Restaurant privacy promise
In this privacy policy, you can learn more about how the restaurant processes your personal data when you order items from us and/or consent to receive our news and offers.
We provide you with this information as we are required to do so under the EU General Data Protection Regulation (the GDPR).
Controller
The restaurant is the controller in respect of the processing of your personal data when we register and communicate with you about your orders and in respect of any distribution of various marketing material to you. Our contact details are available on our website.
Purposes of and legal basis for processing
When you order items from us and/or consent to receive our news and offers, we receive your personal data from the local OrderYOYO company located in the country you are in, including OrderYOYO ApS (for Denmark), OrderYOYO Ireland Limited (for Ireland) and OrderYOYO Limited (for Great Britain) (OrderYOYO), which you have disclosed to OrderYOYO. We process your personal data in the following situations.
Registering, preparing and communicating about your order
In this connection, we process your name, your contact, delivery and payment details and information about the order you completed. The purpose of our processing is to prepare the items you have ordered and to send you notices about the delivery etc. The legal basis for our processing is point (b) of article 6(1) of the GDPR as the processing is necessary for us to deliver and inform you of delivery of your items in accordance with our agreement concluded with you (your order).
We may also use your contact details to answer any questions you have in relation to your order. The legal basis for our processing is point (f) of article 6(1) of the GDPR as we are pursuing our legitimate interest in providing customer service, including processing customer enquiries.
Distribution of electronic marketing material
If you have consented to receive marketing material, we will process your name and email address for the purpose of sending news and offers on our items to you. The legal basis for our processing is point (a) of article 6(1) of the GDPR as we will only distribute electronic marketing material if you have consented to it.
Recipients of your personal data
When processing your orders, we may make your personal data available to our processors (suppliers of systems, hosting, marketing activities, etc.), including OrderYOYO who is responsible for registering orders and sending notices and marketing emails etc. on our behalf.
We may also disclose your personal data to our external business partners (e.g. carriers or couriers who may deliver the items you have ordered) and OrderYOYO (who is controller in respect of the data you disclose when completing your order and/or creating your profile etc.).
Transfer of your personal data to third countries
When we make data available to our processors, we may transfer your personal data to the USA, Ukraine, Serbia and the Philippines. The basis for such transfer is the Commission Decision of 5 February 2010 on standard contractual clauses for the transfer of personal data to processors established in third countries under Directive 95/46/EC of the European Parliament and of the Council as we have entered into such standard contractual clauses with the relevant recipients of the data.
Storage of your personal data
The restaurant erases your data immediately after we have completed processing/delivery of your order and you have been informed thereof. Similarly, the restaurant erases the data immediately after we have distributed marketing material.
Your rights etc.
Under the GDPR, you have a number of rights in relation to our processing of your personal data, including the right to request access to and rectification or erasure of your personal data, the right to restriction of processing of your personal data, the right to object to our processing of your personal data and the right to data portability. Please note that we only process your personal data for a short period and that many of your rights will only be relevant in the short period during which we are processing your personal data.
You may contact us using the contact details available on our website if you wish to exercise your rights. If you wish to exercise your rights in respect of OrderYOYO (e.g. in relation to your profile data), you must contact OrderYOYO.
You have the right to file a complaint with the Information Commissioner’s Office (ICO) on https://ico.org.uk/.
Right to withdraw consent (unsubscribing from marketing)
If you are no longer interested in receiving our news or offers, you may withdraw your consent by unsubscribing from marketing in the individual notices you receive or by contacting us directly using the contact details available on the website.
If you withdraw your consent, it will not affect the lawfulness of our processing before the withdrawal. As a result, your withdrawal will only be effective in respect of future processing.
Contact
If you have any questions about how we process personal data, please contact us using the contact details available on the website.
