Your Privacy Globally
The data controller of your personal information is the entity in the jurisdiction where your personal information is collected.
Information we collect
The information we collect falls into three categories: (a) information you provide to us; (b) information we collect through automated methods when you use our services; and (c) information we collect from other sources.
Generally, you are under no obligation to provide your personal information. However, in certain cases, we may be unable to provide you with our services unless you provide your personal information.
We may combine the information you provide to us with information that we collect through automated methods, and with information we receive from other sources. For example, when you add a method of payment to your profile in our mobile app, we may combine your profile with information we receive from our payment processors or other providers regarding transactions made with the same payment credentials in our restaurants.
We collect information you provide to us
You may provide the following information to us, depending on how you interact with us:
- personal details, such as your name, postal and email addresses, phone number, birthday information and other contact information, when you register with our online services, log-in to Wi-Fi, enter one of our competitions, or contact us by phone or through our online services;
- demographic information such as age or gender;
- transaction information, including information about the products you buy, prices, method of payment and payment details;
- account information, such as your username or password (or anything else that identifies you) used to access our online services or to buy or use our products and services;
- profile information, including products and services you like, or times you prefer to visit us;
- other personal information you choose to provide us when you interact with us (including through social media).
We collect information through automated methods
Automated technology may include cookies, local shared objects, and web beacons.
We may collect information about your:
- internet protocol (IP) address;
- computer or mobile-device operating system and browser type;
- type of mobile device and its settings;
- unique device identifier (UDID) or mobile equipment identifier (MEID) of your mobile device;
- device and component serial numbers;
- advertising identifiers (for example, an Identifier for Advertising (IDFA) on Apple devices) or similar identifiers;
- referring webpage (a page that has led you to ours) or application;
- online activity on other websites, applications or social media;
- visits to our website, where recorded using digital technology (e.g. video recordings); and
- activity related to how you use our online services, such as the pages you visit on our websites or in our mobile apps.
Our online services may collect information about the exact location of your mobile device or computer using geolocation and technology such as GPS, Wi-Fi, Bluetooth, or cell tower proximity. For most mobile devices and computer systems, you can disable the collection of this information by using the device or web-browser settings. If you have any questions about how to prevent us from collecting exact information about your location, we recommend you contact your mobile-device service provider, the device manufacturer, or your web-browser provider.
We collect information from other sources
We may collect information about you from our business partners and vendors or from public sources.
How We Use the Information We Collect
We use the information we collect for the following purposes:
- to provide our products and services and contract with you, including payment processing and customer support;
- to manage our relationship with you, including feedback management and for customer surveys;
- to personalize and improve our products and services and your overall customer experience, in particular by improving our existing technologies and developing new products and services and employing profiling technology (unless we notify you separately thereof, this will not include automated individual decisions that have legal effects for you or similarly significantly affect you);
- to provide you with general and personalized electronic and non-electronic direct marketing information and support our targeted advertising initiatives concerning our products and services as well as our business partners' products and services (including promotions, contests, prize draws, competitions, and sweepstakes);
- business analytics, including consumer and operations research, to assess the effectiveness of our sales, online service, marketing, and advertising, and to analyze market trends and (future) customer demand;
- to protect against, identify and prevent fraud and other crime, claims and other liabilities;
- to anonymize your information for further internal and external use in a manner that does not identify you;
- to comply with legal obligations, our policies, or our Standards of Business Conduct; and
- to establish, exercise or defend a legal claim.
We may use the information we collect about you in other ways, which we will tell you about at the time we collect it or before we begin using it for those other purposes.
How We Share the Information We Collect
We do not sell your personal information and only share your information as described in this Privacy Statement or as otherwise communicated to you at the time we collect your information.
We may share your personal information with:
- vendors who help us operate our business (including information technology service providers and marketing agencies that we use as well as those who use the information to detect or prevent fraud for us, and who may use the information to provide fraud detection and prevention services to others);
- public authority and courts;
- buyers or other parties involved in a corporate transaction if we decide to sell or transfer all or part of our business;
- our professional advisers such as our legal representatives, auditors and insurance brokers;
- business partners.
Children's Privacy Notice
We understand how important it is to protect your privacy when you use our online services. We are especially committed to protecting the privacy of children who visit or use our online services.
We urge parents to regularly monitor and supervise their children's online activities. If you have any questions about our children's privacy practices, please contact us.
our Choices and Rights
Marketing Communications
If you are subscribed to our marketing communications, you can later opt out by following the opt-out instructions in the marketing communications we send you. You can also generally find your communication preferences with instructions on how to opt out in the profile section of the online services that you use. You may also have the ability to change your communication preferences using your device settings. You can also opt out by contacting us at our Global or Local Data Protection Office using the contact information provided below.
If you do opt out of receiving marketing communications from us, we may still send communications to you about your transactions, any accounts you have with us, and any contests, competitions, prize draws or sweepstakes you have entered. Opting out of one form of communication does not mean you have opted out of other forms as well. For example, if you opt out of receiving marketing emails, you may still receive marketing text messages if you have opted in to receiving them.
We do not share personal information with third parties for their own direct marketing purposes, unless you give us permission to do so. When we give you notice, and you consent, we will share your personal information as you direct us to.
Your Personal Information Rights
Under applicable law, you may have the rights (under the conditions and to the extent set out in applicable law):
- to check whether and what kind of personal information we hold about you and to access or to request copies of such data;
- to request correction, supplementation, anonymization, blocking or deletion of information about you that is inaccurate, incomplete, outdated, unnecessary, excessive or processed in non-compliance with applicable requirements;
- to request the restriction of the collection, processing or use of information about you;
in certain circumstances, to object for legitimate reasons to the processing of your information or to revoke consent previously granted for the processing while the latter does not affect the lawfulness of processing before the revocation;
- to request data portability;
- to lodge a complaint with the competent authority.
