Data Protection Declaration for DISH ORDER

 

1.               General Information

1.1            Controller within the meaning of the data protection laws is CERINA KEHY, 72 RUE VICTOR HUGO, PIERRELAYE, 95480, France, cerina.kehi@ckremenbon.fr (hereinafter “we” or “us”).

1.2            If you have any questions regarding data protection, you can contact us at the above address.

1.3            In this privacy policy we explain how we collect, process, and use personal data in the context of providing our online ordering services. Personal data are individual pieces of information about your personal or factual circumstances. Further details regarding the provision of our services can be found in our General Terms and Conditions [Terms and Conditions]. We process personal data that we collect about you exclusively within the framework of the applicable laws.

2.               Processing of Personal Data and Transmission to Third Parties

2.1            When you use our services, we collect and process your personal data for the following purposes:

(a)        In order to place an online order with us, it is necessary for you to provide us with your first and last name, your e-mail address, and your mobile phone number. If the service also includes delivery, we collect data of the delivery address as well. This data is necessary for us to process the order correctly. You also have the possibility to create your own account. With such an account, further orders can be placed quickly and easily at a later date. The processing of this personal data is based on Article 6 paragraph 1 letter b) GDPR (General Data Protection Regulation) and is necessary for the performance of the contract between you and us.

(b)        Certain personal data is automatically collected through your end device (computer, mobile phone, tablet, etc.) when you use the online ordering service. We collect the IP address currently used by your end device, date and time, the browser type and operating system of your end device and the accessed websites. This is done for purposes of data security and to optimise our offer and improve the service. This personal data is processed on the basis of Article 6 paragraph 1 letter f) GDPR. The protection of our website and the optimisation of our services represent a legitimate interest on our part.

(c)        If you contact us (e.g. via an enquiry using the contact details provided by us), we only process the personal data that you have provided us with and that is necessary to process and answer your enquiry.

2.2            In order to enable the data processing operations mentioned in this privacy policy, for example for the hosting and maintenance of our service, we use external service providers. They will only act in accordance with our instructions and are contractually obliged to comply with data protection regulations in accordance with Article 28 GDPR. The online ordering service itself is provided by Hospitality Digital GmbH, Metro-Straße 1, 40235 Düsseldorf.

3.               Cookies

3.1            In order to make our services attractive and to enable the use of certain functions, we use so-called cookies. These are small text files that are stored on your end device, assigned to the browser you are using, and some of the cookies we use are deleted after the browser session ends, i.e. after closing your browser (so-called session cookies). Other cookies remain on your end device and enable us to recognize your browser on your next visit (persistent cookies). You can set your browser to inform you about the setting of cookies and decide individually about their acceptance or to exclude the acceptance of cookies for certain cases or generally. For more information, please refer to the help function of your internet browser. If cookies are not accepted, the functionality of our website may be limited. By accepting our “cookie banner”, you agree to the processing of your personal data through cookies. This personal data is processed on the basis of Article 6 paragraph 1 letter a) GDPR. We use the following analysis cookies:

(a)        We use Adobe Analytics, a service of Adobe Systems Software Ireland Limited (4-6 Riverwalk Citywest Business Campus, Dublin 24, Republic of Ireland; “Adobe”). This service uses cookies which are stored on your end device and which enable an analysis of your use of our website. The information generated by the cookie regarding your use of our website (including your IP address) is transferred to Adobe’s servers in Ireland, where it is anonymised and then transferred in anonymised form to servers in the USA for further processing and stored there. Adobe uses this information to evaluate your use of our website, to compile reports on website activity for the website operator and to provide other services related to website and internet usage. If required by law or if third parties process this information on behalf of Adobe, this information may be transferred to third parties. Under no circumstances will your IP address be linked to other Adobe data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of our website. By using this website, you agree to the processing of the data collected about you in the manner and for the purpose described above. You may revoke your consent to the collection of data by Adobe at any time, effective for the future. You can find out more about the revocation at http://www.adobe.com/privacy/opt-out.html.

(b)        We also use Google Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland Inc. (“Google”). Google Analytics uses cookies as well. The information generated by the cookies about your use of our website is usually transmitted to a Google server in the USA and stored there. Your IP address will, however, be shortened by Google within member states of the European Union or in other states which are party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there. On our behalf, Google will use this information to evaluate your use of our website, to compile reports on website activities and to provide further services to the website operator in connection with website and internet use. The IP address transmitted by your browser within the framework of Google Analytics is not combined with other data from Google. You can prevent the storage of cookies by adjusting your browser settings accordingly. You can also prevent the collection of the data generated by the cookies and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the browser plugin available at the following link https://tools.google.com/dlpage/gaoptout?hl=de.

4.               Provision of Personal Data and Retention Periods

4.1            The provision of your personal data is voluntary unless otherwise required by law (e.g. COVID-19 restrictions). If you do not provide us with your personal data, this has no consequences for you, except that you will not be able to use our services.

4.2            Personal data that you provide us with via our online ordering service is only stored until the purpose for which it was processed has been fulfilled. If you create your own account, the data is stored until the account is deleted.

4.3            Different storage periods may also result from a legitimate interest (e.g. to ensure data security and prevent misuse). Personal data that we are required to store due to legal or contractual storage obligations will be stored rendering them inaccessible for the duration of the relevant obligation.

5.               Your Rights

As a data subject within the meaning of the GDPR you are entitled to the following rights:

·      The right to obtain information on the data processing and a copy of the processed data (right of access, Article 15 GDPR),

·      the right to demand the correction of inaccurate data or the completion of incomplete data (right to rectification, Article 16 GDPR)

·      the right to request the deletion of personal data, if the statutory requirements for this are met, and, if the personal data has been disclosed to third parties, the information to other controllers about the request for deletion, if this is provided by law (right to erasure, Article 17 GDPR)

·      the right to demand the restriction of data processing (right to restriction of processing, Article 18 GDPR),

·      the right to receive personal data in a structured, commonly used, and machine-readable format and to request the transfer of such data to another controller (right to data portability, Article 20 GDPR),

·      the right to receive information on the essential aspects of the joint control of the processing, in order to properly verify the roles and responsibilities of each controller with regard to the processing of personal data and the mechanisms and procedures for exercising the rights of data subjects (Article 26 paragraph 2 GDPR),

·      the right to revoke a given consent at any time in order to prevent data processing based on your consent. The revocation does not affect the lawfulness of the processing based on the consent given prior to the revocation (right of revocation, Article 7 GDPR).

6.               Right of objection

If we process your personal data on the basis of legitimate interests pursuant to Art. 6 (1) p.1 lit. f) GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, insofar as there are grounds for doing so that arise from your particular situation, in order to stop the data processing.

 

You also have the right to lodge a complaint with the competent supervisory authority if you believe that the data processing violates the GDPR (Article 77 GDPR).

Version of: Oct 202/AG

Dish Order_B2C_Privacy_V3.2_Oct 2021_en