The JOE LOYALTY App - Privacy information and cookie notice In connection with the use of the Joe Loyalty App (the “App”), JOE & THE JUICE A/S (“JOE & THE JUICE” or “we”) will, as the data controller, collect, process and disclose personal data about the users of the App. If you are a user of the App, you must read this text carefully in order to understand how we process your personal data. Please also see the cookie consent, which is accepted separately. 1. Categories of personal of data and cookie/tracking data We collect and process the following types of personal data: Name and email address Gender Birthday Credit card information Personal pin code to the App Facebook account information, including name, email address, gender, age group and profile picture if you choose to link your profile in Joe Loyalty with your Facebook account Profiled picture uploaded by you directly Verification of the payment card used Purchase history of loyalty cards Purchase history of products purchased at JOE & THE JUICE bars by use of loyalty cards as the payment instrument (including but not limited to; location of JOE & THE JUICE bar, date of purchase, product purchased) The dialogue between you and JOE & THE JUICE – if you use the chat function Location data collected from your device Cookie and tracking information, cf. below The App, email messages or other messages and advertisements may use "cookies" and other tracking technologies such as pixel tags and web beacons and tracking of your location via information collected from your smart device. This includes but is not limited to; Information on your location enables us to provide you with information on the nearest JOE & THE JUICE bar. You can deactivate this feature in the privacy settings of your smart device. User log data from the App if sent to JOE & THE JUICE via the App. Other tracking information enable us to store information on your smart device and to help us better understand user behaviour, tell us which parts of the App you have used, provide targeted content and offers, and facilitate and measure the effectiveness of advertisements and searches. The personal data collected through cookies and other tracking technology may be shared with third parties as described below. 2. Purposes We process the personal data for the following purposes: To provide access to use the features in Joe Loyalty in order to create a user profile and to provide the features of the App. To provide a chat function to enable chat with JOE & THE JUICE. To provide you with products, product information, services or information that you have requested To collect payments for loyalty cards and other purchases made in the App To provide access to purchase loyalty cards (including any complementary cards) which can be used to pay for food and drinks in JOE & THE JUICE’s bars. To provide access to rate the juicer and/or the entire juicer team at the JOE & THE JUICE bar where you have used your loyalty card as payment. Subject to consent, if required, wewill send promotions with special offers via the App. If you do not want to receive such marketing information you can deactivate this feature in the privacy settings on your smart device. To sign up for competition, events, newsletters, etc. To help us create, develop, operate, deliver and improve the contents and the performance of the App, loyalty cards, services, content, communications and advertising and for loss prevention and anti-fraud purposes To monitor compliance with our terms and conditions of use of the App To comply with applicable personal data protection laws and regulations, other laws as well as legitimate interests, e.g. o Compliance with basic principles and legal grounds for processing personal data, e.g. documentation requirements of provided notices o Putting in place and maintaining technical and organisational security measures o Investigating and reporting suspected personal data breaches (if any) o Handling inspections and queries by supervisory authorities (if any) o Handling requests, complaints and disputes with data subjects and third parties (if any) o Statistical analyses of the use of the App for the purpose of evaluating the Joe Loyalty app 3. Sources Personal data are collected from you, your use of the app and Facebook in case that you link your profile on Joe Loyalty to your Facebook account. 4. The legal basis for the collection and processing of the personal data The legal bases for collection and processing of your personal data are the following: Consent, cf. article 6 (1)(a) of the EU General Data Protection Regulation and e-privacy regulations regarding use of tracking technologies. The payment order regarding loyalty cards, foods and drinks, cf. article 6(1)(b) of the EU General Data Protection Regulation. JOE & THE JUICE’s legitimate interest based on article 6(1)(f) of the EU General Data Protection Regulation. In the balancing of interests, JOE & THE JUICE has taken into account that the processing of the particular personal data is necessary for the purpose of providing the features in the App The legal basis for processing personal data for compliance purposes is compliance with legal obligations, cf. art. 6(1)(c) of the General Data Protection Regulation and other legislation, orders, etc. Establishment, exercise or defense of legal claims, cf. section 9(2)(f) of the EU General Data Protection Regulation (if any). When we collect personal data directly from you for the purpose of providing you the features in Joe Loyalty, you provide the personal data voluntarily. You are not obliged to provide the information to us. The consequences of not providing the personal data are that you will not be able to use the App. 5. Withdrawal of consent For processing of personal data based on your consent, you have the right to withdraw the consent, however, without affecting the lawfulness of processing based on consent before its withdrawal. You can withdraw your consent by changing the settings in or for the app or by contacting us, using the details set out below, depending on the personal data in scope of the withdrawal. 6. Disclosure of personal data We discloseyour personal data to the following: Payment acquirer (when purchasing loyalty cards) JOE & THE JUICE bars around the world in which you use the loyalty cards or sign up for competition, events, newsletters, etc. Legal and other advisors (only where relevant) Public supervisory authorities (upon request) Google, Inc. 7. The legal basis for the disclosure of the personal data The legal bases for disclosing your personal data are the following: The payment order regarding loyalty cards, foods and drinks, cf. article 6(1)(b) of the EU General Data Protection Regulation. JOE & THE JUICE’s legitimate interest based on article 6(1)(f) of the EU General Data Protection Regulation. In the balancing of interests, JOE & THE JUICE has taken into account that the processing of the particular personal data is necessary for the purpose of providing the features in the App The legal basis for processing personal data for compliance purposes is compliance with legal obligations, cf. art. 6(1)(c) of the General Data Protection Regulation and other legislation, orders, etc. Establishment, exercise or defense of legal claims, cf. section 9(2)(f) of the EU General Data Protection Regulation (if any). The legal basis for collecting and processing personal data relating to geographical location and analytics and collection by and the disclosure and transfer to Google Inc. in the US is your consent, cf. e-privacy regulations or section 6(1)(a) of the EU General Data Protection Regulation. We disclose and transfer personal data relating to MAC addresses and similar identification, usage of the app as the geographical location of your smart device to Google Inc. in the US for purposes of i) the delivery of the location-based information to you, and ii) the statistical use of the app. When we collect personal data directly from you for the purpose of providing you the features in Joe Loyalty, you provide the personal data voluntarily. You are not obliged to provide the information to us. The consequences of not providing the personal data are that you will not be able to use the App. 8. Transfers to data processors We transfer the personal data to our data processors who all assist with different tasks relating to the App: The hosting provider, which stores the personal data on behalf of us. The payment solution provider The provider of customer identity management Marketing partners Third party analytics services 9. International transfers of personal data If we transfer personal data to recipients in countries outside the EU/EEA, in particular to countries or jurisdictions, we will, if required, put a contract or other means in place to ensure that your data is adequately protected, e.g. by using the European Commission’s standard contractual clauses for transfers of personal data to non-EU/EEA countries. Google Inc. (Analytics) The legal basis for the transfer to Google Inc. in the U.S. is Google Inc.’s self-certification to the EU-US Privacy Shield according to which the transfer provides an adequate protection. 10. Retention period We store the personal data for as long as necessary to fulfil the purposes above. This means that we store the personal data as long as you have a profile in Joe Loyalty. If you delete your profile in Joe Loyalty, we will delete your personal data when we do not longer need to document compliance under applicable legislation and when we are no longer exposed to legal claims from you or third parties under applicable laws. 11. Your rights Subject to the conditions set out in applicable data protection legislation, you enjoy the following certain rights: - - To request access to your personal data - To rectification of your personal data - To erasure of your personal data - To restriction of processing of your personal data - To objection to the processing of your personal data You also have the right to lodge a complaint with the competent supervisory authority. 12. Amendments to this notice By using the App you declare to have read and to accept the terms of this Privacy information notice. We may amend this notice from time to time. If we do so, an updated version will be available with a new update of the App. You are responsible for regularly reviewing this Privacy information notice so that you are aware of any changes to them. 13. Contact Please contact us via the App or at care@joejuice.com if you have any questions regarding the protection of your personal data or if you wish to exercise your legal rights. JOE & THE JUICE A/S Østergade 26a DK 1100 Copenhagen K Denmark Email address: care@joejuice.com CONTACT