beyond Ordering's legitimate interest. The final analysis reports will not contain Personal Data.

When the legal basis for processing is based on your free consent, you have the right to withdraw this consent at any time. This can be done by means of a simple request addressed to Beyond Ordering via the contact details mentioned in this Privacy Policy.

We will only collect and use your Personal Data for the realization of the aforementioned purposes, unless we receive your unambiguous and free consent to use your Personal Data for other purposes, or unless processing is necessary to comply with an obligation imposed by applicable regulations.

Article 5 - How does Beyond Ordering protect my Personal Data?

Beyond Ordering attaches great importance to the protection of your Personal Data and has therefore taken the necessary technical and organizational measures. We use a secure connection and store your data in a secure database. In this way, we strive to take the necessary measures to prevent theft, loss, unauthorized access, or unwanted disclosure.

Article 6 - How long does Beyond Ordering retain my Personal Data?

Beyond Ordering does not sell, trade, or market your Personal Data. Personal Data that is processed will only be communicated to the following recipients and in accordance with this Privacy Policy:

Controller;
The data subject themselves;
Processors.

Processors act solely on behalf of Beyond Ordering and may only use Personal Data for purposes determined by Beyond Ordering. Beyond Ordering has made clear agreements in its contracts with processors regarding the quality of data processing, in accordance with the obligations arising from relevant privacy legislation.

If you place an order (via the Beyond Ordering platform), Beyond Ordering may provide certain data to the caterer or event organizer from whom you are ordering, so that the caterer or event organizer can process, deliver, and settle your order. You are a direct customer of the caterer or event organizer.

The caterer or event organizer has their own responsibilities and obligations regarding the (Personal) Data. For questions about data processing by, for example, the caterer or event organizer, you can contact the relevant caterer or event organizer directly.

When you redeem a QR refund (via the QR refund platform), Beyond Ordering will make the necessary data available to the banking institution of the caterer or event organizer who created the QR refund, so that the caterer or event organizer can process and pay out the QR refund.

Notwithstanding the foregoing, Beyond Ordering may be obliged to disclose your Personal Data to the competent authorities (i) when Beyond Ordering is legally required to do so or in connection with legal proceedings, or (ii) to safeguard and defend Beyond Ordering's rights.

If Beyond Ordering transfers all or part of its assets to a third party, in the event of a transfer of a universality or a branch, in the event of a merger, demerger or similar transaction, joint venture, reorganization or any other transfer or transition or business restructuring, whether by special or general title, in which case your Personal Data may be transferred to a third party.

As a rule, your Personal Data is not transferred to third countries. Should this nevertheless be the case, we ensure that any transfer of Personal Data outside the European Economic Area (EEA) to a recipient established or registered in a country not covered by an adequacy decision of the European Commission, is governed by provisions in a transfer agreement, which will include (i) standard contractual clauses as provided for in Commission Implementing Decision (EU) 2021/914 of 4 June 2021 on standard contractual clauses for the transfer of personal data to third countries pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council, or (ii) will be based on another mechanism under privacy law or another regulation governing the processing of personal data.

Article 7 - What are your rights?

As a data subject, you also have a number of rights regarding your Personal Data.

Right to access and rectification
You have the right to access all Personal Data we collect about you. You can have inaccurate or incomplete Personal Data corrected or supplemented.
Right to be forgotten
In certain circumstances, you have the right to have your Personal Data erased.
Right to data portability of your Personal Data
Under certain conditions, you have the right to obtain Personal Data you have provided to us in a user-friendly format and transfer it to a third party.
Right to object to processing
As a data subject, you have the right to object to the processing of your Personal Data if you disagree with how Beyond Ordering processes your Personal Data.
Right to restriction of processing
You have the right to (temporarily) stop the processing of your Personal Data.

If you wish to exercise any of these rights, you can send an email to info(at)beyondordering.com. We ask you to clearly identify yourself in such a request (e.g., by attaching a copy of your identity card) to prevent unauthorized disclosure of your Personal Data.

We undertake to provide a response within one month of receiving the request, which may include the following:

The actions taken in positive response to the request;
The need to extend the response period by two months in complex cases, stating the reasons for this extension;
In the event of a negative response, the reason(s) for the refusal, as well as information about the possibilities to file a complaint with the supervisory authority or appeal to the court.

Article 8 - Children's Personal Data

We request that individuals under the age of 13 do not provide Personal Data to us, unless consent has been obtained from parent(s) or guardian(s). If we discover that we have collected Personal Data from an individual under the age of 13 without such consent, we will delete that information as soon as possible.

Article 9 - Complaints

If you disagree with how Beyond Ordering collects, uses, and/or processes your Personal Data, you can, of course, contact us as indicated in Article 2 of this Privacy Policy.

In addition, you have the option to file a complaint with the supervisory authority, which you can contact using the details below:

Data Protection Authority
Drukkerijstraat 35
1000 Brussels
Phone: +32 (0)2 274 48 00
E-mail: contact(at)apd-gba.be

Article 10 - Amendments

Beyond Ordering reserves the right to amend this Privacy Policy from time to time, for example, due to market developments and new processing activities. It is therefore important that you always consult the most recent version of this Privacy Policy, which is available on our Websites. You can receive a copy upon simple request. Naturally, we will ask for your prior consent for our (new) processing activities, insofar as legally required.

Didn't find an answer to your question? Or would you like to access, correct, and/or delete your personal data? Please contact us as indicated in Article 2 of this Privacy Policy.

Version June 30, 2025

‍