Source: https://www.quandoo.co.uk/data_privacy?locale=en_GB
Timestamp: 2020-06-05 21:20:34
Document Index: 136872611

Matched Legal Cases: ['Art. 6', 'Art. 26', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 4', 'Art. 6', 'Art. 6']

This Privacy Policy explains to you how your personal data is processed when you use the Quandoo website's offers and online services on the "Quandoo" website and the associated mobile app (hereinafter "Platform" refers to both the website and the mobile app). This Privacy Policy also informs you of your rights and choices to control your personal information and to protect your privacy.
Responsible for data processing: Quandoo UK Ltd, The Lightwell, Second Floor, 12-16 Laystall Street, London, EC1R 4PF. This company is also meant if the terms "we" or "us" are used below.
We maintain what is referred to as a fan page on the Facebook platform. When you visit our fan page, data may be collected for market research and advertising purposes, which are stored in user profiles using pseudonyms. Cookies are set for this purpose. Based on these cookies, we can carry out statistical evaluations, for instance. This serves our legitimate interest in accordance with Art. 6 para. 1 lit. f) GDPR on an optimised presentation (for further information on the legal foundations, see below). Data processing is carried out on the basis of an agreement between jointly responsible parties pursuant to Art. 26 GDPR, which you can view here: https://www.facebook.com/legal/terms/page_controller_addendum You can find detailed information about data processing by Facebook, contact options and your rights in Facebook's privacy policy: https://www.facebook.com/about/privacy/, where you can also exercise your right of appeal.
When processing your personal data, we rely on various legal bases in accordance with the so-called Data Protection Basic Regulation, an EU-wide legal framework for the standardization of data protection law (" GDPR").
Consent (Art. 6 (1) GDPR)
Fulfilment of our contractual obligations towards you (Article 6 (1) b GDPR)
Our legitimate interests (Article 6 (1) f GDPR
Statutory requirements (Article 6 (1) c GDPR) or in the public interest (Article 6 (1) d GDPR)
In addition, we transmit data to external service providers who enable us to provide the Platform. This includes the data and providers listed in our cookie policy. Please note in this connection that all of our server hosting and cloud services are made available by Amazon Web Services, Inc. (" AWS") as well as Google Ireland Limited. Both providers process all data on our behalf and we have subjected them to a strict data processing agreement to ensure the security of the processing in accordance with the requirements of the GDPR.
6. Do we transfer your data to countries outside the EU or the EEA?
As a rule, we do not transfer your data to countries outside the EEA (referred to as "third countries"). We do not host your data in third countries and all our servers are located in the EEA (Ireland, to be precise). In some cases, however, we do transfer your data to third countries. This applies in particular to third-party platforms provided by companies based in the U.S. or the United Kingdom (as soon as the United Kingdom has left the EU) and transfers to Recruit in Japan.
In this context, we ensure that data recipients are either listed on what is referred to as the Privacy Shield (as is the case on Google and Facebook), subject to the "Binding Corporate Rules", or have entered into a contract with us under the EU standard contractual clauses and are included by any other recipient to ensure the security of processing and an adequate level of data protection.
8. Does Quandoo create a user profile with my personal data?
9. Do I have to provide data? What happens if I do not provide my data or no longer provide it?
10. What rights do I have in relation to processing?
You may assert the following rights against us pursuant to the GDPR:
your right to rectification under Article 16 GDPR
your right to erasure under Article 17 GDPR
your right to restriction of processing under Article 18 GDPR
your right to data portability under Article 20 GDPR
your right of objection pursuant to Article 21 GDPR
Moreover, you have a right to complain to the competent data protection supervisory authority (Article 77 GDPR, read in in conjunction with with Section 19 of the [German] Federal Data Protection Act - BDSG).
You can revoke your consent to the processing of your personal data at any time. This also applies to the revocation of declarations of consent given to us prior to entry into force of the GDPR, i.e. before 25 May 2018. However, such revocation is only effective for the future. Any data processing that took place before revocation will not be affected by this.
In addition to the rights already mentioned, you have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you based on Art. 6 para. 1 GDPR (data processing in the public interest) and Art. 6 para. 1 e GDPR (data processing on the basis of a reconciliation of interests); this also applies to the profiling based on this provision within the meaning of Art. 4 para. 4 GDPR. If you object, then we will no longer process your personal data unless we can prove that there are compelling reasons for processing that override your interests, rights and freedoms, or that the processing serves to assert, exercise or defend legal claims. Please also refer to the information in Section 8 of this Privacy Policy: If we terminate the processing due to your objection, it may be that the platform can no longer be made available to you or only to a limited extent.
You also have the right to object at any time to the processing of personal data concerning you for the purposes of direct marketing (including a subscription to our newsletter); this also applies to profiling insofar as it is associated with such direct marketing. If you object, then we will no longer process your personal data in the future.
The objection can be made informally and should be sent to the following address:
11. Changes to current data protection information
Quandoo Cookie Policy
Cookies and other tools on the Quandoo platform
This information complements the Quandoo Privacy Policy.
Below, we provide you with a list of all the cookies and other web tracking tools provided on our platform either by us or by third parties.
We use the following types of cookies only within the scope of legal regulations and on the basis of the legal foundations specified:
Necessary cookies: Necessary cookies enable the basic functions on a homepage, such as its navi-gation or access to protected areas. Our homepage does not function without cookies, or only in a lim-ited manner, meaning that these cookies cannot be deactivated. These cookies are therefore used to execute the contract concluded with you through the use of our website (Article 6(1)(b) GDPR).
Preference cookies: Preference cookies help us to improve functionality and personalisation. For ex-ample, settings can be stored regarding the preferred language. The cookies are used by us or by third parties integrated by us. If they are "first-party cookies", we use the cookies on the basis of our legiti-mate interest in presenting our website as user-friendly (Article 6(1)(f) GDPR). In all other cases, the legal basis is your consent (Article 6(1)(a) GDPR).
Statistics cookies: Statistics cookies help us to understand how our users interact with the website. For example, this means that we can analyse how users access our website and how they use it. We use these cookies on the basis of our legitimate interest in the statistical evaluation of the use of our website or your consent (Article 6(1)(a) and (f) GDPR).
Marketing cookies: Marketing cookies help us to track users via various channels and address them in a targeted manner. The aim is to only display interesting and relevant promotional content for users. This is done solely on the basis of your consent (Article 6(1)(a) GDPR).
The following applies to all of the tools specified below: Consent granted once for the collection of data using the tools stated can be withdrawn using the relevant setting in the cookies settings. You can object to data processing on the basis of your legitimate interest by using the relevant opt-out option specified below. In addition, you can prevent the acceptance of cookies by adjusting your browser settings so that no cookies are accepted at all. However, if you configure this setting in this way, you may not be able to use certain current or future elements of our website.
t 29 days after last change Defines the channel via which a user did a booking.
quandooUserLanguage 1 year Saves the language selected by the user.
quandooUserSearchDestination Session Saves the default search area of the user.
ut 90 days Persist the authentication of a user.
quandooUserVisitorId 180 days Identify the user in surveys conducted.
qdoo_gp 6 days Collects geolocation information.
promoCode7d 7 days Stores the Promotional Codes entered by the user.
sem_attributes Session Identifies the SEM campaign details.
grpRef Session Stores the name of the chain restaurant.
qdoo_exp_ 30 days Helps to know which experience was served to the user in order to serve a consistent experience.
Furthermore, we also use the following cookies and tools from third-party providers:
Our platform uses the web analysis service Google Analytics, from Google LLC, 1600 Amphitheatre Parkway Mountain View, California 94043, USA, for the purpose of analysing and continuously optimising our website. Google Analytics uses cookies which allow website use to be analysed. Pseudonymised user profiles are created for this purpose. We use Google Analytics only with activated IP anonymisation.
You can prevent cookies from being stored by configuring the operating system settings on your browser or mobile device accordingly. However, please bear in mind that, in this case, you may not be able to make full use all of the functions on our platform. You can also prevent the data produced by the cookie and in-formation relating to your use of our website (including your IP address) being collected by Google and being processed by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout.
Further information on conditions of use and data protection can be found at https://marketingplatform.google.com/about/analytics/terms/us/ and https://policies.google.com/privacy?hl=en-US.
Legal basis: Article 6(1)(f) GDPR (legitimate interest).
We use the technology service Hotjar, from Hotjar Ltd. Level 2, St Julian's Business Centre, 3, Elia Zammit Street, St Julian's STJ 1000, Malta, to better understand the needs of our users and to optimise this service. For example, Hotjar shows us how much time is spent on which websites, which links users click on, what users like and dislike, and allows us to develop and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users' behaviour and their devices (notably the device IP address (collected and stored only in anonymised form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), preferred language used to display our website). Hotjar stores this information in a pseudonymised user profile. Neither Hotjar nor ourselves will ever use this information to identify individual users or to verify additional data on an individual user. Further information can be found in the Hotjar Privacy Policy: https://www.hotjar.com/legal/policies/privacy.
You can object to the creation of a user profile, the storage of data on your use of our website by Hotjar and the use of tracking cookies by Hotjar on other websites by accessing the following link: https://www.hotjar.com/opt-out.
Legal basis: Article 6(1)(a) GDPR (consent).
We cooperate with Wisepops, 49 rue Jean De La Fontaine, 75016 Paris, France. Wisepops is a provider that allows us to place pop-ups based on users' surfing behaviour. Wisepops also collects surfing data and places appropriate pop-ups. Cookies are used for this purpose. Further information can be found at https://support.wisepops.com/more-info/data-and-cookie-policy.
To manage your cookie preferences, we use the tool Cookiebot from Cybot A/S Havnegade 39, 1058 Co-penhagen, Denmark. The cookie settings selected by you are stored with the aid of a cookie. You can find further information on data privacy here: https://www.cookiebot.com/en/privacy-policy/.
Legal basis: Article 6(1)(b) GDPR (contract).
"Near Me" feature
If you have given your consent for us to access your location using the respective browser setting, we collect information on your location. By activating this "Near Me" feature, we can show you restaurants near you. Cookies are used and the information stored in this cookie is processed under a pseudonym in order to analyse your use of our website.
Legal basis: Art. 6 (1) a GDPR (consent).
You can deactivate the use of cookies by Google for such purposes athttps://adssettings.google.com/authenticated. Both services are subject to the Google Privacy Policy available for download at https://policies.google.com/privacy?hl=en-US.
We cooperate with Facebook Inc., 1601 South California Avenue, Palo Alto, California 94304, USA, in order to address users again on Facebook. For this purpose, we have integrated Facebook Pixel into our websites. When you visit websites with one of these integrated pixels, non-personal data is automatically transmitted to Facebook for analysing and marketing purposes, which is assigned a user ID by Facebook. As soon as you register with Facebook, Facebook assigns the transmitted data to your Facebook profile and assigns you to certain groups based on your surfing behaviour (so-called custom audiences).
For further information on the purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as your settings options for protecting your privacy, please refer to the Facebook Privacy Policy which can be found at https://www.facebook.com/ads/website_custom_audiences/ and https://www.facebook.com/privacy/explanation. If you wish to object to the use of the user-defined web-site from Facebook, you can do this at https://www.facebook.com/ads/website_custom_audiences/.
We use Bing Ads from the Microsoft Corporation, One Microsoft Way Redmond, WA 98052-6399 USA, to advertise our business online and thereby linked to Bing Universal Event Tracking. In order to effectively market our product or our service, we allow Bing to use a cookie to record your visit to our website and the reservation made. Furthermore, your surfing behaviour is recorded for marketing and optimisation purposes.
You can object to the collection of data for these purposes, among others, by preventing cookies from being stored for the bing.com domain in browser settings or by using the appropriate setting here: http://choice.microsoft.com/de-DE/opt-out. Further information on data collection by Microsoft can be found here: https://privacy.microsoft.com/en-gb/privacystatement.
Affiliation and Display Networks
We cooperate with various affiliation and display / native ad networks that allow us to display various advertising materials such as banners or other promotional content on so-called publisher websites. Cookies are used to record which users came to our site via the respective advertising medium clicked on and then made a reservation. These cookies do not contain any personal data, but only a pseudonymous user and, in case of affiliation networks, reservation ID, which make it possible to assign them to the respective network. This information is required for the purpose of reporting and payment processing with the relevant network.
Legal basis: Art. 6 (1)(a) GDPR (consent).
AWIN https://www.awin.com/gb/privacy https://www.awin.com/de/rechtliches/cookieoptout.
Oath https://privacy.aol.co.uk/legacy/ https://privacy.aol.co.uk/legacy/
Marketing Town https://m-t.io/privacy Cookie Settings
Outbrain https://www.outbrain.com/legal/privacy https://www.outbrain.com/legal/privacy
Optimisemedia https://www.optimisemedia.com/privacy-policy https://www.optimisemedia.com/privacy-policy#12
Plista https://www.plista.com/about/privacy/ https://www.plista.com/about/opt-out
Shopback https://www.shopback.co/privacy-policy.html https://www.shopback.co/opt-out.html
Taboola https://www.taboola.com/privacy-policy https://www.taboola.com/privacy-policy#interest-based-advertising
Tradedoubler https://www.tradedoubler.com/de/privacy-policy/ https://publisher.tradedoubler.com/include/functions/optout.html
We use the services of zenloop GmbH, zenloop GmbH, Brunnenstrasse 196, 10119 Berlin. zenloop is a business-to-business software-as-a-service platform that enables us to collect and analyse feedback from our customers via various channels. This enables us to tailor and improve our services to the needs of our customers, which constitutes a legitimate interest within the meaning of Article 6 (1) f GDPR.