Lynn

Privacy policy of Hospitality Digital GmbH

LYNN Ordering App

The protection of our customers' personal data is our highest priority. The following Privacy Policy is therefore intended to inform you about the processing of your personal data including your rights in accordance with Regulation (EU) 2016/679 ("GDPR"). In particular, we explain which personal data we collect, for what purposes we process such data, which technologies we use, to whom we transfer personal data and what rights you are entitled to under the GDPR.

  1. General

    1. Controller within the meaning of the GDPR is Hospitality Digital GmbH, Metro-Straße 1, 40235 Düsseldorf (hereinafter "H.d", "we" or "us"). For certain processing activities in connection with the services, we act jointly with our Affiliates act as the data controller. A list of our Affiliates is available here. Your personal data will only be processed by the Affiliate located in the country of your place of business.

    2. If you have any questions regarding data protection, you can contact our data protection officer using the following contact details: Hospitality Digital GmbH, Data Protection Officer, Metro-Straße 1, 40235 Düsseldorf, email: privacy@hd.digital . The contact details of our Affiliates' data protection officers can be found here.

    3. The terms used in this Privacy Policy have the same meaning as defined in our General Terms and Conditions, unless explicitly stated otherwise herein.

A. Processing of personal data on our website

  1. Automated processing of personal data when accessing our website

    1. Personal data is automatically collected when you access and use our website via your terminal device (for example, your computer, your cell phone or a comparable Internet-enabled terminal device). This includes

    1. Processing the IP address of your terminal device is necessary for us to make the website available to you and thus serves the functionality of the website. The processing of the other data mentioned in clause 2.1 of this Privacy Policy takes place for the purposes of data security and the security of our IT systems as well as for the optimization of our services and for the improvement of our website. The data mentioned in clause 2.1 of this Privacy Policy is stored in a separate log file and is not linked to any other stored personal data. An evaluation of this data, with the exception of statistical purposes, and if so generally in anonymous form, is only carried out within the scope of this Privacy Policy. The data mentioned in clause 2.1 of this Privacy Policy will not be used for marketing or advertising purposes. Processing is carried out on the basis of Art. 6 para. 1 sentence 1 letter f) GDPR. Protecting our website and optimizing our services represents a legitimate interest on our part.

    2. The data mentioned under clause 2.1 of this Privacy Policy will be stored until the purpose of its processing ceases to apply. The data required for the provision of the website (your IP address) will be deleted after the end of the respective browser session, i.e. when you leave the website or close your browser. Deletion of the log files in which this data is stored is carried out automatically and usually within fourteen (14) days following creation of the log file. If the other data mentioned in clause 2.1 of this Privacy Policy is also processed by us for evaluation purposes, this shall be done without reference to the IP address, so that we can no longer establish a personal reference.

  1. Cookies

In order to make our services and our website as user-friendly as possible and to enable the use of certain functions of the website, we reserve the right to use so-called cookies. These are small text files that are stored on your terminal device by your browser. Such text file contains a characteristic character string that allows the browser to be uniquely identified upon repeated access of the website. Some of the cookies we use are required in order to provide you with the website (technically necessary cookies). Other cookies are used to analyze your usage behavior (analysis cookies) or for advertising purposes (advertising cookies). Some of the cookies we use are deleted after the end of a session, i.e. after closing your browser (session cookies). Other cookies remain on your terminal device and enable us to recognize your browser during your next visit of our website (persistent cookies). You can configure your browser in such a way that you are informed about the placement of cookies and decide on an individual basis whether to accept or reject cookies for certain cases or in general. Please refer to your browser's help function for more information. Your browser also contains settings that prevent cookies from being placed. As a user, you therefore have full control over the use of cookies. By changing the settings in your browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically by configuring your browser accordingly. Certain cookies also offer further technical options (such as setting an "opt-out cookie") in order to object to the use of the cookie. Information on this is available in the respective detailed description of the cookie below. However, the functionality of our website may be limited if setting of cookies is prevented. In detail:

    1. To enable the website to function properly, we use technically necessary cookies, for example to store language settings and log-in information. Processing of technically necessary cookies is carried out on the basis of Art. 6 para. 1 sentence 1 letter f) GDPR. The functionality of our website represents a legitimate interest.

    2. We use advertising cookies for advertising purposes. By accepting our "Cookie Banner," you consent to the processing of your personal data through advertising cookies. Processing of advertising cookies is carried out on the basis of Art. 6 para.1 sentence 1 letter a) GDPR

    3. We use analysis cookies that allow us to track your use of our website, e.g. to the extend of tracing the third-party website you have reached our website from, the sub-pages of our website you have visited and the kind and frequency of clicked links.. The data collected about you in this way is pseudonymized by us by means of technical measures. After pseudonymization, direct assignment of the data to the calling user is no longer possible. The data will not be stored together with other personal data. The use of analysis cookies serves the purpose of improvement of our website and the content offered therein. By accepting our "Cookie banner", you consent to the processing of your personal data through analysis cookies. The processing of such personal data is carried out on the basis of Art. 6 para. 1 sentence 1 letter a) GDPR. We use the following analysis cookies:

B. Processing of personal data during registration and use of our services

  1. Registering for our services

    1. You can visit our website without registering a user account.

    2. However, if you wish to use our services (refer to our T&Cs for more information), registration is mandatory. Upon successful registration, an agreement regarding the use of our services is concluded between you and H.d.

    3. Registration for our services requires the completion of a registration form. The registration form indicates which personal data is mandatory for registration and which personal data is optional.

    4. Upon successful registration, we will send an email/SMS to the email address/cell phone number that you specified. You must click on the link sent with the email/SMS to confirm registration.

    5. The processing of personal data described in this Clause 4 is necessary for the preparation and performance of the contract and for the provision of services. The legal basis with this respect is Art. 6 para. 1 sentence 1 letter b) GDPR.

  2. Using our services

    1. We process the personal data that you have provided during registration (see Clause4) as well as other personal data that you may provide to us during the term of the contract (for example, further information about your business or information about your use of the services) in order to be able to offer you the services, in particular to provide you with LYNN, as well as to be able to offer you consulting and other services. Furthermore, the consulting services may include recommendations on other services that may be useful in the context of LYNN.

    2. To be able to offer you consulting services, the personal data that you have provided during the registration process (see Clause4 ) and during the use will be processed by our Affiliate based at your location of business (see Clause1.1). The consulting services include, among other things, services regarding the set-up of LYNN and the best possible use of LYNN.

    3. We and our Affiliates also process your personal data in order to send you contract-related information via e-mail, text message or mail, for example to arrange on-site visits at your premises required for the provision of services, in particular with regard to the consulting services.

    4. The processing of personal data described in this Clause 5 is necessary for the preparation and performance of the contract, as well as for the provision of services. The legal basis with this respect is Art. 6 para. 1 sentence 1 letter b) GDPR.

  1. Customer analysis and marketing

    1. Our Affiliates will process the personal data you have provided during the registration process (see Clause 4) and any additional personal data that you might provide during the term of the contract (for example, further information about your business or information about services that you use) to check whether you might already have an existing contractual relationship with an Affiliate (for example, due to the fact that you are an existing METRO/MAKRO customer, hereinafter "Affiliate Contract").

    2. In the case of an existing Affiliate contract, our Affiliate will use your personal data to update and adjust your existing customer master data if required, and to ensure the accuracy of such data.

    3. Furthermore, our Affiliate will process your personal data to optimize the existing customer relationship with you and to improve your customer experience. This may include, for example, recommendations on how the services might be best integrated with other services that you use (for example, information on how to adjust your menu based on knowledge from using the services). For these purposes, our affiliate might merge personal data it has received under the affiliate contract with personal data received in connection with the services.

    4. We also use your personal data to analyze your usage behavior (such as how often you use LYNN). This enables us to determine which parts of the services are of particular relevance to you.

    5. The processing of your personal data described in Clause 6.1 -6.4 is necessary (1) in order to execute the contract and to provide you with the services and it (2) represents our and our Affiliates' legitimate interest. Art. 6 para. 1 sentence 1 letterb) GDPR and Art. 6 para. 1 sentence 1 letter f) GDPR represent the legal basis thereof. The processing serves our legitimate interest, thus to improve the service and to offer you the best possible customer experience.

    6. Your personal data will only be used for direct marketing via email/SMS or by other electronic means, only if you have consented to such use. The legal basis with this respect is Art. 6 para. 1 sentence 1 letter a) GDPR.

C. Further information on the processing of personal data

  1. Joint responsibility

In order to offer you the best-possible service, with our Affiliates, we shall jointly provide you with certain services (the Affiliate responsible for you is described in more detail in the annex). We are therefore jointly responsible for the processing of your personal data. You will find more information here.

  1. Contact

You can contact us in various ways:

You can also contact us by phone or by email. In this respect, too, only the personal data required to respond to your query will be processed. Processing is carried out on same basis as listed in Clause Error: Reference source not found.

  1. Recipients of personal data

    1. In addition to our own staff and freelance employees, recipients of your personal data may also include the following parties:

    1. These recipients can be based both inside and outside the European Union or the European Economic Area. Through contractual agreements with the recipients, we ensure that this personal data is processed in accordance with the GDPR requirements, even if the data processing takes place outside the European Union or the European Economic Area in countries where an appropriate level of data protection is otherwise not guaranteed and for which no adequacy decision of the European Commission exists. For more information on the existence of an adequacy decision of the European Commission and on adequate safeguards, and to obtain a copy of these safeguards, you can contact our data protection officer at privacy@hd.digital. .

    2. In order to determine a possible abuse of our services, resulting in legal prosecution , or where a legal obligation to disclose exists, personal data may be passed on to authorities (in particular, prosecution authorities and tax authorities), our legal defense and, if necessary, to affected third parties. Information may also be disclosed if this serves the enforcement of our General Terms and Conditions or other agreements, or where this is required by a legal,official or court order. The legal basis for processing is Art.6 para. 1 sentence 1 letter f) GDPR, for example, if the disclosure is necessary for a legal dispute, or Art. 6 para. 1 sentence 1 letter c) GDPR, insofar as a legal or official obligation exists. The data will be deleted as soon as it is no longer necessary to achieve the original purpose of its collection.

  1. Deletion of personal data

We will store the personal data collected in connection with the services until the termination of our contract (see our T&Cs for more information). Unless stipulated otherwise in this Privacy Policy, your customer account will be automatically deleted within 30 days following termination of the contract. If we are legally obligated to keep certain personal data collected in connection with your user account, beyond the contract termination, such data will be deleted as soon as the statutory retention periods have expired.

  1. Data security

We use technical and organizational measures to ensure that the user's personal data is protected against loss, incorrect modifications or unauthorized access by third parties. To ensure secure data transmission, the transmission of data takes place exclusively via "Transport Layer Security (TLS)".

  1. Your rights

As a data subject within the meaning of the GDPR, you are have to the following rights:

you also have the right to consult our data protection officer on all matters concerning the processing of your personal data and concerning the exercise of your rights under the GDPR (Article 38 (4) GDPR); or to lodge a complaint with the competent supervisory authority if you believe that data processing violates the GDPR (Article 77 GDPR).

Effective as of: September 2020/ AG

LYNN_B2B_Privacy_V2_September2020_de

Cooperation partners / Partenaire de coopération / Samenwerkingspartner / Socio de cooperación / Suradnički partner / Együttműködési partner / Partner di cooperazione / Partner współpracy / Партнер по сотрудничеству / İşbirliği Ortağı / Партнер співробітництва / Parceiro de Cooperação / Partner pro spolupráci / Kooperations Partner

Austria

Belgium

Bulgaria

PR China

METRO Cash & Carry Österreich GmbH

MAKRO Cash & Carry Belgium NV

METRO Cash & Carry Bulgaria EOOD

METRO JinJiang Cash & Carry Co., Ltd.

Metro Platz 1

Nijverheidsstraat 70

87, Tzarigradsko Chaussee Blvd.

1425 Zhen Bei Road

2331 Vösendorf

2160 Wommelgem

7-11 km.

PutuoDistrict

1784 Sofia

Shanghai, 200333

Austria

Belgium

Bulgaria

P. R. China

Croatia

Czech Republic

France

Germany

METRO C&C Zagreb d.o.o.

MAKRO Cash & Carry CR s.r.o.

METRO Cash & Carry France SAS

METRO Deutschland GmbH

Jankomir 31

Jeremiásova 7/1249

5 rue des Grands Prés

Metro-Straße 8

10090 Zagreb - Susedgrad

15500 Prague 5

92024 Nanterre Cedex

40235 Düsseldorf

Croatia

Czech Republic

France

Germany

Hungary

India

Italy

Japan

METRO KereskedelmiKft.

METRO Cash & Carry India Pvt. Ltd.

METRO Italia Cash and Carry S.p.A.

METRO Cash & Carry Japan KK

Budapark, Keleti 3

Survey No. 26/3, 'A' Block

Via XXV Aprile, 25

OmoriBellport D, 7F

2041 Budaörs

Ward No. 9, Industrial Suburbs,

20097 SAN DONATO MILANESE

6-26-3 Minami - oi

Subramanyanagar

Shinagawa-ku

Bangalore, Karnataka 560 055

Tokyo 140 - 0013

Hungary

India

Italy

Japan

Kazakhstan

Moldova

Netherlands

Pakistan

METRO Cash & Carry LLP

METRO Cash & Carry Moldova S.R.L.

MAKRO Cash & Carry Nederland B.V.

METRO Cash & Carry Pakistan (Pvt.) Ltd

16 B, Sain Street

No. 5, Chisinau Street, Stanceni Village

Spaklerweg 50-52

ThokarNiazBaig

050031 Almaty

4839 CHISINAU

1096 BA Amsterdam

Multan Road

Lahore 53700

RepublicofKazakhstan

Moldova

Netherlands

Pakistan

Poland

Portugal

Romania

Russia

MAKRO Cash and Carry Polska S.A.

MAKRO Cash & Carry Portugal, S.A.

METRO Cash & Carry Romania srl

METRO Cash & Carry OOO

Al. Krakowska 61

Rua Quinta do Paizinho, 1

51 N Theodor PalladyBlvd

LeningradskoyeShosse, 71 G, bld 2

02-183 Warsaw

Portela de Carnaxide

Building C6, Frame A, Sector 3

125445 Moscow

2794-066 Carnaxide

Bucharest

Poland

Portugal

Romania

Russia

Serbia

Slovakia

Spain

Turkey

METRO Cash & Carry d.o.o

METRO Cash & Carry Slovakia, s.r.o.

MAKRO España

METRO GrosmarketBakirköyAlisveris

Auto put za Novi Sad 120

Seneckácesta 1881

Paseo Imperial, 40

HizmetleriTicaretSirketi Ltd. Sti.

11080 Belgrade

900 28 Ivanka PriDunaji

28005 Madrid

KocmanCaddesi

34540 Günesli-Bakirköy (Istanbul)

Serbia

Slovakia

Spain

Turkey

Ukraine

Vietnam

METRO Cash & Carry Ukraine Ltd.

METRO Cash & Carry Vietnam Ltd.

43, Petra Grygorenka Street

Lot B, An Phu

02140 Kiev

An Khanh New Residential Area,

Ho Chi Minh

Ukraine

Vietnam