Effective: December 2020
Who is responsible for data processing and whom can I contact?
Responsible for data processing: Quandoo Hong Kong Limited, FLAT/RM 1905 19/F, West Tower Shun Tak Centre, 168 -200 Connaught Road Central, Hong Kong. This company is also meant if the terms "we" or "us" are used below.
You can contact our Data Protection Officer at: email@example.com
What personal data do we process and from which sources does such data originate?
When we make our platform available to you for use, we process personal data from various sources. On the one hand, this is data that we automatically collect when you use the platform. However, this may also include data which you have voluntarily provided to us.
Data that we collect automatically when you use our platform
As soon as you visit the Platform, you send technical information to our web servers. In this case, we collect the following access data and web access data (which we refer to collectively as "access data"):
- the date and time of the visit and the duration of the use of the platform
- the IP address of your device
- the reference URL (the website from which you may have been redirected)
- the visited subpages of the website; and
- further information about your device (device type, browser type and version, settings, installed plug-ins, operating system)
We process access data so that we can ensure the functionality of the platform. We also process access data to carryout performance analyses on the platform, continuously improve the platform and correct errors to ensure IT security and the operation of our systems, and to prevent or detect misuse, particularly fraud. The legal basis for the collection of this data is our legitimate interest.
In addition, we process access data to adapt the platform to your needs (personalisation). To this end, we also assign you what is known as a "Unique User ID".
Data that you transmit to us yourself
In addition to the data we receive from all visitors, we also process other data in case you use the services we offer.
You can get in touch with us using different channels. To this end, we process all data that you provided us with, e.g. your name, email address, data relating to your restaurant and the content of your request. In case you use our chat-tool, we also process a User ID as well as browser data (such as browser language and version) and data regarding your use of the chat-tool. We will always only use the data in order to get in contact with you as per your request.
If you wish to receive our newsletter, we need your consent for this. We use the so-called double opt-in process for our newsletter, so that you are only subscribed to the newsletter once you click on the link in the confirmation email. This way we can make sure that you are the rightful owner of the email address. The newsletter contains information about Quandoo, restaurants and current offers. Legal basis for the sending of newsletters is your consent.
When subscribing to the newsletter, we collect your IP address, the date and the exact time of your subscription. This data is stored in order to prove that you signed up to the newsletter. Also, we need the data in case your email address was fraudulently used.
Furthermore, when interacting with the newsletter, we collect device and usage data. For example, we record if the newsletter was delivered, if you opened the newsletter or if you clicked on a link in the newsletter. We link your email address to this data in order to personalise and statistically analyse the newsletter.
You can withdraw your consent to receive newsletters and the connected data collection at any time without incurring any costs other than the transmission costs in accordance with the basic tariffs. Just click on the unsubscribe link at the end of each newsletter or send an email to the address set out above.
Other data collected
Google Tag Manager
We also use Google Tag Manager that allows us to manage tools which are implemented via Google Tag Manager. Google Tag Manager itself does not set any cookies and does not collect any personal information. However, the tool is used to trigger other tags, which might collect data.
For what other purposes do we process your data?
We possibly process your data for additional purposes.
These include the following:
- passing on your personal data to third parties if we are legally obliged to do so;
- assertion of legal claims and defence in legal disputes;
- compliance with legal requirements for data retention due to tax legislation, etc.
To whom do we transmit your data?
We treat your personal data with care and confidentiality and pass such data on to third parties only to the extent described below and no further. We only transmit data to public authorities if there is a legal obligation to do so as a result of a request for information from the competent authority.
Beyond statutory obligations to public authorities, we will only share your information with our third-party providers who assist us in providing the platform, or within the Quandoo Group of Companies.
Other third parties
In addition, we transmit data to external service providers who enable us to provide the platform. Please note in this connection that all of our server hosting and cloud services are made available by Google Ireland Limited. This provider processes all data on our behalf and is subjected to a strict data processing agreement to ensure the security of the processing in accordance with the requirements of the GDPR.
Within the Quandoo Group of Companies
We are part of a worldwide group of affiliated companies of Quandoo GmbH, KulturBrauerei, Schönhauser Allee 36, 10435 Berlin, Germany ("Quandoo DE"). Quandoo DE itself is a wholly owned subsidiary of Recruit Holdings Co., Ltd., 8-4-17 Ginza, Chuo-ku, Tokyo 104-0061 Japan ("Recruit"). Accordingly, we are obliged to provide Quandoo DE or Recruit with certain information either in accordance with legal reporting requirements or in the normal course of business as a global company. As a rule, all business intelligence data is anonymised to ensure that your right to privacy is respected. However, Quandoo DE or Recruit may also have access to personal, non-anonymised information, such as an internal audit or an audit required by public authorities.
How long will my data be stored?
We process and store your personal data as long as this is necessary for compliance with our contractual or statutory obligations. Afterwards the data is deleted.
Cookies and other tools on the Quandoo platform
We use the following types of cookies:
- Necessary cookies: Necessary cookies enable the basic functions on a homepage, such as its navigation or access to protected areas. Our homepage does not function without cookies, or only in a limited manner, meaning that these cookies cannot be deactivated.
- Preference cookies: Preference cookies help us to improve functionality and personalisation. For example, settings can be stored regarding the preferred language.
- Statistics cookies: Statistics cookies help us to understand how our users interact with the website. For example, this means that we can analyse how users access our website and how they use it.
- Marketing cookies: Marketing cookies help us to track users via various channels and address them in a targeted manner. The aim is to only display interesting and relevant promotional content for users.
The following applies to all of the tools specified below:
Consent granted once for the collection of data using the tools stated can be withdrawn using the relevant setting in the cookie settings. You can object to data processing on the basis of our legitimate interest by using the relevant opt-out option specified below. In addition, you can prevent the acceptance of cookies by adjusting your browser settings so that no cookies are accepted at all. However, if you configure this setting in this way, you may not be able to use certain current or future elements of our website.
Quandoo's own cookies (referred to as "first-party cookies"):
Lifespan 90 days
Purpose helps to validate the respective user session
Users can prevent the acceptance of first-party cookies by adjusting their browser settings so that no cookies are accepted at all. However, if you configure this setting in this way, you may not be able to use certain current or future elements of our website.
Cookies and plugins provided by third parties (referred to as "third-party cookies")
Furthermore, we also use the following cookies and tools from third-party providers:
Our platform uses the web analysis service Google Analytics, from Google LLC, 1600 Amphitheatre Parkway MountainView, California 94043, USA, for the purpose of analysing and continuously optimising our website.
You can prevent cookies from being stored by configuring the operating system settings on your browser or mobile device or within our cookie consent management tool accordingly. However, please bear in mind that, in this case, you may not be able to make full use all of the functions on our platform. You can also prevent the data produced by the cookie and information relating to your use of our website (including your IP address) being collected by Google and being processed by Google by downloading and installing the browser plug-in.
We use the services of HubSpot Germany GmbH, Am Postbahnhof 17, 10243 Berlin, Germany, a subsidiary of the PrivacyShield certified HubSpot Inc. Hubspot helps us build landing pages and analyse the use of these pages. For this purpose, Hubspot collects certain usage data from your use of the respective pages (e.g. average time on the website, click behaviour, bounce and exit rates, IP address, geolocation data such as your city) which are then stored in user profiles under a pseudonym. We base this data processing on our legitimate interest to optimise our offer to you. If you wish to opt out of this data collection, you can adjust your cookie settings accordingly. Furthermore, we use Hubspot to contact you when you use the contact form or subscribe to our newsletter.
You can object to the creation of a user profile, the storage of data on your use of our website by Hotjar and the use of tracking cookies by Hotjar on other websites by opting out.
Google Ads & Google Remarketing
With Google Ads & Google Remarketing, users who have already visited our platform and are interested in the relevant offer can be addressed again by targeted advertising on the pages of the Google partner network. Advertising is inserted with the aid of cookies.
Google Marketing Platform
We cooperate with Facebook Inc., 1601 South California Avenue, Palo Alto, California 94304, USA, in order to address users again on Facebook. For this purpose, we have integrated Facebook Pixel into our websites. When you visit websites with one of these integrated pixels, non-personal data is automatically transmitted to Facebook for analysing and marketing purposes, which is assigned a user ID by Facebook. As soon as you register with Facebook, Facebook assigns the transmitted data to your Facebook profile and assigns you to certain groups based on your surfing behaviour (so-called custom audiences).
We cooperate with various affiliation and display / native ad networks that allow us to display various advertising materials such as banners or other promotional content on so-called publisher websites. Cookies are used to record which users came to our site via the respective advertising medium clicked on and then made a reservation. These cookies do not contain any personal data, but only a pseudonymous user and, in case of affiliation networks, reservation ID, which make it possible to assign them to the respective network. This information is required for the purpose of reporting and payment processing with the relevant network.
We use the "Intercom" tool (Intercom, Inc., 98 Battery Street, Suite 402, San Francisco, CA 94111 USA as well as 2nd Floor, Stephen Court, 18-21 Saint Stephen's Green, Dublin 2, hereinafter "Intercom") to communicate and provide support to our users. Intercom allows us to contact you directly to answer your questions and help you use our Services. Through the use of Intercom, we collect information such as your email address, name, IP address, and the communication content you share with us. This information is used to provide you with better service and to respond to your inquiries. We have entered into an order data processing agreement with Intercom and implemented EU standard contractual clauses to ensure a sufficient level of data protection. We store communications and chat content for a period of 6 months to ensure that we can resolve any concern. After this period, all related personal data will be deleted. Read more on data protection.