Datenschutz-Bestimmungen

CHOICE QR s.r.o.

 

PRIVACY POLICY

  1. INITIAL PROVISIONS
    1. This is the Privacy Policy of Choice QR s.r.o., a company incorporated in the Czech Republic, ID No. 095 17 600, registered office: Na příkopě 857/18, Nové Město, 110 00 Prague 1, Czech Republic, registered with the Municipal Court in Prague, file No. C 337491 (also “Choice QR” or “we”, “us” or “our”), as the owner and operator of the Choice QR. We refer to all our products, services, websites and apps collectively as the “Choice QR Services” in this Privacy Policy. For the avoidance of doubt, it is provided that Choice QR Services do not include processing of personal data which takes place with regard to the conclusion of contract between our clients and you as a natural person. Our clients are the following entities (which shall act independently as controllers of personal data if you enter into agreement with them):
      Restaurant legal data
    2. We respect the need for privacy and protection of personal information, including but not limited to any personal data. For the purposes of this Privacy Policy, personal data shall mean any information relating to an identified or identifiable natural person, where an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. 
    3. We always process personal data in accordance with this Privacy Policy and applicable legislation, such as Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the “GDPR”).
    4. Please read this Privacy Policy carefully to understand how we collect, process and protect personal data if you use the Choice QR Services, and what rights you have in this connection. By using the Choice QR Services and/or providing any personal data to us, you consent to be bound by this Privacy Policy and warrant that all personal data provided by you is accurate and that you are authorized to provide such personal data to us.
    5. For the purpose of this Privacy Policy and unless the context requires otherwise, we shall be considered as the data controller of personal data.
  2. CATEGORIES OF PERSONAL DATA
    1. We collect, process and protect the following categories of personal data:
      1. personal data
        E-mail address;
        First name and last name;
        IP address; and
        While using the Choice QR Services, we may ask you to provide us with the above-mentioned personal data which can be used to contact or identify you. If you provide us with respective consent, we may use personal data also to contact you using newsletters, marketing or promotional materials and provide you with other information that may be of interest to you
        Tracking & Cookies Data
        We use cookies and similar tracking technologies to process personal data that are associated with the Choice QR Services. Please refer to Article 6 to learn more.
  3. PURPOSES OF PERSONAL DATA PROCESSING
    1. We process personal data for the following purposes:
      1. Fulfillment and compliance with our contractual and statutory obligations, such as the provision of the Choice QR Services agreed between you and us – the legal basis for processing is article 6.1 letter “b” of GDPR (processing is necessary for the performance of a contract to which party is the data subject)
      2. Direct marketing activities related to the Choice QR Services – the legal basis for processing is article 6.1 letter “f” of GDPR (processing is necessary for the purposes of the legitimate interests pursued by us, that is carrying our direct marketing)
      3. Detection, prevention and addressing of technical issues – – the legal basis for processing is article 6.1 letter “f” of GDPR (processing is necessary for the purposes of the legitimate interests pursued by us, that is preventing errors and remedying them);
      4. Improvement of the Choice QR Services – the legal basis for processing is article 6.1 letter “a” of GDPR (data subject has given consent to the processing);
      5. Conducting of analytics with regard to cookies – the legal basis for processing is article 6.1 letter “a” of GDPR (data subject has given consent to the processing);
      6. Displaying commercial advertisements with regard to cookies –  the legal basis for processing is article 6.1 letter “a” of GDPR (data subject has given consent to the processing).
  4. RETENTION AND TRANSFER OF PERSONAL DATA
    1. We will retain and process personal data only for as long as is necessary for the purposes set out in this Privacy Policy and only to the extent necessary to comply with our legal obligations, resolve disputes, exercise our rights and protect our interests. In particular, we will process personal data for the following periods of time:
      1. personal data according to Article 3.1 a) will be processed for the duration of our contractual and statutory obligations;
      2. personal data according to Article 3.1 b) will be processed until you object against processing  for direct marketing activities (such as rejection of sending newsletters or other marketing communication);
      3. personal data according to Article 3.1 c), will be processed as long as you use the Choice QR Services;
      4. personal data according to Article 3.1 d) will be processed as long as your consent is valid, no longer than for the period of using Choice QR Services;
      5. personal data according to Article 3.1 e) and f) will be processed as according to the cookie characteristics.
    2. In connection with the provision of Choice QR Services, providing the data referred to in section Article 3.1 a), b) and c) is a contractual obligation. Failure to provide data will prevent us from providing Choice QR Services. In connection with the improvement of Choice QR Services, conducting analytics and displaying advertisements, providing the data referred to in Article 3.1 d), e) and f) is voluntary. Failure to provide the data will make it impossible to adapt the Choice QR Services to your needs, conducting analytics or will prevent from displaying advertisements tailored to you.
  5. DISCLOSURE OF PERSONAL DATA
    1. We may disclose personal data to a third party in particular in connection with:
      1. Providing Choice QR Services
        The recipients of your personal data are entities cooperating with us, especially our subcontractors and contractors, including companies located outside the European Economic Area. We store all data using Google Cloud for all our customers irrespective of their location. For more information about Google’s privacy practice please see the Google Privacy Page.
      2. Business Transactions
        We may disclose personal data to any third party that acquires all or substantially all of our business, stocks or assets, or with whom we merge or undergo any other form of corporate restructuring. If we do, we will inform such third party of the requirement to process personal data in accordance with this Privacy Policy.
      3. Disclosure for Law Enforcement
        We may, under certain circumstances, be required to disclose personal data by law or in response to requests made by public authorities (e.g. a court or a government agency).
      4. Legal Requirements
        We may disclose personal data if we believe in good faith that such disclosure is necessary in order to: (i) comply with a legal obligation, (ii) protect and/or defend our rights or property, (iii) prevent or investigate possible wrongdoing in connection with the Choice QR Services, (iv) protect the safety of users of the Choice QR Services or the public, (v) protect against legal liability.
        Recipients of personal data may be located outside the EEA. Countries of the recipients outside the EEA according to the decision to the European Commission ensure the appropriate level of protection of personal data compliant with EEA standards. In case of recipients not included in the decision of the European Commission, we conclude agreements based on standard contract clauses according to the Article 46.2 GDPR. All information relating to protection of data may be obtained at the office of Choice or in e-mail sent to e-mail indicated in this Privacy Policy.
  6. TRACKING, COOKIES AND IP ADDRESSES 
    1. Cookies are computer files with small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Tracking technologies also use beacons, tags and scripts to collect and track information and to improve and analyze the Choice QR Services. Cookies allow us to recognize whether you re-entered our website from the same device, to record some of your stored parameters and to verify whether you belong to a particular category of users to which certain communication should be targeted. 
    2. If you want to know more about the use of Cookies by Choice please refer to our Cookie’s Policy at: https://choiceqr.com/us/cookies-policy.
  7. DIRECT MARKETING
    1. By (i) granting respective consent to direct marketing during registration as a user of the Choice QR Services or by granting respective consent when using the Choice QR Services without prior registration, or (ii) by granting respective consent when subscribing to marketing communications, surveys etc., you agree that we may use your electronic contact details, to contact you via electronic means (such as e-mail) with marketing information. 
    2. You may opt out of marketing communications by disabling this function via the unsubscribe link provided in each e-mail or other communication you receive, or by sending an e-mail request to [email protected] specifying that you wish to opt out from marketing communications from our clients.
    3. You may also grant additional consent to direct marketing to our clients under the conditions provided by their respective privacy policy also either by (i) granting respective consent to direct marketing during registration as a user of the Choice QR Services or by granting respective consent when using the Choice QR
    4. Services without prior registration, or (ii) by granting respective consent when subscribing to marketing communications, surveys etc., when you agree that they may use your electronic contact details, to contact you via electronic means (such as e-mail) with marketing information. However, this consent is fully governed by their internal privacy policy and we are in no way responsible for it.
  8. SECURITY
    1. We are committed to storing all personal data securely. Therefore, we have implemented adequate physical, technical and organizational measures and plans for protecting and securing personal data (which do not, however, deprive you of your responsibility for taking adequate steps to secure your data, particularly for the transmission of data). Our aim is to eliminate any unauthorized or unlawful processing of personal data as well as any accidental, unauthorized or unlawful accessing, use, transferring, processing, copying, transmitting, alteration, loss or damage of personal data. 
    2. Where we have given you (or where you have chosen) a password which enables you to access certain parts of the Choice QR Services, you are responsible for keeping this password strong and confidential. We ask you not to share the password with unauthorized persons.
    3. Unfortunately, the transmission of information via the internet is never completely secure. Although we will do our best to protect personal data, we cannot guarantee the security of personal data transmitted by you. Any such transmission is at your own risk to the extent that we cannot reasonably secure it. However, once we have received personal data, we will use strict procedures and security measures to protect personal data and prevent unauthorized access.
    4. To maintain the highest standard of personal data protection, all information you provide to us is stored on secure servers behind firewalls. We restrict access to personal data to employees, contractors and agents who need to know such personal data in order to operate, develop or improve the Choice QR Services. 
    5. Certain parts of the Choice QR Services that collect personal data also use Secure Sockets Layer (SSL) encryption or other types of encryption. We back up all Customer data in the data center located in Frankfurt (Germany), which enables an expedited recovery in case of a disaster or other event of similar nature, and whenever possible, we will ensure the pseudonymization or anonymization of all personal or related data (except for names and e-mail addresses).]
  9. YOUR RIGHTS
    1. Subject to the rules and conditions set forth in the GDPR, you are or may be eligible to the following rights in relation to your personal data:
      1. Right of access
        You are eligible to request from us confirmation, as to whether or not personal data concerning you are being processed and, if this is the case, you may access further information about such processing.
        Your right of access can be exercised in accordance with the applicable laws. However, where requests from you are manifestly unfounded, excessive or repetitive, we may either:
        -charge a reasonable fee, considering the administrative costs of taking the actions requested; or
        -refuse to act on the request.
      2. Right to erasure (right to be forgotten)
        You are eligible to request from us the erasure of personal data concerning you without undue delay and we shall have the obligation to erase such data without undue delay if all respective conditions are met under the GDPR. Please note that erasure of your personal data may result in our inability to provide you with our services.
      3. Right of rectification
        You are eligible to request from us without undue delay the rectification of inaccurate or incomplete personal data concerning you.
      4. Right to object
        You are eligible to object, on grounds relating to your particular situation at any time, to the processing of personal data.
      5. Right of restriction of processing
        You are eligible to request from us the restriction of processing of personal data.
      6. Right to data portability
        You are eligible to receive personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format, and you have the right to transmit those data to another controller without hindrance from us to which personal data have been provided.
      7. Right to withdraw consent
        You are eligible, where the processing is based on consent, to withdraw your consent at any time. Such withdrawal shall not affect the lawfulness of processing based on your consent before its withdrawal.
    2. If you feel that your personal data have been processed unlawfully, please contact us at [email protected] and we will resolve the problem. You have the right to lodge a complaint with the competent supervisory authority. A list of competent supervisory authorities in the European Union is available at https://ec.europa.eu/digital-single-market/en/news/list-personal-data-protection-competent-authorities. In the Czech Republic, the competent supervisory authority is the Office for personal data Protection. You can learn more at https://www.uoou.cz/en/.
    3. Please keep in mind that we respond to all enquiries within 30 days. Any requested change, once we have verified your identity and the request’s legitimacy, may take up to five (5) business days to take effect.
  10. SURVEYS AND TESTIMONIALS
    1. From time to time, we may request information via surveys. Participation in these surveys is voluntary and you may choose whether or not to participate and disclose the requested information. Information requested may include contact information (such as name and e-mail address), and organization information (organization name, job position). Contact information will be used to share the results if the participant selects to receive them. Survey information will be used for purposes of research, monitoring or improving the user experience and satisfaction with the Choice QR Services.
    2. From time to time, we may also post various texts such as testimonials, quotes, case studies, white papers etc. on our websites that may contain personal information. We shall obtain your consent to post your name along with such text. If you wish to update or delete any text containing your personal information, please contact us at [email protected]
  11. FINAL PROVISIONS
    1. We use an application enabling consent management to make it easier for you to manage your preferences regarding cookies and other tools. You may use the application referred above to change your cookie settings, including, grant and withdraw consent to the use of optional cookies.
    2. The Choice QR Services may, from time to time, contain links to and from websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
    3. The Choice QR Services are not addressed to anyone under the age of 18. We do not, to our best knowledge, collect personal data from anyone under the age of 18. If you are a parent or a guardian and you are aware that your child has provided us with personal data, please contact us. If we become aware that we have collected personal data from children without verification of parental consent, we will take steps to remove that information from our servers.
    4. We reserve the right to amend, modify, supplement or otherwise change this Privacy Policy at any time and for any reason. Any new version of this Privacy Policy supersedes its previous version as of the date of effectivity of the new version. 
    5. If you have any questions about this Privacy Policy or our privacy practices, please contact us here or by email at [email protected]

 

This Privacy Policy enters into force and become effective as of 1.05.2024