Your Coffee Brand
Back to Home

Privacy Policy

Last updated: 22 March 2026

1. Who We Are (Data Controller)

Your Coffee Brand ("YCB") is a service powered by Olimpio Cafés, operating in the Netherlands. We are the data controller responsible for your personal data as described in this Privacy Policy.

Olimpio Cafés

Email: privacy@yourcoffeebrand.nl

For questions about this Privacy Policy or how we handle your personal data, please contact us at the email address above.

2. What Personal Data We Collect

We collect the following personal data when you use our website:

Data you provide directly:

  • Business name — the name of your café or business
  • Email address — your business email for communication
  • Weekly coffee volume preference — your estimated weekly coffee consumption (in kg)
  • Logo image — if you choose to use our Brand Visualizer tool, you may upload your business logo (PNG, JPEG, WebP, or SVG, max 5MB)
  • Design description — optional text describing how you'd like your coffee bag to look

    • Data collected automatically:

  • Basic server logs (IP address, browser type, access times) as is standard for web hosting
  • Functional cookies strictly necessary for the website to operate

    • 3. Purposes of Processing

    We process your personal data for the following purposes:

    4. Legal Basis for Processing

    Under the General Data Protection Regulation (GDPR / AVG), we process your personal data on the following legal bases:

  • Pre-contractual steps (Article 6(1)(b) GDPR) — When you submit the lead form requesting a free sample box, this constitutes a request for pre-contractual steps. We process your business name, email, and volume preference to evaluate and respond to your inquiry.
  • Legitimate interest (Article 6(1)(f) GDPR) — We have a legitimate interest in following up on business inquiries from café owners who have expressed interest in our white-label coffee services. We balance this interest against your rights and freedoms.
  • Consent (Article 6(1)(a) GDPR) — For any marketing communications beyond the scope of your initial inquiry, we will request your explicit consent.
  • Legal obligation (Article 6(1)(c) GDPR) — We may process data where required by Dutch or EU law.

    • 5. Sharing with Third Parties

    We may share your personal data with the following categories of recipients:

  • Hosting provider — Our website is hosted on infrastructure that may process basic server data (access logs, IP addresses).
  • AI image generation service (Google Gemini API) — If you use the Brand Visualizer, your uploaded logo and design description are sent to the Google Gemini API to generate the coffee bag mockup. Google processes this data as a data processor under its terms of service.
  • Email service provider — To respond to your inquiry and send follow-up communications.

    • We have data processing agreements (verwerkersovereenkomsten) in place with our processors where required by the GDPR.

    6. International Data Transfers

    Some of our service providers process data outside the European Economic Area (EEA):

  • Google Gemini API — Logo images and design descriptions submitted through the Brand Visualizer are processed by Google, which may transfer data to servers in the United States.

    • For these transfers, we rely on:

  • The EU-US Data Privacy Framework adequacy decision for certified US companies
  • Standard Contractual Clauses (SCCs) approved by the European Commission

    • You may request a copy of the applicable safeguards by contacting us at the email address listed in Section 1.

    7. Data Retention

    We retain your personal data only as long as necessary for the purposes described:

    After the retention period, data is securely deleted or anonymized.

    8. Cookies and Similar Technologies

    Our website currently uses only strictly necessary (functional) cookies that are required for the website to operate properly. These cookies do not require your consent under the Dutch Telecommunications Act (Telecommunicatiewet).

    We do not use:

  • Analytical or tracking cookies
  • Marketing or advertising cookies
  • Third-party profiling cookies

    • If this changes in the future, we will update this policy and implement a cookie consent mechanism before placing any non-essential cookies.

    9. Data Security

    We take appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encrypted connections (HTTPS/TLS) for all data transmission
  • Access controls limiting who can view personal data
  • Data processing agreements with our service providers

    • 10. Your Rights

    Under the GDPR (AVG), you have the following rights regarding your personal data:

  • Right of access (Article 15) — Request a copy of the personal data we hold about you
  • Right to rectification (Article 16) — Request correction of inaccurate personal data
  • Right to erasure (Article 17) — Request deletion of your personal data when it is no longer necessary for our purposes
  • Right to restriction (Article 18) — Request that we restrict the processing of your data in certain circumstances
  • Right to data portability (Article 20) — Receive your personal data in a structured, machine-readable format
  • Right to object (Article 21) — Object to processing based on our legitimate interest. For direct marketing, this right is absolute.
  • Right to withdraw consent — Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing

    • To exercise any of these rights, contact us at privacy@yourcoffeebrand.nl. We will respond within one month of receiving your request.

    11. Right to Lodge a Complaint

    If you believe that we have not handled your personal data correctly, you have the right to lodge a complaint with the Dutch Data Protection Authority:

    Autoriteit Persoonsgegevens

    Hoge Nieuwstraat 8

    2514 EL Den Haag

    Website: autoriteitpersoonsgegevens.nl

    Phone: +31 (0)88 1805 250

    We encourage you to contact us first so we can try to resolve your concern directly.

    12. Changes to This Privacy Policy

    We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make significant changes, we will publish the updated policy on this page with a new "Last updated" date. We encourage you to review this page periodically.

    13. Contact

    For any questions about this Privacy Policy or your personal data:

    Olimpio Cafés (trading as Your Coffee Brand / YCB)

    Email: privacy@yourcoffeebrand.nl