1.1 Data Controller
In accordance with Article 13 of the EU General Data Protection Regulation (GDPR), we would like to inform you below about how Vapiano processes your data.
1.2 Storage Pilot
Your data will generally only be stored for as long as necessary to fulfil a specific purpose and deleted as soon as this purpose no longer exists. Alternatively, your data shall be deleted at the end of any statutory retention periods.
1.3 Transfer of data to third parties
Your data shall be transferred within our corporate group to departments like VAPIANO International Marketing GmbH (VIM), which is responsible for marketing and the PEOPLE programme. In such cases, your data shall either be transferred with your permission in accordance with Article 6.1 a) of the GDPR, on the basis of a legitimate interest in accordance with Article 6.1 f) of the GDPR, or on the basis of Article 28 of the GDPR. In order to run the VAPIANO PEOPLE programme, your data shall be transferred to all participating restaurants and subsidiaries within The United Kingdom in accordance with Article 6.1 b) of the GDPR. VAPIANO shall only share your personal data with third parties like tax authorities, banks, courts and law enforcement agencies if we are obliged to do so to fulfil statutory requirements in accordance with Article 6.1
Iif you have given us your consent in accordance with Article 6.1 a) of the GDPR, or if VAPIANO has a legitimate interest in doing so.
If our service providers are commissioned to process data, this shall only be transferred to them in accordance with Article 28 of the GDPR, so that we may provide our services.
Visitor details shall not be forwarded to address brokers or other organisations for promotional purposes.
We may have received your information (name, email address, phone number, date and time of booking) through a third party booking site, such as Collins, Design My Night. Their individual privacy policies, including how they process your data, are available on their websites and you will always be asked when you book through them about passing your information on to us, and if you want to be added to our mailing list.
1.4 Transfer of data to third countries
We shall transfer some personal data to third countries outside the EU; when doing so, we must ensure an appropriate level of data protection:
We ensure an appropriate level of data protection by observing the EU-US Privacy Shield (Article 45.1 of the GDPR), concluding EU standard contractual clauses and acknowledging the EU resolution for an appropriate level of data protection.
You have the option of subscribing to our free newsletter on our website. Our newsletter informs you about the latest offers, exciting specials and news from the world of VAPIANO and may contain vouchers. If you are not yet a VAPIANO PEOPLE member but have subscribed to the VAPIANO newsletter, we will process your name and email address if you provide us with these details during registration. If you are a VAPIANO PEOPLE member and have subscribed to the newsletter, we will process your name and email address. Once you submit the registration form, you will receive a confirmation email from us. Your subscription will only be activated once you have clicked on the link in the confirmation email. Data shall be processed with your consent in accordance with Article 6.1 a) of the GDPR.
By signing up to our newsletter, you acknowledge that we shall process and analyse the time you open links and which features you view, in order to constantly improve the newsletter and tailor it to your needs. In addition to the newsletter subscription, we occasionally let you participate in competitions (see“Competitions” below).
You may unsubscribe from the newsletter at any time by using the unsubscribe function in the PEOPLE area, following the unsubscribe link at the bottom of every email, writing to us at people-support(at)vapiano.co.uk or sending a letter to VAPIANO International Marketing GmbH, Im Zollhafen 2-4, D – 50678 Köln. Your data shall be processed legally until you revoke your consent.
2. Website – uk.vapiano.com
We would like to inform you below about how we process data on our website.
2.1 Sorage of IP address
We shall use the information we receive and save when you visit our websites exclusively for internal purposes and to improve the design of our websites. Where necessary to avert attacks that might negatively affect the functionality of our website (hacker attacks, trojans, denial of service attacks, spam), we shall only have access to your computer’s IP address for this purpose as a single instance, and our telecommunications service provider shall save this information for seven days for the security reasons defined in Section 100 Clause 1 of the German Telecommunications Act (TKG). The legal grounds for this is Article 6.1 f) of the GDPR.