This Privacy Policy explains to you how your personal data is processed when you use the Quandoo website's offers and online services on the "Quandoo" website, the associated mobile app and our widget that is implemented on third-party platforms (hereinafter "platform" refers to both the website, the mobile app and the widget). This Privacy Policy also informs you of your rights and choices to control your personal information and to protect your privacy.
1. Who is responsible for data processing and whom can I contact?
Responsible for data processing: Quandoo Singapore Pte. Limited, 120 Robinson Road #14-01, Singapore, 068913. This company is also meant if the terms "we" or "us" are used below.
You can contact our Data Protection Officer at:
2. What personal data do we process and from which sources does such data originate?
When we make our platform available to you for use, we process personal data from various sources. On the one hand, this is data that we automatically collect when you use the platform. However, this may also include data which you have voluntarily provided to us or which we receive from our partners.
Data that we collect automatically when you use our platform
As soon as you visit the website or open the app, you send technical information to our web servers. This happens regardless of whether you make a reservation at a restaurant or whether you log in later using an account with us to use the platform. In each case we collect the following access data and web access data (which we refer to collectively as "access data" ):
We process access data so that you and other users can use the platform and we can ensure the functionality of the platform. We also process access data to carry out performance analyses on the platform, continuously improve the platform and correct errors to ensure IT security and the operation of our systems, and to prevent or detect misuse, particularly fraud.
In addition, we process access data to adapt the platform to your needs (personalisation). To this end, we also assign you what is known as a "Unique User ID". With this unique user ID, we can associate your bookings and other interactions.
We also use cookies to process such data. Cookies are small text files that you download to your device when you visit our websites and that store the above information about you. To learn more about how cookies work, which cookies we use, and how to disable them, read our cookie policy. It also tells you what information is collected by cookies and tracking tools from third parties such as Google and Facebook. To ensure the legibility of this privacy statement, we have summarised this information on a separate page.
Data that you transmit to us yourself
In addition to the data we receive from all visitors, we also process other data. The exact volume of such data depends on how you use the platform. You can use the platform with or without creating a user account.
If you decide to create a user account and complete the registration form, we will process the following information:
However, you can also use the single sign-on feature (SSO) on our platform to create and log in to your user account. If you choose this feature, we ask you to enter your log-in data of the social network of your choice (e.g. Facebook or Google). The respective SSO-provider will then authenticate you. This login data is not visible to us.
When you book or reserve, we also process your:
Please do not enter any sensitive personal information in the field "special preferences".
We process such data in order to be able to handle your reservation, inform you about the status of your reservation, and customise the platform based on your previous reservations and bookings.
The platform offers you the possibility to use certain social functions: You can leave ratings and reviews for restaurants. You can also subscribe to comments and reviews from other users.
When you use these features, your IP address will be stored when you post a comment or rating. This is a protective measure for us in case someone publishes illegal content, comments and/or contributions (insults, forbidden political propaganda, etc.). In such cases, we must be able to determine the identity of the author, as legal action can be taken based on the content in the comments or posts.
If you would like to subscribe to the following comments, a confirmation email will be sent to confirm that you are actually the owner of the email address you entered. Subscriptions for comments can be deleted at any time. The confirmation e-mail contains the corresponding instructions.
You receive Loyalty Points for each successful reservation. In order to manage these Loyalty Points, we process your reservation data and booking history. When redeeming your Loyalty Points, we additionally ask you to provide us with your bank details in order to initiate the payout. After the bank transfer is complete, we delete your bank details.
We do not process any sensitive details about card payments ourselves, but use secure payment providers who do this for us. The payment data you enter is encrypted in your browser by the payment provider in a way that only the payment provider can access, while we only receive non-sensitive data (payment method) and references that confirm that you have made a payment. We do not store any other payment information in our system.
If you wish to receive our newsletter, we need your consent for this. We use the so-called double opt-in process for our newsletter, so that you are only subscribed to the newsletter once you click on the link in the confirmation email. This way we can make sure that you are the rightful owner of the email address. The newsletter contains information about Quandoo, restaurants and current offers. Legal basis for the sending of newsletters is your consent.
When subscribing to the newsletter, we collect your IP address, the date and the exact time of your subscription. This data is stored in order to prove that you signed up to the newsletter. Also, we need the data in case your email address was fraudulently used.
Furthermore, when interacting with the newsletter, we collect device and usage data. For example, we record if the newsletter was delivered, if you opened the newsletter or if you clicked on a link in the newsletter. We link your email address to this data in order to personalise and statistically analyse the newsletter. If you use our app, we will also connect the data collected within the app with this usage data from the newsletter. This way we make sure that we display offers within the app that are relevant to you.
You can withdraw your consent to receive newsletters with any form of personalisation at any time without incurring any costs other than the transmission costs in accordance with the basic tariffs. Just click on the unsubscribe link at the end of each newsletter or send an email to the address set out above.
Perhaps you would like to ask our customer service for assistance or make a complaint. In this case, we will process your IP address and contact information as well as the content of your request in order to respond to your request.
Data we receive from partners and third-party platforms
Since our platform serves as an intermediary between you and the restaurant where you make your reservation, we also process data that we receive from our partner restaurants. Similarly, we may receive information from third party platforms where a reservation made by you on that third party platform is made by Quandoo. The data in question comprises:
Other data collected
We maintain what is referred to as a fan page on the Facebook platform. When you visit our fan page, data may be collected for market research and advertising purposes, which are stored in user profiles using pseudonyms. Cookies are set for this purpose. Based on these cookies, we can carry out statistical evaluations, for instance. This serves our legitimate interest on an optimised presentation (for further information on the legal foundations, see below). Data processing is carried out on the basis of an agreement between jointly responsible parties, which you can view here: https://www.facebook.com/legal/terms/page_controller_addendum You can find detailed information about data processing by Facebook, contact options and your rights in Facebook's privacy policy: https://www.facebook.com/about/privacy/, where you can also exercise your right of appeal.
Furthermore, we use Google Maps in order to show you the location of our partner restaurants on the map. Google collects your IP-address to this end. You can find the terms of use and the respective Google privacy policy here: https://maps.google.com/help/terms_maps.html.
We also use Google Tag Manager that allows us to manage tools which are implemented via Google Tag Manager. Google Tag Manager itself does not set any cookies and does not collect any personal information. However, the tool is used to trigger other tags, which might collect data.
3. For what other purposes do we process your data?
We possibly process your data for additional purposes.
These include the following:
4. What is the legal basis of data processing?
When processing your personal data, we rely on local data protection law and use your personal data only for the fulfilment of our services.
In this context, we refer in detail to the following legal foundations:
Consent
Since you have given us your consent to process personal data for the above-mentioned purposes, such consent guarantees the lawfulness of such processing. By registering with your account information or making a reservation, you expressly consent to the processing of your data as described in this Privacy Policy by crossing the box before submitting the registration or reservation form: When we process your data, this is because you have expressly permitted and requested us to do so when you use our platform. Your consent thus represents the most important legal basis for the processing of your personal data by us.
Fulfilment of our contractual obligations towards you
At the same time, the processing serves to make the platform available within the scope of performance under our contract with you. Accordingly, in most cases the processing is justified not only with your consent, but also because it is necessary to fulfil our contract with you. For example, if you make a reservation at a restaurant via our platform, we need to process the reservation data to secure your reservation.
Our legitimate interests
There are also cases in which we would be entitled to process your data without your consent if this is necessary to protect our legitimate interests (or those of third parties). In this respect, the purposes described above, for which we process your data, in many cases also represent legitimate interests. This means that we may process the data necessary to ensure the security of our IT systems in any case, even if you have not given or withdrawn your consent to such processing. This also refers to the prevention of abuse of our platform or the personalisation of advertising for your interests (referred to as direct marketing).
Statutory requirements
In addition, we are required by law to provide certain information to the law enforcement or tax authorities upon request in individual cases.
5. To whom do we transmit your data?
We treat your personal data with care and confidentiality and pass such data on to third parties only to the extent described below and no further. We only transmit data to public authorities if there is a legal obligation to do so as a result of a request for information from the competent authority.
Beyond statutory obligations to public authorities, we will only share your information with other users of the platform, with our third-party providers who assist us in providing the platform, or within the Quandoo Group of Companies.
Other users of the platform
We transfer the booking and reservation data via the platform to our partner restaurants to enable reservations to be made at their restaurants. We also share your loyalty points with the restaurants to ensure the smooth running of these programs. Restaurants will receive your account information (except your password) and any ratings or reviews you enter into the platform's system. Ratings and reviews will also be published on the platform so that they can be seen by all remaining users (including visitors without an account on the platform).
Other third parties
In addition, we transmit data to external service providers who enable us to provide the platform. This includes the data and providers listed in our cookie policy. Please note in this connection that all of our server hosting and cloud services are made available by Amazon Web Services, Inc. (" AWS") as well as Google Ireland Limited. Both providers process all data on our behalf and we have subjected them to a strict data processing agreement to ensure the security of the processing.
Within the Quandoo Group of Companies
We are part of a worldwide group of affiliated companies of Quandoo GmbH, KulturBrauerei, Schönhauser Allee 36, 10435 Berlin, Germany ("Quandoo DE"). Quandoo DE itself is a wholly owned subsidiary of Recruit Holdings Co., Ltd, 8-4-17 Ginza, Chuo-ku, Tokyo 104-0061 Japan ("Recruit"). Accordingly, we are obliged to provide Quandoo DE or Recruit with certain information either in accordance with legal reporting requirements or in the normal course of business as a global company. As a rule, all business intelligence data is anonymised to ensure that your right to privacy is respected. However, Quandoo DE or Recruit may also have access to personal, non-anonymised information, such as an internal audit or an audit required by public authorities.
6. How long will my data be stored?
We process and store your personal data as long as this is necessary for compliance with our contractual or statutory obligations. We therefore store the data as long as our contractual relationship with you exists and after termination only to the extent that and as long as the applicable laws require. All other data will be deleted immediately when you log out of the platform. If the remaining data is no longer required for fulfilment of such obligations, then the data in question will be deleted regularly unless further processing thereof is necessary for the preservation of evidence or for legal claims subject to the statute of limitations.
7. Does Quandoo create a user profile with my personal data?
We use your data to optimise your Quandoo browser experience. This means that we use your data to provide you with a personalised platform based on your personal preferences and interests and to create customised offers based on your previous behaviour patterns. For example, the IP address of your computer is used to identify your geographic location and provide you with localised content in your language. We can make suggestions and offers for new restaurants based on the restaurants you have previously viewed or booked through our platform. However, we will never process and analyse your personal data in the course of profiling in such a way that this leads to an automated decision that is legally valid for you or that significantly affects you in a similar manner.
8. Do I have to provide data? What happens if I do not provide my data or no longer provide it?
You are not legally obliged to provide us with the personal data specified in this Privacy Policy. In particular, the contractual relationship that you have entered with us by agreeing to our terms and conditions means that you are under no obligation to provide your personal data. However, the transmission of the contract information you send to us is a basic prerequisite for the conclusion of a contract with us. Moreover, you may not use the platform or may use it only to a limited extent if you do not provide us with certain data or if you object to the use of such data.
9. How do I request the deletion of my data?
Send an email to dataprotection@quandoo.com with a simple request to delete your personal data. Tell us your name and the email address you used to register with us. We will send you a confirmation email after the deletion.
10. What rights do I have in relation to processing?
You may assert the following rights against us pursuant to the applicable local laws:
Moreover, you have a right to complain to the competent data protection supervisory authority according to the applicable local laws. You can revoke your consent to the processing of your personal data at any time. This also applies to the revocation of declarations of consent given to us prior to entry into force of the applicable local laws. However, such revocation is only effective for the future. Any data processing that took place before revocation will not be affected by this.
How to exercise these rights?
Any requests to exercise User rights can be directed to the Quandoo Group through the contact details provided in this document. These requests will be addressed by Quandoo as early as possible and in accordance with the applicable local laws.
May 2024
This information complements the Quandoo Privacy Policy.
Below, we provide you with a list of all the cookies and other web tracking tools provided on our platform either by us or by third parties.
We use the following types of cookies only within the scope of legal regulations and on the basis of the legal founda-tions specified:
You can prevent the acceptance of cookies by adjusting your browser settings so that no cookies are ac-cepted at all. However, if you configure this setting in this way, you may not be able to use certain current or future elements of our website.
1. Quandoo's own cookies (referred to as "first-party cookies"):
| Name | Lifespan | Purpose |
|---|---|---|
| t | 29 days after last change | Defines the channel via which a user did a booking. |
| quandooUserLanguage | 1 year | Saves the language selected by the user. |
| quandooUserSearchDestination | Session | Saves the default search area of the user. |
| ut | 90 days | Persist the authentication of a user. |
| quandooUserVisitorId | 180 days | Identify the user in surveys conducted. |
| qdoo_gp | 6 days | Collects geolocation information. |
| promoCode7d | 7 days | Stores the Promotional Codes entered by the user. |
| sem_attributes | Session | Identifies the SEM campaign details. |
| grpRef | Session | Stores the name of the chain restaurant. |
| qdoo_exp_ | 30 days | Helps to know which experience was served to the user in order to serve a consistent experience. |
Users can prevent the acceptance of first-party cookies by adjusting their browser settings so that no cookies are accepted at all. However, if you configure this setting in this way, you may not be able to use certain current or future elements of our website.
2. Cookies and plugins provided by third parties (referred to as "third-party cookies")
Furthermore, we also use the following cookies and tools from third-party providers:
Google Analytics
Our platform uses the web analysis service Google Analytics, from Google LLC, 1600 Amphitheatre Parkway Mountain View, California 94043, USA, for the purpose of analysing and continuously optimising our website.
Google Analytics uses cookies which allow website use to be analysed (e.g. sites surfed by you, conversions, your interactions with our webpages, technical information of your browser, shortened IP-address). Pseudonymised user profiles are created for this purpose. We use Google Analytics only with activated IP anonymisation. Furthermore, we use the User-ID function. This function allows us to assign sessions and all activities during those sessions to a permanent User ID. It is therefore possible to analyse user behaviour across different devices.
You can prevent cookies from being stored by configuring the operating system settings on your browser or mobile device or within our cookie consent management tool accordingly. However, please bear in mind that, in this case, you may not be able to make full use all of the functions on our platform. You can also prevent the data produced by the cookie and information relating to your use of our website (including your IP address) being collected by Google and being processed by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout.
Further information on conditions of use and data protection can be found at
https://marketingplatform.google.com/about/analytics/terms/us/ and https://policies.google.com/privacy?hl=en-US.
Google Optimize
We use the web analysis and optimization service "Google Optimize" (a sub-service of Google Analytics) on our website, which is provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. We use the service to increase the attractiveness and functionality of our website by playing out new functions and content to a percentage of our users and statistically evaluating the change in usage.
For this purpose, Google Optimize uses cookies that are stored on your device and enable an analysis of your use of our website. The information generated by the cookies about the use of the online offer by the users is usually transmitted to a Google server in the USA and stored there.
For more information on data use by Google, setting and objection options, please refer to Google's privacy policy https://policies.google.com/technologies/ads and the settings for the display of advertisements by Google https://adssettings.google.com/authenticated.
Google reCAPTCHA
Our platform, in particular our consumer portal and mobile apps, integrates the services of Google reCAPTCHA, from Google LLC, 1600 Amphitheatre Parkway Mountain View, California 94043, USA, an advanced risk analysis engine for the purpose of keeping malicious software from engaging in abusive activities on our website.
Google reCAPTCHA observes and analyses user behaviour. This may include your interactions with our web pages, mouse pointer movements, mouse clicks, keystrokes and technical information of your browser, including browser language, Google cookies, CSS information, installed plug-ins and IP-addresses. In particular, the Google reCAPTCHA algorithm may identify IP-addresses previously recognised as legitimate through the use of cookies. The information collected will also be used to improve the reCAPTCHA tool.
You can prevent cookies from being stored by configuring the operating system settings on your browser or mobile device or within our cookie consent management tool accordingly. However, please bear in mind that, in this case, you may not be able to make full use of all of the functions on our platform.
Further information on conditions of use and data protection by Google can be found at
https://policies.google.com/privacy?hl=en-GB and https://policies.google.com/terms?hl=en-GB.
Hotjar
We use the technology service Hotjar, from Hotjar Ltd. Level 2, St Julian's Business Centre, 3, Elia Zammit Street, St Julian's STJ 1000, Malta, to better understand the needs of our users and to optimise this service. For example, Hotjar shows us how much time is spent on which websites, which links users click on, what users like and dislike, and allows us to develop and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users' behaviour and their devices (notably the device IP address (collected and stored only in anonymised form), device screen size, device type (unique device identifiers), browser infor-mation, geographic location (country only), preferred language used to display our website). Hotjar stores this in-formation in a pseudonymised user profile. Neither Hotjar nor ourselves will ever use this information to identify individual users or to verify additional data on an individual user. Further information can be found in the Hotjar Privacy Policy:
https://www.hotjar.com/legal/policies/privacy
You can object to the creation of a user profile, the storage of data on your use of our website by Hotjar and the use of tracking cookies by Hotjar on other websites by accessing the following link: https://www.hotjar.com/opt-out
Wisepops
We cooperate with Wisepops, 49 rue Jean De La Fontaine, 75016 Paris, France. Wisepops is a provider that al-lows us to place pop-ups based on users' surfing behaviour. Wisepops also collects surfing data and places ap-propriate pop-ups. Cookies are used for this purpose. Further information can be found at https://support.wisepops.com/more-info/data-and-cookie-policy.
"Near Me"-feature
If you have given your consent for us to access your location using the respective browser setting, we collect in-formation on your location. By activating this "Near Me"-feature, we can show you restaurants near you. Cookies are used and the information stored in this cookie is processed under a pseudonym in order to analyse your use of our website.
Google Ads & Google Remarketing
With Google Ads & Google Remarketing, users who have already visited our platform and are interested in the relevant offer can be addressed again by targeted advertising on the pages of the Google partner network. Ad-vertising is inserted with the aid of cookies.
If you do not wish to receive interest-related advertising, you can deactivate the use of cookies for these purpos-es at https://adssettings.google.com/authenticated. Both services are subject to the Google Privacy Policy availa-ble for download at https://policies.google.com/privacy?hl=en-US.
Google Enhanced Conversion
Google Enhanced Conversion allows tracking of customers who are logged into Google and land on our website via an ad. Google Tag Manager is used to determine which data entered by the customer on our website is to be collected (e.g.: e-mail). This data is transmitted anonymously to Google. If this anonymously transmitted data matches the data stored anonymously by Google, then a "conversion" is displayed in our account.
Consent for this can be revoked at any time via the cookie management. In this context, the consent refers in particular to the disclosure of the anonymized data. You may also deactivate the use of cookies for these purposes at https://adssettings.google.com/authenticated. Services are subject to the Google Privacy Policy available at https://policies.google.com/privacy?hl=en.
Google Marketing Platform
Google Marketing Platform enables its users to place ads on their websites. Advertisers can determine how often, when, and for how long ads are displayed in a browser, and use cookies to facilitate behavioural targeting by indi-cating which areas of a website you are browsing. A pseudonymised identification number is assigned to your browser in order to check which advertisements are displayed in your browser and which have been accessed. The cookies do not contain any personal data.
You can deactivate the use of cookies by Google for such purposes at https://adssettings.google.com/authenticated. Both services are subject to the Google Privacy Policy available for download at https://policies.google.com/privacy?hl=en-US.
Facebook retargeting
We cooperate with Facebook Inc., 1601 South California Avenue, Palo Alto, California 94304, USA, in order to address users again on Facebook. For this purpose, we have integrated Facebook Pixel into our websites. When you visit websites with one of these integrated pixels, non-personal data is automatically transmitted to Facebook for analysing and marketing purposes, which is assigned a user ID by Facebook. As soon as you register with Facebook, Facebook assigns the transmitted data to your Facebook profile and assigns you to certain groups based on your surfing behaviour (so-called custom audiences).
For further information on the purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as your settings options for protecting your privacy, please refer to the Facebook Pri-vacy Policy which can be found at https://www.facebook.com/ads/website_custom_audiences/ and https://www.facebook.com/privacy/explanation. If you wish to object to the use of the user-defined website from Facebook, you can do this at https://www.facebook.com/ads/website_custom_audiences/.
Bing Universal Event Tracking
We use Bing Ads from the Microsoft Corporation, One Microsoft Way Redmond, WA 98052-6399 USA, to adver-tise our business online and thereby linked to Bing Universal Event Tracking. In order to effectively market our product or our service, we allow Bing to use a cookie to record your visit to our website and the reservation made. Furthermore, your surfing behaviour is recorded for marketing and optimisation purposes.
You can object to the collection of data for these purposes, among others, by preventing cookies from being stored for the bing.com domain in browser settings or by using the appropriate setting here: http://choice.microsoft.com/de-DE/opt-out. Further information on data collection by Microsoft can be found here: https://privacy.microsoft.com/en-gb/privacystatement.
Affiliation and Display Networks
We cooperate with various affiliation and display / native ad networks that allow us to display various advertising materials such as banners or other promotional content on so-called publisher websites. Cookies are used to rec-ord which users came to our site via the respective advertising medium clicked on and then made a reservation. These cookies do not contain any personal data, but only a pseudonymous user and, in case of affiliation net-works, reservation ID, which make it possible to assign them to the respective network. This information is re-quired for the purpose of reporting and payment processing with the relevant network.
Zenloop
We use the services of zenloop GmbH, Brunnenstrasse 196, 10119 Berlin. zenloop is a business-to-business software-as-a-service platform that enables us to collect and analyse feedback from our customers via various channels. This enables us to tailor and improve our services to the needs of our customers.
Only when you interact with the feedback tools does zenloop collect your IP address, device and browser infor-mation as well as the website from which you are using the feedback platform. In addition, zenloop collects sur-vey responses on our behalf. zenloop also uses cookies and similar technologies to collect aggregated infor-mation about users. You can object to this by making the appropriate setting in your browser. Further information can also be found in zenloop's privacy policy at https://www.zenloop.com/en/legal/privacy.
If you participate in the survey, we will also send your e-mail address to Zenloop. The reason for this is that if you inform us of problems within this survey (e.g. in the reservation process), we may contact you to find a solution together. Your e-mail address helps us to identify you here.
You can opt-out of the data collection by all tools mentioned below by disabling the respective slider in the Quandoo app.
Leanplum
For data analysis and personalised customer contact within our app, we also use the services of Leanplum, Inc., 1550 Bryant Street, Ste. 545 San Francisco, California 94103, United States. The collected usage data is processed in pseudonymised form, IP addresses are deleted after their collection and the data is internally linked to your personal data only if you have registered using the app. If you additionally signed up to our newsletter, we will according to the above mentioned terms combine app and newsletter usage data, in order to provide you with the best personalised experience. The information about the use of our app is usually transferred to Leanplum servers in the USA and stored there as well as in our own data warehouse (EU).
Firebase Analytics
Furthermore, we use the technologies of Firebase Analytics (Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) in order to analyse the use of our app. Firebase collects several data, such as your device's Advertising ID. You can find a full list of the data collected here: https://firebase.google.com/support/privacy#data_processing_information.
Adjust
Our mobile app uses the app performance and analysis technology "adjust", a service provided by adjust GmbH ("adjust"). For more information about their product and privacy policy, please visit: https://www.adjust.com/privacy-policy/. When you launch the Quandoo app, adjust processes install and event data (such as which restaurants you looked at and if a reservation was successful) from our iOS and Android mobile apps in order to help us understand how our users are interacting with our apps and to optimise and analyse our mobile ad campaigns. For such analysis, adjust uses your mobile identifier like IDFA or Google Play Services ID, and your pseudonymised (hashed) IP address. The hashes used are one-way hashes and it is not possible to identify you or your mobile device individually.
November 2022