1.Introduction Fly Chicken AS, Org. nr: 8210 17432 ("the Restaurant") processes data about its users of the Restaurants various digital portals such as mobile app and website ("the Platform"). The Platform is licensed to the Restaurant by Heaps App ApS CVR no. 36695420.
You become a user of the Platform when you have created a user profile with your information and thereby become a user ("User"). The Restaurant is the data controller for the processing of personal data.
Our privacy policy describes, for example, the types of personal data we process, how we process the personal data, and how you can exercise your rights as the data subject (such as the right to object, the right to access). This privacy policy may be updated at any time to reflect changes in data processing procedures or other changes. You can find the current version on the Platform. We do not make significant changes to this privacy policy or alter users' rights under this privacy policy without providing notice thereof.
2.Registration of Information The personal data that we collect and process can be divided into two main categories of information: user information and analytical information.
2.1 User Information User information is personal data collected directly from you when you sign up an duse the Platform in connection with transactions and payments. When you register on the Platform and create a user account, you must provide us with the following information: - Full name - Phone number - Email address - Date of birth
User information voluntarily provided by you: - Information regarding your payment method, such as the number and expiration date of your payment method (required to order food products via the Platform but not stored by the Restaurant, as the Restaurant uses a third-party provider of payment processing services to handle payments) - Delivery address - Locationin formation (if you consent to the processing of your location information) - Other information that you provide either when creating a user account or through subsequent updates to your user profile - Information you provide when you review our services - Marketingopt-ins and opt-outs
We do not collect sensitive personal information unless you provide such information in the comment field when placing an order.
2.2Analytical Information Although we don't typically use analytical information to identify you as an individual, sometimes you can be recognized through these data, either alone or in combination or connection with user information. In such cases, analytical information may also be considered personal data in accordance with applicable law, and we will treat this information as personal data.
We mayautomatically collect the following analytical information when you visit orinteract with the Platform: Device Information We collect the following information about the technical device you use in connection withthe Platform: - Device and device identification number, device IMEI number - Country - IP address - Browser type and version - Operating system - Internet service providers - Device advertising ID - Visit ID
UsageInformation We collect information about your usage of the Platform, such as: - Time spent - Interactions - Information about your orders - Date and time of your visits to the Platform - The parts of the Platform you visited
Cookies We use various technologies to collect and store analytical information and other data when Users visit the Platform, including cookies and web beacons. Cookies are small text files sent and stored on your device, allowing us to identify visitors to the Platform, facilitate the use of the Platform, and create aggregated information about our visitors. This helps us improve the Platform and provide better service to our users. Our cookies do not harm your device or your files. We use cookies to tailor the Platform and the information we provide to the individual interests of our users. Some cookies are necessary for the use and operation of a seamless Platform experience, and they are used,for example, to remember your language and country preferences. Other cookies are used to collect information about the use of the Platform, such as frequently visited content, for the purpose of improving the Platform.
Web Analytics Services The Restaurant uses Google Analytics and other web analytics services to collect analytical information and generate reports about visitors' usage, assisting us in improving the Platform.
3. Use of Information The Restaurant processes your personal information in order to provide the service on the Platform to you according to the contract between you and the Restaurant. The Restaurant may also process personal information when necessary based on a legitimate and essential interest for the Restaurant.
We use the information, for example, to process your requests, communicate with you,handle your payments and any refunds (to the extent relevant), and provide Restaurant Locations or delivery partners with the necessary information to fulfill your order.
We may collect, use, and share data about your precise or approximate location,including real-time geographic location of your computer or mobile phone, to show you the destination of an order, accurate information about your order status, and to display restaurants near you. Location information that can personally identify you is not collected or used without your consent.
The Restaurant processes your personal information to fulfill contractual obligations towards you and to comply with our legal obligations. We also process your personal information to pursue our legitimate interests in maintaining and developing our activities and establishing and maintaining customer relationships.
The Restaurant is authorized to transfer the collected information to recipients outside the EU and EEA. However, this only happens if the recipients have an adequate level of protection according to the data protection regulations.
4. Recipients We do not share your personal information with third parties outside of the Restaurant unless one of the following circumstances applies:
For the purposes stated in this privacy policy and to authorized service providers:
To the extent that third parties, such as the Restaurant and their Locations or delivery partners, need access to your personal information so that we or other relevant third parties can provide the service of the Platform, we provide your information to the respective third party. Additionally, we may provide your personal information to our affiliated companies or authorized service providers and partners who provide services to us or in collaboration with us(including information storage, accounting, sales, and marketing) so that they can process the information and to payment intermediaries so they can process your payments to us.
When third parties process information on behalf of the Restaurant, the Restaurant has taken appropriate contractual and organizational measures to ensure that your information is only processed for the purposes stated in this privacy policy, in accordance with applicable laws and regulations, and based on our instructions, appropriate confidentiality obligations, and security measures.
For legal reasons and legal proceedings:
We may share your personal information with third parties outside of the Restaurant if we believe in good faith that access to and use of the personal information is reasonably necessary to: (i) comply with applicable laws, regulations, and/or court orders; (ii) detect, prevent, or otherwise address fraud, crime,security, or technical issues; and/or (iii) protect the Restaurant’s, our users', or the public's interests, property, or safety to the extent permitted by law. We will inform you about this processing if possible.
6. Storage Period The Restaurant does not store your personal information for longer than permitted by law and necessary for the purpose of providing the Restaurant’s services or the relevant parts thereof. The storage period depends on the nature of the information and the purpose of the processing. The maximum period may therefore vary for each use. The Restaurant takes the necessary steps to keep personal information accurate and to delete incorrect or unnecessary personal information.
We delete most personal information associated with a user's account on the Platform after a period of 90 days from the user deleting their account on the Platform.
We retain analytical information about users who do not have an account on the Platform for a period of 90 days. 7. Your Rights Right of Access You have the right to access and obtain information about the personal data we process about you. We provide you with the opportunity to view certain information through your account on the Restaurant or request a copy of your personal data using the contact information provided above.
Right to Withdraw Consent If the processing is based on consent given by the user, the user can withdraw their consent at any time without charge. If you withdraw your consent, it may result in fewer opportunities for you to use the Platform. Withdrawal of consent does not affect the legality of the processing based on consent before withdrawal.
Right to Rectification You have the right to have incorrect or incomplete personal data that we store about you corrected or completed by contacting us. You can correct or update your personal data via the Platform or by contacting us.
Right to Erasure You can also request us to delete your personal data from our systems, for example, if the information is no longer necessary for the purpose for which it was originally collected. We will comply with this request unless we have legitimate reasons not to delete the information. Please note that if you wish to delete such information, it may mean that we can no longer offer the Platform's services or specific features thereof.
Right to Object You may have the right to object to certain uses of your personal data if the data is processed for purposes other than necessary to provide the Platform's services or to comply with our legal obligations. For example, you can request that westop processing your personal data for direct marketing purposes or profiling based on legitimate interests. If you object to further processing of yourpersonal data, it may result in fewer opportunities for you to use the Platform.
Right to Restriction of Processing You can request us to limit the processing of personal data, for example, during the processing of your request for erasure or rectification or during your objection, and/or if we do not have legitimate reasons to process your information. When processing is restricted, your information will only be stored and not further processed. For instance, if you challenge the accuracy of your information, the ability to process such information will be restricted until the accuracy is confirmed. However, this may result in fewer opportunities for you to use the Platform.
Right to Data Portability When processing of information is carried out in an automated manner and based on a contract or consent, you have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, and to have this information transmitted to a third party.
ExercisingYour Rights You can exercise the above rights by sending a letter or an email with the following information to the addresses listed above: full name, address, email address,and phone number. We may request additional information necessary to confirm the user's identity. We may reject or charge for requests that are repeated to an unreasonable extent, excessively exaggerated, or manifestly unfounded.
8. Filing aComplaint If the User considers our processing of personal data to be in violation of applicable data protection laws, the User can file a complaint with the relevant supervisory authority.
9. Data Security We use administrative, organizational, technical, and physical protection measures to safeguard the personal data we collect and process. These measures include encryption, pseudonymization, firewalls, secure facilities, and access control systems as necessary. Our security systems are designed to maintain anappropriate level of confidentiality, integrity, availability, and resilienceof the information and to restore the information.
In the event of a security breach despite the security measures, which is likely to have a negative impact on users' privacy, we will notify the relevant users and other affected parties as well as relevant authorities as required by data protection laws.
10. Contact Questions can be sent to: Fly Chicken AS Org. nr.: 8210 17432 Lysaker Torg 2 1366 Lysaker Norge hello@flychicken.no
Document version number: 1.3. Updated 7.07.2022.