

PRIVACY STATEMENT
Last updated: 23 October 2026
1. WHO IS RESPONSIBLE
Speckled Jim, operator of LAB-44, Middenweg 44, 1505 RK Zaandam, Chamber of Commerce (KvK) number 91269431, is the controller of your personal data as described in this statement. LAB-44 is part of Lacandon Groep. Questions about privacy: bookings@lacandon.nl.
2. WHAT DATA WE COLLECT AND WHY
Table reservations (via our online reservation system)
Data: name, phone number, email, number of guests, date and time, any allergies or requests you share
Legal basis: performance of the contract
Retention period: no longer than necessary, at most 2 years after your last visit
Group bookings, events and quotes (via our enquiry form)
Data: name, company, contact details, event details, billing details
Legal basis: performance of the contract
Retention period: 7 years for financial records (statutory tax obligation)
Contact form and email
Data: name, email, phone number, your message
Legal basis: legitimate interest in answering your question
Retention period: until your question has been dealt with, at most 1 year
Newsletter, only if you sign up
Data: name, email
Legal basis: consent
Retention period: until you unsubscribe
Gift cards and loyalty programme
Data: name, email, phone number, points and gift card balance, purchases and visits
Legal basis: performance of the contract; consent for loyalty programme messages
Retention period: as long as your account or gift card is active; 7 years for financial records
Job applications
Data: CV, cover letter, contact details
Legal basis: consent and preparation of a contract
Retention period: 4 weeks after the procedure, or 1 year with your consent
Website statistics and cookies
Data: see our Cookie Policy
Legal basis: consent, or legitimate interest for strictly necessary cookies
Retention period: see Cookie Policy
CCTV (in parts of the building, indicated by signs)
Data: footage
Legal basis: legitimate interest in safety and security
Retention period: at most 4 weeks, unless needed in connection with an incident
We use information about allergies and dietary requirements only to prepare your visit safely, and only with your consent.
3. WHO WE SHARE DATA WITH
We do not sell your data. We share data only with parties that help us run our business, under a data processing agreement:
-
our website and hosting provider (website and forms)
-
our online reservation system
-
our system for group and event enquiries
-
website statistics providers, only with your consent
-
our newsletter, gift card and loyalty programme provider
-
our payment provider, accountant and IT suppliers
-
other companies within Lacandon Groep, if your request concerns one of our sister venues
Some of these suppliers may process data outside the European Economic Area. In that case, appropriate safeguards apply, such as the EU Standard Contractual Clauses.
4. YOUR RIGHTS
You have the right to access your data, to have it corrected or erased, to restrict or object to its processing, to data portability, and to withdraw your consent at any time. Send your request to bookings@lacandon.nl. We will respond within one month. You can also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).
5. SECURITY
We take appropriate technical and organisational measures to protect your data against loss and unauthorised access. Only staff who need your data for their work have access to it.
6. CHANGES
We may update this statement. The latest version is always available on this page.