This Privacy Policy apply to all processing of personal data in relation to orders placed through the use of appless.no/orderx.no/orderx.eu ("the Service"). The personal data relates to users of the Service, including both guests and registered users ("Users" or "you"). Processing of personal data is carried out in accordance with applicable data protection law; the EU General Data Protection Regulation as implemented in applicable national law (hereinafter referred to as the "GDPR").
ROLES AND PARTIES
The OrderX merchant you are buying from(the "Seller of Goods") is the Data Controller for personal data about Users, which are collected and used and needed for delivering the goods or service ordered through the Service. The Service is provided and operated by OrderX AS("The Service Provider"), CompanyId NO916690479MVA, Slottsbrugata 26b, 3912 Porsgrunn, Norway. The service provider is also Data Controller for data related to creating a profile or carrying out a purchase through our web-based order portal or app across several "Sellers of Goods". The Seller of Goods and The Service Provider may together be referred to as "we" or "us" in this Privacy Policy.
INFORMATION WE COLLECT OR PROCESS
Personal data will be processed when you complete a purchase through our web portal/app or if you choose to create a profile. Personal data will also be processed if you request information from the Seller of Goods or the Service Provider or report a problem in connection with the Service or provide other feedback. The Seller of Goods and the Service Provider may, in accordance with its respective roles and responsibilities and subject to a specific legitimate purpose, collect and process the following information about you:
--Your first name
--Contact information: phone, email, address
--A token representing your credit card(not your actual card number)
--Location upon your consent, so we can display nearest venues(not stored)
--Special deals you are entitled to through adherence to discounts, vouchers, and loyalty programs
--Your orders through the Service, including:
-----tems ordered, date, price and seller
-----Comments added to orders
-----Delivery address if applicable
-----Discounts / vouchers
-----Information from forms in the Service
-----Details about your use of the Service
The Service Provider may collect personal data in the form of IP-address and browser type, by use of cookies or similar tracking technologies. See more under "cookies"
Purposes and legal basis for use of personal data
The Seller of Goods and/or the Service Provider on behalf of the Seller of Goods, may process personal data about Users for the following purposes:
--To manage purchases in the web app or app:
-----To deliver the items ordered
-----To communicate with you in relation to an order, for instance in the event of changes or status updates for an order.
--To provide support
--To investigate and prevent security issues and misuse
--For debugging and improving the Service
--As required by applicable law, a legal process or for compliance with a decision by a public authority
--To provide information about products and services that you have asked for or which the Seller of Goods believe is of interest to you
The use of information mentioned in the first and second bullet point is necessary in order to perform the Service at the User's request (cf. GDPR article 6 nr. 1 b). The third and fourth bullet point represents activities, which serve the legitimate interest of having the Service functioning properly. Processing is carried out in a way that respects the privacy interests of Users (cf. GDPR article 6 nr. 1 f). The processing outlined in the fifth bullet point has its legal basis in the GDPR article 6 nr. 1 c, and the last bullet point comprise marketing communications which will only be carried out on the basis of an explicit consent from the User (cf. GDPR article 6 nr. 1 a). If you use The Service at several OrderX merchants, you may use the same login details for the new seller of goods. As a result, you will not have to register the same information several times. The Service Provider is the Data Controller for the establishment and maintenance of such user accounts, including fault corrections and improvement in relation to the accounts. The Service Provider is also responsible for marketing communications sent out in its own name and relating to the Service as such. Marketing communications is subject to your specific and informed consent. Please note that aggregated or anonymous information which does not relate to any identified or identifiable natural person may be used for any business purpose both by the Seller of Goods and by the Service Provider.
COOKIES AND TRAFFIC DATA
The Service Provider uses pixels, or transparent GIF files, to analyse use of the Service, for the purpose of fault corrections and for measuring the effects of internet marketing carried out by the Service Provider, e.g. to find out which of the Service Provider's online ads are directing people to the Service. GIF files are provided by third parties that provide online marketing analysis for the Service Provider. This system places a cookie on your browser when you enter the Service via an online ad, and allows us to see which ads attract most people to a service, as well as which pages are visited. The information collected do not contain any names or contact details and does not identify you directly. Most browsers automatically accept cookies, but you can change your browser settings to reject them. You may also make use of the Service without cookies, which will result in a decreased user experience, since we handle most orders without users being logged in or identified.
REVIEWING YOUR STORED DATA
You are also entitled to request a copy of personal data we hold about you and to have the data transferred to another service provider. If you wish to exercise your right to access your personal information, we may ask you to prove your identity in order to verify that the information is disclosed to the right person. In normal circumstances, we will disclose the requested information within 30 days. Please send your request to privacy@orderx.no
SHARING OF DATA
We will never disclose your data to anyone, with the following exceptions:
Representatives or subcontractors that process personal data on the Seller of Good' or the Service Provider's behalf(Where there always will be a Data Processor Agreement in place)
In the case that the Seller of Goods or the Service Provider are selling or buying a company or assets, and where personal data must be disclosed to the potential buyer or seller. In such case the potential buyer or seller will have to sign a confidentiality agreement prior to obtaining access to the personal data
Where the law imposes disclosure (for example to government bodies, courts or enforcement agencies which has a legal basis for obtaining the information)
MARKET COMMUNICATION
We may ask for your consent to use your personal data to contact you regarding products and services offered by the Seller of Goods or the Service Provider ("marketing communications"). Note that information such as table reservation reminders, pick-up for take-away, reminders of unpaid bills, and the like is not recognised as marketing communications. You can always opt out of future marketing communications by clicking the link inserted in the e-mail or by changing your personal settings in the app or web app.
DELETION
Personal data is deleted when there is no longer a need to process the personal data for the purpose for which they were collected. You may at any time contact the Service Provider to have your information deleted. If you have not ordered any products or services through your account in nine months, we will delete your account.
Please note that applicable book keeping acts and regulations may require us to keep certain information (typically transaction data) for a specific period, and that we are not allowed to delete such data upon a User request.
SECURITY
We are committed to protecting your privacy. We use various security technologies and procedures to help protect your personal information from unauthorized access and use. Despite the fact that modern security practices are effective, no physical or electronic security systems are absolutely secure. We cannot guarantee absolute security in connection with our database, nor can we guarantee that information you supply will not be intercepted in the transfer to us via the Internet. Any transmission is at your own risk. If your personal information should be intercepted, or there is an unauthorized intrusion or use of our database, we will not be liable for any misuse of your personal information unless we are in breach of any applicable law. We cannot control the content of third-party websites or material that is linked to the Service. We are not responsible for such, nor the procedures for processing personal data they use. We are not responsible for loss or damage arising from your use of such sites or materials.
CHANGES TO PRIVACY POLICY
We may from time to time and at our own discretion, update this Privacy Policy. We will in such case provide clear information in the app or web portal. You have the right to stop using the Service if you do not like our changes.
CONTACT INFORMATION
If you want to contact us, you can reach us at support@orderx.no or +47 4161 9000