Privacy Policy
Quandoo-Quisine Privacy Policy
This Privacy Policy explains to you how your personal data is processed when you use the “Quandoo-Quisine” blog (the “Platform”). This Privacy Policy also informs you of your rights and choices to control your personal information and to protect your privacy.
Who is responsible for data processing and whom can I contact?
Responsible for data processing: Quandoo
UK Ltd, The Lightwell, Second Floor, 16 Laystall Street, London, EC1R 4PF
. This company is also meant if the terms “we” or “us” are used below.
You can contact our Data Protection Officer at:
What personal data do we process and from which sources does such data originate?
When we make our platform available to you for use, we process personal data from various sources. On the one hand, this is data that we automatically collect when you use the platform. However, this may also include data which you have voluntarily provided to us.
Data that we collect automatically when you use our platform
As soon as you visit the Platform, you send technical information to our web servers. In each case we collect the following access data and web access data (which we refer to collectively as “access data”):
the date and time of the visit and the duration of the use of the platform
the IP address of your device
the reference URL (the website from which you may have been redirected)
the visited subpages of the website; and
further information about your device (device type, browser type and version, settings, installed plug-ins, operating system)
We process access data so that you can use the platform and we can ensure the functionality of the platform. We also process access data to carry out performance analyses on the platform, continuously improve the platform and correct errors to ensure IT security and the operation of our systems, and to prevent or detect misuse, particularly fraud. Legal basis for the collection of this data is our legitimate interest (Art. 6 (1) (f) GDPR).
We also use cookies to process such data. Cookies are small text files that you download to your device when you visit our websites and that store the above information about you. To learn more about how cookies work, which cookies we use, and how to disable them, read our cookie policy. It also tells you what information is collected by cookies and tracking tools from third. To ensure the legibility of this privacy statement, we have summarised this information on a separate page.
Data that you transmit to us yourself
Comments
In addition to the data we receive from all visitors, we also process other data when you leave a reply in order to comment on one of our articles. We ask you to enter your name, e-mail address, optionally the URL of your website as well as your respective comment. We process this data in order to show your comment on the Platform (Art. 6 (1) (f) GDPR). Your e-mail address will not be published on the Platform.
Furthermore, we store your IP-address whenever you leave a reply. This serves to single purpose to protect us in case somebody uploads illegal content (such as insults, illegal political propaganda, etc.). In such cases we need to be able to identify the author in order to take legal action.
Newsletter
If you wish to receive our newsletter, we need your consent for this. We use the so-called double opt-in process for our newsletter, so that you are only subscribed to the newsletter once you click on the link in the confirmation email. This way we can make sure that you are the rightful owner of the email address. The newsletter contains information about Quandoo, restaurants and current offers. Legal basis for the sending of newsletters is your consent (Art. 6 (1) (a) GDPR).
When subscribing to the newsletter, we collect your IP address, the date and the exact time of your subscription. This data is stored in order to prove that you signed up to the newsletter. Also, we need the data in case your email address was fraudulently used.
You can withdraw your consent to receive newsletters at any time without incurring any costs other than the transmission costs in accordance with the basic tariffs. Just click on the unsubscribe link at the end of each newsletter or send an email to the address set out above.
Other data collected
We also use Google Tag Manager that allows us to manage tools which are implemented via Google Tag Manager. Google Tag Manager itself does not set any cookies and does not collect any personal information. However, the tool is used to trigger other tags, which might collect data.
For what other purposes do we process your data?
We possibly process your data for additional purposes according to Art. 6 (1) (c) (d) GDPR.
These include the following:
passing on your personal data to third parties if we are legally obliged to do so;
assertion of legal claims and defence in legal disputes;
compliance with legal requirements for data retention due to tax legislation, etc.
To whom do we transmit your data?
We treat your personal data with care and confidentiality and pass such data on to third parties only to the extent described below and no further. We only transmit data to public authorities if there is a legal obligation to do so as a result of a request for information from the competent authority.
Beyond statutory obligations to public authorities, we will only share your information with our third-party providers who assist us in providing the platform, or within the Quandoo Group of Companies.
Other third parties
All of our server hosting services are made available by Google Ireland Limited. The provider processes all data on our behalf and we have subjected it to a strict data processing agreement to ensure the security of the processing in accordance with the requirements of the GDPR.
Within the Quandoo Group of Companies
We are part of a worldwide group of affiliated companies of Quandoo GmbH, KulturBrauerei, Schönhauser Allee 36, 10435 Berlin, Germany (“Quandoo DE”). Quandoo DE itself is a wholly owned subsidiary of Recruit Holdings Co., Ltd, 8-4-17 Ginza, Chuo-ku, Tokyo 104-0061 Japan (“Recruit”). Accordingly, we are obliged to provide Quandoo DE or Recruit with certain information either in accordance with legal reporting requirements or in the normal course of business as a global company. As a rule, all business intelligence data is anonymised to ensure that your right to privacy is respected. However, Quandoo DE or Recruit may also have access to personal, non-anonymised information, such as an internal audit or an audit required by public authorities.
Do we transfer your data to countries outside the EU or the EEA?
As a rule, we do not transfer your data to countries outside the EEA (referred to as “third countries”). We do not host your data in third countries and all our servers are located in the EEA. In some cases, however, we do transfer your data to third countries. This applies in particular to third-party platforms provided by companies based in the U.S. or the United Kingdom (and transfers to Recruit in Japan. In these cases we make sure that the transfer of data is compliant with all legal requirements.
How long will my data be stored?
We process and store your personal data as long as this is necessary for compliance with our contractual or statutory obligations. Afterwards the data is deleted.
Do I have to provide data? What happens if I do not provide my data or no longer provide it?
You are not legally obliged to provide us with the personal data specified in this Privacy Policy.
What rights do I have in relation to processing?
You may assert the following rights against us pursuant to the GDPR:
your right to information under Article 15 GDPR
your right to rectification under Article 16 GDPR
your right to erasure under Article 17 GDPR
your right to restriction of processing under Article 18 GDPR
your right to data portability under Article 20 GDPR
your right of objection pursuant to Article 21 GDPR
Moreover, you have a right to complain to the competent data protection supervisory authority (Article 77 GDPR).
You can revoke your consent to the processing of your personal data at any time. However, such revocation is only effective for the future. Any data processing that took place before revocation will not be affected by this.
Information on your right to object pursuant to Article 21 GDPR
1. Right of objection in individual cases
In addition to the rights already mentioned, you have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you based on Art. 6 para. 1 GDPR (data processing in the public interest) and Art. 6 para. 1 e GDPR (data processing on the basis of a reconciliation of interests); this also applies to the profiling based on this provision within the meaning of Art. 4 para. 4 GDPR. If you object, then we will no longer process your personal data unless we can prove that there are compelling reasons for processing that override your interests, rights and freedoms, or that the processing serves to assert, exercise or defend legal claims. Please also refer to the information in Section 8 of this Privacy Policy: If we terminate the processing due to your objection, it may be that the platform can no longer be made available to you or only to a limited extent.
2. The right to object to the processing of data for advertising purposes
You also have the right to object at any time to the processing of personal data concerning you for the purposes of direct marketing (including a subscription to our newsletter); this also applies to profiling insofar as it is associated with such direct marketing. If you object, then we will no longer process your personal data in the future.
The objection can be made informally and should be sent to the following address:
September 2020
