Looks like something didn't work quite right. Please reload this page.

Quandoo Privacy Policy

This Privacy Policy explains to you how your personal data is processed when you use the Quandoo website's offers and online services on the "Quandoo" website, the associated mobile app and our widget that is implemented on third-party platforms (hereinafter "platform" refers to both the website, the mobile app and the widget). This Privacy Policy also informs you of your rights and choices to control your personal information and to protect your privacy.

1. Who is responsible for data processing and whom can I contact?

Responsible for data processing: Quandoo UK Ltd, 9 Appold Street, London, EC2A 2AP. This company is also meant if the terms "we" or "us" are used below.

You can contact our Data Protection Officer at:

dataprotection.UK@quandoo.com

2. What personal data do we process and from which sources does such data originate?

When we make our Platform available to you for use, we process personal data from various sources. On the one hand, this is data that we automatically collect when you use the Platform. However, this may also include data which you have voluntarily provided to us or which we receive from our partners.

Data that we collect automatically when you use our Platform

As soon as you visit the website or open the app, you send technical information to our web servers. This happens regardless of whether you make a reservation at a restaurant or whether you log in later using an account with us to use the Platform. In each case we collect the following access data and web access data (which we refer to collectively as "access data" ):

  • the date and time of the visit and the duration of the use of the Platform
  • the IP address of your device
  • the reference URL (the website from which you may have been redirected)
  • the visited subpages of the website or subsections of the app; and
  • further information about your device (device type, browser type and version, settings, installed plug-ins, operating system)

We process access data so that you and other users can use the Platform and we can ensure the functionality of the Platform. We also process access data to carry out performance analyses on the Platform, continuously improve the Platform and correct errors to ensure IT security and the operation of our systems, and to prevent or detect misuse, particularly fraud.

In addition, we process access data to adapt the Platform to your needs (personalisation). To this end, we also assign you what is known as a "Unique User ID". With this unique user ID, we can associate your bookings and other interactions.

We also use cookies to process such data. Cookies are small text files that you download to your device when you visit our websites and that store the above information about you. To learn more about how cookies work, which cookies we use, and how to disable them, read our cookie policy. It also tells you what information is collected by cookies and tracking tools from third parties such as Google and Facebook. To ensure the legibility of this privacy statement, we have summarised this information on a separate page.

Data that you transmit to us yourself

In addition to the data we receive from all visitors, we also process other data. The exact volume of such data depends on how you use the Platform. You can use the Platform with or without creating a user account.

  • Account data

If you decide to create a user account and complete the registration form, we will process the following information:

  • Name and surname
  • E-mail address
  • Log-in password
  • Telephone number
  • Birthdate (optional)

However, you can also use the single sign-on feature (SSO) on our platform to create and log in to your user account. If you choose this feature, we ask you to enter your log-in data of the social network of your choice (e.g. Facebook or Google). The respective SSO-provider will then authenticate you. This login data is not visible to us.

  • Booking and reservation data

When you book or reserve, we also process your:

  • E-mail address
  • Name and surname
  • telephone number (optional)
  • the restaurant where you make your reservation
  • the number of guests
  • time of reservation
  • special preferences

Please do not enter any sensitive personal information in the field "special preferences".

If you use our takeaway-service, we collect your:

  • name and surname
  • E-mail address
  • telephone number
  • the content of your takeaway request

We process such data in order to be able to handle your reservation or your takeaway request, inform you about the status of your reservation or your takeaway request, and customise the platform based on your previous reservations and bookings.

  • Evaluations and reviews

The Platform offers you the possibility to use certain social functions: You can leave ratings and reviews for restaurants. You can also subscribe to comments and reviews from other users.

When you use these features, your IP address will be stored when you post a comment or rating. This is a protective measure for us in case someone publishes illegal content, comments and/or contributions (insults, forbidden political propaganda, etc.). In such cases, we must be able to determine the identity of the author, as legal action can be taken based on the content in the comments or posts.

If you would like to subscribe to the following comments, a confirmation email will be sent to confirm that you are actually the owner of the email address you entered. Subscriptions for comments can be deleted at any time. The confirmation e-mail contains the corresponding instructions.

  • Loyalty points

You receive Loyalty Points for each successful reservation. In order to manage these Loyalty Points, we process your reservation data and booking history. When redeeming your Loyalty Points, we additionally ask you to provide us with your bank details in order to initiate the payout. After the bank transfer is complete, we delete your bank details.

  • Payment details

We do not process any sensitive details about card payments ourselves, but use secure payment providers who do this for us. The payment data you enter is encrypted in your browser by the payment provider in a way that only the payment provider can access, while we only receive non-sensitive data (payment method) and references that confirm that you have made a payment. We do not store any other payment information in our system.

  • Newsletters & promotional e-mails

If you wish to receive our newsletter, we need your consent for this. We use the so-called double opt-in process for our newsletter, so that you are only subscribed to the newsletter once you click on the link in the confirmation email. This way we can make sure that you are the rightful owner of the email address. The newsletter contains information about Quandoo, restaurants and current offers. Legal basis for the sending of newsletters is your consent.

When subscribing to the newsletter, we collect your IP address, the date and the exact time of your subscription. This data is stored in order to prove that you signed up to the newsletter. Also, we need the data in case your email address was fraudulently used.

Furthermore, when interacting with the newsletter, we collect device and usage data. For example, we record if the newsletter was delivered, if you opened the newsletter or if you clicked on a link in the newsletter. We link your email address to this data in order to personalise and statistically analyse the newsletter. If you use our app, we will also connect the data collected within the app with this usage data from the newsletter. This way we make sure that we display offers within the app that are relevant to you.

You can withdraw your consent to receive newsletters with any form of personalisation at any time without incurring any costs other than the transmission costs in accordance with the basic tariffs. Just click on the unsubscribe link at the end of each newsletter or send an email to the address set out above.

  • Customer support requests

Perhaps you would like to ask our customer service for assistance or make a complaint. In this case, we will process your IP address and contact information as well as the content of your request in order to respond to your request.

Data we receive from partners and third-party platforms

Since our Platform serves as an intermediary between you and the restaurant where you make your reservation, we also process data that we receive from our partner restaurants. Similarly, we may receive information from third party platforms where a reservation made by you on that third party platform is made by Quandoo. The data in question comprises:

  • your e-mail address
  • your name
  • your telephone number (optional)
  • number of guests
  • special preferences

Other data collected

We maintain what is referred to as a fan page on the Facebook platform. When you visit our fan page, data may be collected for market research and advertising purposes, which are stored in user profiles using pseudonyms. Cookies are set for this purpose. Based on these cookies, we can carry out statistical evaluations, for instance. This serves our legitimate interest in accordance with Art. 6 para. 1 lit. f) GDPR on an optimised presentation (for further information on the legal foundations, see below). Data processing is carried out on the basis of an agreement between jointly responsible parties pursuant to Art. 26 GDPR, which you can view here: https://www.facebook.com/legal/terms/page_controller_addendum You can find detailed information about data processing by Facebook, contact options and your rights in Facebook's privacy policy: https://www.facebook.com/about/privacy/, where you can also exercise your right of appeal.

urthermore, we use Google Maps in order to show you the location of our partner restaurants on the map. Google collects your IP-address to this end. You can find the terms of use and the respective Google privacy policy here: https://maps.google.com/help/terms_maps.html.

We also use Google Tag Manager that allows us to manage tools which are implemented via Google Tag Manager. Google Tag Manager itself does not set any cookies and does not collect any personal information. However, the tool is used to trigger other tags, which might collect data.

3. For what other purposes do we process your data?

We possibly process your data for additional purposes.

These include the following:

  • passing on your personal data to third parties if we are legally obliged to do so;
  • assertion of legal claims and defence in legal disputes;
  • compliance with legal requirements for data retention due to tax legislation, etc.

4. What is the legal basis of data processing?

When processing your personal data, we rely on various legal bases in accordance with the so-called Data Protection Basic Regulation, an EU-wide legal framework for the standardization of data protection law (" GDPR").

In this context, we refer in detail to the following legal foundations:

Consent (Art. 6 (1) GDPR)

Since you have given us your consent to process personal data for the above-mentioned purposes, such consent guarantees the lawfulness of such processing. By registering with your account information or making a reservation, you expressly consent to the processing of your data as described in this Privacy Policy by crossing the box before submitting the registration or reservation form: When we process your data, this is because you have expressly permitted and requested us to do so when you use our platform. Your consent thus represents the most important legal basis for the processing of your personal data by us.

Fulfilment of our contractual obligations towards you (Article 6 (1) b GDPR)

At the same time, the processing serves to make the platform available within the scope of performance under our contract with you. Accordingly, in most cases the processing is justified not only with your consent, but also because it is necessary to fulfil our contract with you. For example, if you make a reservation at a restaurant via our platform, we need to process the reservation data to secure your reservation.

Our legitimate interests (Article 6 (1) f GDPR

There are also cases in which we would be entitled to process your data without your consent if this is necessary to protect our legitimate interests (or those of third parties). In this respect, the purposes described above, for which we process your data, in many cases also represent legitimate interests. This means that we may process the data necessary to ensure the security of our IT systems in any case, even if you have not given or withdrawn your consent to such processing. This also refers to the prevention of abuse of our platform or the personalisation of advertising for your interests (referred to as direct marketing).

Statutory requirements (Article 6 (1) c GDPR) or in the public interest (Article 6 (1) d GDPR)

In addition, we are required by law to provide certain information to the law enforcement or tax authorities upon request in individual cases.

5. To whom do we transmit your data?

We treat your personal data with care and confidentiality and pass such data on to third parties only to the extent described below and no further. We only transmit data to public authorities if there is a legal obligation to do so as a result of a request for information from the competent authority.

Beyond statutory obligations to public authorities, we will only share your information with other users of the Platform, with our third-party providers who assist us in providing the Platform, or within the Quandoo Group of Companies.

Other users of the platform

We transfer the booking and reservation data or your takeaway request via the Platform to our partner restaurants to enable reservations to be made at their restaurants or the fulfillment of your takeaway request. We also share your loyalty points with the restaurants to ensure the smooth running of these programs. Restaurants will receive your account information (except your password) and any ratings or reviews you enter into the Platform's system. Ratings and reviews will also be published on the Platform so that they can be seen by all remaining users (including visitors without an account on the Platform).

Other third parties

In addition, we transmit data to external service providers who enable us to provide the Platform. This includes the data and providers listed in our cookie policy. Please note in this connection that all of our server hosting and cloud services are made available by Amazon Web Services, Inc. (" AWS") as well as Google Ireland Limited. Both providers process all data on our behalf and we have subjected them to a strict data processing agreement to ensure the security of the processing in accordance with the requirements of the GDPR.

Within the Quandoo Group of Companies

We are part of a worldwide group of affiliated companies of Quandoo GmbH, KulturBrauerei, Schönhauser Allee 36, 10435 Berlin, Germany ("Quandoo DE"). Quandoo DE itself is a wholly owned subsidiary of Recruit Holdings Co., Ltd, 8-4-17 Ginza, Chuo-ku, Tokyo 104-0061 Japan ("Recruit"). Accordingly, we are obliged to provide Quandoo DE or Recruit with certain information either in accordance with legal reporting requirements or in the normal course of business as a global company. As a rule, all business intelligence data is anonymised to ensure that your right to privacy is respected. However, Quandoo DE or Recruit may also have access to personal, non-anonymised information, such as an internal audit or an audit required by public authorities.

6. Do we transfer your data to countries outside the EU or the EEA?

As a rule, we do not transfer your data to countries outside the EEA (referred to as "third countries"). We do not host your data in third countries and all our servers are located in the EEA (Ireland, to be precise). In some cases, however, we do transfer your data to third countries. This applies in particular to third-party platforms provided by companies based in the U.S. or the United Kingdom (as soon as the United Kingdom has left the EU) and transfers to Recruit in Japan.

In this context, we ensure that data recipients are either listed on what is referred to as the Privacy Shield (as is the case on Google and Facebook), subject to the "Binding Corporate Rules", or have entered into a contract with us under the EU standard contractual clauses and are included by any other recipient to ensure the security of processing and an adequate level of data protection.

7. How long will my data be stored?

We process and store your personal data as long as this is necessary for compliance with our contractual or statutory obligations. We therefore store the data as long as our contractual relationship with you exists and after termination only to the extent that and as long as the applicable laws require. All other data will be deleted immediately when you log out of the Platform. If the remaining data is no longer required for fulfilment of such obligations, then the data in question will be deleted regularly unless further processing thereof is necessary for the preservation of evidence or for legal claims subject to the statute of limitations.

8. Does Quandoo create a user profile with my personal data?

We use your data to optimise your Quandoo browser experience. This means that we use your data to provide you with a personalised Platform based on your personal preferences and interests and to create customised offers based on your previous behaviour patterns. For example, the IP address of your computer is used to identify your geographic location and provide you with localised content in your language. We can make suggestions and offers for new restaurants based on the restaurants you have previously viewed or booked through our Platform. However, we will never process and analyse your personal data in the course of profiling in such a way that this leads to an automated decision that is legally valid for you or that significantly affects you in a similar manner.

9. Do I have to provide data? What happens if I do not provide my data or no longer provide it?

You are not legally obliged to provide us with the personal data specified in this Privacy Policy. In particular, the contractual relationship that you have entered with us by agreeing to our terms and conditions means that you are under no obligation to provide your personal data. However, the transmission of the contract information you send to us is a basic prerequisite for the conclusion of a contract with us. Moreover, you may not use the Platform or may use it only to a limited extent if you do not provide us with certain data or if you object to the use of such data.

10. What rights do I have in relation to processing?

You may assert the following rights against us pursuant to the GDPR:

  • your right to information under Article 15 GDPR
  • your right to rectification under Article 16 GDPR
  • your right to erasure under Article 17 GDPR
  • your right to restriction of processing under Article 18 GDPR
  • your right to data portability under Article 20 GDPR
  • your right of objection pursuant to Article 21 GDPR

Moreover, you have a right to complain to the competent data protection supervisory authority (Article 77 GDPR, read in in conjunction with with Section 19 of the [German] Federal Data Protection Act - BDSG).

You can revoke your consent to the processing of your personal data at any time. This also applies to the revocation of declarations of consent given to us prior to entry into force of the GDPR, i.e. before 25 May 2018. However, such revocation is only effective for the future. Any data processing that took place before revocation will not be affected by this.

11. How do I request the deletion of my data?

Send an email to dataprotection@quandoo.com with a simple request to delete your personal data. Tell us your name and the email address you used to register with us. We will send you a confirmation email after the deletion.


Information on your right to object pursuant to Article 21 GDPR

  1. Right of objection in individual cases

In addition to the rights already mentioned, you have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you based on Art. 6 para. 1 GDPR (data processing in the public interest) and Art. 6 para. 1 e GDPR (data processing on the basis of a reconciliation of interests); this also applies to the profiling based on this provision within the meaning of Art. 4 para. 4 GDPR. If you object, then we will no longer process your personal data unless we can prove that there are compelling reasons for processing that override your interests, rights and freedoms, or that the processing serves to assert, exercise or defend legal claims. Please also refer to the information in Section 8 of this Privacy Policy: If we terminate the processing due to your objection, it may be that the platform can no longer be made available to you or only to a limited extent.

  1. The right to object to the processing of data for advertising purposes

You also have the right to object at any time to the processing of personal data concerning you for the purposes of direct marketing (including a subscription to our newsletter); this also applies to profiling insofar as it is associated with such direct marketing. If you object, then we will no longer process your personal data in the future.

The objection can be made informally and should be sent to the following address:

dataprotection.UK@quandoo.com


January 2022
V5.0

Quandoo Cookie Policy

Cookies and other tools on the Quandoo platform

This information complements the Quandoo Privacy Policy.

Below, we provide you with a list of all the cookies and other web tracking tools provided on our platform either by us or by third parties.

We use the following types of cookies only within the scope of legal regulations and on the basis of the legal foundations specified:

  • Necessary cookies: Necessary cookies enable the basic functions on a homepage, such as its navi-gation or access to protected areas. Our homepage does not function without cookies, or only in a lim-ited manner, meaning that these cookies cannot be deactivated. These cookies are therefore used to execute the contract concluded with you through the use of our website (Article 6(1)(b) UK GDPR).
  • Preference cookies: Preference cookies help us to improve functionality and personalisation. For ex-ample, settings can be stored regarding the preferred language. The cookies are used by us or by third parties integrated by us. If they are "first-party cookies", we use the cookies on the basis of our legiti-mate interest in presenting our website as user-friendly (Article 6(1)(f) UK GDPR). In all other cases, the legal basis is your consent (Article 6(1)(a) UK GDPR).
  • Statistics cookies: Statistics cookies help us to understand how our users interact with the website. For example, this means that we can analyse how users access our website and how they use it. We use these cookies on the basis of our legitimate interest in the statistical evaluation of the use of our website or your consent (Article 6(1)(a) and (f) UK GDPR).
  • Marketing cookies: Marketing cookies help us to track users via various channels and address them in a targeted manner. The aim is to only display interesting and relevant promotional content for users. This is done solely on the basis of your consent (Article 6(1)(a) UK GDPR).

The following applies to all of the tools specified below: Consent granted once for the collection of data using the tools stated can be withdrawn using the relevant setting in the cookies settings. You can object to data processing on the basis of your legitimate interest by using the relevant opt-out option specified below. In addition, you can prevent the acceptance of cookies by adjusting your browser settings so that no cookies are accepted at all. However, if you configure this setting in this way, you may not be able to use certain current or future elements of our website.

1. Quandoo's own cookies (referred to as "first-party cookies"):

Name Lifespan Purpose
t 29 days after last change Defines the channel via which a user did a booking.
quandooUserLanguage 1 year Saves the language selected by the user.
quandooUserSearchDestination Session Saves the default search area of the user.
ut 90 days Persist the authentication of a user.
quandooUserVisitorId 180 days Identify the user in surveys conducted.
qdoo_gp 6 days Collects geolocation information.
promoCode7d 7 days Stores the Promotional Codes entered by the user.
sem_attributes Session Identifies the SEM campaign details.
grpRef Session Stores the name of the chain restaurant.
qdoo_exp_ 30 days Helps to know which experience was served to the user in order to serve a consistent experience.

Users can prevent the acceptance of first-party cookies by adjusting their browser settings so that no cookies are accepted at all. However, if you configure this setting in this way, you may not be able to use certain current or future elements of our website.

2. Cookies and plugins provided by third parties (referred to as "third-party cookies")

Furthermore, we also use the following cookies and tools from third-party providers:

Google Analytics

Our platform uses the web analysis service Google Analytics, from Google LLC, 1600 Amphitheatre Parkway Mountain View, California 94043, USA, for the purpose of analysing and continuously optimising our website.

Google Analytics uses cookies which allow website use to be analysed (e.g. sites surfed by you, conversions, your interactions with our webpages, technical information of your browser, shortened IP-address). Pseudonymised user profiles are created for this purpose. We use Google Analytics only with activated IP anonymisation. Furthermore, we use the User-ID function. This function allows us to assign sessions and all activities during those sessions to a permanent User ID. It is therefore possible to analyse user behaviour across different devices.

You can prevent cookies from being stored by configuring the operating system settings on your browser or mobile device or within our cookie consent management tool accordingly. However, please bear in mind that, in this case, you may not be able to make full use all of the functions on our platform. You can also prevent the data produced by the cookie and information relating to your use of our website (including your IP address) being collected by Google and being processed by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout.

Further information on conditions of use and data protection can be found at https://marketingplatform.google.com/about/analytics/terms/us/ and https://policies.google.com/privacy?hl=en-US.

Legal basis: Article 6(1)(a) UK GDPR (consent).

Google Optimize

We use the web analysis and optimization service ""Google Optimize"" (a sub-service of Google Analytics) on our website, which is provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. We use the service to increase the attractiveness and functionality of our website by playing out new functions and content to a percentage of our users and statistically evaluating the change in usage.

For this purpose, Google Optimize uses cookies that are stored on your device and enable an analysis of your use of our website. The information generated by the cookies about the use of the online offer by the users is usually transmitted to a Google server in the USA and stored there. The processing takes place on the basis of EU standard contractual clauses. This provides Google with a guarantee of compliance with European data protection law.

For more information on data use by Google, setting and objection options, please refer to Google's privacy policy https://policies.google.com/technologies/ads and the settings for the display of advertisements by Google https://adssettings.google.com/authenticated.

Legal basis: Art. 6 (1)(a) UK GDPR (consent)

Google reCAPTCHA

Our platform, in particular our consumer portal and mobile apps, integrates the services of Google reCAPTCHA, from Google LLC, 1600 Amphitheatre Parkway Mountain View, California 94043, USA, an advanced risk analysis engine for the purpose of keeping malicious software from engaging in abusive activities on our website.

Google reCAPTCHA observes and analyses user behaviour. This may include your interactions with our web pages, mouse pointer movements, mouse clicks, keystrokes and technical information of your browser, including browser language, Google cookies, CSS information, installed plug-ins and IP-addresses. In particular, the Google reCAPTCHA algorithm may identify IP-addresses previously recognised as legitimate through the use of cookies. The information collected will also be used to improve the reCAPTCHA tool.

You can prevent cookies from being stored by configuring the operating system settings on your browser or mobile device or within our cookie consent management tool accordingly. However, please bear in mind that, in this case, you may not be able to make full use of all of the functions on our platform.

https://policies.google.com/privacy?hl=en-GB and https://policies.google.com/terms?hl=en-GB.

Legal basis: Article 6(1)(f) UK GDPR (legitimate interest).

Hotjar

We use the technology service Hotjar, from Hotjar Ltd. Level 2, St Julian's Business Centre, 3, Elia Zammit Street, St Julian's STJ 1000, Malta, to better understand the needs of our users and to optimise this service. For example, Hotjar shows us how much time is spent on which websites, which links users click on, what users like and dislike, and allows us to develop and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users' behaviour and their devices (notably the device IP address (collected and stored only in anonymised form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), preferred language used to display our website). Hotjar stores this information in a pseudonymised user profile. Neither Hotjar nor ourselves will ever use this information to identify individual users or to verify additional data on an individual user. Further information can be found in the Hotjar Privacy Policy: https://www.hotjar.com/legal/policies/privacy.

You can object to the creation of a user profile, the storage of data on your use of our website by Hotjar and the use of tracking cookies by Hotjar on other websites by accessing the following link: https://www.hotjar.com/opt-out.

Legal basis: Article 6(1)(a) UK GDPR (consent).

Wisepops

We cooperate with Wisepops, 49 rue Jean De La Fontaine, 75016 Paris, France. Wisepops is a provider that allows us to place pop-ups based on users' surfing behaviour. Wisepops also collects surfing data and places appropriate pop-ups. Cookies are used for this purpose. Further information can be found at https://support.wisepops.com/more-info/data-and-cookie-policy.

Legal basis: Article 6(1)(a) UK GDPR (consent).

OneTrust

To manage your cookie preferences, we use the tool Onetrust, 1200 Abernathy Rd, Suite 700, Atlanta, Georgia 30328, USA. The cookie settings selected by you are stored with the aid of a cookie. You can find further information on data privacy here: https://www.onetrust.com/privacy/.

Legal basis: Article 6(1)(b) UK GDPR (contract).

"Near Me" feature

If you have given your consent for us to access your location using the respective browser setting, we collect information on your location. By activating this "Near Me" feature, we can show you restaurants near you. Cookies are used and the information stored in this cookie is processed under a pseudonym in order to analyse your use of our website.

Legal basis: Article 6(1)(a) UK GDPR (consent).

Google Ads & Google Remarketing

With Google Ads & Google Remarketing, users who have already visited our platform and are interested in the relevant offer can be addressed again by targeted advertising on the pages of the Google partner network. Advertising is inserted with the aid of cookies.

If you do not wish to receive interest-related advertising, you can deactivate the use of cookies for these purposes at https://adssettings.google.com/authenticated. Both services are subject to the Google Privacy Policy available for download at https://policies.google.com/privacy?hl=en.

Legal basis: Art. 6 (1)(a) UK GDPR (consent).

Google Enhanced Conversion

Google Enhanced Conversion allows tracking of customers who are logged into Google and land on our website via an ad. Google Tag Manager is used to determine which data entered by the customer on our website is to be collected (e.g.: e-mail). This data is transmitted anonymously to Google. If this anonymously transmitted data matches the data stored anonymously by Google, then a "conversion" is displayed in our account.

Consent for this can be revoked at any time via the cookie management. In this context, the consent refers in particular to the disclosure of the anonymized data. You may also deactivate the use of cookies for these purposes at https://adssettings.google.com/authenticated. Services are subject to the Google Privacy Policy available at https://policies.google.com/privacy?hl=en.

Legal basis: Art. 6 (1)(a) UK GDPR (consent).

Google Marketing Platform

Google Marketing Platform enables its users to place ads on their websites. Advertisers can determine how often, when, and for how long ads are displayed in a browser, and use cookies to facilitate behavioural targeting by indicating which areas of a website you are browsing. A pseudonymised identification number is assigned to your browser in order to check which advertisements are displayed in your browser and which have been accessed. The cookies do not contain any personal data.

You can deactivate the use of cookies by Google for such purposes athttps://adssettings.google.com/authenticated. Both services are subject to the Google Privacy Policy available for download at https://policies.google.com/privacy?hl=en-US.

Legal basis: Art. 6 (1)(a) UK GDPR (consent).

Facebook Retargeting

We cooperate with Facebook Inc., 1601 South California Avenue, Palo Alto, California 94304, USA, in order to address users again on Facebook. For this purpose, we have integrated Facebook Pixel into our websites. When you visit websites with one of these integrated pixels, non-personal data is automatically transmitted to Facebook for analysing and marketing purposes, which is assigned a user ID by Facebook. As soon as you register with Facebook, Facebook assigns the transmitted data to your Facebook profile and assigns you to certain groups based on your surfing behaviour (so-called custom audiences).

For further information on the purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as your settings options for protecting your privacy, please refer to the Facebook Privacy Policy which can be found at https://www.facebook.com/ads/website_custom_audiences/ and https://www.facebook.com/privacy/explanation. If you wish to object to the use of the user-defined web-site from Facebook, you can do this at https://www.facebook.com/ads/website_custom_audiences/.

Legal basis: Article 6(1)(a) UK GDPR (consent).

Bing Universal Event Tracking

We use Bing Ads from the Microsoft Corporation, One Microsoft Way Redmond, WA 98052-6399 USA, to advertise our business online and thereby linked to Bing Universal Event Tracking. In order to effectively market our product or our service, we allow Bing to use a cookie to record your visit to our website and the reservation made. Furthermore, your surfing behaviour is recorded for marketing and optimisation purposes.

You can object to the collection of data for these purposes, among others, by preventing cookies from being stored for the bing.com domain in browser settings or by using the appropriate setting here: http://choice.microsoft.com/de-DE/opt-out. Further information on data collection by Microsoft can be found here: https://privacy.microsoft.com/en-gb/privacystatement.

Legal basis: Article 6(1)(a) UK GDPR (consent).

Affiliation and Display Networks

We cooperate with various affiliation and display / native ad networks that allow us to display various advertising materials such as banners or other promotional content on so-called publisher websites. Cookies are used to record which users came to our site via the respective advertising medium clicked on and then made a reservation. These cookies do not contain any personal data, but only a pseudonymous user and, in case of affiliation networks, reservation ID, which make it possible to assign them to the respective network. This information is required for the purpose of reporting and payment processing with the relevant network.

Legal basis: Art. 6 (1)(a) UK GDPR (consent).

Tool Privacy Policy Opt-Out
Impact https://impact.com/privacy-policy/ https://impact.com/privacy-policy/
Oath https://privacy.aol.co.uk/legacy/ https://privacy.aol.co.uk/legacy/
Plista https://www.plista.com/about/privacy/ https://www.plista.com/about/opt-out
Shopback https://www.shopback.co/privacy-policy.html https://www.shopback.co/opt-out.html
Taboola https://www.taboola.com/privacy-policy https://www.taboola.com/privacy-policy#interest-based-advertising
optout.html)

Zenloop

We use the services of zenloop GmbH, zenloop GmbH, Brunnenstrasse 196, 10119 Berlin. zenloop is a business-to-business software-as-a-service platform that enables us to collect and analyse feedback from our customers via various channels. This enables us to tailor and improve our services to the needs of our customers, which constitutes a legitimate interest within the meaning of Article 6 (1)(f) UK GDPR.

Only when you interact with the feedback tools does zenloop collect your IP address, device and browser information as well as the website from which you are using the feedback platform. In addition, zenloop collects survey responses on our behalf. zenloop also uses cookies and similar technologies to collect aggregated information about users. You can object to this by making the appropriate setting in your browser. Further information can also be found in zenloop's privacy policy at https://www.zenloop.com/en/legal/privacy.

If you participate in the survey, we will also send your e-mail address to Zenloop. The reason for this is that if you inform us of problems within this survey (e.g. in the reservation process), we may contact you to find a solution together. Your e-mail address helps us to identify you here.

Legal basis: Art. 6 (1)(a) UK GDPR (consent).

Special remarks for the use of the Quandoo App

You can opt-out of the data collection by all tools mentioned below by disabling the respective slider in the Quandoo app.

Leanplum

For data analysis and personalised customer contact within our app, we also use the services of Leanplum, Inc., 1550 Bryant Street, Ste. 545 San Francisco, California 94103, United States. The collected usage data is processed in pseudonymised form, IP addresses are deleted after their collection and the data is internally linked to your personal data only if you have registered using the app. If you additionally signed up to our newsletter, we will according to the above mentioned terms combine app and newsletter usage data, in order to provide you with the best personalised experience. The information about the use of our app is usually transferred to Leanplum servers in the USA and stored there as well as in our own data warehouse (EU).

Firebase Analytics

Furthermore, we use the technologies of Firebase Analytics (Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) in order to analyse the use of our app. Firebase collects several data, such as your device's Advertising ID. You can find a full list of the data collected here: https://firebase.google.com/support/privacy#data_processing_information.

Adjust

Our mobile app uses the app performance and analysis technology "adjust", a service provided by adjust GmbH ("adjust"). For more information about their product and privacy policy, please visit: https://www.adjust.com/privacy-policy/. When you launch the Quandoo app, adjust processes install and event data (such as which restaurants you looked at and if a reservation was successful) from our iOS and Android mobile apps in order to help us understand how our users are interacting with our apps and to optimise and analyse our mobile ad campaigns. For such analysis, adjust uses your mobile identifier like IDFA or Google Play Services ID, and your pseudonymised (hashed) IP address. The hashes used are one-way hashes and it is not possible to identify you or your mobile device individually.

October 2023