Privacy Statement Next Level Concepts

1. Who we are

Next Level Concepts is a company registered with the Dutch Chamber of Commerce under number 76902706. Food Truck Company is a registered trade name of Next Level Concepts.

Next Level Concepts, including its activities carried out under the trade name Food Truck Company, is responsible for the processing of personal data as described in this Privacy Statement.

This Privacy Statement applies to the websites, services and activities of both Next Level Concepts and Food Truck Company.

Contact details
Next Level Concepts / Food Truck Company
Pascalweg 5-06
4104 BE Culemborg
The Netherlands
T +31 (0)88 88 88 000


E info@nextlevelconcepts.com

For questions regarding privacy or the processing of your personal data, please contact us at info@nextlevelconcepts.com.

2. Personal data that we process

We process personal data when you use our websites, contact us, request information or a quotation, enter into an agreement with us, or otherwise provide information to us.

Depending on your interaction with us, we may process the following personal data:

  • First and last name
  • Company name and, where relevant, job title or position
  • Address and billing details
  • Telephone number
  • Email address
  • Country
  • Information you provide in connection with an enquiry, quotation, agreement or project
  • Information about your company or website where relevant to your enquiry or project
  • IP address
  • Information about your use of our websites
  • Cookie and consent preferences
  • Other personal data that you actively provide to us, for example by email, telephone or through a contact form

We only process personal data that is relevant to the purpose for which it is collected.

3. Why we process personal data and our legal bases

We process personal data for the following purposes:

  • To respond to enquiries and requests for information or quotations
  • To prepare quotations and take steps prior to entering into an agreement
  • To perform and manage agreements, assignments and projects
  • To communicate with clients, prospects, suppliers and other business contacts
  • To provide our products and services
  • To process orders, deliveries, invoicing and payments
  • To provide service and after-sales support
  • To inform clients about relevant changes to our products or services
  • To administer and improve our websites
  • To comply with statutory, tax and administrative obligations
  • To establish, exercise or defend legal claims
  • Where applicable, to send marketing communications

Depending on the processing activity, we rely on one or more of the following legal bases under the General Data Protection Regulation (GDPR):

  • The performance of a contract or taking steps at your request prior to entering into a contract
  • Compliance with a legal obligation
  • Our legitimate interests, such as operating and improving our business, maintaining business relationships and securing our websites and systems, provided that these interests do not override your fundamental rights and freedoms
  • Your consent, where consent is required by law

Where processing is based on your consent, you may withdraw your consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before your consent was withdrawn.

4. Sharing personal data with third parties

We do not sell your personal data.

We may share personal data with third parties where this is necessary for our business activities, to perform an agreement, to comply with a legal obligation or where we have another lawful basis to do so.

Depending on the circumstances, these parties may include:

  • IT, hosting, website and software service providers
  • Suppliers, contractors and other parties involved in the execution of a project or agreement
  • Accountants, financial advisers and other administrative service providers
  • Legal and other professional advisers
  • Payment and financial service providers, where applicable
  • Government authorities and supervisory bodies where disclosure is required by law

Where a third party processes personal data on our behalf, we enter into appropriate data processing arrangements where required by the GDPR.

Third parties that process personal data for their own purposes are responsible for complying with applicable privacy legislation themselves.

5. How long we retain personal data

We do not retain personal data for longer than necessary for the purposes for which it was collected, unless we are required by law to retain it for a longer period.

The applicable retention period depends on the nature of the data and the purpose for which it is processed. In determining retention periods, we take into account the duration of our relationship with you, contractual obligations, statutory retention requirements and the possibility of legal claims.

Data that forms part of our financial and tax administration is retained for the period required by applicable law.

Personal data relating to enquiries or business contacts may be retained for a reasonable period after our last contact where this is relevant to maintaining our business relationship.

When personal data is no longer required, it will be deleted or anonymised.

6. Job applications

If you apply for a position at Next Level Concepts or Food Truck Company, we process the personal data you provide for the purpose of assessing and handling your application.

If your application does not result in employment, we will delete your application data within a reasonable period after completion of the recruitment process, unless we are legally required to retain certain information for longer or you have given us permission to retain your details for possible future vacancies.

7. Cookies and similar technologies

Our websites use cookies and similar technologies to ensure that they function properly, to remember preferences, to understand how our websites are used and, where applicable, for analytical or marketing purposes.

Some cookies are necessary for the proper functioning of our websites and do not require your consent. Other cookies are only placed after you have given your consent through our cookie banner.

You can change or withdraw your cookie preferences at any time through the cookie settings available on our websites.

More detailed and up-to-date information about the cookies and similar technologies used on each website, including their purpose and retention period, is provided through our cookie consent platform.

8. Cookie consent management

We use CookieFirst, a consent management platform provided by Digital Data Solutions B.V., Plantage Middenlaan 42a, 1018 DH Amsterdam, the Netherlands, to manage and document your cookie preferences.

When you visit our website, CookieFirst processes information necessary to record your consent choices and to ensure that cookies requiring consent are only activated after consent has been given.

This information may include:

  • Your consent status and any withdrawal of consent
  • An anonymised IP address
  • Information about your browser and device
  • The date and time of your visit
  • The webpage on which you saved or updated your consent preferences
  • Approximate location information
  • A unique identifier (UUID) associated with your consent preferences


We use CookieFirst to comply with our legal obligations regarding cookie consent and to document the choices you make.

Where required, appropriate data processing arrangements are in place with service providers processing personal data on our behalf.

9. Your privacy rights

Under the GDPR, you have various rights in relation to your personal data. Depending on the circumstances, you may have the right to:

  • Access your personal data
  • Correct inaccurate or incomplete personal data
  • Request deletion of your personal data
  • Request restriction of the processing of your personal data
  • Object to the processing of your personal data
  • Withdraw your consent at any time where processing is based on consent
  • Receive certain personal data in a structured, commonly used and machine-readable format and have that data transferred to another organisation where the right to data portability applies


You can submit a request regarding your personal data by emailing info@nextlevelconcepts.com.

We may ask you for additional information where necessary to verify your identity. We will only request information that is reasonably necessary for this purpose.

We will respond to your request within the period prescribed by the GDPR, normally within one month of receiving your request. In certain circumstances, this period may be extended by a further two months. If so, we will inform you.

10. Automated decision-making

We do not make decisions about individuals based solely on automated processing, including profiling, where such decisions have legal effects or similarly significantly affect them.

11. Complaints

If you have a question or concern about how we process your personal data, please contact us first so that we have the opportunity to address it.

You also have the right to lodge a complaint with the Dutch supervisory authority:

Autoriteit Persoonsgegevens
Dutch Data Protection Authority

12. How we protect personal data

We take the protection of personal data seriously and implement appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration or other unlawful processing.

Access to personal data is limited to persons and service providers who require access for legitimate business purposes.

If you believe that your personal data is not adequately protected or you suspect misuse of your data, please contact us at info@nextlevelconcepts.com.

13. Changes to this Privacy Statement

We may update this Privacy Statement from time to time, for example if our services, websites or legal obligations change.

The most recent version will always be published on our websites.

Last updated: September 2026