California Consumer Privacy Act (CCPA) : We are not in the business of selling Personal Data or Information. We do not sell any collected Personal Data or Information. Personal Data or Information that is collected by us as a result of your visiting our website or using our product and services in any form, is only processed for that purpose or any other purpose that you consent to us. As a consumer, you have extensive rights under the CCPA. We have described these below for you. Contact us under the contact details provided below if you have any questions or concerns.
Our Group Data Protection team can be contacted at email@example.com
• General Information
The terms “We”, “Us”,” Our” mean Smarttable website. The terms “You” and “Your” refer to You, as a user or visitor of our website provided Services. The term “personal data” refers to all information relating to an identified or identifiable natural person (hereinafter referred to as “data subject”); an identifiable natural person is one who can be identified directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more specific characteristics expressing the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person, as set out in Art. 4 (1) GDPR. In addition, personal data subject to the Swiss Data Protection Act comprises data of legal persons.
• Collection of Data
Information. You may give Us information about You by submitting information on Our site smarttable.io (“Our Site”) or by corresponding with Us by phone, email or otherwise. This includes information You provide when You register to use Our Site, subscribe to Our Site services, participate in discussion boards or other social media functions on Our Site, and when You report a problem with Our Site. The information You give Us may include your name, address, email address, phone number, personal description or photograph. Any processing of your personal data is based on a legal basis which is indicated below.
• Purpose of processing and legal basis
Any processing of data requires a legal basis. If the processing is necessary for the performance of a contract to which the data subject is a party, or for the implementation of pre-contractual measures taken at the request of the data subject, the processing may be based on Art. 6 para. 1 lit. b) DSGVO.
If the processing is necessary to safeguard the legitimate interests of the data controller or a third party, provided that the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data, do not prevail, it can be based on Art. 6 para. 1 lit. f) DSGVO.
We process your data for the following purposes:
- to fulfil our obligation to make the services available to you in accordance with the service conditions concluded between you and us; the legal basis for data processing is Art. 6 Para. 1 lit. b) DSGVO.
- to inform you about changes to our services; the legal basis for data processing is Art. 6 para. 1 lit. b) DSGVO.
- to ensure that the content of our website is presented on your computer as efficiently as possible; the legal basis for data processing is Art. 6 para. 1 lit. b) or f) DSGVO.
- in order to enable you to participate in test and trial offers of our services; the legal basis for data processing is Art. 6 para. 1 lit. b DSGVO.
- to inform you about parts of the services which we believe to be of interest to you if you have given your consent; the legal basis for data processing is Art. 6 para. 1 lit. a) DSGVO;
- as part of our efforts to offer you the greatest possible security when using our site. The legal basis for data processing is Art. 6 para. 1 lit. f) DSGVO.
We also process data that cannot be assigned to any person. These are data that do not personally identify you, including anonymous information and aggregated data. This information helps us better understand how our visitors use the Services, analyze demographics, interests and behaviors of our visitors, improve the Services, provide customized services and information to visitors, and similar purposes.
If You contact Us to provide feedback, register a complaint, or ask a question, We will record any Personal Information and other content that You provide in Your communication so that We can effectively respond to Your communication. We reserve the right to use this information in any manner permitted by law, to respond to Your communication. The processing of your personal data for feedback processing is based on Art. 6 para. 1 lit. f) DSGVO.
When You use the Services, We receive and store certain information which may include Your Personal Information, regarding Your use of the Services. Examples include IP addresses, browser types, domain names, and other statistical data regarding Your use of the Services. We may use this data in a way that does not disclose any of Your personally identifiable information, including, but not limited to, for purposes of developing new product and service offerings.
• Disclosure of Information
We may disclose Your Personal Information:
• Legal obligation
In response to a request for information if we believe such disclosure is in accordance with any applicable law, regulation or legal process, or as otherwise required by any applicable law, rule or regulation. The legal basis for processing to fulfil a legal obligation is Art. 6 (1) (c) DSGVO.
• Violation of Terms of Services
Our Website and Services may contain links to third party websites to which We have no affiliation. Except as set forth herein, We DO NOT SHARE Your Personal Information with those third parties, and are not responsible for and accept no liability for their privacy practices. We suggest You read the privacy policies on all such third party websites.
We take commercially reasonable steps to protect Your Personal Information from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. We use up to date TLS-encryption that your systems support when transmitting data via Our systems. However, We cannot guarantee that all Internet or email transmission is fully secure or error free and except for Our guarantee to use commercially reasonable and up to date measures to technically secure any data transmission, We cannot guarantee their absolute security and We therefore cannot be held liable for intercepted information sent via the Internet or for third parties using revoked, stolen, forged, or otherwise insecure certificates. You should therefore take special care in deciding what information You send to Us via email and keep this in mind when disclosing any Personal Information to Us or to any other party via the Internet.
• Retention Period
We store your personal data for as long as is necessary for the purpose for which it was collected or for fulfilling our legal obligations, such as statutory retention periods. The data will be deleted at the latest within one month after the respective purpose no longer applies.
• Your Rights
You as the data subject are entitled to extensive rights which you can assert against us. Upon request, we will inform you in writing, in accordance with the applicable statutory provisions, whether and, if so, which personal data we have stored about you. You can inspect your personal data at any time and free of charge and demand its correction and/or deletion and/or blocking. For this purpose and/or to obtain further information, please contact us at firstname.lastname@example.org.
You have the right to receive the personal data we hold about you in a structured, common, machine-readable format. Upon request, we will transfer your personal data to another controller. If you wish to exercise any of the rights mentioned in this section or if you have any questions about the processing of your personal data, please contact us at the above e-mail address. You can also contact our data protection officer at email@example.com, who will be happy to provide you with any further information you may require or deal with your suggestions or complaints.
You also have the right to file a complaint with the relevant data protection authority.
• Existence of an Automated Decision Making Process
As a responsible company, we refrain from automatic decision-making or profiling.
Last update 17/06/2020