Privacy & cookies

Privacy policy Karma Kebab

Scope

Eat Karma BV, Johan Huizingalaan 763A, Amsterdam, The Netherlands, with which you enter into contracts, is responsible for the collection, use, disclosure, storage and protection of your personal data in accordance with applicable national laws. Karma Kebab, as the data controller, is always meant whenever this Privacy Policy refers to "we" or "us/our".

This Privacy Policy & Cookiestatement applies to all Karma Kebab websites, applications, services or tools (collectively, "Services") to which this Privacy Policy applies, regardless of how you access or use them, such as via mobile devices. We may change this Privacy Policy at any time by posting the changed version, including the effective date, on this website. We will notify you by email of any changes to this Privacy Policy. This privacy & cookie statement is effective from March 28, 2020.

Personal information we collect

We collect personal information from you and any devices (including mobile devices) you use when you: use our Services, register for an account with us, update or add information to your account, or when you otherwise correspond with us. We may also collect personal information from other sources, as described below.

Personal information you give us when you use our Services or register for an account with us

  • Identifying information such as your name, addresses, telephone numbers or email addresses when you register for an account with us.

  • Other content that you generate, or that is connected to your account (such as order history, status (active, paused, stopped), referrals or acquisition channel).

  • Financial information (such as credit card or bank account numbers) in connection with a transaction.

  • Shipping information, such as name and address, delivery information.

  • In some instances, when you use our Services, you may provide age, gender, interests, gift card personal message, and favorites.

  • You may also provide us other information through a web form, by updating or adding information to your account, chats, dispute resolution or when you otherwise communicate with us regarding our Services.

Personal information we collect automatically when you use our Services or register for an account with us

  • We collect information about your interaction with our Services, your advertising preferences and your communications with us. This is information we receive from devices (including mobile devices) you use when you access our Services.

  • Computer and connection information such as statistics on your page views, traffic to and from the sites, referral URL, ad data, your IP address, your browsing history and your web log information.

Personal information we collect using cookies and similar technologies

  • We use cookies, web beacons, unique identifiers and similar technologies to collect information about the pages you view, the links you click and other actions you take when using our Services, within our advertising or email content

  • For more information about our use of these technologies, and how to control them, see Cookies and Similar Technologies.

Personal information collected from other sources

  • We supplement the personal information we collect directly with information collected from third parties and add it to your account information. For example, we collect and use demographic and other information that is publicly available,

  • If you give us personal information about someone else, you must do so only with that person’s authorisation. You should inform them how we collect, use, disclose, and retain their personal information according to our privacy notice.

How we use your personal information

We use the personal information we collect from you for a range of different business purposes and according to different legal bases of processing. The following is a summary of how and according to which legal bases we use your personal information.

We use your personal information to fulfil a contract with you and provide you with our Services, to comply with our legal obligation, protect your vital interest, or as may be required for the public good. This includes:

  • the delivery of the flowers and/or vases ordered by you. In order to ensure the smooth delivery and delivery of your order, we pass on your personal data, such as your address and telephone number, to the transport service providers cooperating with us.

  • To provide payment processing and account management, operate, measure and improve our Services and to keep our Services safe, secure and operational.

  • To contact you regarding your account, to troubleshoot problems with your account, to resolve a dispute, to collect fees or monies owed or as otherwise necessary to provide you customer service.

    • When contacting you for such purposes as outlined above, we may contact you via email and SMS/text messages.

    • When contacting you via telephone, to ensure efficiency, we may use autodialed or pre-recorded calls and text messages as described in our Terms and Conditions. Message and data rates may apply.

  • To provide other services requested by you as described when we collect the information.

  • To prevent, detect, mitigate, and investigate fraud, security breaches or other potentially prohibited or illegal activities.

  • To enforce our Terms and Conditions, this privacy notice, or other policies.

We use your personal information to pursue our legitimate interests where your rights and freedoms do not outweigh these interests. We have implemented controls to balance our interests with your rights. This includes to:

  • Improve our Services, for example by reviewing information associated with stalled or crashed pages experienced by users allowing us to identify and fix problems and give you a better experience.

  • Personalise, measure and improve our advertising based on your advertising customisation preferences.

  • We use general location information to provide you with location based services (such as advertising, search results and other personalised content).

  • Use certain limited personal information about you, such as your email address, to hash it and to share it with social media platforms, such as Facebook, to generate leads, drive traffic to our websites or otherwise promote our products and services. These processing activities are based on our legitimate interest in undertaking marketing activities to offer you products or services that may be if your interest. The social media platforms with which we may share your personal data are not controlled or supervised by Karma Kebab. Therefore, any questions regarding how your social media platform service provider processes your personal data should be directed to such provider. Please note that you may, at any time ask Karma Kebab to cease processing your data for these direct marketing purposes by sending an e-mail to privacy@karmakebab.nl.

  • Contact you via email, SMS or WhatsApp/FB Messenger in order to offer you discounts and special promotions, poll your opinions through surveys or questionnaires and inform you about our Services.

  • Deliver targeted marketing, service updates and promotional offers based on your communication preferences.

  • Measure the performance of our email marketing campaigns (e.g. by analysing open and click rates).

  • Monitor and improve the information security of our site and mobile applications.

With your consent, we may use your personal information to:

  • Provide you with marketing via email, SMS/text.

  • Provide you with marketing from other Eat Karma BV corporate family members.

  • Provide you with marketing from third parties.

  • Customise third party advertising you might see on third party websites.

You have the right to withdraw your consent at any time.

We may use technologies considered automated decision making or profiling. We will not make automated-decisions about you that would significantly affect you, unless such a decision is necessary as part of a contract we have with you, we have your consent, or we are required by law to use such technology. In case we do so, we will provide you with information about the logic involved as well as the significance and the envisaged consequences.

Your choices about how we use your personal information

Communication preferences

You can control your email communication preferences by contacting us (see Contact Us below) or via privacy@karmakebab.nl.

Marketing

If you do not wish to receive marketing communications from us, you can unsubscribe via the link in an email you received, indicate your communication preferences using the method described within the direct communication from us or contact us as described in the Contact Us section below. Keep in mind, we do not sell, rent or otherwise disclose your personal information to third parties for their marketing purposes without your consent.

Advertising

If you do not wish to participate in our advertising personalisation programs, you can opt-out through the programs described in our User Cookie Notice. The effect of an opt-out will be to stop personalised advertising, but it will still allow the collection of personal information as otherwise described in this privacy notice. We do not allow third parties to track or collect your personal information on our sites for their own advertising purposes, without your consent.

Your Rights

You may exercise any of the rights described in this by sending an email to privacy@karmakebab.nl. Please note that we may ask you to verify your identity before taking further action on your request.

Rectification of Inaccurate or Incomplete Information.

You have the right to ask us to correct inaccurate or incomplete personal information concerning you.

Data Access and Portability.

You have the right to request copies of your personal information held by us. You also have the right to request copies of personal information that you have provided to us in a structured, commonly used, and machine-readable format.

Data Retention and Erasure.

We generally retain your personal information for as long as is necessary for the performance of the contract between you and us and to comply with our legal obligations. If you no longer want us to use your information to provide the Services to you, you can request that we erase your personal information. Please note that if you request the erasure of your personal information:

  • We may retain some of your personal information as necessary for our legitimate business interests, such as fraud detection and prevention and enhancing safety.

  • We may retain and use your personal information to the extent necessary to comply with our legal obligations. For example, we may keep some of your information for tax, legal reporting and auditing obligations.

  • Because we maintain the Karma Kebab Platform to protect from accidental or malicious loss and destruction, residual copies of your personal information may not be removed from our backup systems for a limited period of time.

Withdrawing Consent and Restriction of Processing.

Where you have provided your consent to the processing of your personal information by Karma Kebab you may withdraw your consent at any time by contacting us or by sending a communication to privacy@karmakebab.nl specifying which consent you are withdrawing. Please note that the withdrawal of your consent does not affect the lawfulness of any processing activities based on such consent before its withdrawal. Additionally, you have the right to request us to limit the ways in which we use your personal information.

Objection to Processing.

You have the right to request us not to process your personal information for certain specific purposes (including profiling) where such processing is based on legitimate interest. If you object to such processing we will no longer process your personal information for these purposes unless we can demonstrate compelling legitimate grounds for such processing or such processing is required for the establishment, exercise or defence of legal claims.

Where your personal information is processed for direct marketing purposes, you may, at any time ask Karma Kebab to cease processing your data for these direct marketing purposes by sending an e-mail to privacy@karmakebab.nl.

Lodging Complaints.

You have the right to lodge complaints about the data processing activities carried out by Karma Kebab at the Information Commissioners’ Office (“ICO”).

How we might share your personal information

We may disclose your personal information to the following parties for the following purposes:

Karma Kebab BV corporate family members, who may use it to:

  • Provide joint content and services (like registration, transactions and customer support)

  • Help detect, investigate, mitigate and prevent potentially fraudulent and illegal acts, violations of our Terms and Conditions and data security breaches

  • Provide you personalised advertising

  • Improve their products, sites, applications, services, tools and marketing communications.

  • Members of our Eat Karma BV corporate family will use your personal information to send you marketing communications only if you have consented to receive such communications from them or if otherwise permitted by the law.

Service Providers and financial institutions partners as follows:

  • Third party service providers who help us to provide our Services, payment processing services, assist us in providing customised advertising, to assist us with the prevention, detection, mitigation, and investigation of potentially illegal acts, violations of our Terms and Conditions, fraud and/or security breaches, bill collection, and other business operations.

  • Third party transport providers (e.g., DHL, PostNL, Trunkrs) with whom we share delivery address, contact information and shipment tracking information for the purposes of facilitating the delivery of items purchased and other delivery related communications.

Law enforcement, legal proceedings and as authorised by law

  • To comply with our legal requirements, enforce our Terms and Conditions, or protect anyone's rights, property or safety.

  • To third parties involved in a legal proceeding, if they provide us with a subpoena, court order or substantially similar legal basis, or we otherwise believe in good faith that the disclosure of information is necessary to prevent imminent physical harm or financial loss or to report suspected illegal activity.

Change of Ownership

If we are subject to a merger or acquisition with/by another company, we may share information with them in accordance with applicable law. Should such an event occur, we will require that the new combined entity follow this privacy notice with respect to your personal information. If we intend to handle your personal information for any purposes not covered in this privacy notice, you will receive prior notification of the processing of your personal information for the new purposes.

How long we keep your personal information

Our specific retention times for personal information are documented in our records retention schedules. How long we retain personal information can vary significantly based on the context of the Services we provide and on our legal obligations. The following factors typically influence retention periods:

  • How long is the personal information needed to provide our Services? This includes such things as maintaining and improving the performance of our products, keeping our systems secure, and maintaining appropriate business and financial records. This is the general rule that establishes the baseline for most of our data retention periods.

  • Is the personal information sensitive? If so, a shortened retention time is generally appropriate.

  • Have you provided consent for a longer retention period? If so, we will retain data in accordance with your consent.

  • Are we subject to a legal, contractual, or similar obligation to retain your personal information? Examples can include mandatory data retention laws in the applicable jurisdiction, government orders to preserve data relevant to an investigation, or personal information retained for the purposes of litigation.

After it is no longer necessary for us to retain your personal information, we will dispose of it in a secure manner according to our data retention and deletion policies.

Operating globally

To facilitate our operations we may transfer, store, and process your information within our family of companies or with service providers based in Europe or outside the European Economic Area (EEA). Laws in these countries may differ from the laws applicable to your Country of Residence. For example, information collected within the EEA may be transferred, stored, and processed outside of the EEA for the purposes described in this Privacy Policy. Where we transfer, store and/or process your personal information outside of the EEA we have ensured that appropriate safeguards are in place to ensure an adequate level of data protection.

Security

We are continuously implementing and updating administrative, technical, and physical security measures to help protect your information against unauthorized access, loss, destruction, or alteration. Some of the safeguards we use to protect your information are firewalls and data encryption, and information access controls. 

Other important privacy information

Children's Privacy

Our websites are general audience websites and not intended for children. We do not knowingly collect personal information from users deemed to be children under their respective national laws.

Third Party Privacy Practices

This privacy notice addresses only our use and handling of personal information we collect from you in connection with providing you our Services. If you disclose your information to a third party, or visit a third party website via a link from our Services, their privacy notices and practices will apply to any personal information you provide to them or they collect from you.

Contact Us

If you're looking for more help or have a question to ask, contact us via privacy@karmakebab.nl.


Cookie policy Karma Kebab

Summary

When you visit or interact with our sites, services, applications, tools or messaging, we or our authorised service providers may use cookies, web beacons, HTML 5 Local Storage and other similar technologies for storing information to help provide you with a better, faster, and safer experience, and for advertising purposes. This page is designed to help you understand more about these technologies and our use of them on our sites and in our services, applications, and tools. Below is a summary of a few key things you should know about our use of such technologies. You can review the contents of our full Cookie Notice below.

Our cookies and similar technologies have different functions. They are either necessary for the functioning of our services, help us improve our performance, give you extra functionalities, or help us to serve you relevant and targeted ads. We use cookies and similar technologies that only remain on your device for as long as you keep your browser active (session) and cookies and similar technologies that remain on your device for a longer period (persistent). You're free to block, delete, or disable these technologies if your device allows this. You can manage your cookies and your cookie preferences in your browser or device settings.

Where possible, security measures are set in place to prevent unauthorised access to our cookies and similar technologies. A unique identifier ensures that only we and/or our authorised service providers have access to cookie data.

Service providers are companies that help us with various aspects of our business, such as site operations, services, applications, advertisements and tools. We use some authorised service providers to help us to serve you relevant ads on our services and other places on the internet. These service providers may also place cookies on your device via our services (third party cookies). They may also collect information that helps them identify your device, such as IP-address, or other unique or device identifiers.

Full User Cookie Notice

What are cookies, web beacons, and similar technologies?

Like most sites, we use technologies that are essentially small data files placed on your computer, tablet, mobile phone, or other devices (referred to collectively as a "device") that allow us to record certain pieces of information whenever you visit or interact with our sites, services, applications, messaging, and tools, and to recognise you across devices.

The specific names and types of the cookies, web beacons, unique identifiers and similar technologies we use to collect information (e.g. about the pages you view, the links you click, and other actions you take on our Services, within our advertising or email content) may change from time to time. In order to help you better understand this Policy and our use of such technologies we have provided the following limited terminology and definitions:

  • Cookies – Small text files (typically made up of letters and numbers) placed in the memory of your browser or device when you visit a website or view a message. Cookies allow a website to recognise a particular device or browser. There are several types of cookies:

    • Session cookies expire at the end of your browser session and allow us to link your actions during that particular browser session.

    • Persistent cookies are stored on your device in between browser sessions, allowing us to remember your preferences or actions across multiple sessions.

    • First-party cookies are set by the site you are visiting.

    • Third-party cookies are set by a third party site separate from the site you are visiting.

Cookies can be disabled or removed by tools that are available in most commercial browsers. The preferences for each browser you use will need to be set separately and different browsers offer different functionality and options.

  • Web beacons – Small graphic images (also known as "pixel tags" or "clear GIFs") that may be included on our sites, services, applications, messaging, and tools, that typically work in conjunction with cookies to identify our users and user behavior.

  • Similar technologies – Technologies that store information in your browser or device utilising local shared objects or local storage, such as flash cookies, HTML 5 cookies, and other web application software methods. These technologies can operate across all of your browsers, and in some instances may not be fully managed by your browser and may require management directly through your installed applications or device. We do not use these technologies for storing information to target advertising to you on or off our sites.

We may use the terms "cookies" or "similar technologies" interchangeably in our policies to refer to all technologies that we may use to store data in your browser or device or that collect information or help us identify you in the manner described above.

Your choice and our use of cookies, web beacons, and similar technologies

We offer certain site features, services, applications, and tools that are available only through the use of these technologies. You're always free to block, delete, or disable these technologies if your browser, installed application, or device so permits. However, if you decline cookies or other similar technologies, you may not be able to take advantage of certain site features, services, applications, or tools. You may also be required to re-enter your password more frequently during your browsing session. For more information on how you can block, delete, or disable these technologies, please review your browser or device settings.

Generally, these technologies allow our sites, services, applications, and tools to store relevant information in your browser or device and later read that information in order to identify you to our servers or internal systems. Where applicable, we protect our cookies and other similar technologies to help ensure that only we and/or our authorised service providers can interpret them by assigning them a unique identifier that is designed for interpretation only by us. We don't store any of your personal information on any of our cookies or other similar technologies.

Any personal information that we collect and store through use of these technologies is first obtained through notice and consent: We obtain your consent by providing you with transparent notice of use of the technologies and, to the extent described herein, providing you with the opportunity to make a choice to disable these technologies.

Our uses of such technologies fall into the following general categories:

  • Operationally Necessary. We may use cookies, web beacons, or other similar technologies that are necessary to the operation of our sites, services, applications, and tools. This includes technologies that allow you access to our sites, services, applications, and tools, that are required to identify irregular site behaviour, prevent fraudulent activity and improve security, or that allow you to make use of our functions such as shopping carts, saved search, or similar functions;

  • Performance-Related. We may use cookies, web beacons, or other similar technologies to assess the performance of our websites, applications, services, and tools, including as part of our analytic practices to help us understand how our visitors use our websites, determine if you have interacted with our messaging, determine whether you have viewed an item or link, or to improve our website content, applications, services, or tools;

  • Functionality-Related. We may use cookies, web beacons, or other similar technologies that allow us to offer you enhanced functionality when accessing or using our sites, services, applications, or tools. This may include identifying you when you sign into our sites or keeping track of your specified preferences, interests, or past items viewed so that we may enhance the presentation of content on our sites;

  • Advertising or Targeting-Related. We may use first-party or third-party cookies and web beacons to deliver content, including ads relevant to your interests, on our sites or on third party sites. This includes using technologies to understand the usefulness to you of the advertisements and content that has been delivered to you, such as whether you have clicked on an advertisement.

To opt-out of the use of third-party advertising-related cookies and web beacons, see the section Ad Networks and Exchanges authorised by third-parties below. Opting out of our first-party advertising-related cookies, or out of third-party advertising-related cookies and web beacons as described below, does not necessarily mean that you will not see our advertising - only that this advertising will not be targeted to you through the use of first-party or third-party cookies, web beacons or related technologies.

If you would like to opt-out of all other types of technologies we employ on our sites, services, applications, or tools, you may do so by blocking, deleting, or disabling them as your browser or device permits.

Use of these technologies by authorised third-party service providers

We may work with third-party companies, such as ad networks and ad exchange programs, to enable us to display advertisements for you. The operators of these external ad networks and exchange programs may place their third-party cookies, web beacons, or similar technologies to collect information. They may also collect your device ID, IP address, IDFA (ID for Advertising) or Android ID. The information collected by these third parties may be used to assist us in targeting/retargeting advertisements that are more relevant to you through our or third-party websites, services, applications and tools. For these third party cookies, web beacons and similar technologies their privacy statements apply.

We work with the following third parties (by clicking on the link, you will receive additional information from each of these third parties, including their opt-out/object solutions, if any):

Facebook; Google

For more information about advertising-related third-party cookies, web beacons, and similar technologies, and how to prevent their use, please visit the following websites:

http://www.youronlinechoices.eu

http://www.aboutads.info/choices

http://www.networkadvertising.org/choices

Use of analysis tools

Google Analytics

We use Google Analytics, a web analysis service from Google Inc. "("Google") to continuously improve our website. Google Analytics uses cookies that are stored on your computer and similar technology that enable the analysis of your use of our website, applications, services and tools. Information about your use of our online services (including your IP address) is sent to a Google server in Europe (or in a member state of the European Economic Area Agreement) to make the IP address anonymous so that it cannot be traced back to any individual. Only after the IP address has been anonymised will the shortened IP address be transmitted to a Google server in the USA and stored there. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. Google will use this information on our behalf to evaluate your use of the website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage. Your IP address will not be merged with any other data held by Google.

We also use Google Analytics reports to evaluate anonymous information on demographic characteristics (e.g. age and gender) and interests of our website visitors and with regard to the success of our advertising on other websites (e.g. number of impressions, clicks on ads), which we receive via third-party cookies and process in Google Analytics. The third party providers have obtained this information through interest-related advertising. We also use this anonymous information for targeting and retargeting purposes to provide content tailored to your interests, including advertisements, on our and other websites or to have such content provided by third parties (in connection with the use of third-party cookies).

Deactivate Google Analytics

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do so you may not be able to use the full functionality of our website. In addition, you can prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and Google from processing this data by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en

You can find further information on this at http://tools.google.com/dlpage/gaoptout or www.google.com/intl/de/analytics/privacyoverview.html (general information on Google Analytics and data protection). We would like to point out that on our website Google Analytics has been extended by the code "gat._anonymizeIp();" in order to guarantee an anonymous collection of IP addresses (so-called IP masking).

You can also prevent Google Analytics from collecting IP addresses by clicking on the following link: deactivating Google Analytics

Depending on your operating system, you can prevent Google Analytics from being used on our mobile website by changing the settings on your mobile device.

If you want to disable or change Google Analytics only in order to display content tailored to your interests, including ads, you can do so in "Google ads on the web" in the Google ads settings.

With the exception of the use of such technologies by our service providers or other authorised third parties, we do not permit any third-party content on sites to include or utilise any cookies, web beacons, local storage, or similar technologies for tracking purposes or to collect your personal information for their own purposes. If you believe other third-party content might be collecting personal information or using tracking technologies on one of our sites, please report it to privacy@karmakebab.nl.