How we collect, use
and protect your personal data.
Last updated: 29/10/2026
The company WAFFLE FACTORY DEVELOPMENT, located at Rue des Digitales 2, 7522 MARQUAIN (Belgium), trading under the name “WAFFLE”, operates the website available at www.wafflefactory.com.
When accessing, consulting, browsing and using the Site and the services it offers, you may be required to provide WAFFLE with personal data about yourself that is protected by law.
However, you can browse the website www.wafflefactory.com without having to provide WAFFLE with any personal information or your identity.
This data protection policy refers to the Regulation of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation, “GDPR”).
Accordingly, your personal data will be processed in accordance with the GDPR, any national legislation adopted pursuant to the GDPR and any other legislation governing the processing of personal data.
If you provide personal data, WAFFLE acts as data controller and has put in place appropriate security measures to protect your personal data.
WAFFLE kindly asks you to read this personal data protection policy, which explains how, why and which of your personal data WAFFLE uses. For any other request, you can ask WAFFLE your questions directly by emailing rgpd@wafflefactory.com. WAFFLE will be happy to answer!
This means all the data you enter on the website or generate by using it, as well as the data transmitted when you communicate with WAFFLE’s services.
The personal data processed is limited to what is strictly necessary to provide the services offered on the website. It is listed below.
Some of this data is mandatory and some optional in order to benefit from the services offered on the website. Whether the personal data requested is mandatory or optional is indicated when it is collected. If the mandatory data requested is not provided, WAFFLE will not be able to offer you the services requested or process any requests you may have.
Data categories and examples:
- Identification data: surname, first name, contact details, email address, phone number
- Data exchanged during a conversation with the chatbot
- Data relating to your franchise application (“BECOME A FRANCHISEE” section of the website): surname, first name, phone number, email address, available financial contribution, catering and team management experience, availability, personal data contained in your CV, date of birth, nationality, preferred geographical area, amount of financial contribution, project description and general reasons for opening a WAFFLE franchise
- Data relating to your application for a job offer (“CAREERS” section of the website): surname, first name, age, personal email address, personal phone number, personal data contained in your CV, cover letter and message
More generally, WAFFLE may combine the data you provide with data collected by automated means.
WAFFLE processes your personal data for the following purposes:
- Handling complaints for the performance of the business relationship: responding to requests for information and any other complaints
- Reviewing franchise applications in order to take pre-contractual steps: receiving and reviewing the application and assessing whether to sign the franchise agreement
- Reviewing job applications in order to take pre-contractual steps: receiving, reviewing and selecting the application and deciding on the follow-up
- Building a CV database on the basis of legitimate interest: so that we can contact you if an offer matches your profile
- Handling pre-litigation or litigation on the basis of legitimate interest: defending WAFFLE’s interests and rights in the event of an identified breach or infringement on the website
- Compliance with legal and regulatory obligations under legal and regulatory obligations
As data controller, WAFFLE may use “processors”. As defined by the GDPR, a processor is a natural or legal person who processes personal data at the request and on behalf of the controller.
Accordingly, the categories of recipients of personal data are as follows:
- WAFFLE and its staff: management of the website and provision of services (e.g. order processing, application management, ...)
- WAFFLE franchisees: for the recruitment of qualified candidates
It being specified that, in the context of recruiting qualified candidates, each Franchisee remains a data controller and independently manages the recruitment process as soon as the application is received via the form, in the same way as it manages its own human resources.
- Various processors (host, IT maintenance provider, session replay and chat technology provider...): for technical and logistical performance
- Various advisers: management and handling of pre-litigation and litigation, provision of various advice
- Judicial and administrative authorities: for the administration and handling of an express request from an administrative or judicial authority
Data is entrusted to service providers under conditions that may result in data being transferred outside the European Union (such as the United States). Where applicable, these transfers will be secured by signing standard contractual clauses with the parties concerned.
In accordance with the General Data Protection Regulation, WAFFLE has implemented appropriate technical and organisational measures to protect your personal data and safeguard your rights against any breach or infringement that could lead, accidentally or unlawfully, to the destruction, loss, alteration, unauthorised access to or disclosure of your personal data.
Access to your personal data is strictly controlled and reserved for WAFFLE employees, partners and processors who need access in order to process it on its behalf.
WAFFLE also guarantees that it has taken the necessary measures to ensure the availability, integrity and confidentiality of the personal data processed, both with regard to its employees and to any person or company duly authorised by WAFFLE to process your personal data.
WAFFLE ensures that its partners comply with commitments as binding as its own in terms of security and compliance with personal data legislation, and that they offer appropriate guarantees to protect your privacy.
However, WAFFLE draws your attention to the risks inherent in the way the Internet works and to possible risks of occasional data loss or breaches of the confidentiality of data transmitted via this network. In addition, the information offered on the website may be interrupted in cases of force majeure, for reasons beyond WAFFLE’s control or for events for which WAFFLE is not responsible.
Accordingly, in the event of a breach of the security and/or confidentiality of your personal data collected while consulting and browsing the Site, you will be notified of a security alert relating to that breach as soon as possible.
Your personal data will only be kept for as long as necessary for the purposes for which it was collected and/or to comply with legal or regulatory archiving requirements, for example.
- Data collected in connection with a request for information or a complaint is kept until the request or complaint has been fully processed and closed;
- Data collected in connection with your franchise application is kept until the application has been fully processed and for a maximum of 2 years from your last contact with WAFFLE, unless you ask for your file to be destroyed before the end of this period;
- Data collected in connection with your application for a job offer is kept for two (2) years from your last contact with WAFFLE or WAFFLE Franchisees in the case of an application for a franchised outlet, unless you expressly ask for your file to be destroyed;
More generally, beyond the periods above, your personal data is kept for: five (5) years for data kept for evidential purposes; ten (10) years from the end of the financial year for data kept for accounting purposes, as well as for commercial documents (invoices, business correspondence, etc.).
You have the right to access, rectify, object to, erase and obtain communication of the information and data held by WAFFLE.
You also have the right to data portability, to restrict processing, to set guidelines for what happens to your personal data after your death, to have your personal data transmitted in a structured format and to lodge a complaint with a supervisory authority.
How you can exercise your rights depends on the legal basis of the processing of your data. For example, you cannot ask for your personal data to be deleted if you are party to a Franchise Agreement that is still in force.
If there is no response or the response is unsatisfactory, the data subject may refer the matter to the Data Protection Authority: https://www.dataprotectionauthority.be
You can exercise your rights by writing to the designated Data Protection Officer, providing proof of your identity, by email (rgpd@wafflefactory.com) or by post to the following address: Rue des Digitales 2, 7522 MARQUAIN (Belgium)
When you use the website and the services it offers, information relating to the browsing of your device (computer, tablet, smartphone, etc.) may be stored in files commonly called “cookies” placed on your device, subject to the choices you have expressed regarding cookies, which you can change or withdraw at any time.
Cookies and other trackers are technologies that store or retrieve information relating to your browser or device (computer, mobile phone, tablet, etc.). For convenience, the term “trackers” covers all of these technologies.
The term tracker may include in particular:
- Cookies and HTTP variables, which may be transmitted via invisible pixels or “web beacons”;
- “Flash” cookies;
- Access to device information via APIs (LocalStorage, IndexedDB, advertising identifiers such as the IDFA or Android ID, GPS access, etc.);
- Any other identifier generated by software or an operating system (serial number, MAC address, unique device identifier (IDFV), or any set of data used to calculate a unique device fingerprint, for example via a “fingerprinting” method).
Cookies do not allow you to be identified by name or personally, but only identify the device used.
You can set, express and/or change your cookie preferences by following the procedures described below.
You can configure your browser so that:
- cookies are stored on your device or, on the contrary, rejected, either systematically or depending on who sets them;
- you are asked to accept or refuse cookies on a case-by-case basis, before a cookie is likely to be stored on your device.
The settings differ depending on your browser and are described in its help menu:
- For Internet Explorer™ : http://windows.microsoft.com/en-GB/windows-vista/Block-or-allow-cookies
- For Safari™ : http://docs.info.apple.com/article.html?path=Safari/3.0/fr/9277.html
- For Chrome™ : http://support.google.com/chrome/bin/answer.py?hl=en&hlrm=en&answer=95647
- For Firefox™ : http://support.mozilla.org/en-US/kb/Activer%20et%20d%C3%A9sactiver%20les%20cookies
- For Opera™ : http://help.opera.com/Windows/10.20/en/cookies.html
You can also control how cookies are stored on your smartphone according to the rules of its operating system.
- On iOS : https://support.apple.com/en-gb/HT201265
- On Android : https://support.google.com/chrome/topic/3434352
You can also object to cookies being stored by visiting http://www.youronlinechoices.com/uk/your-ad-choices/.
Our website uses cookies and other similar technologies to distinguish your usage preferences from those of other users of our website.
However, cookies and similar technologies do not systematically collect information that could identify the users of our website. They only help us improve how our website works and measure the effectiveness of its content. The various cookies and other technologies are listed below.
Necessary cookies are needed for the basic functions of the website and allow you to browse or use the site’s services and features (session ID, authentication, security, media player, load balancing, language or preferences, etc.).
Analytics or audience measurement cookies help us improve our website and the services it offers by collecting information about how you use it. This information is kept in the form of aggregated statistics.
Functional cookies are used to record where users come from and to recognise them on future visits. These cookies improve the performance and features of our website. Although they are not essential to access the service, they are important to give you the best possible experience.
Advertising and targeting cookies are used to show you personalised advertising. They are used for features such as sorting and/or selecting relevant ads, preventing ads you have already seen from reappearing and ensuring they are displayed correctly based on the pages previously visited. The results of these cookies are recorded to measure the performance and effectiveness of advertising campaigns.