Quandoo for Restaurants Privacy Policy • Pro

This Privacy Policy explains to you how your personal data is processed when you use the Quandoo website's offers and online services on the "Quandoo for Restaurants" website (hereinafter "Platform"). This Privacy Policy also informs you of your rights and choices to control your personal information and to protect your privacy.

Who is responsible for data processing and whom can I contact?

Responsible for data processing: Quandoo UK Ltd, WeWork Waterloo, 10 York Road, London, SE1 7ND. This company is also meant if the terms "we" or "us" are used below.

You can contact our Data Protection Officer at: dataprotection.UK@quandoo.com

What personal data do we process and from which sources does such data originate?

When we make our platform available to you for use, we process personal data from various sources. On the one hand, this is data that we automatically collect when you use the platform. However, this may also include data which you have voluntarily provided to us.

Data that we collect automatically when you use our platform

As soon as you visit the Platform, you send technical information to our web servers. In this case, we collect the following access data and web access data (which we refer to collectively as "access data"):

We process access data so that we can ensure the functionality of the platform. We also process access data to carryout performance analyses on the platform, continuously improve the platform and correct errors to ensure IT security and the operation of our systems, and to prevent or detect misuse, particularly fraud.

In addition, we process access data to adapt the platform to your needs (personalisation). To this end, we also assign you what is known as a "Unique User ID".

We also use cookies to process such data. Cookies are small text files that you download to your device when you visit our websites and that store the above information about you. To learn more about how cookies work, which cookies we use, and how to disable them, read our cookie policy. It also tells you what information is collected by cookies and tracking tools from third parties. To ensure the legibility of this privacy statement, we have summarised this information  on a separate page.

Data that you transmit to us yourself

In addition to the data we receive from all visitors, we also process other data in case you use the services we offer. We use all data transmitted exclusively in order to list your restaurant on our Platform, to allow you access to our user account and to give you the opportunity to administrate your reservations.

In order to register for a user account, we use the single-sign-on function provided by Keycloak. When registering we ask you to enter your access data. The respective SSO-provider will then authenticate you. This login data is not visible to us.

There are two possibilities for you to use our service:

1. Claim a listing

If your restaurant is already listed with us, you can claim the respective entry. To do this we will first process login data you provide through a third-party signup or through email verification. As soon as we have verified your email address and you have chosen a password, your account will be created. Thereafter we will verify whether you are actually the owner of the restaurant by sending you a verification code to the phone number we have stored. As a last step, we will ask you for the following data in order to confirm your subscription and billing details:

• name and surname

• telephone number

• email address

• business details

After confirming your details and accepting our Data Processing Agreement, your account will be created, and you havefull access to your reservations.

2. Contact Us

If your restaurant is not listed yet on Quandoo, you can contact us using the contact form, where we ask you to providethe following data:

• Name of the restaurant

• Country

• Address

• E-mail address

• Phone number

• Password after successful customer account creation

After a successful verification of your e-mail address, you will have access to your reservations in your customer account.

Other data collected

We also use Google Tag Manager that allows us to manage tools which are implemented via Google Tag Manager.Google Tag Manager itself does not set any cookies and does not collect any personal information. However, the tool isused to trigger other tags, which might collect data.

3. For what other purposes do we process your data?

We possibly process your data for additional purposes.

These include the following:

4. To whom do we transmit your data?

We treat your personal data with care and confidentiality and pass such data on to third parties only to the extent described below and no further. We only transmit data to public authorities if there is a legal obligation to do so as a result of a request for information from the competent authority.

Beyond statutory obligations to public authorities, we will only share your information with our third-party providers who assist us in providing the platform, or within the Quandoo Group of Companies.

Other third parties

All of our server hosting services are made available by Google Ireland Limited. The provider processes all data on our behalf and we have subjected it to a strict data processing agreement to ensure the security of the processing in accordance with the legal requirements.

We also use the services of Intercom AI (more information about the provider below) for our chat functionality. The AI chatbot provided by Intercom AI helps us in communicating and providing support to our users. Intercom AI processes data such as chat logs and user interactions on our behalf under strict data processing agreements to ensure compliance with GDPR. For more information on how Intercom AI handles personal data, users are advised to consult Intercom AI’s Privacy and Cookies Policy.

Quandoo will not share any sensitive data with Intercom. However, which data and information is shared with Intercom depends on the user's input into the chatbot. We would like to point out that the user is responsible for not entering any sensitive data into the chatbot.

Within the Quandoo Group of Companies

We are part of a worldwide group of affiliated companies of Quandoo GmbH, KulturBrauerei, Schönhauser Allee 36, 10435Berlin, Germany ("Quandoo DE"). Quandoo DE itself is a wholly owned subsidiary of Recruit Holdings Co., Ltd, 8-4-17Ginza, Chuo-ku, Tokyo 104-0061 Japan ("Recruit"). Accordingly, we are obliged to provide Quandoo DE or Recruit with certain information either in accordance with legal reporting requirements or in the normal course of business as a global company. As a rule, all business intelligence data is anonymised to ensure that your right to privacy is respected. However, Quandoo DE or Recruit may also have access to personal, non-anonymised information, such as an internal audit or an audit required by public authorities.

5. How long will my data be stored?

We process and store your personal data as long as this is necessary for compliance with our contractual or statutory obligations. Afterwards the data is deleted.

6. Do I have to provide data? What happens if I do not provide my data or no longer provide it?

You are not legally obliged to provide us with the personal data specified in this Privacy Policy.

August 2021

Quandoo Cookie Policy

Cookies and other tools on the Quandoo platform

This information complements the Privacy Policy. Below, we provide you with a list of all the cookies and other web tracking tools provided on our platform either by us orby third parties.

We use the following types of cookies only within the scope of legal regulations and on the basis of the legal foundations specified:

You can prevent the acceptance of cookies by adjusting your browser settings so that no cookies are accepted at all. However, if you configure this setting in this way, you may not be able to use certain current or future elements of our website.

Quandoo's own cookies (referred to as "first-party cookies"):

Name booksession

Lifespan 90 days

Purpose helps to validate the respective user session

Users can prevent the acceptance of first-party cookies by adjusting their browser settings so that no cookies are accepted at all. However, if you configure this setting in this way, you may not be able to use certain current or future elements of our website.

Cookies and plugins provided by third parties (referred to as "third-party cookies")

Furthermore, we also use the following cookies and tools from third-party providers:

Google Analytics

Our platform uses the web analysis service Google Analytics, from Google LLC, 1600 Amphitheatre Parkway MountainView, California 94043, USA, for the purpose of analysing and continuously optimising our website.

Google Analytics uses cookies which allow website use to be analysed (e.g. sites surfed by you, conversions, your  interactions with our webpages, technical information of your browser, shortened IP-address). Pseudonymised user profiles are created for this purpose. We use Google Analytics only with activated IP anonymisation. Furthermore, we use the User-ID function. This function allows us to assign sessions and all activities during those sessions to a permanent User ID. It is therefore possible to analyse user behaviour across different devices.

You can prevent cookies from being stored by configuring the operating system settings on your browser or mobile device or within our cookie consent management tool accordingly. However, please bear in mind that, in this case, you may not be able to make full use all of the functions on our platform. You can also prevent the data produced by the cookie and information relating to your use of our website (including your IP address) being collected by Google and being processed by Google by downloading and installing the browser plug-in.

Further information on conditions of use and data protection can be found in Google Analytics Terms of Service and Google Privacy Policy. 

Legal basis: Article 6 (1) (a) UK GDPR (consent).

HubSpot

We use the services of HubSpot Germany GmbH, Am Postbahnhof 17, 10243 Berlin, Germany, a subsidiary of the PrivacyShield certified HubSpot Inc. Hubspot helps us build landing pages and analyse the use of these pages. For this purpose, Hubspot collects certain usage data from your use of the respective pages (e.g. average time on the website, click behaviour, bounce and exit rates, IP address, geolocation data such as your city) which are then stored in user profiles under a pseudonym. We base this data processing on our legitimate interest to optimise our offer to you. If you wish to opt out of this data collection, you can adjust your cookie settings accordingly. Furthermore, we use Hubspot to contact you when you use the contact form or subscribe to our newsletter.

You can find more information about the data processing for this purpose in our privacy policy above. More information about Hubspot can be found in HubSpot Privacy Policy.

Legal basis: Article 6 (1) (a) UK GDPR (consent).

Hotjar

We use the technology service Hotjar, from Hotjar Ltd. Level 2, St Julian's Business Centre, 3, Elia Zammit Street, StJulian's STJ 1000, Malta, to better understand the needs of our users and to optimise this service. For example, Hotjar shows us how much time is spent on which websites, which links users click on, what users like and dislike, and allows us to develop and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users' behaviour and their devices (notably the device IP address (collected and stored only in anonymised form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), preferred language used to display our website). Hotjar stores this information in a pseudonymised user profile. Neither Hotjar nor ourselves will ever use this information to identify individual users or to verify additional data on an individual user. Further information can be found in the Hotjar Privacy Policy.

You can object to the creation of a user profile, the storage of data on your use of our website by Hotjar and the use of tracking cookies by Hotjar on other websites by opting out. 

Legal basis: Article 6 (1) (a) UK GDPR (consent).

Cookiebot

To manage your cookie preferences, we use the tool Cookiebot from Cybot A/S Havnegade 39, 1058 Copenhagen, Denmark. The cookie settings selected by you are stored with the aid of a cookie. You can find further information on data privacy in Cookiebot Privacy Policy.

Legal basis: Article 6 (1) (b) UK GDPR (contract).

Google Ads & Google Remarketing

With Google Ads & Google Remarketing, users who have already visited our platform and are interested in the relevant offer can be addressed again by targeted advertising on the pages of the Google partner network. Advertising is inserted with the aid of cookies.

If you do not wish to receive interest-related advertising, you can deactivate the use of cookies for these purposes. Both services are subject to the Google Privacy Policy available for download.

Legal basis: Art. 6 (1) (a) UK GDPR (consent).

Google Marketing Platform

Google Marketing Platform enables its users to place ads on their websites. Advertisers can determine how often, when, and for how long ads are displayed in a browser, and use cookies to facilitate behavioural targeting by indicating which areas of a website you are browsing. A pseudonymised identification number is assigned to your browser in order to check which advertisements are displayed in your browser and which have been accessed. The cookies do not contain any personal data.

You can deactivate the use of cookies by Google for such purposes. Both services are subject to the Google Privacy Policy available for download.

Legal basis: Art. 6 (1) (a) UK GDPR (consent).

Facebook retargeting

We cooperate with Facebook Inc., 1601 South California Avenue, Palo Alto, California 94304, USA, in order to address users again on Facebook. For this purpose, we have integrated Facebook Pixel into our websites. When you visit websites with one of these integrated pixels, non-personal data is automatically transmitted to Facebook for analysing and marketing purposes, which is assigned a user ID by Facebook. As soon as you register with Facebook, Facebook assigns the transmitted data to your Facebook profile and assigns you to certain groups based on your surfing behaviour (so-called custom audiences).

For further information on the purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as your settings options for protecting your privacy, please refer to the Facebook Privacy Policy which can be found in Ad Settings and Data Policy. If you wish to object to the use of the user-defined website from Facebook, you can do this via Ad Settings. 

Legal basis: Article 6 (1) (a) UK GDPR (consent).

Geo Targetly

Geo Targetly, provided by V&T Technologies Pty. Ltd., Level 23 - HWT Tower, 40 City Road, Southbank VIC 3006, Melbourne, Australia, enables us to redirect users to our correct market-specific websites based on country, state or city. The purpose is to boost user experience by redirecting to pages with location-specific content. To achieve this, GeoTargetly uses cookies to monitor user behaviour and location. Data processed for such purposes are website visitor behaviour, IP addresses, browser URLs, Wi-Fi- and GPS signals.

Further information can be found in Geo Targetly Privacy Policy.

Legal basis: Article 6 (1) (a) UK GDPR (consent).

Affiliation Networks

We cooperate with various affiliation and display / native ad networks that allow us to display various advertising materials such as banners or other promotional content on so-called publisher websites. Cookies are used to record which users came to our site via the respective advertising medium clicked on and then made a reservation. These cookies do not contain any personal data, but only a pseudonymous user and, in case of affiliation networks, reservation ID, which make it possible to assign them to the respective network. This information is required for the purpose of reporting and payment processing with the relevant network.

Legal basis: Art. 6 (1) (a) UK GDPR (consent).

Tool Tradedoubler

Privacy Policy

Opt-Out

Intercom

We use the "Intercom" tool (Intercom, Inc., 98 Battery Street, Suite 402, San Francisco, CA 94111 USA as well as 2nd Floor, Stephen Court, 18-21 Saint Stephen's Green, Dublin 2, hereinafter "Intercom") to communicate and provide support to our users. Intercom allows us to contact you directly to answer your questions and help you use our Services. Through the use of Intercom, we collect information such as your email address, name, IP address, and the communication content you share with us. This information is used to provide you with better service and to respond to your inquiries. We have entered into an order data processing agreement with Intercom and implemented EU standard contractual clauses to ensure a sufficient level of data protection. We store communications and chat content for a period of 6 months to ensure that we can resolve any concern. After this period, all related personal data will be deleted. Read more on data protection.

Legal basis: Article 6 (1) (a) UK GDPR (consent).

SmartRecruiters

For recruiting, we use SmartRecruiters, Inc., 225 Bush Street, Suite #300, San Francisco CA 94104 US. This provider uses cookies, to optimise the offer to the user and guarantee an optimised experience on our career page. More information in SmartRecruiters Privacy Policy.

Legal basis: Article 6 (1) (a) UK GDPR (consent).

YouTube

You can find embedded videos of YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) on our website- YouTube uses cookies in order to track the user's interaction with its videos. Based on that, YouTube processes for example user preferences, location and other information and stores them under an Identifier. Read more on data protection.

Legal basis: Article 6 (1) (a) UK GDPR (consent).