Privacy statement customers

This privacy statement applies to the processing of personal data of customers who place an order via the platform www.umenu.nl of Stichting University MENU registered with the Chamber of Commerce Netherlands under number 76625397. The processing controller for processing this personal data is Stichting University MENU (hereinafter: Umenu.nl).

Umenu.nl is responsible for the processing of this personal data and considers your privacy important. Therefore, it adheres to the General Data Protection Regulation (GDPR) with regard to the processing of personal data.

Which and why we process personal data

Umenu.nl processes your personal data because you use our services. We use the following data for the following purposes:

1. Order process

We process data that you provide to us by entering it when you place your order. This information is necessary for the execution of your order, the confirmation of your order, the possibility to assess your order, payment, and a possible refund. The legal basis for this processing is that the processing is necessary for the performance of an agreement within the meaning of the GDPR. This concerns the following data:

• Name
• Address data
• Contact details
• Order
• Payment details
• Comments (where applicable)

2. Assessment of restaurants

We also process data that you provide to us by entering it when you post a review of a restaurant. The legal basis for this processing is that you have permitted this (by publishing your assessment) within the meaning of the GDPR. You can revoke this permission by contacting us via mijn.privacy@umenu.nl. This concerns the following data:

• Name (if provided)
• Assessment

3. Customer service

If you contact our customer service, we will use the information you provide to answer your question or resolve your complaint. The legal basis for this processing is that it is necessary for the performance of an agreement within the meaning of the GDPR. This concerns the following data:

• Name
• Address details (if applicable)
• Contact details
• Payment details (if applicable)
• Comments (where applicable)

4. Customer satisfaction surveys

To ensure that our services meet your needs, the information you provide to customer service may be used for customer satisfaction surveys, for example. The legal basis for this processing is that it is necessary to represent a legitimate interest of Umenu.nl (customer satisfaction) in the sense of the GDPR. This is the same data as number 2.

5. Marketing messages

We also process data to send you (personalized) marketing messages. Below we include news, discounts and new restaurant updates (e-mail and mail) and loyalty programs, regardless of the form in which we share them (for example e-mail, text or as a push message). The legal basis for this processing is that you have permitted this when you place your order within the meaning of the GDPR. If you wish to adjust the preferences with regard to receiving these messages, you can unsubscribe via the link in the relevant message.

 This concerns the following data:

• Name
• Contact details
• Postal Code

6. Cookies

Finally, we also process data from you that you provide to us indirectly. Umenu.nl uses cookies for functional, analytical and marketing purposes. The functional cookies are necessary for the use of the website. This concerns the following data:

• Location data
• The IP address or app IDs
• Internet browser and device type
• Website language

We refer to our Cookie Statement for more information about cookies.

7. Fraud prevention

We also process some of the above information to prevent fraud and misuse. The legal basis for this processing is that the processing is necessary to represent a legitimate interest of Umenu.nl (fraud prevention) within the meaning of the GDPR.

8. Analysis

We also use your data to meet our reporting obligations to advertisers and to improve our website and our range of products and services. The legal basis for this processing is that the processing is necessary to represent a legitimate interest of Umenu.nl (analysis and reporting) within the meaning of the GDPR. We ensure that final reports do not contain any traceable data.

Age

Our website is not aimed at individuals under the age of 16 and we also have no intention of collecting data regarding website visitors under the age of 16. However, we cannot verify whether a visitor is older than 16 years. Therefore, we advise parents to be involved in their children's online activities in order to prevent information about children being collected without parental consent. If you are convinced that we may have collected personal information about a minor without parental consent, please contact us via mijn.privacy@umenu.nl. We will then delete this data.

Automated decision making and profiling

Umenu.nl uses automated decision making and profiling to implement the agreement with you and to improve our platform. For example, based on your zip code and/or location data, available restaurants in your area are selected. In addition, Umenu.nl uses automated decision-making in the implementation of our legal obligations to prevent money laundering, financing of terrorism and other crimes.

If a negative decision has been made about you based on this automatic decision-making and/or profiling, and you do not agree with this, you can contact mijn.privacy@umenu.nl. We will then re-evaluate the situation. We would also like to hear from you if you have suggestions for improving these processes.

How long we keep data

Umenu.nl will not store your personal data for longer than is strictly necessary to realize the purposes for which your data are collected. We will keep your data longer if we are required to do so under legal obligations. Umenu.nl removes most data after 2 years after placing your order. We use this period for administrative purposes and so that we can address you and restaurants with questions or complaints about the order. We save data used for reporting, analysis and abuse prevention for up to 20 years after placing your order. We cannot delete your data from backups. However, the moment we restore a backup, we will delete the data at that time.

Share with restaurants

Umenu.nl provides your data (name, address data, phone number, and order) to the restaurant you selected so that the restaurant can deliver your order. You are a direct customer of the restaurant. Therefore, they bear the responsibilities and obligations for the processing of your personal data. For questions about how the restaurant handles your data, it is best to contact the restaurant directly.

Share with others (not being restaurants)

Umenu.nl does not sell your information to third parties and will only provide it to third parties if this is necessary for the implementation of our agreement with you, for analysis and/or marketing purposes or to comply with legal obligations.

 Your personal data may be shared with the following parties:

• Software providers
• Implementation partners
• Customer satisfaction survey agencies

We conclude a processing agreement with companies that process your data on our behalf to ensure the same level of security and confidentiality of your data. Umenu.nl remains responsible for these processes.

Share with your employer

If you use your UMENU Pay allowance when placing an order, Umenu.nl shares personal data (e-mail address and data about your order and allowance) with your employer in order to implement a contract with your employer. Umenu.nl and your employer have a separate responsibility with regard to the processing of your personal data. If you have any questions about how your personal data is handled, contact Umenu.nl and your employer.

Third-party websites

Our website may contain links to third-party websites. When using these websites, note the corresponding privacy statement. Although Umenu.nl carefully selects those websites, it cannot be held responsible for the way in which your personal data is treated by those third parties.

Access, correction, and deletion of your personal data

You have the right to view, remove or, if necessary, correct all the information that we collect about you. If you are convinced that we are processing your personal data for no reason or that we are processing personal data that you believe are not relevant to our selection process, you can contact us. For this, you can contact mijn.privacy@umenu.nl. Umenu.nl will respond to your request as quickly as possible, within four weeks.

Tips, questions, and complaints

If you have other questions or complaints about the processing of your personal data, we will be glad to help. In addition, we would like to hear from you if you have tips or suggestions for improving our privacy policy.

Security

Umenu.nl takes the protection of your data seriously and takes appropriate measures to prevent abuse, loss, unauthorized access, unwanted disclosure, and unauthorized changes. If you feel that your data is not properly protected or there are indications of abuse, please contact us via beveiliging@umenu.nl.

Authority personal data

In addition to the possibility of submitting a complaint to us, you have the right to submit a complaint to the relevant authority for the protection of personal data. You can contact the authority regarding this matter.

Contact details

Adres hoofdvestiging:
Zuider Buiten Spaarne 144
2012 AD Haarlem
Email: info@umenu.nl
Phone: +31 (0)23-2020010

Contactgegevens functionaris gegevensbescherming:
Voorzitter M.R.J. Gosen
Zuider Buiten Spaarne 144
2012 AD Haarlem
misha@umenu.nl
Phone:+31 (0)23-2020010