Revisions: February 22, 2022
|
Privacy Policy |
|
Foreword |
|
Dear Customer, We are pleased that you are interested in personal data protection. We would like to give you an easily understandable overview of the personal data collection, use, and disclosure (“process or processing”) practices and our privacy compliance measures when providing you with our delivery websites, applications and related services (we'll call all of these together simply the "platform" below). Our goal is to provide you with an amazing customer experience while keeping your personal data secure. Trust, transparency and honesty are our leading principles. Your trust in our product is the reason why we can provide you with an amazing customer experience. |
|
Who we are |
|
We are Delivery Hero (Thailand) Co. Ltd., but usually we just use the name foodpanda. You can always contact us via the following methods: Address: No. 6, 11th and 12th floors, O-NES TOWER, Soi Sukhumvit 6, Klongtoey sub-district, Klongtoey district, Bangkok 10110, THAILAND Postcode City: 10310 E-mail address: [email protected] We are the data controller of the processing activities conducted on our platform. "Data controller" simply means we have the power and duty to make decisions in regard to the collection, use, or disclosure of the personal data. While we are required by law to provide you with all of the following information, we do so primarily out of the belief that a partnership should always be honest. If you have any questions about personal data protection at foodpanda, you can also contact our data protection officer at any time. The details of our data protection officer are as follows: Delivery Hero (Thailand) Co., Ltd. Atten: Data Protection Officer: Address: No. 6, 11th and 12th floors, O-NES TOWER, Soi Sukhumvit 6, Klongtoey sub-district, Klongtoey district, Bangkok 10110, THAILAND. Email Address: [email protected] We have a global Group Data Protection Officer as we are also a member of the large and fascinating family of the Delivery Hero Group. As a family, we make certain decisions together. Both our parent company, Delivery Hero SE, Oranienburger Straße 70, 10117 Berlin and we jointly decide, to some extent, which means we will use to process your personal data and which purposes we consider to be appropriate. |
|
Minors |
|
To use our services and platforms, you must be at least 20 years of age. According to the applicable law, if we need to process your personal data, and you are below 20 years of age or not become sui juris under Thai law, and such processing is based on consent as a legal basis, you must also ensure that you obtain the necessary consent from your parent or legal guardian, and provide us with any proof thereof promptly, upon request. |
|
Privacy is your right and you have the choice |
|
As a customer, you have the choice to decide which information or personal data you would like to share with us. Please be aware, however, that by signing up to our platform, you are required to accept our terms of use. Legally speaking, this means you will enter into a contract with us for the provision of delivery platform service. Of course, we need some information and personal data from you in order to be able to perform our obligations under this contract. However, this does not always require all the personal data which you can make available to us. To exercise your legal rights against us, you can contact [email protected] at any time. You can take the following steps to disclose less information and personal data about yourself: |
|
Cookies: In order to make the visit of our website attractive and to enable the use of certain functions, we use so-called “cookies” on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your device and allow us or our affiliate to recognize your browser on your next visit (persistent cookies). Below, you will find more information about your choices as well as a detailed list of cookies we use: Required Cookies These cookies are required to navigate our site, and in order to use the features provided. Without the use of such cookies, proper functioning of our site is not guaranteed (e.g., entering text), while browsing through pages on the website. In addition, they are cookies that collect information about how visitors use our website, for example, which pages they visit most often, and if they receive error messages from websites. They also allow our site to remember your choices such as language, or region to provide improved features. We also use these cookies to store whether you have given us your consent to use cookies or to temporarily store the information you have entered, as necessary. Functional Cookies These cookies collect pseudonymous information and cannot track your movements on other websites. we use these cookies for pseudonymized usage analysis. Personalization and Advertising Cookies These cookies are used to play more targeted advertising relevant to the user and adapted to their interests. You can set your browser so that you are informed about the setting of cookies and individually decide on their acceptance or exclude the acceptance of cookies for specific cases or in general. Failure to accept cookies may limit the functionality of our website/app. You can install additional add-ons in your browser that block unnecessary cookies. By doing so, you will not see any interest-based advertisements. This Privacy Policy covers the use of cookies by us and does not cover the use of cookies by any advertisers, or other third-party websites, which may link to our website. If you link to or is directed to a third-party website, you are encouraged to read the privacy policy, as well as cookies policy, of such third-party website. |
|
Advertising: If you do not want to receive newsletters from us, you can unsubscribe at any time. In this case, we will not be able to send you any cool offers, special deals, promotions, and other news, which may be of interest to you. |
|
No data sharing: If you don't want to share any information or personal data with us at all, that's an unfortunate thing. In this case we can't convince you how great our products are. However, in certain circumstances, it may be necessary for us to share your information or personal data to third parties, such as for instance, to perform our duties under the contract between you and foodpanda, or to fulfil special deals, campaigns, or other collaborations. In this regard, if you decline to provide or share your personal data, we may not be able to complete our duties, or fulfil such campaigns, deals, or other actions. |
|
Your legal rights: |
|
Right to access You have the right to be informed about the personal data that we store about you and how we process this personal data. This also includes a right to receive a copy of your personal data. In addition, you have the right to request for us to disclose the source of your personal data, for which you did not provide consent. |
|
Right to rectification If you notice that stored personal data is incorrect or outdated, you can always ask us to correct or update it. |
|
Right to erasure You can ask us at any time to delete, destroy, or de-identify the personal data we have stored about you. |
|
Right to restriction of processing If you do not wish to delete your personal data, but do not want us to process it further, you can ask us to restrict the processing of your personal data. In this case, we will archive your personal data and only reintegrate it into our operative systems if you so wish and you will not be able to use our services during this time. However, if you change your mind to use our services again, we will process your personal data accordingly. |
|
Right to personal data portability You can ask us to transmit the personal data stored about you in generally readable or usable - with automatic tools or equipment - format to you or an authorized representative, or another data controller. In this context, we will make the personal data available to you in JSON, PDF or similar format. |
|
Right to object to the processing of your personal data You can object to the further processing of your personal data. This also includes objecting to our processing, which we process without your consent but based on our legitimate interest. This applies, for example, to direct marketing. You can object to receiving further newsletters at any time. |
|
Right to withdraw your consent Where we rely on your consent to process your personal data, you can withdraw your consent at any time. The withdrawal of consent may be subject to restrictions by law, or the contract which gives benefits to you. Therefore, your request to withdraw consent may be denied on said grounds. The withdrawal of your consent may affect certain services which are offered to you, which you may be aware of when requesting us to withdraw the consent. However, it will not affect any actions and processing of the personal data, which has been conducted legally before the withdrawal of such consent. |
|
Your request to exercise any of the rights stated above is subject to the conditions and limitations imposed by applicable personal data protection laws and regulations, whereby your data subject rights request may be rejected based on a legitimate ground. |
|
Right of complaint If you believe that we have done something wrong with your personal data or your rights, we encourage you to contact us in order to resolve the issue, prior to lodging any complaint to the supervisory authority. However, you can complain to the appropriate supervisory authority at any time. The contact details of the supervisory authority are as written below. The supervisory authority responsible for us is: Name of the supervisory authority: The Office of the Personal Data Protection Commission (“PDPC”) Address: 120 Moo 3, 6th – 9th Floor, Government Complex Commemorating His Majesty the King's 80th Birthday Anniversary, 5 December, BE 2550, Chaeng Wattana Road, Thung Song Hong Sub-district, Lak Si District, Bangkok, Thailand Postcode City: 10210 Email Address: [email protected] You are free to lodge the complaint with a supervisory authority at the place of your habitual residence or place of the alleged infringement. |
|
What personal data we process |
|
In the following description of our processing activities, we refer in each case to categories of personal data. A category includes several personal data, which are usually processed together for the purposes. Personal data is information that can identify you or even make you identifiable. We generally process the following categories of personal data for the following reasons: |
|
Contact Information: Name, address, telephone number, email address, your ID from any social media Reason: If you contact us, we collect this personal data because we need to know who we are talking to and what we have been talking about so that we can help you with your reason for contacting us. This also applies if you leave comments on social media on our fan pages. We do not combine this personal data with your profile personal data on our platform, but we can still identify you by your social media ID. This category of personal data will be processed in respect to various activities and purposes, namely providing services, contacting, performing rights and duties under our contracts, providing special deals, verifying your identity, managing complaints, and other relevant activities. |
|
Location data: Address, Postcode, City, Country, Longitude, Latitude Reason: We need this personal data in order to be able to deliver your orders. We create the longitude and latitude automatically in order to be able to process your delivery address in our other linked systems, such as our Rider app, restaurant application, and other systems, in order to display your address to our riders and restaurants, to process your orders, provide any other services, conduct data analysis, and to provide the best experience which has been personalized for you. |
|
Profile data (master data): Name, email address, password, telephone number, delivery addresses, interests, demographic data (age, delivery address), order data, device information and access data, payment data, and other information and personal data, which we may receive in the ordinary course of our business. Reason: This personal data is your master data, which we absolutely need for our services, and it will be processed as a basis for other activities and purposes. If you decline to provide this personal data, we may not be able to provide you with our services appropriately. Without your personal data, including name, email address, telephone number and a password, you cannot create a profile. We need your age to ensure that you are not a minor. |
|
Device information and access data: Device ID, device identification, operating system and corresponding version, time of access, configuration settings, information on Internet connection (IP address) Reason: With each access this information is stored by us for technical reasons. We also process parts of this information to detect suspicious behaviour at an early stage and to avert damage. This personal data will also be processed for the purpose of providing personalized experiences, and to ensure that you are able to receive the best services, special deals, and promotions from us. |
|
Order data: Order history, selected restaurants, invoices, order ID, comments on orders, information on payment method, delivery address, successful orders and cancelled orders Reason: Each time you place an order, this information will be added to your profile. You can view all this information in your profile at any time. The information should give you an overview of your own interests and previous orders. We will also use the same information to improve our services, to learn about your needs and interests, to provide the best personalized services, and to process other activities in the ordinary course of our business. In addition, we will anonymize this information when you request a deletion or when your profile becomes inactive in order to continue to use this information in an anonymized form to optimize our services. |
|
Communication data: Name, email address, telephone number, device ID Reason: If you would like to receive a newsletter, an SMS or an in-app push notification from us, we need certain information to send you the messages. Instead of addressing you with "Hey You", we find it more customer friendly to address you with your name. This category of personal information is also used by us to contact you, for example, if a product cannot be delivered and we want to offer you an alternative instead. Similarly, to make the online ads you may see from us more relevant, we may process this personal data. In regard to our communications, other categories of your personal data, as described in this Privacy Policy, may also be processed. |
|
Payment data: Payment method, pseudonymized credit card information, completed transactions, failed transactions, and other details in relation to your payment Reason: We need this information to track your payments and assign them to the orders you have placed. This personal data will mainly be processed for the purpose of proceeding with your orders, whereby your personal data may be shared with our partners or service providers in order to complete these transactions. |
|
Delivery data: Name, delivery address, phone number, order ID Reason: We process the personal data in order to provide you with our services, perform our duties and rights under contracts between us, and to improve our services, manage complaints, and other relevant activities. In accordance with the principle of data minimization, we only provide our riders and restaurants with the information that they need from you to prepare and deliver your order. |
|
For which purposes we process data |
|
We process your personal data to the extent that the processing activities are permitted by law. We pay particular attention to the fact that all principles for the processing of personal data are taken into account. We pay great attention to transparency. Therefore, we generally process your data if this is lawful and you can reasonably expect it to be processed. |
|
Account creation, SSO registration, administration of your profile In order to be able to offer you our services, the processing of your personal data for the purpose of creating your account and profile, registering to use our services and platform, verifying your identity, and managing your account and profile is essential. Much of this personal data that you transmit to us and other parts of the personal data that we collect automatically when using our platforms. Nevertheless, we endeavor to keep the amount of personal data as minimal as possible. You can help us by only sharing necessary personal data with us that we need to fulfill our contractual obligations. The details of the processing activities are described in the below sections. |
|
Account creation When creating a customer account you will be asked to enter your master data. This is absolutely necessary, as we cannot create a customer profile without this personal data. Your email address and telephone number are particularly important, as we can use this information to identify you in our system the next time you want to log in again. Furthermore, we would like to ask you to choose your password carefully. Do not use the same password on multiple websites. Your password should also be at least 12 characters long, at least one lowercase letter, one uppercase letter, one special character (!?#,%& etc.) and one digit. Categories of personal data:
Legal basis:
If you do not provide us with your personal data for these purposes, foodpanda will not be able to create your accounts and you will not be able to use our platform. |
|
Login If you already have an existing customer account, you will need to enter your email address and password to log in in order to verify your identity before using our services, enter into contracts, and use our platform. If we detect irregularities during registration, such as entering the wrong password several times, we will take appropriate measures to prevent damage to you and us. Categories of personal data:
Legal basis:
If you do not provide us with your personal data for these purposes, foodpanda may not be able to verify your identity and complete the log-in process. Therefore, we would not be able to enter into the contract with you, if you do not provide us with your personal data |
|
Single-Sign-On with Facebook If you have a Facebook profile, you can register on our website to create a customer account or to register using the social plugin "Facebook Connect" of the social network Facebook, which is operated by Meta Platforms, Inc. (“Meta”), 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook"), within the framework of the so-called Single Sign On technology. You can recognize the social plugins of "Facebook Connect" on our website by the blue button with the Facebook logo and the inscription "Log in with Facebook" or "Connect with Facebook" or "Log in with Facebook" or "Sign in with Facebook". If you call up a page of our website that contains such a plugin, your browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted directly from Facebook to your browser and integrated into the page. Through this integration, Facebook receives the information that your browser has called up the corresponding page of our website, even if you do not have a Facebook profile or are not logged on to Facebook. This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and stored there. These personal data processing operations are carried out in accordance with applicable personal data protection law on the basis of Facebook's legitimate interest in the display of personalised advertising on the basis of surfing behaviour. By using this "Facebook Connect" button on our website, you can also log in or register on our website using your Facebook user data. Before connecting, receiving, and sharing any personal data with Facebook, you will be asked to give permission to connect to Facebook, whereby foodpanda will not connect with Facebook, unless such e-permission is given. We will receive the general and publicly accessible information which is stored in your profile when using the "Facebook Connect" button on Facebook, depending on your personal data protection settings on Facebook. This information includes the user ID, name, profile picture, age and gender. We would like to point out that after changes have been made to Facebook's data protection conditions and terms of use, your profile pictures, the user IDs of your friends and the friends list may also be transferred if they have been marked as "public" in your Facebook privacy settings. The personal data transmitted by Facebook is stored and processed by us for the creation of a user account with the necessary personal data, if this has been released by you on Facebook (title, first name, surname, address data, country, e-mail address, date of birth). Conversely, we may transfer personal data (e.g. information on your surfing behaviour) to your Facebook profile for particular purposes, whereby we will undertake the necessary steps required by applicable personal data protection law to process the personal data legally. Meta Platforms, Inc., headquartered in the USA, is certified for EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU. The processing of the personal data by Facebook shall be subject to responsibility and liability, which is separate from foodpanda. Categories of personal data:
Legal basis:
|
|
Managing your profile You can log in to your profile at any time and change your personal data, such as name, email address or telephone number. You can also view your previous orders. Categories of personal data:
Legal basis:
If you do not provide us with your personal data, foodpanda may not be able to manage your profile and proceed with other relevant transaction. |
|
Order processing Once you have successfully registered and decided to place your order, we will store this information in your profile and process it in further processes so that you can submit your order to us. When you submit your order, your personal data is transferred to our backend where it is transferred to other systems for further processing. Categories of personal data:
Legal basis:
If you do not provide us with your personal data, foodpanda may not be able to fulfil our obligations under the contract, i.e., fulfil your order and perform any other necessary actions to complete the transactions for you. |
|
Buffering After you have logged in to your profile and made your selection, the products will be saved in your profile. If you accidentally close your browser or app, you can continue to the last point of your order. The last information is stored in a cookie. Categories of personal data:
Legal basis:
The legitimate interest is to provide you with a better ordering experience where you can conveniently continue your order with browsers or apps that are accidentally closed. |
|
Privacy Policy |
|
Delivery Once you have successfully placed your order, a number of processes are running in the background to ensure that your order is delivered quickly. The following processing activities describe how and why your personal data is processed for the respective purposes. Personal Data Transfer to Riders and Restaurants: We use different riders for delivery. Therefore, we will need to send or disclose your personal data to the riders, so that they can deliver your order quickly and properly. Legally binding agreements between the riders and us require all riders to process data for the sole purpose of delivering your order. The personal data will be sent or disclosed to such riders via electronic systems. Categories of personal data:
Legal basis:
If you do not provide us with your personal data, foodpanda may not be able to fulfil our obligations under the contract, i.e., fulfil your order and perform any other necessary actions to complete the transactions. Therefore, we would not be able to comply with our contractual obligations without your personal data. |
|
Calls from riders or restaurants If a product of your choice is not available for delivery or our riders cannot reach you at the delivery address which you provided, or there is an error and a failure in respect to your orders or transactions, the riders or restaurants will be authorized by us to call or contact you, so that the problem can be resolved easily. Categories of personal data:
Legal basis:
|
|
Saved payment methods & payments processing In order to make the ordering process even more convenient for you, we offer you an option to save your preferred payment method. This means that you don’t have to enter your payment details again the next time you place an order. The storage of this personal data requires your prior consent. You can save your payment data by clicking on the consent field. You can revoke your consent for the future at any time by deactivating the consent field again or by informing us of this by e-mail to [email protected] Categories of personal data:
Legal basis:
|
|
Advertising and marketing |
|
Direct marketing Newsletter If you have provided us with your email address when purchasing goods or services, we reserve the right to send you regular offers of similar goods or services to those already purchased from our range by email. Not only do the contents of our newsletters vary, but so do the technologies and criteria we use to design our newsletters and segment customer groups. For example, a group of customers may receive a special newsletter promoting special deals from restaurants where customers have ordered. Other newsletters may refer to specific products that relate to a particular flavour, such as sushi, Indian delicacies or pizza. We use different information from your order history and delivery addresses. This is a profiling process in which we automatically process your personal data. The specific customer segmentation can have a legal effect on you or can have a significant effect on you in other ways if you receive certain newsletters and are not included in other campaigns. If automated decision-making leads to a negative result for you and you do not agree with this, you can contact us at [email protected]. In this case, we will individually assess the circumstances of your case. Categories of personal data:
Legal basis:
Personal data processing in this respect takes place solely on the basis of our legitimate interest in personalized direct advertising with our aim of offering you, as our existing customer, the opportunity to obtain the best experience from using our services and platform. In the case where consent is required, we will proceed to request consent from you. In the case where you wish to object to the use of your email address for the aforementioned purposes, you may click ‘unsubscribe’ or the opt-out option in the email which is sent to you, or other opt-out options provided in other communication, or by contacting us at: [email protected]. The unsubscribing, opting-out, or objection will take effect thereafter. |
|
Net Promoter Score (NPS) We are constantly striving to improve our services. Your constructive feedback is very important to us. Therefore, we will occasionally send you customer surveys and ask you to give us your opinion. If you do not wish to receive customer surveys, you can unsubscribe at any time. For any customer survey request, you can click "unsubscribe" below and we will not contact you again. Categories of personal data:
Legal basis: Legitimate interest |
|
In-app and push notifications We have a strong interest in informing you about new restaurants or deals when using our app. We are always working to give you an amazing customer experience. To achieve this, we negotiate very good deals for you with our restaurant partners. To inform you about these deals, we send you in our apps in-app-notification or push-notification. Categories of personal data:
Legal basis:
Personal data processing in this respect takes place solely on the basis of our legitimate interest in personalized special deals, promotions, or news for you, in order to provide the best experience for you. In case you do not wish to receive any such in-app notifications which send special deals, promotions, and news to you, you can change your setting at any time on our platform, or contact us at: [email protected]. |
|
SMS Besides other means we continue to use SMS to inform you about new deals in your area. Personal data processing in this respect takes place solely on the basis of our legitimate interest in respect to providing personalized direct advertising, with our aim to offer you, as our existing customer, the opportunity to obtain the best experience from using our services and platform. In the case where consent is required, we will proceed to request for consent from you. In the case where you wish to object to the use of your mobile phone number for the aforementioned purposes, you may click ‘unsubscribe’ or the opt-out option in the SMS which is sent to you, or via other opt-out options which are provided via other communication, or by contacting us at: [email protected]. The unsubscribing, opting-out, or objection will take effect thereafter. The registration as well as the cancellation is free of charge for you. Categories of personal data:
Legal basis:
|
|
Online marketing Our service is based to a large extent on convincing potential customers that we offer an amazing customer experience and that every visit to our platform is worthwhile. In order to reach as many potential customers as possible, we are very active in the field of online marketing. It is just as important to win the trust of potential customers and to strengthen the trust of our existing customers. Therefore, we would like to present to you our processes, which are as transparent as possible, by providing the details in relation to the online marketing, which we may conduct, in order to enable you to understand, as follows: |
|
Targeting In principle, targeting means the switching and fading in of advertising banners on websites or platforms that are tailored to specific target groups. The aim is to display the most attractive banners as individually as possible for the user and potential customer. Firstly, we define a target group and secondly, we commission our service providers to show our advertising to the defined target group. We do not process any personal data, as these are initially made anonymous. To better define the target group, we segment customer types and place different ads on different portals. |
|
Retargeting As soon as you have visited our website and, for example, have already placed an order in your shopping cart, we store this information in cookies. If you continue to surf other websites, our advertising partners will remind you on our behalf that you have not yet completed your order. We don't want you to miss out on our amazing customer experience. You can disable retargeting by installing appropriate add-ons for your browser. Furthermore, you can and should also regularly delete the cookies stored in the browser you are using. Categories of personal data:
Legal basis:
You will be asked to provide consent for us to conduct said activities, once you visit our platform. You are entitled to withdraw the consent at any time by installing the appropriate add-ons for your browser, or contact us at: [email protected].
|
|
Cookies In order to make the visit of our website/app attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your device and allow us or our affiliate to recognize your browser on your next visit (persistent cookies). You can set your browser so that you are informed about the setting of cookies and individually decide on their acceptance or exclude the acceptance of cookies for specific cases or in general. Failure to accept cookies may limit the functionality of our website/app. Categories of personal data: Device information and access data Legal basis:
We use cookies for various purposes, as described above. Certain purposes, e.g., to enable the use of certain functions, or to personalize your experience, could rely on legitimate interest, while other purposes, such as marketing and re-targeting, would require your consent. In this regard, you will be asked to provide consent for us to conduct said activities, once you visit our platform. You are entitled to withdraw the consent at any time, by installing the appropriate add-ons for your browser, or by contacting us at: [email protected]. In the case where the cookies are necessary, i.e., it is used to use certain functions and to personalize your experience, you may disable the use of cookies for such purposes, but the website or platform may not function properly. |
|
Bonus programs We want to reward our customers' loyalty with attractive deals and points. For this reason, we offer our customers the opportunity to participate in such bonus programs. The bonus program will commence when you join the program by completing the required process, which means that you are willing to allow us to process your personal data in order to fulfil the loyalty program requirements, and to conduct other relevant purposes. Categories of personal data:
Legal basis:
In case you would like us to stop processing the personal data for these purposes, you may do so by stopping your use of the loyalty program, or contacting us at: [email protected]. However, we would not be able to comply with our contractual obligations, if you do not provide us with your personal data |
|
Sweepstakes When you participate in the sweepstakes, we will need to process your personal data, in order to fulfil the activity’s requirements, and to proceed with the relevant activities. In joining the sweepstakes, you agree that you allow us to process the personal data for said purposes. Categories of personal data:
Legal basis:
We would not be able to comply with our contractual obligation, if you do not provide us with your personal data. |
|
User Experience Surveys: We always develop new products and try to adapt our services to the wishes of our customers. In order to measure the effectiveness of these changes, we regularly offer interviews with our User Experience team. In these interviews we record your usage behaviour and ask you for possible optimization possibilities. Categories of personal data:
Legal basis:
Although we aim to improve your experiences with us, by sending surveys from time to time, however, if you do not wish to receive any surveys, you can contact us at: [email protected]. |
|
Fraud prevention and security of our platform |
|
In order to protect our customers and our platform from possible attacks, we continuously monitor the activities on our website and platform. To this end, we use various technical measures to ensure that suspicious behavior patterns are detected at an early stage and prevented in good time. To achieve this goal, several monitoring mechanisms run in parallel and prevent potential attackers from accessing our website at all. The decision-making process is automated and can have a legal effect on the person concerned or affect them in a similar way. If automated decision making leads to a negative result for you and you do not agree with this, you can contact us at [email protected]. In this case, we will individually assess the circumstances of your case. Categories of personal data:
Legal basis: Legitimate interest |
|
Merger & acquisitions, change of ownership |
|
We would also like to inform you that in the event of a merger with or acquisition or change of ownership by another company, we will disclose information to that company. Of course, we will require the company to comply with the legal data protection regulations. Categories of personal data:
Legal basis: Legitimate interest |
|
Vouchers |
|
Privacy Policy |
|
We often offer vouchers for our customers for various reasons. The purpose of these vouchers is to reward our loyal customers and to encourage them to continue to lead our loyal customers. In order to be able to varify the number, the value and the frequency of use of the vouchers, but also to avoid misuse of these vouchers, we collect various personal data. Categories of personal data:
Legal basis:
|
|
Facilitating your rights under the applicable personal data protection law To facilitate your request to exercise any of your rights to your personal data, subject to limitations and conditions imposed by applicable personal data protection law. Categories of personal data: All categories of your personal data, depending on your request. Legal basis:
Without your personal data, foodpanda would not be able to comply with our legal obligations in respect to facilitating or providing you with channels to exercise any of your rights in regard to your personal data. |
|
Legal claim In certain circumstances, we may need to use your personal data for purposes relating to legal claims, including, the establishment, exercising, compliance or defense of legal claims. Categories of personal data: All categories of your personal data, depending on your request. Legal basis:
|
|
Who we work with and where we process your data |
|
We never give your personal data to unauthorized third parties. However, as part of our work we obtain the services of selected service providers and give them limited and strictly monitored access to some of our personal data. Before we share personal data to these partner companies for processing on our behalf, each individual company undergoes an audit to ensure that all data recipients must meet the legal data protection requirements and prove their data protection level with appropriate proofs. Apart from the relevant service providers, we may also need to provide, disclose, or transfer your personal data to third parties, e.g., riders, restaurants, partners, and other third parties, as the case may be, to complete or fulfil the purposes of the processing of the personal data. The persons or juristic persons, which may be provided with your personal data, are, for example, as follows: |
|
Delivery Hero Group Within a group it is sometimes necessary to use resources effectively. In this context, we support each other within our Group in optimizing our processes. In this regard, your personal data may be transferred to other entities within our group which are located in a foreign country. Please see further details in relation to the cross-border transfer of the personal data below. For more information and any relevant questions in relation to the processing of your personal data between foodpanda and the Group, please contact: [email protected]. |
|
Service providers We use different service providers, i.e. data processors, in our daily processing for various purposes, as described in this Privacy Policy. These service providers include cloud service providers, SMS system providers, data warehouse providers, outsourced manpower, and other service providers which are involved in the processing of the personal data for the purposes prescribed therein. Such service providers will process your personal data in accordance with the requirements under the applicable personal data protection law, only according to our instructions and have no claims whatsoever to this personal data. We also monitor our processors and include only those who meet our high standards. Because we use different data processors and change them from time to time, it is not appropriate to identify specific recipients of personal information. However, if you are interested, we will be happy to disclose the name of the processor(s) in use at that time upon request. |
|
Third parties In addition to the service providers, i.e., data processors, we also work with third parties, to whom we also transmit your personal data, but who are not bound by our instructions. These are, for example, our consultants, lawyers or tax consultants who receive your personal data from us on the basis of a contract and process your personal data for legal reasons or to protect our own interests. We do not sell or rent your personal data to third parties under any circumstances, and this will never take place without your consent. |
|
Prosecuting authorities and legal proceedings Unfortunately, it can happen that a few of our customers and service providers do not behave fairly and want to harm us. In these cases, we are not only obliged to hand over personal data due to legal obligations, it is also in our interest to prevent damage and to enforce our claims and to reject unjustified claims. |
|
Government Agencies We may need to disclose your personal data to relevant government agencies, in order to comply with our legal obligations, including, without limitation, the Revenue Department for tax-related purposes, or as required by the competent authorities or court orders. |
|
Riders/Restaurants/Merchants In providing the services under foodpanda’s platforms, the personal data of the customers would generally be disclosed to relevant third parties, who are related to/involved in the services provided, in order to fulfil the orders, or services under foodpanda’s platform, and to manage complaints, and conduct other relevant activities, which may be related to the provision of our services, from time to time. Nevertheless, we recognize your privacy, and thus, we will minimize the data sharing with said persons. |
|
Social Media Fanpages We have profiles on various social media platforms on which we advertise our products and interact with customers. Since we operate these profiles on third-party platforms, each time you visit these social media channels the operators collect different personal data from you. Responsibilities: We and the respective operators of the social media platforms act as controllers, which means that each party shall be responsible and liable for their own processing activities. We therefore strongly recommend that you read and understand the information in relation to the processing of your personal data, which is conducted by the other data controllers as well. The social media platforms Facebook and Instagram are operated by Meta Platforms, Inc., Meta Platforms Ireland Limited or their affiliates. We are responsible for all interactions on our own platforms. The operators of the social media platforms themselves are data controllers for general interactions and interactions outside our profiles. An exception applies to the data processing described below for the usage analysis (page insights). The following links will show you exactly which personal data is collected by the respective social media operators: Data processing: For pages, Facebook provides page administrators with statistics and insights that help them understand the types of actions people take on their pages ("Page Insights"). When you visit or interact with a Page or its content, information such as the following may be collected and used to create Page Insights:
In general, we can view and collect said information in a form which may not be able to directly identify you, i.e., the data is generally shown in the form of statistics or a group of people. However, we may also access your personal data, such as your Facebook profile, for various purposes, e.g., managing, analysis, and other relevant purposes. Your data subject rights For all data processing on this website, we are solely responsible for processing your data in accordance with data protection regulations. We have determined that Facebook is primarily responsible for fulfilling its information obligations in connection with the Page Insight data and for ensuring that you exercise your rights under the applicable personal data protection law. For more information about your data subject rights on Facebook, please see Facebook's Page-Inside Privacy Policy. |
|
Cross-border Transfer of your personal data |
|
While we process your personal data mainly within the Asia-Pacific (APAC) region, however, there are certain circumstances in which we may transfer your personal data to other entities in the Delivery Hero SE Group, and some of our service providers and relevant third parties, as mentioned above, are based outside of APAC. All our data receivers have to meet certain requirements in order to transfer personal data to third countries. Before we transfer your data to a third party in a third country, every third party will firstly be assessed in regard to its level of data protection. Only if they can demonstrate an adequate level of data protection, will they be shortlisted as third parties. Notwithstanding the above, if your personal data needs to be transferred to another country which is located outside Thailand, which does not offer an adequate level of data protection, as required by the applicable personal data protection law, and we do not have any other legal grounds to transfer the personal data without your consent, we will notify you about such inadequacy, and obtain your consent prior to proceeding with any such transfer. Where your Personal Data will be transferred within our affiliates or group companies, foodpanda may use the data transfer mechanisms, i.e. binding corporate rules, which have been approved by the personal data protection commission. In any case, we will ensure that your personal data will be protected in accordance with the applicable personal data protection law. |
|
How long we store your data |
|
foodpanda will retain your personal data for as long as is required in order to fulfil the purposes as specified above, and for 10 (ten) years after the cessation of our contractual relationship, or our last contact/communication, unless otherwise required or permitted by applicable law. Generally where we rely on legal obligation to process your personal data, we will retain your personal data throughout the prescribed legal retention period, as stipulated under the applicable personal data protection law. |
|
Right of modification |
|
foodpanda may amend, change, or update this privacy policy from time to time, whereby foodpanda will notify you about such changes via your selected communication channel. In the event that the amendment, change, or update will affect the purposes for which your personal data has originally been collected, foodpanda will notify you about such changes, and obtain your consent (if applicable), prior to such changes becoming effective. |