1. Who is responsible for data processing and whom can I contact?
Responsible for data processing: Quandoo Hong Kong Limited, FLAT/RM 1905 19/F, West Tower Shun Tak Centre, 168 - 200 Connaught Road Central, Hong Kong. This company is also meant if the terms "we" or "us" are used below.
You can contact our Data Protection Officer at:
2. What personal data do we process and from which sources does such data originate?
When we make our platform available to you for use, we process personal data from various sources. On the one hand, this is data that we automatically collect when you use the platform. However, this may also include data which you have voluntarily provided to us or which we receive from our partners.
Data that we collect automatically when you use our platform
As soon as you visit the website or open the app, you send technical information to our web servers. This happens regardless of whether you make a reservation at a restaurant or whether you log in later using an account with us to use the platform. In each case we collect the following access data and web access data (which we refer to collectively as "access data" ):
We process access data so that you and other users can use the platform and we can ensure the functionality of the platform. We also process access data to carry out performance analyses on the platform, continuously improve the platform and correct errors to ensure IT security and the operation of our systems, and to prevent or detect misuse, particularly fraud.
In addition, we process access data to adapt the platform to your needs (personalisation). To this end, we also assign you what is known as a "Unique User ID". With this unique user ID, we can associate your bookings and other interactions.
Data that you transmit to us yourself
In addition to the data we receive from all visitors, we also process other data. The exact volume of such data depends on how you use the platform. You can use the platform with or without creating a user account.
If you decide to create a user account and complete the registration form, we will process the following information:
However, you can also use the single sign-on feature (SSO) on our platform to create and log in to your user account. If you choose this feature, we ask you to enter your log-in data of the social network of your choice (e.g. Facebook or Google). The respective SSO-provider will then authenticate you. This login data is not visible to us.
When you book or reserve, we also process your:
Please do not enter any sensitive personal information in the field "special preferences".
We process such data in order to be able to handle your reservation, inform you about the status of your reservation, and customise the platform based on your previous reservations and bookings.
The platform offers you the possibility to use certain social functions: You can leave ratings and reviews for restaurants. You can also subscribe to comments and reviews from other users.
When you use these features, your IP address will be stored when you post a comment or rating. This is a protective measure for us in case someone publishes illegal content, comments and/or contributions (insults, forbidden political propaganda, etc.). In such cases, we must be able to determine the identity of the author, as legal action can be taken based on the content in the comments or posts.
If you would like to subscribe to the following comments, a confirmation email will be sent to confirm that you are actually the owner of the email address you entered. Subscriptions for comments can be deleted at any time. The confirmation e-mail contains the corresponding instructions.
You receive Loyalty Points for each successful reservation. In order to manage these Loyalty Points, we process your reservation data and booking history. When redeeming your Loyalty Points, we additionally ask you to provide us with your bank details in order to initiate the payout. After the bank transfer is complete, we delete your bank details.
We do not process any sensitive details about card payments ourselves, but use secure payment providers who do this for us. The payment data you enter is encrypted in your browser by the payment provider in a way that only the payment provider can access, while we only receive non-sensitive data (payment method) and references that confirm that you have made a payment. We do not store any other payment information in our system.
If you wish to receive our newsletter, we need your consent for this. We use the so-called double opt-in process for our newsletter, so that you are only subscribed to the newsletter once you click on the link in the confirmation email. This way we can make sure that you are the rightful owner of the email address. The newsletter contains information about Quandoo, restaurants and current offers. Legal basis for the sending of newsletters is your consent.
When subscribing to the newsletter, we collect your IP address, the date and the exact time of your subscription. This data is stored in order to prove that you signed up to the newsletter. Also, we need the data in case your email address was fraudulently used.
Furthermore, when interacting with the newsletter, we collect device and usage data. For example, we record if the newsletter was delivered, if you opened the newsletter or if you clicked on a link in the newsletter. We link your email address to this data in order to personalise and statistically analyse the newsletter. If you use our app, we will also connect the data collected within the app with this usage data from the newsletter. This way we make sure that we display offers within the app that are relevant to you.
You can withdraw your consent to receive newsletters with any form of personalisation at any time without incurring any costs other than the transmission costs in accordance with the basic tariffs. Just click on the unsubscribe link at the end of each newsletter or send an email to the address set out above.
Perhaps you would like to ask our customer service for assistance or make a complaint. In this case, we will process your IP address and contact information as well as the content of your request in order to respond to your request.
Data we receive from partners and third-party platforms
Since our platform serves as an intermediary between you and the restaurant where you make your reservation, we also process data that we receive from our partner restaurants. Similarly, we may receive information from third party platforms where a reservation made by you on that third party platform is made by Quandoo. The data in question comprises:
Other data collected
We also use Google Tag Manager that allows us to manage tools which are implemented via Google Tag Manager. Google Tag Manager itself does not set any cookies and does not collect any personal information. However, the tool is used to trigger other tags, which might collect data.
3. For what other purposes do we process your data?
We possibly process your data for additional purposes.
These include the following:
4. What is the legal basis of data processing?
When processing your personal data, we rely on local data protection law and use your personal data only for the fulfilment of our services.
In this context, we refer in detail to the following legal foundations:
Fulfilment of our contractual obligations towards you
At the same time, the processing serves to make the platform available within the scope of performance under our contract with you. Accordingly, in most cases the processing is justified not only with your consent, but also because it is necessary to fulfil our contract with you. For example, if you make a reservation at a restaurant via our platform, we need to process the reservation data to secure your reservation.
Our legitimate interests
There are also cases in which we would be entitled to process your data without your consent if this is necessary to protect our legitimate interests (or those of third parties). In this respect, the purposes described above, for which we process your data, in many cases also represent legitimate interests. This means that we may process the data necessary to ensure the security of our IT systems in any case, even if you have not given or withdrawn your consent to such processing. This also refers to the prevention of abuse of our platform or the personalisation of advertising for your interests (referred to as direct marketing).
In addition, we are required by law to provide certain information to the law enforcement or tax authorities upon request in individual cases.
5. To whom do we transmit your data?
We treat your personal data with care and confidentiality and pass such data on to third parties only to the extent described below and no further. We only transmit data to public authorities if there is a legal obligation to do so as a result of a request for information from the competent authority.
Beyond statutory obligations to public authorities, we will only share your information with other users of the platform, with our third-party providers who assist us in providing the platform, or within the Quandoo Group of Companies.
Other users of the platform
We transfer the booking and reservation data via the platform to our partner restaurants to enable reservations to be made at their restaurants. We also share your loyalty points with the restaurants to ensure the smooth running of these programs. Restaurants will receive your account information (except your password) and any ratings or reviews you enter into the platform's system. Ratings and reviews will also be published on the platform so that they can be seen by all remaining users (including visitors without an account on the platform).
Other third parties
Within the Quandoo Group of Companies
We are part of a worldwide group of affiliated companies of Quandoo GmbH, KulturBrauerei, Schönhauser Allee 36, 10435 Berlin, Germany ("Quandoo DE"). Quandoo DE itself is a wholly owned subsidiary of Recruit Holdings Co., Ltd, 8-4-17 Ginza, Chuo-ku, Tokyo 104-0061 Japan ("Recruit"). Accordingly, we are obliged to provide Quandoo DE or Recruit with certain information either in accordance with legal reporting requirements or in the normal course of business as a global company. As a rule, all business intelligence data is anonymised to ensure that your right to privacy is respected. However, Quandoo DE or Recruit may also have access to personal, non-anonymised information, such as an internal audit or an audit required by public authorities.
6. How long will my data be stored?
We process and store your personal data as long as this is necessary for compliance with our contractual or statutory obligations. We therefore store the data as long as our contractual relationship with you exists and after termination only to the extent that and as long as the applicable laws require. All other data will be deleted immediately when you log out of the platform. If the remaining data is no longer required for fulfilment of such obligations, then the data in question will be deleted regularly unless further processing thereof is necessary for the preservation of evidence or for legal claims subject to the statute of limitations.
7. Does Quandoo create a user profile with my personal data?
We use your data to optimise your Quandoo browser experience. This means that we use your data to provide you with a personalised platform based on your personal preferences and interests and to create customised offers based on your previous behaviour patterns. For example, the IP address of your computer is used to identify your geographic location and provide you with localised content in your language. We can make suggestions and offers for new restaurants based on the restaurants you have previously viewed or booked through our platform. However, we will never process and analyse your personal data in the course of profiling in such a way that this leads to an automated decision that is legally valid for you or that significantly affects you in a similar manner.
8. Do I have to provide data? What happens if I do not provide my data or no longer provide it?
9. How do I request the deletion of my data?
Send an email to email@example.com with a simple request to delete your personal data. Tell us your name and the email address you used to register with us. We will send you a confirmation email after the deletion.
Below, we provide you with a list of all the cookies and other web tracking tools provided on our platform either by us or by third parties.
We use the following types of cookies only within the scope of legal regulations and on the basis of the legal founda-tions specified:
You can prevent the acceptance of cookies by adjusting your browser settings so that no cookies are ac-cepted at all. However, if you configure this setting in this way, you may not be able to use certain current or future elements of our website.
1. Quandoo's own cookies (referred to as "first-party cookies"):
|t||29 days after last change||Defines the channel via which a user did a booking.|
|quandooUserLanguage||1 year||Saves the language selected by the user.|
|quandooUserSearchDestination||Session||Saves the default search area of the user.|
|ut||90 days||Persist the authentication of a user.|
|quandooUserVisitorId||180 days||Identify the user in surveys conducted.|
|qdoo_gp||6 days||Collects geolocation information.|
|promoCode7d||7 days||Stores the Promotional Codes entered by the user.|
|sem_attributes||Session||Identifies the SEM campaign details.|
|grpRef||Session||Stores the name of the chain restaurant.|
|qdoo_exp_||30 days||Helps to know which experience was served to the user in order to serve a consistent experience.|
Users can prevent the acceptance of first-party cookies by adjusting their browser settings so that no cookies are accepted at all. However, if you configure this setting in this way, you may not be able to use certain current or future elements of our website.
2. Cookies and plugins provided by third parties (referred to as "third-party cookies")
Furthermore, we also use the following cookies and tools from third-party providers:
Our platform uses the web analysis service Google Analytics, from Google LLC, 1600 Amphitheatre Parkway Mountain View, California 94043, USA, for the purpose of analysing and continuously optimising our website.
You can prevent cookies from being stored by configuring the operating system settings on your browser or mobile device or within our cookie consent management tool accordingly. However, please bear in mind that, in this case, you may not be able to make full use all of the functions on our platform. You can also prevent the data produced by the cookie and information relating to your use of our website (including your IP address) being collected by Google and being processed by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout.
Further information on conditions of use and data protection can be found at
https://marketingplatform.google.com/about/analytics/terms/us/ and https://policies.google.com/privacy?hl=en-US.
We use the web analysis and optimization service "Google Optimize" (a sub-service of Google Analytics) on our website, which is provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. We use the service to increase the attractiveness and functionality of our website by playing out new functions and content to a percentage of our users and statistically evaluating the change in usage.
Our platform, in particular our consumer portal and mobile apps, integrates the services of Google reCAPTCHA, from Google LLC, 1600 Amphitheatre Parkway Mountain View, California 94043, USA, an advanced risk analysis engine for the purpose of keeping malicious software from engaging in abusive activities on our website.
You can prevent cookies from being stored by configuring the operating system settings on your browser or mobile device or within our cookie consent management tool accordingly. However, please bear in mind that, in this case, you may not be able to make full use of all of the functions on our platform.
You can object to the creation of a user profile, the storage of data on your use of our website by Hotjar and the use of tracking cookies by Hotjar on other websites by accessing the following link: https://www.hotjar.com/opt-out
We cooperate with Wisepops, 49 rue Jean De La Fontaine, 75016 Paris, France. Wisepops is a provider that al-lows us to place pop-ups based on users' surfing behaviour. Wisepops also collects surfing data and places ap-propriate pop-ups. Cookies are used for this purpose. Further information can be found at https://support.wisepops.com/more-info/data-and-cookie-policy.
If you have given your consent for us to access your location using the respective browser setting, we collect in-formation on your location. By activating this "Near Me"-feature, we can show you restaurants near you. Cookies are used and the information stored in this cookie is processed under a pseudonym in order to analyse your use of our website.
Google Ads & Google Remarketing
With Google Ads & Google Remarketing, users who have already visited our platform and are interested in the relevant offer can be addressed again by targeted advertising on the pages of the Google partner network. Ad-vertising is inserted with the aid of cookies.
Google Enhanced Conversion
Google Enhanced Conversion allows tracking of customers who are logged into Google and land on our website via an ad. Google Tag Manager is used to determine which data entered by the customer on our website is to be collected (e.g.: e-mail). This data is transmitted anonymously to Google. If this anonymously transmitted data matches the data stored anonymously by Google, then a "conversion" is displayed in our account.
Google Marketing Platform
We cooperate with Facebook Inc., 1601 South California Avenue, Palo Alto, California 94304, USA, in order to address users again on Facebook. For this purpose, we have integrated Facebook Pixel into our websites. When you visit websites with one of these integrated pixels, non-personal data is automatically transmitted to Facebook for analysing and marketing purposes, which is assigned a user ID by Facebook. As soon as you register with Facebook, Facebook assigns the transmitted data to your Facebook profile and assigns you to certain groups based on your surfing behaviour (so-called custom audiences).
For further information on the purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as your settings options for protecting your privacy, please refer to the Facebook Pri-vacy Policy which can be found at https://www.facebook.com/ads/website_custom_audiences/ and https://www.facebook.com/privacy/explanation. If you wish to object to the use of the user-defined website from Facebook, you can do this at https://www.facebook.com/ads/website_custom_audiences/.
Bing Universal Event Tracking
We use Bing Ads from the Microsoft Corporation, One Microsoft Way Redmond, WA 98052-6399 USA, to adver-tise our business online and thereby linked to Bing Universal Event Tracking. In order to effectively market our product or our service, we allow Bing to use a cookie to record your visit to our website and the reservation made. Furthermore, your surfing behaviour is recorded for marketing and optimisation purposes.
You can object to the collection of data for these purposes, among others, by preventing cookies from being stored for the bing.com domain in browser settings or by using the appropriate setting here: http://choice.microsoft.com/de-DE/opt-out. Further information on data collection by Microsoft can be found here: https://privacy.microsoft.com/en-gb/privacystatement.
Affiliation and Display Networks
We cooperate with various affiliation and display / native ad networks that allow us to display various advertising materials such as banners or other promotional content on so-called publisher websites. Cookies are used to rec-ord which users came to our site via the respective advertising medium clicked on and then made a reservation. These cookies do not contain any personal data, but only a pseudonymous user and, in case of affiliation net-works, reservation ID, which make it possible to assign them to the respective network. This information is re-quired for the purpose of reporting and payment processing with the relevant network.
|Marketing Town||https://m-t.io/privacy||Cookie Settings|
We use the services of zenloop GmbH, Brunnenstrasse 196, 10119 Berlin. zenloop is a business-to-business software-as-a-service platform that enables us to collect and analyse feedback from our customers via various channels. This enables us to tailor and improve our services to the needs of our customers.
If you participate in the survey, we will also send your e-mail address to Zenloop. The reason for this is that if you inform us of problems within this survey (e.g. in the reservation process), we may contact you to find a solution together. Your e-mail address helps us to identify you here.
You can opt-out of the data collection by all tools mentioned below by disabling the respective slider in the Quandoo app.
For data analysis and personalised customer contact within our app, we also use the services of Leanplum, Inc., 1550 Bryant Street, Ste. 545 San Francisco, California 94103, United States. The collected usage data is processed in pseudonymised form, IP addresses are deleted after their collection and the data is internally linked to your personal data only if you have registered using the app. If you additionally signed up to our newsletter, we will according to the above mentioned terms combine app and newsletter usage data, in order to provide you with the best personalised experience. The information about the use of our app is usually transferred to Leanplum servers in the USA and stored there as well as in our own data warehouse (EU).
Furthermore, we use the technologies of Firebase Analytics (Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) in order to analyse the use of our app. Firebase collects several data, such as your device's Advertising ID. You can find a full list of the data collected here: https://firebase.google.com/support/privacy#data_processing_information.