Privacy Policy
DISH ORDER PRIVACY POLICY
1. General provisions
1.1 The data controller within the meaning of the data protection laws is Taj-India. Restauracja Indyjska, Wiankowa 3, Poznań 61-131, taj-india@o2.pl
(hereinafter "we" or "us").
1.2 If you have any questions about data protection, you can contact us at the above address.
1.3 In this Privacy Policy we explain how we collect, process and use personal data in the context of online orders for our goods or services. Personal data are
individual details about your personal or material circumstances. Further details on the provision of our services can be found in our
General Terms and Conditions. We process personal data that we collect about you exclusively within the limits of the
applicable statutory provisions.
2. Processing of personal data and transfer to third parties
2.1 When you use our services, we collect and process your personal data for the following purposes:
(a) In order to place an online order with us, it is necessary that you provide us with your first and last name, your e-mail address and your mobile phone
number. If the service includes delivery, we will also collect a delivery address. This data is necessary so that we can process the order correctly. You
also have the option of creating your own account. With this, further orders can be placed easily and quickly at a later date. The processing of this
personal data is based on Article 6(1) first sentence letter b) GDPR (General Data Protection Regulation) and is necessary for initiating and implementing
the contract between you and us.
(b) If you place an online order via "Order with Google", we will receive the data mentioned in letter (a) from Digital Solutions GmbH, Metro-Straße 1,
40235 Düsseldorf, which arranges the contract with us under the name "orderdirect". The processing of personal data by us is also carried out here on the
basis of Article 6 (1) sentence 1 letter b) GDPR. For the processing of your personal data by Google Ireland Inc. as well as by Digital Solutions GmbH,
we refer to the data privacy policies of these companies, which you can view when placing an online order via "Order with Google".
(c) For the purposes of restaurant reviews and our quality management, we may use the personal information you provided when placing your order online to
send you a text message or email requesting feedback on your online order after you have completed your order. This will be used to both improve the service
for guests and strengthen the restaurant's external image for further guests and can therefore be shown on the restaurant website as well as on other
feedback platforms. You can decide whether to make your feedback anonymous or you would like to state your first and last name. The processing of this
personal data that you provide to us as part of the feedback is based on Article 6(1)(a) first sentence, GDPR.
(d) Some personal data is automatically collected via your terminal device (computer, mobile phone, tablet, etc.) when you use the online ordering service.
The IP address currently used by your end device, the date and time, the browser type and the operating system of your end device as well as the pages
accessed are recorded. This is done for data security purposes and to optimise what we offer and the services we provide. The data will be anonymised
after seven (7) days at the latest. The processing of this personal data takes place on the basis of Article 6(1)(f), first sentence, GDPR. The protection of
our website and the optimisation of our services constitute a legitimate interest.
(e) If you get in touch with us (e.g. by submitting an enquiry using the contact details we have provided), we will only process the personal data that you
have provided to us and that is required to process and respond to your enquiry.
2.2 In order to enable the data processing operations mentioned in this privacy policy, such as for the hosting and maintenance of our service, we use external
service providers. They will only act on our instructions and have been contractually obliged to comply with the data protection provisions in accordance with
Article 28 GDPR.
3. Cookies
3.1 In order to make our services attractive and to enable the use of certain functions, we use “cookies”. This is short information that is stored on your end
device and assigned to the browser you are using. Some of the cookies we use are deleted after the end of a session, i.e. after you close your browser
(“session cookies”). Other cookies remain on your end device and enable us to recognise your browser the next time you visit our website (persistent cookies).
You can set your browser so that you are informed about the setting of cookies and decide individually about their acceptance or exclude the acceptance of
cookies for certain cases or in general. For more information, please consult the help function of your Internet browser. If you do not accept cookies, the
functionality of our website may be limited. By accepting our "cookie banner", you consent to the processing of your personal data via cookies. The processing
of this personal data takes place on the basis of Article 6(1)(a), first sentence, GDPR. We use the following analytics cookies:
(a) We use Adobe Analytics, a service provided by Adobe Systems Software Ireland Limited (4-6 Riverwalk Citywest Business Campus, Dublin 24, Republic of
Ireland; "Adobe") with your consent. This service uses cookies which are stored on your end device and which enable an analysis of your use of our
website. The information generated by the cookie about your use of our website (including your IP address) will be transmitted to and stored by Adobe on
servers in Ireland, where it will be anonymised and then transferred in anonymised form to servers in the United States for further processing. Adobe uses
this information to evaluate your use of our website, to compile reports on website activity for website operators and to provide other services related
to website and internet usage. If required by law or if third parties process this data on behalf of Adobe, this information may be transferred to third
parties. In no case will your IP address be associated with any other data held by Adobe.
(b) In addition, with your consent, we use Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google Analytics also uses cookies.
The information generated by the cookies about your use of our website is usually transferred to a Google server in the USA and stored there. However,
your IP address will be shortened beforehand by Google within member states of the European Union or in other states party to the Agreement on the
European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On our
behalf, Google will use this information to evaluate your use of our website, compile reports on website activity and provide other services relating to
website and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other
Google data.
3.2 We also use third-party advertising cookies for advertising purposes. These cookies enable us to tailor advertising displayed in your browser to your
interests based on your browsing behaviour. We use the following advertising cookie(s):
(a) We use Google AdWords in conjunction with Google Conversion Tracking, This is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4,
Ireland; “Google”). Google AdWords is used to display pages from DISH on Google in the advertising space. If you access our website via a Google ad,
Google Adwords sets a cookie on your end device (“conversion cookie”). This cookie expires after 30 days. It is not used for personal identification. If
the cookie has not expired when you visit certain pages, we and Google can see that someone has clicked on the ad and been redirected to our site. Each
AdWords customer receives a different cookie. Cookies can therefore not be traced back via the websites of AdWords customers. The information collected
by the conversion cookie is used to create conversion statistics for AdWords customers who have opted in to conversion tracking. AdWords customers see
the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, we do not receive any
information that could identify you personally. If you do not wish the tracking process to involve you, you can refuse the setting of a cookie required
for this purpose - for example, with a browser setting that generally deactivates the automatic setting of cookies. You can also disable cookies by
setting your browser to block cookies from the domain “googleadservices.com”.
(b) We use Facebook Pixel, a tool operated by Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA, or, if you are an EU resident, by Facebook Ireland Ltd,
4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”), on our website for the analysis, optimisation and economic operation of the
website. With the help of Facebook Pixel, Facebook can also determine the visitors to our website as the target group for the display of Facebook ads.
Therefore, we use Facebook Pixel to display the Facebook ads we publish only to Facebook users who have shown interest in our website. This means that we
use Facebook Pixel to ensure that our Facebook ads match the potential interest of users and do not bother them. We may also use Facebook Pixel to track
the effectiveness of Facebook ads for statistical and market research purposes by looking at whether users have been redirected to our website after
clicking on a Facebook ad (known as a “Conversion” or “User Interaction”). In this case, the legal basis of the processing is Article 6(1)(a), first
sentence, GDPR. Facebook Pixel is used directly by Facebook when you visit our website and may set a cookie on your device. If you then log into Facebook
or visit Facebook while logged in, your visit to our website will be recorded in your profile. The data collected about you is anonymous to us, so it
does not give us any information about the identity of the users. However, Facebook stores and processes the data so there might be a connection to the
respective user profile. This means that user profiles can be created from the processed data. Facebook processes the data in accordance with Facebook's
privacy policy. For more information on how Facebook Pixel works and how Facebook ads are displayed, see Facebook's privacy policy:
https://www.facebook.com/policy. You can opt out of the collection and use of your data by Facebook Pixel to display Facebook Ads. To set the types of
ads you see on Facebook, you can visit the page set up by Facebook and follow the instructions about the settings for usage-based ads:
https://www.facebook.com/adpreferences/ad_settings. The settings are platform-independent, i.e. they can be applied to all devices, such as desktop
computers or mobile devices. You can also opt out of the use of cookies for tracking and advertising purposes: via the Network Advertising Initiative
opt-out page http://optout.networkadvertising.org and additionally via the US website http://www.aboutads.info/choices or the European website
http://www.youronlinechoices.com/uk/your-ad-choices/. You can manage your privacy settings via the onsite button of our website.
3.3 We take technical precautions to pseudonymise the data collected about you through analysis and/or advertising cookies. After pseudonymisation, the data can
no longer possible be directly associated to the user.
3.4 By clicking on “accept” in our “cookie banner”, you consent to the processing of your personal data using analytics and advertising cookies for the above
purposes. The processing of this personal data takes place on the basis of Article 6(1)(a), first sentence, GDPR.
4. Provision of personal data and retention periods
4.1 Unless otherwise required by law (e.g. COVID-19 restrictions), the provision of your personal data is voluntary. There will be no consequences if you do not
provide us with your personal data, except that you will not be able to place an online order for which this data is required for the fulfilment of the
contract.
4.2 Personal data that you provide to us via our online ordering service will only be stored until the purpose for which it was processed has been fulfilled. If
you create your own account, the data will be stored until the account is deleted.
4.3 Deviating retention periods may also result from a legitimate interest (e.g. to ensure data security and to prevent misuse). Personal data that we are
required to store due to legal or contractual retention obligations will be locked when stored for the duration of the obligation in question.
5. Your rights
5.1 As a data subjectwithin the meaning of the GDPR, you are entitled to the following rights under the legal conditions:
(a) the right to obtain information about the data processing as well as a copy of the processed data (right of access, Article 15 GDPR),
(b) the right to request the rectification of inaccurate data or the completion of incomplete data (right to rectification, Article 16 GDPR),
(c) the right to request the erasure of personal data (right to erasure, Article 17 GDPR),
(d) the right to request the restriction of data processing (also referred to as blocking) (right to restriction of processing, Article 18 GDPR),
(e) the right to obtain personal data in a structured, commonly used and machine-readable format and to request the transfer of such data to
another controller (right to data portability, Article 20 GDPR),
(f) the right to receive information on the essential aspects of joint controllers’ arrangement, which sets out the roles and responsibilities of
each controller with regard to the processing of personal data, as well as the mechanisms and procedures for exercising data subjects' rights
(Article 26(2) GDPR),
(g) the right to withdraw consent given at any time in order to stop data processing based on your consent. The withdrawal does not affect the
lawfulness of the processing based on the consent prior to the withdrawal (right of withdrawal, Article 7 GDPR), as well as
(h) the right to object to certain data processing operations (Article 21 GDPR).
5.2 You also have the right,Lodge a complaint with a supervisory authority if you consider that the data processing violates the GDPR
(right to complain to a supervisory authority, Article 77 GDPR).
Version: July 2022
Dish Order_B2C_Privacy_V5_July 2022_en