Privacy Policy
How MLG FOOD processes your personal data — version of 21 September 2026.
1. Data controller
Smartvision SARL, 278 route d'Esch, L-1471 Luxembourg, VAT LU34034408. Contact for any question about your data: contact@mlgfood.com.
The website is intended for professionals; the data processed is mainly that of the contact persons of our customers, prospects, drivers and suppliers.
2. Data processed, purposes and legal bases
| Data | Why | Legal basis |
| Access request: company, VAT number, activity, name, email, telephone, address, message, IP address | Review the request, verify that it is a professional, prevent abuse | Pre-contractual measures; legitimate interest (security) |
| Customer account: login details, contact details, history | Provide access to the catalogue and to orders | Performance of the contract |
| Orders, delivery point and address, payments (amount, structured communication) | Prepare, deliver, invoice, reconcile transfers | Performance of the contract; legal obligation (accounting) |
| Batches, dates, recipients of the products | Food traceability and product recalls | Legal obligation (EC Reg. 178/2002, AFSCA) |
| Emails exchanged | Respond to questions and complaints | Performance of the contract; legitimate interest |
| Cookies and browsing data | Website functioning; the rest only with your consent | Technical necessity; consent — see the cookie policy |
3. Who receives your data
Your data is never sold. It is disclosed only to:
- Infomaniak Network SA (Switzerland) — hosting of the website and data;
- one.com (Denmark) — email service;
- the subcontracted professional carrier and the driver — customer name, delivery point or address, items to be delivered (without prices);
- our accountant and the authorities where required by law (tax administration, AFSCA);
- our bank, for payments.
Switzerland benefits from an adequacy decision of the European Commission: your data is protected there as it is within the Union. No transfer takes place to a country without equivalent protection.
4. Retention periods
- Refused access request: 12 months;
- Customer account: for as long as it is active, then 3 years after the last order;
- Orders, invoices and payments: 7 years (Belgian accounting obligation);
- Traceability data: at least the shelf life of the products, extended by 6 months;
- IP address of an access request: 12 months.
5. Your rights
You may request access to your data, its rectification, its erasure, the restriction of processing, its portability, and you may object to processing based on legitimate interest. Write to contact@mlgfood.com ; we will respond within one month. However, some data must be retained in order to comply with a legal obligation (accounting, traceability).
You may lodge a complaint with the Belgian Data Protection Authority, rue de la Presse 35, 1000 Bruxelles — www.autoriteprotectiondonnees.be.
6. Security
Encrypted connection (HTTPS), hosting in Switzerland, access to data limited to staff who need it, encrypted backups. The driver sees only what is necessary for delivery.