Privacy Policy
Last updated: 10/01/2026
1. Introduction
Gus Foods values the protection of personal data and processes personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Belgian data protection legislation.
This Privacy Policy explains how Gus Foods collects, uses, stores, and protects personal data.
2. Scope of This Privacy Policy
This Privacy Policy applies to the processing of personal data through:
- the website www.gusfoods.com
- the Gus Foods mobile application
- Gus Foods smart fridges and related payment systems
- offline interactions with customers, suppliers, and business partners (including contracts, invoicing, and customer support)
3. Data Controller
The data controller is:
Gus Foods BV
Registered seat: Alfons Gossetlaan 40, 1702 Dilbeek, Belgium
Company number (BCE/KBO): 0755.989.195
Email: privacy@gusfoods.com
Telephone: +32 78 48 04 48
Gus Foods has not appointed a Data Protection Officer, as it is not legally required to do so. Privacy-related requests can be addressed using the contact details above.
4. Categories of Personal Data Processed
Gus Foods may process the following categories of personal data:
- Identification data (name, first name)
- Contact data (email address, telephone number)
- Account data (user ID, login credentials)
- Transaction and purchase data (purchase history, timestamps, fridge location)
- Payment-related identifiers (processed by payment service providers – see below)
- Technical data (IP address, device type, operating system, app usage logs)
- Communication data (emails, customer support requests)
- Legal and financial data (invoices, VAT information where applicable)
5. Payment Processing
Payments made via the Gus Foods mobile application are processed by third-party payment service providers. Gus Foods does not store full payment card details.
Payment service providers process personal data in accordance with their own privacy policies and applicable financial regulations. Gus Foods only receives confirmation of successful transactions and limited transaction identifiers.
6. Purposes of Processing
Personal data is processed for the following purposes:
- Creating and managing user accounts
- Providing access to Gus Foods services and smart fridges
- Processing purchases and payments
- Customer support and communication
- Invoicing and accounting
- Security, fraud prevention, and service integrity
- Improving products and services
- Legal and regulatory compliance
Where the processing of personal data is necessary for the performance of a contract with Gus Foods, the provision of such data is required. Failure to provide the necessary personal data may result in Gus Foods being unable to conclude or perform the contract, including providing access to its services, mobile application, smart fridges, or processing purchases and payments.
7. Legal Bases for Processing
Gus Foods processes personal data on the basis of one or more of the following legal grounds (Article 6 GDPR):
- Performance of a contract
(e.g. account management, purchases, access to services) - Legal obligation
(e.g. accounting, tax, invoicing obligations) - Legitimate interests
(e.g. security, fraud prevention, service improvement) - Consent
(e.g. marketing communications, non-essential cookies)
Where processing is based on Gus Foods’ legitimate interests, Gus Foods has carried out a balancing assessment, taking into account the nature of the personal data, the reasonable expectations of the data subjects, and the limited impact of the processing on their fundamental rights and freedoms. Further information about the balancing assessment can be obtained upon request via privacy@gusfoods.com.
Gus Foods considers that its legitimate interests—such as ensuring the security of its services, preventing fraud, and improving its products—do not override the interests or fundamental rights and freedoms of the data subjects.
Where processing is based on consent, consent can be withdrawn at any time.
8. Data Retention
Personal data is retained only for as long as necessary for the purposes described above:
- Account data: duration of the customer relationship + up to 2 years
- Transaction and invoice data: 7 years (legal obligation)
- Customer support communications: up to 3 years
- Technical and security logs: up to 12 months
- Marketing data: until consent is withdrawn
- Cookie data: see Cookie Policy
9. Recipients of Personal Data
Personal data may be shared with:
- IT and hosting service providers
- Payment service providers
- Accounting and legal advisors
- Analytics and security service providers
- Public authorities where legally required
All recipients process personal data in accordance with GDPR requirements.
10. International Data Transfers
Personal data may be transferred outside the European Economic Area where necessary. In such cases, Gus Foods ensures appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission.
11. Data Subject Rights
You have the following rights under the GDPR:
- Right of access
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to object to processing based on legitimate interests
- Right to data portability
- Right to withdraw consent at any time (where applicable)
Requests can be submitted via privacy@gusfoods.com.
12. Automated Decision-Making
Gus Foods does not engage in automated decision-making or profiling within the meaning of Article 22 GDPR.
13. Complaints
You have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermings-authoriteit – GBA).
Contact details:
- Website: https://www.dataprotectionauthority.be
- Address: Drukpersstraat 35, 1000 Brussels, Belgium
- Email: contact@apd-gba.be
- Telephone: +32 (0)2 274 48 00
14. Changes to This Policy
This Privacy Policy may be updated from time to time. The latest version is always available on our website.