Scralett (here in after “we”, “the Company”) thank you for your visit to the website. On this page “Privacy Policy” we inform you about the data we process and store and how we use this data. This privacy policy does not apply to third party hyperlinks and you should consult their relevant page. By accepting the privacy policy, you agree to the collection, processing and use of personal data by the Company, in accordance with the General Regulation for the Protection of Personal Data (GDPR).

 

 

 

Location permission access in the background

 

Scralett application uses location access in the background to prevent interruption of the route update between the user and the delivery partner in the event that another application is activated on the user’s device.

 

Scralett uses site access to the foreground to properly authenticate the user’s location on the map and find the optimal route between user and delivery partner.

 

iOS and Android applications have access to the site in the background and in the foreground.

 

This function is essential in the foreground for the correct certification of the user’s location on the map and finding the optimal route between user and delivery partner.

 

This function is necessary in the background so as not to interrupt the route update between the user and the delivery partner in case another application is activated on the user’s device, eg if the phone rings and the user responds to continue transmitting location data.

 

Privacy Policy Officer

 

The Privacy Policy Officer is the natural or legal person, public authority, service or any other body that alone or jointly with others determines the manner of processing personal data.

The details of the Responsible Privacy Policy are:

On demand delivery

Email: hello@devpap.co.uk

If you wish to object to the collection, processing or use of your personal data by the Company, you may contact the Privacy Policy Officer by sending a message to hello@devpap.co.uk. If you object to the collection of your data, the service may no longer be available to you for technical reasons.

 

User rights

 

Right to receive specific information about the information that the Company has stored for you.

Right to refuse processing. The right to withdraw consent for the processing of personal data.

 

Right of Access. The right to know what personal data we collect and how it is processed.

Right to correct personal data. The right to update personal data in the database.

Right to oblivion. The right to delete all personal data

Right to restrict processing. The right to restrict the processing of personal data.

Right to portability. The right to transfer data in editable form.

The right to file a complaint against the Company to the Personal Data Protection Authority or any other authority designated by the Greek State or any supervisory authority for the personal data of an EU Member State.

 

 

 

Data processing

 

We collect, process, store and sometimes share personal data so that we can provide services. Below you will find what data we need for each case and when we share it with third parties. Personal data is information that can directly or indirectly lead to the identification of a person, first and last name, address, telephone, date of birth, location information or e-mail address.

 

The data we collect:

 

Personal information we collect when you visit the website.

When you visit the website, but you do not register and do not order as a visitor. This information is collected to inform you about the visit to the website.

We collect the following data:

Device data,

Device ID,

operating system and version running the device or other device IDs.

Login details,

Time, date,

duration of visit,

place of origin of the user,

network address (IP Address) and other data related to the connection protocol.

 

Personal information we collect when you visit and register on the website:

We collect data based on the principle of processing minimal personal data. The data collected and processed for specific purposes.

 

If you have logged in to the account to be informed about the orders, we collect the following:

-Access data,

Username,

User ID

Device Code-Data,

Device ID,

Operating system and version running the device or other device IDs.

-Connection elements,

Time, date,

duration of visit,

place of origin of the user,

network address (IP Address) and other data related to the connection protocol.

-Contact info,

Comments,

evaluation or contact data (eg emails)

-Other information,

Data that you voluntarily provide when you visit the website or use the application or other related activities, or data from sources, social networks (social media or public or inaccessible databases (eg user ID on this or that other platforms)

-Providing personal data on behalf of a third party. You must have obtained the consent of the third party before disclosing his data to us. These individuals must be informed of this privacy policy.

 

The data we collect:

 

Personal information we collect when you visit the website.

When you visit the website, but you do not register and do not order as a visitor. This information is collected to inform you about the visit to the website.

We collect the following data:

Device data,

Device ID,

operating system and version running the device or other device IDs.

Login details,

Time, date,

duration of visit,

place of origin of the user,

network address (IP Address) and other data related to the connection protocol.

 

Personal information we collect when you visit and register on the website:

We collect data based on the principle of processing minimal personal data. The data collected and processed for specific purposes.

 

If you have logged in to the account to be informed about the orders, we collect the following:

-Access data,

Username,

User ID

Device Code-Data,

Device ID,

Operating system and version running the device or other device IDs.

-Connection elements,

Time, date,

duration of visit,

place of origin of the user,

network address (IP Address) and other data related to the connection protocol.

-Contact info,

Comments,

evaluation or contact data (eg emails)

-Other information,

Data that you voluntarily provide when you visit the website or use the application or other related activities, or data from sources, social networks (social media or public or inaccessible databases (eg user ID on this or that other platforms)

-Providing personal data on behalf of a third party. You must have obtained the consent of the third party before disclosing his data to us. These individuals must be informed of this privacy policy.

 

Personal information we collect when you visit, register and order on the website:

The more information you provide, the more data we collect to provide offers and discounts. The fields that are necessary for the processing of your order have been marked as mandatory. All other information that is not marked as mandatory remains optional.

The information is as follows:

Access data

Username

User ID,

Code

Account Details (required for delivery services) Name, Surname, Company (optional), Address, Telephone and e-mail address Contact details

Comments, rating or comments,

communication data

Login details

Time, date, duration of the visit, place of origin of the user, network address (IP Address) and other data related to the connection protocol.

Device data,

Device ID, operating system and version running the device or other device IDs, location information.

Order Details

Order history

Other information

Data that you provide of your own free will when you visit the website, use the application or do related activities.

Reason for data processing and legal coverage.

As we have already informed you above, we collect personal data when this is absolutely necessary and the reason is legal.

 

Customer service

When you contact Customer Service in writing to receive information or to make complaints, we store the information you provide to us. Depending on the reason you called us, the personal data we will store may differ.

Categories of personal data:

Account information

Access Details

Contact info

Other information

Reasons for data collection based on Law

The information is required to fulfill the obligation to deliver food to you. It is in the interest of our business to offer you the best packaged dining experience.

Order and Delivery Procedures

After completing your order, some functions run in parallel. We link your order to your account, depending on whether you made it as a visitor or as an online user.

 

 

 

Safety and protection

 

In order to protect our services, we must collect personal data that helps us identify potential threats and thus avoid potential risks. We also believe that we have informed you about the privacy policy and that it has been made available to you.

Categories of personal data:

Login Details

Access Details

Reasons for data collection based on Law

We are obliged to protect your personal data on the basis of law and to protect the interests of our company on the basis of legitimate interest. Further elaboration for the protection of legitimate interests. In addition to the above reasons, it is possible to process your personal data to protect the legitimate interests of the company. For example, it is legal to transfer and process data within the same group of companies for information systems security purposes or indirect sales promotion activities. We use your personal data to protect our legitimate interests, to the fullest extent permitted by your rights and freedoms. Only if we can reasonably assume and be confident that we can protect your personal data from any risk will we process it based on the legitimate interests of our company. These processes include: Promotion: You will receive emails with discounts and promotions, polls and opinion polls to improve our service. You have the right to refuse the messages you receive. In case you wish to state your refusal to process your data for advertising purposes or if you wish more information on the matter you can contact the Data Protection Officer by sending an email directly to hello@devpap.co.uk

Change in the ownership status of the Company. We would also like to inform you that in case of merger or acquisition by another company, we will share information with this company. Of course, we will require the company to comply with your current privacy policy and you will receive a message to confirm in the event of a change. Other Data from sources, social networks (social media or public or inaccessible databases (eg user identity on this or other platforms) Data on the evolution of Quality Control.

In order to offer better services, we try to evaluate the marketing promotion. For this reason, we analyze, for example, whether the sent newsletters are opened and whether the contents are selected. When your data is deleted. Your data is deleted after the purpose for which we collected it has been completed. Deletion rules are described in the definitions of periodic deletion. Different rules apply depending on the purpose of the processing. For each category mentioned in the definitions of periodic deletion we have defined different deletion periods. The data collected shall indicate the deletion period that applies. When the storage period is over, the data is deleted.

Deleting your personal data at your own request. We delete your personal data as soon as three (3) years have passed since their collection. If your account remains inactive for three (3) years, we will delete your account as well. Before this happens, you will receive a notification from us at the email address you provided.

 

Upon your request to delete your data, we may retain some processed data, due to legal obligations. In this case, the data will not be used for any other purpose. For example, tax records must be kept for a period of at least 5 years. These special mandatory retention periods vary depending on the applicable national legislation. Who do we share personal data with?

Below is information on when to whom and under what conditions we transfer data. In addition, we inform you transparently about the countries where the data may be transferred. Third parties with the right of access to personal data. We will never transfer your data to unauthorized third parties. However, in order to provide you with our services, we in turn purchase services from specific third party service providers, to whom we give strict and limited access to certain data. In any case, before we transfer any item to a company with which we work, we check each independent company. All recipients of the data must comply with the data protection obligations and prove the level of security

 

 

 

Data Recipients:

 

External service provider. As we have informed you above, we do not share your data only with companies of the Scralettgroup, but also with third party external service providers. This is done to support the business functions to optimize product promotion, but also to provide personalized advertising, applications and IT infrastructure and other business functions, such as identification and problem solving. We would like to inform you adequately and fairly, that some employees working for other companies that work with Scralettmay have limited access to customer data. These companies may be dealing with newsletters or any promotion, marketing information and access to customer data will be completely restricted and controlled. In which countries do we process personal data? We process data mainly within the European Union (EU) and the Single Economic Area (EEA). However, some of the service providers we work with are based outside the EU and the EEA. The GDPR has high requirements for the transfer of personal data to third countries. All recipients of the data must comply with these requirements. Before transferring data to a service provider in third countries, we first evaluate that provider for the level of data protection it offers. Only if they can demonstrate an adequate level of personal data protection can they be shortlisted to be selected as service providers. Whether the service providers are based in the EU / EEA or in third countries, each service provider must sign a data processing agreement with us. Non-EU and EEA service providers must meet additional criteria. Pursuant to Article 44 et seq. Of the GBER, personal data may be transferred to data processing service providers, provided that the following criteria are met: Data protection terms have been adopted: These are contractual terms of mandatory law, which cannot be amended by the parties and which undertake to provide an adequate level of data protection.- Certified security mechanism: Under international treaties, companies can be certified according to specific criteria. One of these certifications is the EU-US Privacy Shield Agreement. At the following link you can find certified companies: https://www.privacyshield.gov/welcome We will only transfer data to service providers that meet at least one of the above criteria. The third countries we usually transfer data to are usually the US and Israel.

 

 

 

Information about cookies

 

Cookies are important for the smooth operation of the website and the applications of the company and for the improvement of your online experience. By gaining access to the company’s website and applications, you also accept the use of cookies. Like most companies, On demand delivery. uses “cookies” to improve the experience of the visitors of the Website. Cookies are small files, which consist of a series of letters and numbers and which are placed by web servers. They help the owner to distinguish you from other users of the website. Cookies may not be executed as passwords or used to transmit viruses and may not give us access to your hard drive. We can not read any information from your hard drive even if we store cookies there. On the Website we use cookies to manage logins, to provide personalized websites and to customize advertising and other content to reflect your particular needs and interests. Cookies can also be used to compile anonymous, aggregate statistics that allow us to understand how the public uses our website and help to improve its structure and content. We cannot verify your personal identity from this information.

You can modify your browser settings to reject some or all cookies. Be aware that some features are only available through the use of cookies and if you choose to opt out of cookies, these features may not be available. Some of the cookies we use are absolutely necessary. These are essential for the proper functioning of the website and allow you to browse and use its functions. The required cookies do not recognize your personal identity. Without them, however, we can not offer effective operation of our website. In addition to the necessary cookies, there are also performance cookies. These cookies collect information about how visitors use the website, for example, which pages they visit most often and whether they receive error messages from websites. These cookies collect aggregate, anonymous information that does not identify a visitor. They are used exclusively to improve the performance of a website. We also use functionality cookies. These cookies allow the Website to remember the user’s choices such as name, language or region to provide enhanced and personalized features. They can also be used to provide user-requested services, such as video viewing or social media use. The information collected by these cookies may be anonymous and it is not possible to track browsing activity on other websites. If you do not accept these cookies, the performance and functionality of the Website may be affected and your access to its content may be restricted. If you continue to use this website, this will constitute your consent to the use of cookies.

Some of these are deleted after the end of the session in the browser, the so-called session cookies or session cookies. Google AdWords advertising service clients and we use the “conversion tracking” service. It is a data analysis service provided by Google Inc., based in the USA (1600 Amphitheater Parkway, Mountain View, CA 94043, USA. For the sake of brevity “Google”). If you visit the website through a Google ad, the service will place a cookie on the device (called a “conversion cookie – performance cookie”). This cookie will expire in 30 days and is not for personal identification. If the cookie has not expired when you visit specific pages, we and Google can identify if someone has selected the website and has been redirected to the website. Each advertiser receives a different cookie. For this reason cookies can not register websites of advertisers. The information collected by conversion cookies is used to extract statistics for AdWords service customers who have actively chosen to participate in the conversion tracking service.

 

Advertisers have access to the total number of users who selected this ad and were taken to a page with a “conversion tracking tag”. However, they do not receive information that could lead to user identification. If you do not wish to participate in the tracking, you can refuse consent to the use of cookies – for example, in the browser settings you can turn off automatic cookies. You can disable the use of cookies for the “conversion tracking” service by setting the browser to refuse to receive block cookies from the domain name “googleadservices.com”. The use of the Website is usually transmitted and stored by Google on a server located in the USA. The anonymization service has been activated on our websites, so that the address of Google users in the Member States of the European Union or other countries that have signed the Treaty on European Economic Area is abbreviated before being transferred. Only in exceptional cases is the full address sent to a Google server in the US and abbreviated there. Google will use information on our behalf to evaluate the use of the website and to generate reports on the use of the website and the use of the internet. The IP address provided by Google Analytics as part of the overall operation of the service will not be merged with any other data processed by Google. You can configure the browser so that cookies are not stored, in which case we must inform you that you may not be able to use the services of the website to the fullest extent. You can prevent Google from collecting and editing the use of the Website (including IP address) by installing the add-on browser available at the following link: http://tools.google.com/dlpage/gaoptout?hl=enBing We use the “conversion tracking” service, which is provided by the company under the name “Microsoft Corporation”, based in the USA (One Microsoft Way, Redmond, WA 98052-6399, USA and for the sake of brevity “Microsoft”). When you visit the website through a Bing ad, Microsoft Bing Ads installs a cookie on the device. This will allow Microsoft Bing and us to identify whoever chose an ad and was taken to the site. We only have access to the total number of users who opted for a Bing ad and were taken to the page. User personal information is not available. If you do not wish to participate in the tracking service, you can refuse the installation of the relevant cookie, for example through the browser settings, which generally disables the automatic installation of Criteo and Mediaplex cookies. We use technologies provided by Criteo SA, based in France (32 Rue Blanche, 75009 Paris, France; “Criteo”) and Conversant Inc., based in the USA (30699 Russell Ranch Road # 250, Westlake Village, CA). 91362, USA; “Conversant”). We collect and store information concerning the browsing habits of website visitors for the purpose of promoting products (marketing) in an anonymous form. This information is stored on the computer in the form of text files known as “cookies”. Using algorithms, Criteo and Conversant analyze browsing behavior and offer targeted product advertising services with customized banner advertising on websites (known as publishers). In no case can such data be used to personally identify website visitors. The stored data will only be used to improve supply. The data is not disclosed to third parties, nor is it used for any other purpose. You can choose not to participate in the completely anonymous browsing data analysis by following the following link for Criteo http://www.criteo.com/privacy in terms of hosting and Conversant at http: //www.conversantmedia .com / opt-out click. For more information about Criteo technology, you can visit the Criteo privacy policy (http://www.criteo.com/en-GB/privacypolicy) for Conversant by clicking the following link: http: // www .conversantmedia.com / mediaplex. Facebook’s targeting service

We use the Facebook Inc. (US-based 1601 S. California Ave., Palo Alto, CA 94304, USA) website targeting retargeting tool. If you already have a Facebook account and can be identified through Facebook cookies, this tool will create a non-personal checksum file, which will be transmitted to Facebook for analysis and product promotion (analysis and marketing purposes). On the other hand, we encrypt the email address and send it encrypted to Facebook. Through the recognition offered by cookies and the transmission of encrypted information, Facebook has the ability to provide targeted product suggestions and personalized ads that appear on Facebook. You can refuse to use the service if you visit the following address: https: // www. facebook.com/ads/website_custom_audiences. HotjarThe website uses the Malta-based internet data analysis service Hotjar Ltd (St Julian’s Business Center, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta; hereinafter referred to as “Hotjar”). Captures randomly selected conversations between users and the website anonymously. This creates a protocol that records cursor movements and clicks that take place on the website. The purpose of this protocol is to find ways to improve the relevant website. In order to assure that any personal relevant report will not be part of this protocol, the IP addresses used are anonymously stored and processed. In addition, statistical research is performed on the operating system, the browser, the incoming and outgoing links