Privacy Statement for Gift Cards Just Eat

This privacy statement applies to the processing of personal data of customers who make use of one of Just Eat Takeaway.com’s platforms and products, including order website, app, Takeaway Pay and Takeaway Pay Card (collectively, the “Services”). Unless otherwise stated, the data controller for processing these personal data is EAT.CH (hereinafter referred to as ‘’JET’’).

At JET we are committed to building the world’s greatest food community, and that begins with protecting the privacy of everyone in our community. This means that we’ll protect the personal information of all visitors that make use of our Services.

What personal data we process and why
Whenever you interact with JET via our Services we collect and process your personal data. JET may process your personal data for the following purposes.

  1. Ordering process

We process the personal data you provide to us when you place your order. This personal data is needed to execute your order, confirm your order, and to assess your order, payment, and a possible refund. The legal basis for this processing of personal data is that it is needed for the performance of a contract as defined in the GDPR. We process the following personal data in the ordering process:

  • Name
  • Address data
  • Contact data
  • Personal order message
  • Order and transaction data
  • Payment data
  1. Marketing

We also process your personal data to be able to send you (personalised) marketing messages. Such messages may include offers of JET products . The legal basis for this processing of personal data, as defined in the GDPR, is your consent provided during the ordering process unless your consent is not necessary according to the applicable law. Whenever you want to change your preferences with respect to receiving such messages and notifications, you can unsubscribe using the unsubscribe link in the messages, or via [email protected] We process the following personal data for marketing purposes:

  • Name
  • Address data
  • Contact data
  • Order and transaction data
  • Campaign data (optional)
  • DeviceID
  • Cookie and Technology data
  1. Cookies

JET uses cookies or similar technologies for functional, analytical, and marketing purposes. Data processed for cookie purposes defer per purpose (functional, analytical or marketing) and depend on the preferences set by you.

Please refer to our Cookie Statement for further information about our use of cookies and to set your preferences.

  1. Fraud prevention

We also process personal data to prevent fraud and other forms of misuse on and via our Services. The legal basis for this processing operation is that it is needed in pursuing a legitimate interest of JET (fraud prevention) as defined in the GDPR. Personal data processed for fraud prevention purposes are:

  • Name
  • Order and transaction data
  • Payment data
  • IP Address
  1. Analysis

JET uses your personal data to be able to meet our reporting obligations towards advertisers and to be able to improve our website and our range of products and services. The legal basis for this processing operation is that it is needed in pursuing a legitimate interest of JET (analysis & reporting) as defined in the GDPR. We will always make sure the reports do not contain any personal data so that the information cannot be traced back to you.

  1. Campaigns

JET may launch specific campaigns or contents in connection to its Services. If you wish to enter a JET campaign, JET will always ask you for your permission to process your personal data. The legal basis for this processing activity is your consent. You can always withdraw your consent by contacting us via the contact data provided to you within the campaign or by using our email [email protected]

JET processes the following personal data for campaigning purposes:

  • Name
  • Contact data
  • Order and transaction data (optional)
  • Campaign data (optional)
  1. Takeaway Pay and Takeaway Pay Card

We process personal data if you use your Takeaway Pay allowance to pay for an order you placed via our Services, when using the Takeaway Pay Card, to issue and ship the Takeaway Pay Card, and to provide you with the digital allowance. The legal basis for this processing by JET is that such processing is required for the performance of a contract as defined in the GDPR, in addition to any legal obligation or legitimate interest that we may have.

The following personal data may be processed in connection with Takeaway Pay and/or Takeaway Pay Card:

  • Name
  • Address data
  • Employment data (job role, department, contractual hours)
  • Contact data
  • Allowance data
  • Order and transaction data
  • Takeaway Pay Card information
  • Payment data

The Takeaway Pay Card is partnered with card issuing and card transaction services provider Adyen, which also qualifies as an independent cata controller. The processing of some of the above personal data by Adyen is covered by the Adyen's privacy statement, which can be viewed here Adyen’s privacy statement and we recommend you to read as this applies in addition to this privacy statement.

Additional purposes
We will only use your personal data for the purposes described above. If we want to use the data for a different purpose, we will take appropriate measures to inform you, consistent with the significance of the changes we make. Where required by applicable data protection law, we will obtain your consent.

Age
Our website is neither intended for persons aged under 16, and nor do we intend to collect personal data of website visitors who are aged under 16. However, we are unable to verify visitors’ age. We therefore advise parents to monitor their children's online activities, to prevent their personal data being collected without parental consent. If you feel that we have collected personal data of a minor without consent, please contact us via our email address [email protected] We will then proceed to erase this data.

Automated decision-making and profiling
In the performance of the contract with you and to improve our platform, JET uses automated decision-making and profiling. For example, JET uses your address data and/or location data to select available restaurants in your local area. We also use automated decision-making in complying with our legal obligations to prevent money laundering, terrorism financing, and other criminal offences.

When such automated decision-making and/or profiling leads to a negative decision about you, and you do not agree with it, you can contact us via our email address [email protected] We will then proceed to reassess the situation.

How long we store personal data for
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, tax, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

In some circumstances we may anonymise your personal data so that it can no longer be associated with you, in which case we may use such information without further notice to you.

If you have any questions on the way we retain your personal data you can contact us via our privacy form.

Sharing with others
JET may work with other companies within the JET group and other third parties in order to carry out the processing described above and/or to comply with legal obligations.

These group companies and third parties will process your personal data on behalf of us (as data processors) or as autonomous data controllers, and have access to your personal data for the purposes described in this privacy notice. We require group companies and third parties to protect your personal data in accordance with the standards set out in this privacy notice and we take appropriate measures pursuant to the applicable data protection law to guarantee the same level of protection and confidentiality. 

 

We will also share your data with other third party data controllers where appropriate or required by applicable law or regulation (including a court order) or where we believe disclosure is necessary to comply with legal obligations, to exercise, establish or defend legal rights or to protect the vital interests of any person. Such third party controllers may include law enforcement agencies.

 

We may also disclose your data to any company or prospective buyer of all or substantially all of our assets in connection with any sale or transfer of those assets.

Your personal data may be shared with the following parties:

  • JET’s affiliates, subsidiaries and/or group companies of JET
  • Software providers
  • Implementation partners
  • Payment and card service providers
  • Customer satisfaction survey firms
  • Loyalty shop partners (see section 5)
  • Professional advisors
  • Law enforcement, regulatory bodies and/or government agencies
  • Prospective buyers
  • Any other third party provided that you have given your consent to the disclosure

Third-party websites
Our website may include links to third-party websites. When accessing such third-party websites, bear in mind that each of these websites has its own privacy statement. Although JET takes great care in selecting websites to link to, we cannot take responsibility for the way in which they handle your personal data.

Where your data gets sent

We may transfer your personal data outside of the European Economic Area (EEA). This may include transferring it to or accessing it from other jurisdictions, including jurisdictions that may not provide a level of protection equivalent to the EU data protection laws. Where we transfer personal data outside the EEA we will take into account any applicable statutory obligations relevant to personal data transfers and, where there is no European Commission (EC) adequacy decision in place, we will rely on appropriate safeguards, including EC approved standard contractual clauses. We have implemented similar appropriate safeguards with our third party service providers and further data can be provided upon request.

Personal data rights, questions or complaints
We inform you that, with regard to the personal data, you can exercise the rights provided for by applicable data protection laws, which include: the right to request access to, rectification of, or erasure of personal data or restriction of processing, and to object to processing, the right to data portability, to withdraw your consent at any time (without prejudice to the lawfulness of the processing based on the consent given prior to the withdrawal) as well as to lodge a complaint with a supervisory authority.

To exercise your rights please contact us via our email address [email protected]

Regarding requests related to processing or sharing of personal data related to Takeaway Pay and/or Takeaway Pay Card, please contact the person that grants you the Takeaway Pay allowance (which might be your employer, business partner etc.). This is required because JET and the person that grants you the allowance have a separate responsibility with respect to the processing of your personal data.

If you have any other questions or complaints about the processing of your personal data, we will be happy to talk to you. We would also like to hear from you if you have tips or suggestions on how to improve our privacy policy.

Security
JET takes personal data protection very seriously and we therefore take appropriate measures to protect your personal data against misuse, loss, unauthorised access, unwanted disclosure, and unauthorised alteration. If you feel that your personal data are not adequately protected or there are indications of misuse, please contact us on: [email protected]

Data Protection Authority
Besides the option of lodging a complaint with us, you have the right to lodge a complaint with the relevant supervisory authority for the protection of personal data. To do so, contact the supervisory authority directly.

How to contact us
If you have any questions or concerns about this Privacy Statement and/or our privacy practices, please contact us [email protected]

Just Eat Takeaway.com Grou DPO

Privacy Council - Takeaway.com Group B.V.

 Oosterdoksstraat 80

1011 DK Amsterdam

The Netherlands

Updates to this privacy Statement
We may update this privacy Statement from time to time in response to changing legal, technical or business developments. When we update our privacy Statement, we will take appropriate measures to inform you, consistent with the significance of the changes we make. Where required by applicable data protection law, we will obtain your consent to any material

changes to this privacy Statement.We encourage you to periodically review this Statement for the latest information on our privacy practices.

This privacy statement may be updated and was last updated on 21-10-2021.