INFORMATION ON PERSONAL DATA PROCESSING
DÁMEJÍDLO.CZ

Latest update: 7/27/2018

Who we are and how you can contact us

We, damejidlo s.r.o., ID no.: 242 54 398, with registered office at Újezd 450/40, Malá Strana, 118 00 Praha 1 (hereinafter “damejidlo.cz”), are the data controller in the context of your use of the website https://www.damejidlo.cz and our mobile application (together referred to as the “Services”). The personal data controller is the entity which determines the purposes and means of the processing, that is to say, the entity which decides why and how your personal data is processed.

Below are our contact details in case you do not find answers to your questions in this document or should you not understand any of the information herein.

E-mail: DPO@damejidlo.cz
Postal address: Smrčkova 2485/4, 180 00, Praha 8

What personal data do we collect and how?

  • The majority of personal data we process is provided directly by you:

    When you log in or create an account within our Services

    When you create an account with us we need to know your e-mail address and password chosen by you for the purpose of the sign-up.

    When you order a meal from a restaurant through our Services

    To enable you to create an order through our Services, we need your contact details, especially your name, e-mail, phone number and delivery address. We will also need information about how you will pay for your order. Everytime you make a purchase through our Services, we collect data about the purchase (i.e. the history of purchases).

    When you are using our Services

    When you are using our services, certain information may be collected passively. This is in particular your IP address, browser type and operating system type. We also use cookies and navigation data to gather information about the date and time of your visit and information, that you were searching for and viewing. If you use our mobile application, we can also get information on how you use our Services on your device, including your location information if you have enabled this feature on your mobile device.

    When you communicate with us or when you participate in our promotions and contests

    We get your personal data when you get in touch with us – whether it is communication via e-mail, phone, chat on our website, mail or communication through social networks (this data include primarily your name, username and contact details). The same applies when you send messages through our Services, including reviews and feedback to our Services and rating of your order.

    Information you provide about third parties

    Before providing us with third person’s personal data (such as address or phone number) when using our Services make sure that such person agrees with it and you are entitled to provide us with such information.

  • We also may receive you personal data from third parties.

    Social networks information

    If you decide to sign up to our Services via social networks such as Facebook, you will provide us with your name, e-mail address, date of birth and other information available on you profile (and information you choose to share with us).

    We may also collect personal data from publicly available sources, especially from social networks and from our own activities, such as by evaluating and analysing your personal data collected from above mentioned sources.

What purposes we process your personal data for?

Access to our Services

We process your personal data to allow you to access our Services and to allow you to make an order at your chosen restaurant.

The legal basis we rely on in this case is performance of a contract.

Administration of your order

After you make an order through our Services, we need to process it. We or your selected restaurant also need to contact you regarding your purchase – for example to keep you updated about your order (via email, phone, sms or through our mobile application).

The legal basis we rely on in this case is performance of a contract.

Management and improvement of our website

Your data also helps us when we manage, improve and develop our Services, among others by analysing it.

The legal basis we rely on in this case is the legitimate interest.

Prevention of fraud and compliance with legal obligations

In damejidlo.cz we monitor how our Services are used to ensure high level of privacy protection. We are doing so in particular to be able to detect and prevent fraud and misuse of our Services and also to allow you to use our Services feeling safely. On some occasions we process your personal data in order to comply with a legal obligation.

The legal basis we rely on in this case is the legitimate interest and compliance with legal obligations.

Feedback and important changes in the Services

We also use your personal data to get a feedback from you about our Services and to allow you to rate restaurants you have made an order in. From time to time, we will also notify you of important changes regarding our Services.

The legal basis we rely on in this case is the legitimate interest.

Personalisation of our Services

We would like to make what we offer you through or in connection with our Services as relevant as possible to what you really are interested in. We can use your personal data to better understand what you might be interested in or at least attempt that.

You can change the settings for marketing messages at any time, especially through your user account, by clicking the “unsubscribe” link in the end of your emails, or just email us at the address above (or by changing the settings in your mobile device in the mobile application).

The legal basis we rely on in this case is the legitimate interest.

Direct marketing

Occasionally we use your personal data to let you know about promotions we think might be of interest to you. For this purpose we will contact you primarily via e-mail, sms or through our mobile application.

The legal basis we rely on in this case is the legitimate interest.

Processing of personal data on the basis of consent

On some occasions we may process your personal data on the basis of your consent – purpose and further information regarding such processing are always provided within information we provide you with at the moment we ask for such consent.

The period of time we process and store your personal data for

We only process and store your personal data for as long as necessary for the purposes detailed above, or for as long as to meet legal requirements. Once this period of time is over, we delete the personal data or render it anonymous.

If we process your personal data on the basis of the legitimate interest, processing lasts for as long as we still have the legitimate interest. You can object at any time to the processing of your personal data when it takes place on the legal basis of the legitimate interest.

Who we disclose your personal data to

We share your personal data with the following recipients:

  • with a restaurant in which you make an order through our Services so that the restaurant can prepare and deliver what you ordered;
  • in some cases, depending on the payment method you choose in your order, we share your data with a provider of this payment method; for example when you choose to make a payment through Twisto (your personal data is transferred to Twisto payments a.s., ID no.: 016 15 165, with its registered office at Újezd 450/40, Malá Strana, 118 00 Praha 1); in case of a payment by a payment card, we do not process information regarding such payment and your interaction is only with the respective payment platform operator;
  • with our suppliers, mainly delivery companies, IT suppliers, hosting and marketing services providers, providers of statistical and database software tools, and also with other entities which provide services to us;
  • with our parent company Delivery Hero Holding, seated in Germany; the legal basis we rely on in this case is legitimate interest of internal administrative purposes and of analyses on an aggregate basis.

Under certain circumstances, we may be legally obliged to share your personal data with third parties (e.g. with law enforcement authorities, etc.). This is our legal duty.

The processing of your personal data for the above mentioned purposes may involve their transfer to countries outside European Economic Area. On such occasions, unless the competent public authority has determined that the concerned country guarantees an adequate level of privacy protection, we ensure that the personal data transferred is protected in compliance with applicable data protection rules. To ensure an adequate level of protection, we use Data Protection Agreements and the standard clauses approved for this purpose by the European Commision. Further details about these transfers, which we expect to be minimal, may be provided to you upon request.

The way we process your personal data and how it is secured

Personal data processing is undertaken manually and automatically within electronic information systems, in electronic or paper form. Your personal data is processed mainly by our own employees and processors. We have undertaken appropriate security measures (in particular technical and organisational measures) in order to protect your personal data from any kind of accidental loss, destruction, misuse, damage and unauthorised or illegal access. We have entered into appropriate agreements with processors who process your personal data for us as the controller so that the due protection of your personal data is guaranteed. Employees and processors who are involved in processing of your personal data are bound to keep it confidential.

What are your rights in protecting your personal data?

At any time while your personal data is being processed, you can exercise the following rights:

  • Right to access. You have the right to receive confirmation of whether and what personal data about you we process, including the right to receive a copy of the personal data we process. Please note, it will not be possible to disclose such information that would endanger our business secrets or the rights of third parties.
  • Right to rectification and completion. If you deem that the personal data we process is inaccurate or incomplete, you have the right to ask for it to be rectified and updated.
  • Right to erasure. In some cases, you have the right to contact us and ask for the erasure of your personal data which we process. Please bear in mind that we cannot erase your personal data if its processing is necessary.
  • Right to restriction of processing. In some cases, such as when you challenge the accuracy, legality or our need to process your personal data, you have the right to ask us to restrict the processing of your personal data. If we comply with your request, we will restrict the processing of your personal data to the minimum necessary (and in general we will no longer actively process your data). We will place a record in our systems that there are restrictions on your data. If these restrictions are cancelled and we intend to continue to process your personal data, we will inform you about it in advance.
  • Right to portability. You have the right to ask us to transmit your personal data which you have provided to us and which we process (in a commonly used and machine readable format) to a third party (another data controller) which you state in your request. Please note that you can only exercise this right if we process your personal data on the basis of your consent, or in order to fulfil an agreement and the processing is automated.
  • Right to lodge a complaint with the supervisory authority. If you think that there has been a breach of our obligations given by laws on the protection of personal data, you have the right to lodge a complaint with the Czech Office for Personal Data Protection, or another authority within a European Union member state which is entrusted with supervision over obligations in personal data protection. We would, however, appreciate the chance to deal with your concerns ourselves, so please do contact us in the first instance.

Right to object to processing of personal data

Besides the rights detailed above, you also have the right to object to the processing of your personal data. This objection can be lodged when the legal basis for processing of your personal data is the legitimate interest pursued by the controller or third party (or when the legal basis for processing is to carry out a task undertaken in the public interest or in the exercise of official authority).

You can also lodge an objection when we process your data for direct marketing purposes (on the legal basis of legitimate interest), including profiling with the objective of finding the most appropriate and attractive offers for you.

If you lodge an objection against processing, we will no longer process your personal data until such time as we can demonstrate compelling reasons for such processing which override your interests or rights and freedoms. If you lodge an objection against processing for the purposes of direct marketing, we will not longer process your personal data without further undue delay.

How you can exercise your rights

If you decide to exercise any of the above detailed rights against us, please inform us by writing to the e-mail or postal address given above. Please note that if you are exercising your right, we need to be sure of your identity. As such, in some cases we may ask you to prove your identity.

In the event you exercise any of the above detailed rights, we will inform you in writing without undue delay of how we are responding to your request.

Changes to information on personal data processing

We may amend or update this information on personal data processing in future. If we make any such changes, one way to ascertain this fact is that the date of the latest revision is given in the introduction to this information. If we make changes which may have a significant impact on your privacy, we will also inform you in another appropriate manner (e.g. by e-mail or by a message placed within our Services). We recommend that you read this information regularly to remain informed about how we process your personal data and how you can protect your privacy.