Privacy Policy
Effective Date: From August 1. 2024.
1. Introduction
Quickpick offers a pre-ordering platform that allows you to order food from your favourite restaurants. This Privacy Policy explains how we collect, use, protect, and share information about you, the user, when you use our Quickpick application and services.
2. Data Controller
B-CONSULT 2000 Kft.
Company Registration Number: 13 09 215950
Address: 2083 Solymár, Hóvirág utca 51.
email: support@quickpickeats.com
3. Information We Collect
3.1 Registration and Log In
When you create a new user account, you will be asked to provide basic information. This is necessary as we cannot create a user profile without this information. Your email address is particularly important as we can use this information to identify you in our system the next time you wish to log in again. Every time you wish to log in, you’ll be sent an one-time identification code to your email address that needs to be pasted in the right field on our platform.
Basic information we ask for:
-
Name
-
Birthday
-
user ID
-
user name
-
e-mail address
-
picture (optional)
Legal basis:
Performance of a contract [Article 6(1)(b) GDPR] in case of mandatory data
Consent [Art. 6(1)(a) GDPR] in case of subscription to a newsletter
Processing of data during the registration process will only take place if you have accepted the necessary legal documents.
3.2. Ordering Process
Quickpick processes personal data that the user transmits to Quickpick when placing an order with a Partner in the Quickpick app or associated online services. This personal data is required to execute the order, to transmit it to the Partner and to have it confirmed by the Partner. This data is also used to evaluate complaints about the order, payment and refunds.
The following personal data is processed as part of the ordering process:
-
Name
-
Contact details
-
Order details
-
Comments on the order
-
Payment data
-
Data required to produce an invoice when required by the country’s laws:
-
Name
-
Address
-
-
Device data and access data when using a website: information about the internet connection (IP address), user device (type of application, operating system, software manufacturer or version)
-
Device and access data when using an Application: Device ID, unique device ID, operating system and corresponding versions, access time, configuration settings
Legal basis:
Contract performance [Article 6(1)(b) GDPR]
Legitimate interest [Article 6(1)(f) GDPR] for device and access data
The personal data will only be disclosed by Quickpick to third parties in the context of delivery, payment or in the context of legal authorisations and obligations towards legal advisors and authorities. The data will only be processed in third countries if this is necessary for the fulfillment of the contract (e.g. at the user's request for delivery or payment).
3.3 Contact with Customer Service
When contacting Quickpick customer service (e.g. by contact form, email, telephone or via social media), the personal data transmitted will be used to fully process the question or complaint. The user's details may be stored in a customer relationship management system ("CRM system") or comparable enquiry organization.
The following personal data is processed as part of the customer service enquiry:
-
Name
-
Address data (if required)
-
Contact details
-
Comments (if required)
-
Communication data
The lawfulness for this processing of personal data is that the user declares consent for this processing within the meaning of Art 6 para 1 lit a) GDPR by submitting an evaluation.
Enquiries are deleted immediately if they are no longer required. Quickpick reviews the necessity every two years. Furthermore, the statutory archiving obligations apply.
3.4. Ratings
Quickpick processes personal data that the user submits to Quickpick as part of a review of the Partners in the Quickpick app or associated online services. The following personal data is processed when a review is submitted:
-
Name
-
Rating
The lawfulness of this processing of personal data follows from the user's consent to this processing within the meaning of Art. 6 para. 1 lit a) GDPR and is declared by submitting a rating.
The consent can be revoked at any time in accordance with Art. 7 para. 3 GDPR by written notification to the address of Quickpick or by e-mail to support@quickpickeats.com.
Quickpick may integrate the services of Google Inc. as rating provider. The provider may process customer data that may include, in particular, IP addresses and device information data of users, which, however, are not collected without their consent (usually as part of the settings of their mobile devices). The data may be processed in the USA. Privacy Policy: https://www.google.com/policies/privacy/
3.5. Advertising
Quickpick processes personal data in order to be able to send personalized advertising messages and notifications. These include news and promotions about existing and new Partners and are sent by push messages, notifications and other forms of electronic delivery.
Quickpick processes the following personal data for advertising purposes:
-
Name
-
Contact details
-
The lawfulness of this processing of personal data is based on the user's consent to this processing within the meaning of Art. 6 (1) (a) GDPR as part of the ordering process and Quickpick's legitimate interest in direct advertising in accordance with Art. 6 (1) (f) GDPR. The user has the right to revoke the consent given in accordance with Art. 7 para. 3 GDPR with effect for the future at any time by written notification to the Quickpick address or by e-mail to support@quickpickeats.com
3.6. Web Hosting
The hosting services utilised by Quickpick serve to provide the following services: Infrastructure and platform services, computing capacity, storage space and database services, e-mail dispatch, security services and technical maintenance services that Quickpick uses for the purpose of operating this online Platform.
In doing so, Quickpick or its hosting provider processes inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors on the basis of its legitimate interest in an efficient and secure provision of this online Platform in accordance with Art. 6 Para. 1 lit. f) GDPR in conjunction with. Art. 28 GDPR (conclusion of order processing contract).
3.7. Collection of access data
Quickpick or its hosting provider collects data about every access to the server on which this service is located (so-called server log files) on the basis of its legitimate interests within the meaning of Art. 6 para. 1 lit. f) GDPR. The access data includes the name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider.
Log file information is stored for security reasons (e.g. to investigate misuse or fraud) for a maximum of 7 days and then deleted. Data whose further storage is required for evidence purposes is excluded from deletion until the respective incident has been finally clarified.
3.8. Fraud Prevention
Quickpick also processes personal data to prevent fraud and other forms of misuse. This is a legitimate interest within the meaning of Art 6 para 1 lit f) GDPR.
3.9. Analytics
Quickpick also processes personal data in order to fulfill its reporting obligations to advertisers and business partners and to improve the Quickpick Platform and its associated online services as well as the range of products and services. The analysis & reporting represents a legitimate interest of Quickpick within the meaning of Art 6 para 1 lit f) GDPR. In doing so, Quickpick ensures that the analysis & reporting does not contain any data that can be traced back to the person of the user.
3.10. Data processing
Quickpick processes data in the context of administrative tasks and organization of its operations, financial accounting and compliance with legal obligations, such as archiving. In doing so, Quickpick processes the same data that Quickpick processes as part of the provision of its contractual services. The processing bases are Art. 6 para. 1 lit. c) GDPR, Art. 6 para. 1 lit. f) GDPR. Users, interested parties, business partners and website visitors are affected by the processing. The purpose and interest of Quickpick in the processing lies in the administration, financial accounting, office organization, archiving of data, i.e. tasks that serve to maintain its business activities, perform its tasks and provide its services. The deletion of data with regard to contractual services and contractual communication corresponds to the information mentioned in these processing activities.
Furthermore, Quickpick stores information on suppliers and other business partners on the basis of its business interests, e.g. for the purpose of making contact at a later date. This mainly company-related data is always stored permanently.
3.11. Social media presence
Quickpick maintains online presences within social networks and platforms in order to communicate with the customers, interested parties and users active there and to inform them about Quickpick's services. When accessing the respective networks and platforms, the terms and conditions and data processing guidelines of their respective operators apply.
Unless otherwise stated in the privacy policy, Quickpick processes users' data if they communicate with it within the social networks and platforms, e.g. write posts on Quickpick’s online presence or send it messages.
3.12. Maps
Quickpick integrates the maps of the:
-
"Apple Maps" service of the provider Apple Inc. The processed data may include, in particular, IP addresses and location data of users, which, however, are not collected without their consent (usually as part of the settings of their mobile devices). The data may be processed in the USA. Privacy Policy: https://www.apple.com/legal/privacy/
-
“Mapbox” service of the provider Mapbox. The processed data may include, in particular, IP addresses and location data of users, which, however, are not collected without their consent (usually as part of the settings of their mobile devices). The data may be processed in the USA. Privacy Policy: https://www.mapbox.com/legal/privacy
3.13. Transferring of data to 3rd parties
If Quickpick discloses personal data to other persons and companies (processors or third parties) in the course of processing, transmits it to them or otherwise grants them access to the data, this is only done on the basis of a legal authorisation (e.g. if a transfer of the data to third parties, such as to payment service providers, is necessary for the fulfillment of the contract in accordance with Art. 6 para. 1 lit. b) GDPR), the user has consented, a legal obligation provides for this or on the basis of Quickpick’s legitimate interests (e.g. when using agents, web hosts, etc.).
If Quickpick commissions third parties to process data on the basis of a so-called "order processing contract", this is done on the basis of Art. 28 GDPR.
3.14. Partners
Quickpick passes on personal data to the Partners from which the user orders in the Quickpick App so that the Partner can deliver the Order of the Customer. Since the Customer is a direct user of the Partner, they have their own responsibility and obligations with regard to the processing of personal data.
4. How We Use Your Information
a. To Provide Our Services: Processing orders, payments, and communication about the service.
b. For Improvement and Development: Analyzing how our service is used to improve and tailor it to user preferences.
c. For Security and Legal Compliance: Ensuring the security of our service and complying with legal obligations.
5. Sharing of Your Information
a. With Restaurants: To fulfill your food orders.
b. Service Providers: Payment processors and other service providers who work on our behalf.
c. Legal Requirements: If required by law or to protect our rights.
6. Your Rights Under GDPR
You have the right to access, rectify, delete, restrict, or object to our processing of your data. You also have the right to data portability and to withdraw consent at any time.
7. Data Security
We implement strong security measures to protect your data from unauthorized access, alteration, disclosure, or destruction.
8. Data Retention
Your personal data is only retained for as long as necessary to provide you with our services and as required by legal obligations.
9. Changes to This Privacy Policy
We may update this policy from time to time. We will notify you of any changes by posting the new policy on this page.
10. Contact Us
For questions about this Privacy Policy or your personal data, please contact us at support@quickpickeats.com
11. Lodging a Complaint
If the User believes that our processing of personal data is not in compliance with the applicable data processing rules, the User may lodge a complaint with the local data protection supervisory authority. The Hungarian data protection supervisory authority is the National Authority for Data Protection and Freedom of Information, whose contact details are as follows:
Address for correspondence: 1363 Budapest, PO Box 9.
E-mail address: ugyfelszolgalat@naih.hu
Website: https://naih.hu/
Phone number: +36 (1) 391 1400.
As a data subject, you may take legal action against the controller in the event of a breach of your rights. The Hungarian court will rule on the case out of turn, and the lawsuit concerning the protection of personal data is free of charge.