Privacy Policy
Status: 17.10.2024
Why does this privacy policy exist?
Aramark Restaurations GmbH (hereinafter referred to as "Aramark") operates this Webshop at https://westfalenhalle.aramark-restaurations.de (hereinafter "Website") and is responsible for the collection and storage of personal data. Aramark respects the privacy of every user of this website (hereinafter referred to as "you") and informs you below about the type, scope and purpose of the collection, storage and use of personal data via this website.
This data protection declaration only applies to the website, but not to other websites that you may be able to access via hyperlinks from the website.
Controller for the processing of data
Aramark Restaurations GmbH
Martin-Behaim-Str. 6
63263 Neu-Isenburg
Contact details of our data protection officer
Aramark Restaurations GmbH
Data Protection Officer
Martin-Behaim-Str. 6
63263 Neu-Isenburg
datenschutzbeauftragter@aramark.de
What personal data is collected?
When you visit our website, technically necessary information (your IP address, time stamp) is recorded in our server logs.
If you place an order via this store, the following data is also collected:
a) Master data: e.g. title, first name, surname, company name, department
b) Communication data: e.g. landline or cell phone number, e-mail address, country, message content
c) Article data: e.g. product number, product name, price
d) Accounting data: e.g. invoice amount, department
e) Transaction data: e.g. time of a payment, unique transaction number, type of payment method, receipt number, other technical information about the payment
You are not obliged to provide us with the aforementioned data. However, without this data we will not be able to enable you to make a purchase in our web store.
For what purpose and on what legal basis is the processing carried out?
Insofar as we collect and process your personal data to process and invoice orders in our webshop, this is done in our legitimate interest within the meaning of Art. 6 para. 1 sentence 1 lit. f GDPR. We use the digital solution of our webshop to simplify the process of orders for our catering services by our (business) clients. We collect your personal data in order to simplify the process (in particular for future orders) and to ensure accurate allocation in order to allocate, process and bill orders that you place for a company (e.g. your employer).
Furthermore, we may process your data to fulfill our legal obligations or in cases where this should be necessary for the exercise, assertion or defense of legal claims, including the disclosure of your personal data to third parties, such as authorities, enforcement authorities, regulatory authorities and litigating third parties, in connection with ongoing proceedings or an ongoing investigation (processing to fulfill a legal obligation, Art. 6 para. 1 lit. c GDPR, or processing to safeguard the legitimate interests of the controller, Art. 6 para. 1 lit. f GDPR).
Insofar as this data on access to the website and the server log files also includes personal data, we collect and process this in our legitimate interest within the meaning of Art. 6 para. 1 sentence 1 lit. f of the General Data Protection Regulation (GDPR) (to operate and improve the website).
We only use log data to ensure the technical functionality and security of the website. However, we reserve the right to check the log data retrospectively if there is a justified suspicion of unlawful use based on concrete evidence.
If you send us an inquiry about our offers by e-mail, we will process your personal data in response to your inquiry in order to carry out pre-contractual measures within the meaning of Art. 6 para. 1 sentence 1 lit. b GDPR (in order to be able to answer your questions about our offers).
What are cookies and what types do we use?
Cookies are small files that make it possible to store specific device-related information on your access device (PC, smartphone, etc.). They are used, among other things, to collect statistical data on website usage and to analyze it for the purpose of improving the offer.
The following cookies are or may be used on our website:
Strictly necessary cookies
These cookies are used for the essential functions of our websites. They do not collect information about you that could be used for marketing purposes and do not remember where you have been on the internet. This category of cookies cannot be deactivated, as this would impair the function of our website. It is therefore not possible to make a selection via a cookie banner. The following strictly necessary cookies are used:
With regard to the use of strictly necessary cookies and the data processing that takes place in this context, the legal basis is our legitimate interest in providing you with a functioning website (Art. 6 para. 1 sentence 1 lit. f GDPR).
To whom do we transfer your personal data?
As part of the provision of our website, we work together with IT service providers who support us in the creation, operation and further development of the website. We also work with IT service providers who provide us with the software for processing customer orders and orders in the web store. The IT service providers store the website, its content and the software on their servers.
The service providers that we use in connection with the provision and operation of our website and the web store contained therein process personal data of website users shared with them for this purpose as our processor within the meaning of Art. 4 No. 8 GDPR. We have therefore concluded data processing agreements with the service providers to protect your data.
Furthermore, our partner VR Payment GmbH, Saonestraße 3a, 60528 Frankfurt am Main (VR Payment) receives your personal data (card data: IBAN or account number and sort code, card expiry date and card sequence number. Payment data: Amount, date, time, card reader identifier (location, company and branch where you pay), verification data of your card-issuing bank ("EMV data"), your signature if applicable. Chargeback data: Information about the non-payment of a direct debit by your bank or the revocation of a direct debit by you (return debit). Claim data when a return debit note is created: Information about the outstanding claim, e.g. your name, address, bank charges, reminder fees, reason for the return debit note, customer number with your contracting party (not the content of your purchases). Charge Back - If you dispute a transaction that was made with your card: Proof of purchase and any other information about you that the payee wishes to use to prove their claim such as name and address.) in order to complete the payment transaction. The data processing activities required to carry out the transaction on the part of VR Payment are carried out under VR Payment's own responsibility under data protection law. To find out how VR Payment processes your data, please refer to VR Payment's data protection information, https://www.vr-payment.de/datenschutz-haftung-karteninhaber-pos/.
How long do we store personal data?
We will retain your personal data for as long as necessary for the purposes for which it is collected and for other permitted purposes (e.g. to comply with regulatory requirements that apply in relation to the retention of such data).
The retention and storage periods are based on business requirements and relevant laws. In particular, the statutory retention periods of six or ten years apply in accordance with the provisions of Section 257 of the German Commercial Code and Section 147 of the German Fiscal Code. Please note that these periods may be extended if necessary (e.g. if we are required to do so by law or by the regulatory authorities).
If the data is no longer required, we will either irrevocably anonymize it or securely destroy it. We reserve the right to use anonymized data that can no longer be attributed to you for legitimate business purposes without informing you separately.
In the event that we have obtained your consent for individual services, the stored personal data will be deleted if you revoke the consent given to us for processing, if the data is no longer required to fulfill the purpose for which it was processed or if its processing is inadmissible for other legal reasons.
Your rights as a data subject
As a data subject of our data processing, you have certain rights about which we inform you below:
(a) Right to information: You have the right to request information about the personal data collected about you, as well as a copy of this data.
(b) Right to rectification: You have the right to request the completion or rectification of inaccurate personal data concerning you if it is incorrect or incomplete.
(c) Right to erasure: If there are certain reasons (e.g. the data are no longer necessary for the purposes for which they were processed), you can request the erasure of your personal data.
(d) Withdrawal of consent: If we have obtained your consent to process your personal data in relation to a specific data processing operation, you can withdraw this consent for the future and prevent further data processing, provided that no other permission is relevant. This right of withdrawal does not apply to data that we process on other legal grounds. Your withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.
(e) Right to restriction of processing: You may request the restriction of the processing of certain personal data for the duration of a complaint procedure or for specific other reasons.
(f) Right to data portability: You can request that we electronically transfer your personal data that you have provided to us and which we still have stored to another controller.
(g) Right to lodge a complaint: You may also lodge a complaint with the competent data protection authority if you believe that the processing of your personal data violates data protection laws. Aramark is supervised by the following data protection authority:
The Hessian Commissioner for Data Protection and Freedom of Information
P.O. Box 3163
65021 Wiesbaden
poststelle@datenschutz.hessen.de
Please note that there are exceptions to the above rights and that you may therefore not be able to exercise these rights comprehensively in every situation.
Topicality and validity of this privacy policy
Aramark reserves the right to amend this privacy policy at any time and with future effect. It is therefore recommended that you read this privacy policy again at regular intervals.