Back to top
[Complete company name], [complete address], operates the Application and is the controller of any personal data collected or otherwise processed on or through the Application. [Complete company name]'s representative in the EU is [complete (company) name and address of EU representative]. [Note: Last sentence to be deleted if controller is an entity located in the EU/EEA.]
We process your personal data on several different legal bases, as follows:
[Note: In this section EU data protection authorities will likely prefer more specificity as to what data categories exactly are processed based on the different justifications and for what purposes. The following paragraphs should be amended accordingly.]
1. Based on necessity to enter into or perform a contract with you - we need to process your personal data to enter into an agreement with you to perform contractual obligations, to respond to related questions and requests from you, or provide customer support. [Note: To be deleted if not relevant regarding the Application.]
2. Based on legitimate interests - we process personal data from you
3. Based on compliance with legal obligations - we may need to process your personal data to comply with relevant laws, regulatory requirements and to respond to lawful requests, court orders, and legal process;
4. Based on your prior consent - we process personal data from you
|Name and Provider of Solution||Personal Data Processed by Solution||Purpose of Solution||Retention Period Applicable to Personal Data ||Your Choice Regarding the Solution|
|[Description of Bizness Apps proprietory analytics solution]||Information on your use of the Application, including, without limitation, your IP address, when you started and stopped using it, your location, the app used, your device information, and which app "tabs" you used.||Evaluating your use of the Application, compiling reports on user activity for us and providing other services relating to user activity and Application usage to us||Until your consent is withdrawn. You are free to withdraw your consent at any time with future effect.||You can prevent future analysis of your use of the Application by deactivating the solution in the Application's settings page.|
Cookies Used in the Application
The cookies we use can be categorized as follows:
Strictly Necessary Cookies
These are cookies that are required for the operation of the Application or of certain parts thereof. They either serve the sole purpose of carrying out network transmissions or are strictly necessary in order for us to provide an online service explicitly requested by you.
These cookies allow us to carry out analytics or other forms of audience measuring such as seeing how users move around the Application. This helps us to improve the way the Application works, for example, by ensuring that users are easily finding what they are looking for.
The following cookies are used in the Application:
Who Places the Cookie?
When Is Cookie Enabled/Does It Expire?
Loads when session begins. Expires after 24 months.
To provide behavioral advertising in the Application using Google Ads
When session begins; 24 hours later
Linking PWA user to his/her app and data.
When session begins; 24 hours later
Stores data in-between pages, e.g. partial food ordering
When session begins; 24 hours later
Enable "back" button functionality
Strictly Necessary, and Analytics
When session begins; 48 hours later
Identify user anonymously/uniquely, for e.g. keeping track of a food order on the server side. (duih is a hash of device_user_id). Also used to track usage for custom analytics.
When session begins ; never
Show the correct device-local time of events, food ordering times, etc
When session begins; never
(PWA) Used to store the device_user_id/duih on the device's local storage, so that the device can continue to be identified as the same each time the app opens.
Marketing Communications to You
When creating a user account or when using the [description] functionality of the Application, you can register to receive newsletters or similar information on our products or services or the products or services of our affiliated companies. As part of the registration process, we ask you to provide us with certain information. Such information may include your first and last name, your email address, your birthday, your zip/postal code and/or your phone number. Providing any information other than your email address is optional to you when registering to receive newsletters.
When receiving a registration, we log and store the date/time of registration and a unique identifier such as the IP address the registration was received from. This solely serves evidentiary purposes in case your contact detailed are used by an unauthorized party.
When registering to receive newsletters or similar information in the Application, you need to explicitly declare your consent in our processing of your personal data for this purpose. You are under no obligation to provide such consent and, if you choose to do so nonetheless, you may withdraw your consent at any time with future effect for any or no reason by following the unsubscribe link contained in any email communication to you or by sending us an email at firstname.lastname@example.org.
In the following circumstances, we disclose your personal data to the following third parties, as required or permitted by applicable law:
Who Is your Personal Data Disclosed To?
What Is the Purpose Underlying the Disclosure?
Companies affiliated with us, including:
[company name and address of affiliated companies receiving or having access to Application data]
Third-party suppliers and service providers including:
|To assist us in the operation or improvement of the Application and to enhance our products and services.|
|To other third parties in line with applicable legal requirements (where applicable)||To comply with legal obligations that we are subject to.|
[Note: Statements to be adjusted as necessary in light of where the controller and its affiliates and third-party service providers with access to Application data are located.]
Certain of our affiliated companies and third-party service providers are located outside the EU/EEA in jurisdictions that are not subject to an unqualified adequacy decision by the EU Commission finding them to provide an adequate level of protection of personal data, i.e. a level of protection of fundamental rights and freedoms that is essentially equivalent to that guaranteed within the EU.
However, to ensure an adequate level of protection of your personal data, we enter into data processing and data transfer agreements with our affiliated companies and third-party service providers outside of the EU/EEA that incorporate the provisions of the Standard Contractual Clauses approved by the EU Commission or implement other appropriate safeguards with them. You can ask for a copy of such appropriate safeguards by contacting [designated recipient] at [contact details].
[Note: To be confirmed by the controller whether the statements contained in this paragraph are correct and complete.]
We have implemented appropriate retention periods for your personal data collected or otherwise processed on or through the Application as set forth in our records management policy. Personal data processed in the context of a contract with you will be retained by us for the term of the contract and for a reasonable time afterwards as might be required to determine and settle any related claims. Where our processing of your personal data is based on legitimate interests or the compliance with legal obligations, it will be deleted as soon as the underlying purpose has expired. Personal data processed based on your consent will be deleted if and when you withdraw such consent.
Subject to the conditions set out in the applicable law, you have, without limitation, the rights to (i) inquire whether and what kind of personal data we hold about you and how it is processed, and to access or request copies of such personal data, (ii) request the correction or supplementation of personal data about you that is inaccurate, incomplete or out-of-date in light of the purposes underlying the processing, or to (iii) obtain the erasure of personal data no longer necessary for the purposes underlying the processing, processed based on withdrawn consent, processed for legitimate interests that, in the context of your objection, do not prove to be compelling, or processed in non-compliance with applicable legal requirements. In addition, you have, subject to the conditions set out in the applicable law and without limitation, the rights to (iv) request us to restrict the processing of personal data in certain situations where you feel its processing is inappropriate, (v) object, in certain circumstances, to the processing of personal data for legitimate interests, and to (vi) request portability of personal data that you have actively or passively provided to us (which does not include data derived or inferred from the collected data), where the processing of such personal Data is based on consent or a contract with you and is carried out by automated means. In case of concerns, you also have the right to lodge a complaint with the competent local data protection authority.
You may exercise the above mentioned rights of access, rectification, erasure, restriction, objection and data portability by contacting us under email@example.com, even to the extent that such claims relate to the processing of personal data by one or more of the data recipients identified in this privacy statement.
Your use of the Application and your provision of personal data to us in the process is purely voluntary on your part. Subject to your sole discretion, you can, at any point, stop to use the Application or, where applicable, opt out of certain data processing operations while using the Application as described in this Supplemental Statement. An exception applies if an to the extent that you want to enter into or perform a contract with us on or through the Application. In this event, providing us with your related personal information is necessary for us to be able to enter into the contract with or provide any contractual services to you.
This Supplemental Statement is effective [effective date]. We may make changes, including material changes, to this Supplemental Statement from time to time and subject to our sole discretion. You should review the Supplemental Statement each time you use the Application to learn of any changes.
If you have questions about this Supplemental Statement, please contact us at [contact details].