Privacy Policy - Customers

Version: May 2018

 

When you visit our bars, purchase our products, visit our website or otherwise communicate with us, Joe & The Juice will, as the data controller, collect and process personal data about you.

We care about your privacy and the protection of your personal data. In this privacy notice, we describe in details how we process, use and disclose your personal data inJoe & The Juice.

 

1. Categories of personal of data and purposes

We collect and process the following types of personal data 

 

Categories of data subjects  and categories of personal data

Customers in Joe & The  Juice bars

☒  Non-sensitive  categories of personal data: Name, email, phone number, gender, photo, bank  account number, content of complaint/inquiry, credit card information,  transaction data and recordings from CCTV.

 

Passers-by at the bars

☒  Non-sensitive  categories of personal data: Name, photo/video and Instagram profile.

 

Visitors of joejuice.com

☒  Non-sensitive  categories of personal data: IP-addresses and information about your use of  joejuice.com.

Contact persons

☒  Non-sensitive categories  of personal data: Name, email, phone number, photo, video. 

 

Purposes of processing  personal data

Customers in Joe & The  Juice bars

·        Providing Joe & The Juice’s products

·        Handling of payments

·        Customer care

·        Handling complaints and other inquiries

Passers-by at the bars

·        Marketing and advertisement campaigns (upon consent)

Visitors of joejuice.com and  social media

·        Operation of websites and social media

·        Improving our websites, incl. joejuice.com and social media

·       Handling of  inquiries

Contact persons

·       Handling of  inquiries

 

All of the above

·        To comply with applicable personal data protection regulation and Joe &  The Juice’s other legitimate interests, e.g.

·        Documentation requirements

·        Compliance with basic principles and legal grounds for processing personal  data

·        Putting in place, maintaining and testing technical and organisational  security measures

·        Investigating and reporting suspected personal data breaches and other  irregularities, if any

·        Handling requests and complaints from data subjects and others, if any

·        The establishment, exercise and defence of legal claims, including but not  limited to, investigations and reporting of irregularities

·        Handling inspections and queries by supervisory authorities, if any

·        Handling disputes with data subjects and third parties, if any

·        Statistical analysis in order to develop and improve the experience for Joe  & The Juice’s customers

·        Mergers, acquisitions, divestures, sale of the company or parts thereof,  including preparing information memorandum, preparing and conducting a due  diligence, assessing investments, and other activities in such processes

 

2. Sources

We collect personal data directly from you.

  • For users of websites and     social media, we also collect personal data from websites and social media     at which Joe & The Juice has an account or profile.

For customers, we collect information from our payment acquirers when you pay with credit cardin our bars.

 

3. The legalbasis for the collection and processing of the personal data

 

The legal basis for the  collection and processing of personal data

Customers in Joe & The  Juice bars 

·        The processing is necessary to perform a contract with you, cf. article  6(1)(b) of the General Data Protection Regulation, e.g. when you purchase  products in one of our bars.

·        The processing is necessary for the purpose of legitimate interests pursued  by Joe & The Juice, cf. article 6(1)(f) of the General Data Protection  Regulation, in particular the legitimate interests relating to

·        Use of video surveillance in the bars for the purposes of preventing and solving crimes

·        Handling complaints and other inquiries for the purpose of customer care

Passers-by at the bars

·        The legal basis for collection and processing of personal data related to you  as a passer-by in Joe & The Juice’s marketing and advertisement campaigns  is consent, cf. article 6(1)(a) of the General Data Protection Regulation.

Visitors of joejuice.com and  social media

·        The processing is necessary for the purpose of legitimate interests pursued  by Joe & The Juice, cf. article 6(1)(f) of the General Data Protection  Regulation. We collect information from cookies placed on joejuice.com in  order to evaluate the effectiveness, analyse trends and administer the  website. Please read our cookie policy for information about our use of  cookies.

Contact persons (e.g.  bloggers and influencers)

·        The processing is necessary to perform a contract with you, cf. article  6(1)(b) of the General Data Protection Regulation, e.g. commercial contracts  about the use of photos and videos in marketing and advertisements campaigns.

 

For customers at the bars: 

·        When we collect personal data directly from you for the purpose of purchasing our products, you provide the personal data in order to be able to conclude and perform a contract between us. If you pay with credit card, you are obliged to provide the information to us. Otherwise you can choose to pay with cash without providing any personal data to us.

 

For all: When you communicate with us by e-mail or other communication platforms, we collect personal data directly from you in order to handle your inquiries. You are not obliged to provide theinformation to us, but the consequences of not providing the personal data are that we cannot answer your inquiry.

 

4. Disclosure of the personal data to other data controllers

We may disclose or share your personal data with the following recipients: 

Customers

  • Payment acquirers
  • The police

Passers-by and visitors of joejuice.com and social media

  • The website or the social media site used to post an inquiry

 

The legal basis for the disclosure

Customers in Joe & The  Juice bars 

·        The legal basis for the disclosure of personal data to payment acquirers is  performance of a contract with you when you purchase products in one of our  bars, cf. article 6(1)(b) of the General Data Protection Regulation

·        The legal basis of disclosure of personal data on video recordings to the  police is the rules in the Danish Act on Administration of Justice which only  happens upon request from the Police in the case of criminal acts.

 

Passers-by at the bars 

·        The legal bases to process and publish your photos/videos in Joe & The  Juice’s marketing and advertisement campaigns is consent, cf. article 6(1)(a)  of the General Data Protection Regulation.

 

Visitors of joejuice.com and  social media

·        Your consent, cf. the cookie legislation

·        If you communicate with us on social media sites where your questions,  comments, ratings etc. are publicly available to everyone, we may answer you  at the place of the request or encourage you to send us an email if deemed  more appropriate. The legal basis of this disclosure is our legitimate  interests, cf. article 6(1)(f) of the General Data Protection Regulation.

 

Contact persons (e.g.  bloggers and influencers)

·        No disclosure at this point in time

 

5. Withdrawal of consent

If the processing is based on your consent, you have the right to withdraw your consent. If you withdraw the consent, this will not affect the lawfulness of the processing and disclosure prior to the withdrawal. Please contact us using the contact details below if you wish to exercise this right.

 

6. Transfer of personal data to data processors

We use a number of data processors who process and stores personal data on our behalf, including, but not limited to, the following categories:

  • Provider of IT systems
  • Provider of credit card terminals

 

7. Internationaltransfers of personal data to recipients (both controllers and processors) in countries outside the EU/EEA

We transfer the personal data to the following recipients located in countries outside the EU/EEA:

Transfers of personal data  to a third country or an international organisation

Transfer basis

Category of recipient:

IT Payment Software providers

 

Country: United States

☒  EU-U.S. Privacy  Shield (only to the U.S.)

 

Category of recipient:

IT Host Server

 

Country: United States 

☒  EU-U.S. Privacy  Shield (only to the U.S.)

  

Category of recipient:

Cloud services that store  data

 

Countries: United States,  Canada, China, Brazil, India, Singapore, Japan, South Korea, Australia,  Taiwan.

☒  EU-U.S. Privacy  Shield (only to the U.S.)

☒  EU Standard  Contractual Clauses - to processors

 

8. Retention period

We store the personal data for as long as necessary to fulfil the purposes above as per this table:

Retention periods

Customers in Joe & The Juice bars

·        Personal data related to your purchases will be deleted 5 years after the end  of the financial year in accordance with the Danish Bookkeeping Act or the  local bookkeeping act applicable in the country of the bar.

·        Personal data in video recordings from video surveillance will only be stored  for 30 days.

Passers-by at the bars

·        We store your photo/video until we have published it on the Story of 
 Instagram and for a period of 6 months following this to assess if we should  obtain a new consent to further use.

Visitors of joejuice.com and  social media 

·        As regards cookies and the connected collection of personal data, we store  the personal data until our evaluation of the website is completed.

·        Personal data related to your different inquiries will be deleted six months  after replying to you

·        Personal data related to complaints will be deleted in accordance with the  Danish Limitation Act, i.e. 3 years from the time of receiving the complaint  unless needed to keep for longer because there is an actual dispute or  suspension of limitation period. Please note that this retention period is  subject to the limitation acts or similar legislative requirements in each  country where we operate and therefore may change.

Contact persons (e.g.  bloggers and influencers)

·        Personal data related to your different inquiries will be deleted six months  after replying to you

 

9. Your rights

Subject to the conditions set out in the applicable data protection legislation, you enjoy the following certain rights:

  • The right to request     access to the personal data
  • The right to     rectification of the personal data
  • The right to erasure of     the personal data
  • The right to restriction     of processing
  • The right to withdraw consent
  • The right to data portability

You also have the right to lodge a complaint with the competent supervisory authority, such as the Danish Data Protection Agency or the relevant supervisory authority located within the market or country that you are placed. Please consult the relevant websites for each supervisory authority for how to submit a complaint.

 

10. The right to object to the processing of the personal data

You have the right to  object, on grounds relating to your particular situation, at any time to  processing of personal which is based article 6(1)(f) of the General Data  Protection Regulation, including profiling based on this provision. Joe &  The Juice must no longer process the personal data unless Joe & The Juice  demonstrates compelling legitimate grounds for the processing, which override  your interests, rights and freedoms or if processing is necessary for the  establishment, exercise or defence of legal claims.

 

11. Contact

Please contactus at if you have any questions in regards to the protection of your personal data or if you wish to exercise your legal rights.

 

Contact details of the controller:

Joe & TheJuice A/S

Østergade 26A

DK 1100 Copenhagen K

Denmark

CVR-no.: 26 5893 55

E-mail address: privacy@joejuice.com