Privacy Policy

In the following personal data protection information we inform you about the processing of personal data by AFTERGROUP Ltd. with UIC 203675688 and address registration ul. 251A, entrance 1, floor 1 ("MENUGROUND" and/or "we" and/or "the controller") performs in accordance with the General Data Protection Regulation (GDPR). Our data protection information applies to all websites, applications and other services referred to in their scope (hereinafter collectively referred to as "Services" offered by MENUGROUND worldwide).

Please read carefully the privacy information we have provided. If you have any questions or comments about the privacy notice we have provided, please contact us at support@menuground.com.

Contents

1. Name and contact details of the controller responsible for processing the data
2. Contact details of the Data Protection Officer

3.Purposes of data processing, legal grounds and legitimate interest pursued by the controller or a third party and categories of recipients

3.1. Opening our websites/apps

3.1.1.Log files

3.1.2. Cookies, tracking, social media plugins

3.1.3.Consent Management

3.2. Reason, implementation and/or termination of contract

3.2.1. Processing of personal data when concluding a contract

3.2.2. Use of data for fraud prevention

3.2.3. Provision of data to transport service providers

3.2.4. Provision of data to partner companies

3.3. Processing of data for advertising purposes

3.3.1. Advertising by mail

3.3.2. Newsletter

3.3.3. Product recommendations by email

3.3.4. Games with winnings

3.4. Online access and service optimisation

3.4.1 Google Analytics

3.5. Online Marketing

3.5.1. Google marketing platform

3.5.2. Remarketing with Google Ads

3.5.3. Google Conversion Tracking

3.5.4 Google AdSense

3.5.5 Facebook Retargeting and Conversion

3.5.6. Pinterest Retargeting (Pinterest Tag)

3.6 Fanpages

3.7. Social media plugins / Facebook Connect / login

3.8. Client/user account

3.9. Making contact

3.10. Payments

4. Operators
5. Duration of data storage and deletion
6. Recipients outside the EU
7. Your rights

7.1. Overview

7.2. Right to object

7.3. Right of withdrawal

7.4 Fanpages

8. Overview of cookies and other technologies
9. Name and contact details of the controller responsible for processing the data

This privacy notice applies to the processing of data by

AFTERGROUP LTD.

Street. St. Cyprian, bl.251A, fl.1
Sofia 1756,

Bulgaria

Phone: 088 444 6400

E-mail: support@menuground.com

2. Contact details of the Data Protection Officer

The data protection officer(s) of the controller can be found at

AFTERGROUP LTD.

personally to Krasimir Kosev
Bulgaria, gr. Sofia, ul. 251A, entrance 1, floor 1

E-mail: dpo@menuground.com

3. Purposes of processing, legal grounds and legitimate interest pursued by the controller or by a third party and categories of recipients

3.1. Opening our websites/apps

Log files

Whenever you access the Services, information is sent to our service server via the respective internet browser on your end device, which is stored temporarily in log files, so-called Log files. The datasets stored in this way contain the following information, which is stored until they are automatically deleted: the date and time of the login, the name of the page opened, the IP address of the requesting device, the URL (source URL from which you accessed our service), the amount of data transferred, the loading time, information about the product and the version of the browser used respectively, as well as the name of your ISP.

The legal basis for the processing of the IP address is Article 6(1)(f) GDPR. Our legitimate interest is for

providing a seamless connection,

ensuring comfortable use of our services,

system security and stability assessment.

Based on the information it is not possible to draw and direct conclusion about your identity. The data is saved and automatically deleted once the above purposes have been achieved. The usual time limits for data deletion are based on the criterion of necessity.

3.1.2. Cookies, tracking, social media plugins

We use cookies or similar technologies on various pages to make visiting our services attractive and enable the use of certain features, as well as to statistically record the use of our services. Cookies are small text files that your browser automatically creates and that are stored on your respective end device (laptop, tablet, smartphone, etc.) when you visit and/or use our services. Cookies do not harm your end device, do not contain viruses, trojans or other malware. The cookie stores information that occurs in relation to the specific end device used. However, this does not mean that we immediately obtain information about your identity and/or that we can draw conclusions about your identity in this way. Most of the cookies used are deleted at the end of the browser session (so-called session cookies). With them we can e.g. offer a visual indication of the shopping cart, where you can see how many items are currently in your cart and what the current value of your purchase is. Other cookies remain on your end device and enable us to recognise your device on a subsequent visit (so-called persistent cookies). In particular, these cookies serve to make our offer user-friendly, more efficient and safer. Thanks to these technologies, it is possible, for example, to receive information tailored to your interests in our services. We use cookies and similar technologies on the basis of Article 6(1)(f) GDPR (legitimate interest in optimising our services). Some cookies and similar technologies are used solely on the basis of your consent (Article 6(1)(a) GDPR). We generally divide cookies and similar technologies according to their purpose into three categories:

3.1.2.1 Required cookies and technologies

These cookies or similar technologies are necessary for our services to function. This applies, for example, to cookies or similar technologies that store login data after registration in our online shop so that the user remains in our online shop even after changing to another page, or to cookies that ensure that the user-related configuration of service functions (language selected, etc.) will be retained during sessions. In addition, these cookies or similar technologies contribute to the safe and correct use of our services. The legal basis for the use of these technologies is Article 6(1)(f) GDPR.

3.1.2.2 Analysis and functional cookies and technologies

With these cookies, we can provide advanced functionality and personalization. They may be set by us or by third party providers whose services we use on our services. If you do not enable these cookies, some or all of these services may not work properly. These cookies also allow us to count visits and traffic sources so that we can measure and improve the effectiveness of our services. They help us answer questions about which pages are most popular, which are least used and how visitors use our services. All information collected by these cookies is aggregated and therefore anonymous. If you do not enable these cookies, we cannot know when you have used/visited our services. The legal basis for the use of these technologies is Article 6(1)(a) GDPR.

3.1.2.3 Marketing

These cookies or similar technologies may be set on our website by us or our partners to show you relevant content/advertising on both our websites and third party websites. So-called profiles can be created based on your interests. It is generally not possible to identify a person with this information, as only pseudonymous browser and/or device information is used. If you do not allow these cookies or similar technologies, you will receive less content/advertising tailored to your interests. The legal basis for the use of these technologies is Article 6(1)(a) GDPR.

To the extent that we use your information based on your consent, you give that consent by clicking the "I Accept" button on the banner displayed during your visit to our services, possibly after you have made certain settings.

By clicking "Accept" you consent to the use of cookies and other technologies to process your data, including transmission to our marketing partners (third parties). Our partners also use cookies and other technologies to personalize, measure and analyze advertising.

Note on the right of withdrawal

You can withdraw your consent in whole or in part at any time with future effect by changing your settings in our Preference Center here.

Browser settings

Of course, you can set your browser so that it does not store cookies on your end device. The help function in the menu bar of most web browsers explains how to prevent your browser from accepting new cookies, how to set your browser to notify you when it receives a new cookie, or how to delete any cookies you've already received and block all others.

Please proceed as follows:

In Internet Explorer:

In the "Extras" menu, select "Internet Options".

Click on the "Data Protection" tab.

Now you can make the security settings for the internet zone. Here you set whether and which cookies should be accepted or rejected.

"OK" to confirm the setting.

In Firefox:

In the Extras menu, select Settings.

Click on "Data Protection".

In the drop-down menu, select the "create according to user-defined settings" entry.

You can now set whether cookies are accepted, how long you want to keep these cookies and add exceptions to which websites you always or never want to allow to use cookies.

"OK" to confirm the setting.

Google Chrome:

Click the Chrome menu in the browser toolbar.

Now select "Settings".

Click "Show advanced settings".

Under "Data Protection", click on "Content Settings".

Under "Cookies" you can make the following cookie settings:

Delete cookies

Blocking cookies by default

Deleting cookies and website data by default after exiting the browser

Allowing cookie exceptions from certain websites or domains

We would like to point out that in this case not all features of our services can be used to their full extent.

Overview of cookies and other technologies

Here you can find an overview of cookies and other technologies used on our website.

3.1.3 Consent management

We use a consent management tool ("OneTrust") from OneTrust, LLC (UK HQ: Cannon Green, 27 Bush Lane, London EC4R 0AA, UK and US HQ: 1350 Spring Street NW, Suite 500, Atlanta, GA 30309, USA) to manage your settings and document consent from users of our services. OneTrust is also used to save cookie settings for the entire website. OneTrust stores information about the categories of cookies used by the website and whether users have given or withdrawn their consent to the use of individual categories. This allows us to prevent cookies from being placed on a user's browser in any category if consent is not given. OneTrust uses cookies to store information, which normally have a lifespan of one year, so that the preferences of returning visitors are preserved.

The legal basis for this data processing is Article 6(1)(c)(f) GDPR.

3.2. Reason, implementation and/or termination of contract

3.2.1. Processing of personal data when concluding a contract

If you register for one of our services and/or enter into another contract with us, (e.g. purchase a product from us) we process the data necessary for the conclusion, performance or termination of the contract. These are the following data:

Address

Name, surname

Billing and delivery address

Email address

Billing and payment dates

Phone number

Store settings

The legal basis for this purpose is Article 6(1)(a) and (b) GDPR, i.e. you provide us with information on the basis of the relevant contractual relationship between you and us (e.g. maintaining a customer/user profile, performance of a purchase contract, etc.). In order to process your email address in the case of a purchase via our website/application, we are further obliged, based on legal requirements, to send an electronic order confirmation (Article 6(1)(c) GDPR).

We store the data collected for the performance of the contract - unless we use it for our own marketing purposes for the duration of the relevant contract and until the expiry of the statutory warranty rights or, if applicable, until the expiry of the warranty rights under the contract. After the expiry of this period, we store the information required by commercial and tax law concerning the contractual relationship for the statutory periods. Within this period, the data is only processed again in the event of an inspection by the tax administration.

In addition, the following data processing is required for the conclusion of a purchase contract through our services:

We provide the payment data to the payment service operators authorised by us to process the payment(s). We provide the delivery address details to our authorised logistics company and to our dispatch partner so that the order can be delivered. In order to ensure that the delivery of the goods takes place as you wish, we pass on your email address and possibly your telephone number to our authorised logistics company and/or our dispatch partner, who take delivery. Before delivery, they will contact you, if necessary, to agree the details of the delivery. The relevant data will only be passed on for the relevant purpose and will not be used for any other purpose after delivery and will be deleted once existing commercial and tax retention requirements have expired.

3.2.2. Use of data for fraud prevention

The information you provide within the order may be used to check whether there is what is known as an atypical ordering process (e.g. ordering multiple items at the same time at the same address using different customer accounts). We undertake such verification generally on the basis of our legitimate interest.

3.2.3.Provision of information to transport service providers / dispatch partners

In order to deliver the ordered goods, we work with logistics suppliers/transport companies and/or shipping partners: in order to deliver the ordered goods or to give notification of delivery, they are provided with the following data: first name, last name, postal address, as well as possibly an email address and telephone number.

The legal basis for the processing is Article 6(1)(b) GDPR.

3.2.4. Transmission of information to partner companies

You have the opportunity to take advantage of third-party offers through our services. In these cases, you can enter into a contract directly with one of our partners, to whom the data necessary for the performance of the contract (e.g. name, surname, billing and delivery address, email address, billing and payment details, date of birth, telephone number) will be passed. Such special offers from our partners are recognizable and marked as partner offers.

3.3. Processing of data for advertising purposes

3.3.1.Advertising by mail

In principle, we have a legitimate interest in using certain information for marketing purposes so that we can offer you relevant offers. For postal advertising, we process the following information for our own marketing purposes and for the marketing purposes of third parties: first name, last name, postal address, year of birth.

In addition, for our marketing purposes and the marketing purposes of third parties, we have the right to store your other personal information collected in compliance with legal requirements in addition to the data specified. The aim is to only allow advertising to reach you that is targeted to your actual or perceived needs/interests and therefore not to bother you with advertising that is not relevant to you.

No further disclosure of the additionally stored data to third parties shall take place. Furthermore, MENUGROUND pseudonymises/anonymises your collected personal data in order to use this pseudonymised/anonymised data for its own marketing purposes and the marketing purposes of third parties (advertisers).

The pseudonymised/anonymised data may also be used to send personalised online advertising, whereby the management of the advertising may be carried out by a third party service provider and/or agency. The legal basis for the use of personal data for marketing purposes is Article 6(1)(f) GDPR.

Note on the right to object

You may object to the use of your personal information for the above marketing purposes at support@menuground.com at any time free of charge with future action.

If you object, your data will be blocked and can no longer be processed for advertising purposes. Please note that, exceptionally, the sending of advertising material may continue temporarily after your objection has been received. This is technically determined by the time required within the selection and does not mean that we have not taken your objection into account.

3.3.2. Newsletter

As part of our service, we give you the opportunity to request to receive our newsletters. In order to make sure that no mistakes are made when entering your email address, we apply the so-called "double-opt-in" (DOI) registration method: once you have entered your email address in the registration field and given your consent to receive our newsletter, we will send you a confirmation link to the email address provided. Your address is only saved in our newsletter distribution list after you click the confirmation link. The legal basis for this data processing is Article 6(1)(a) GDPR.

Note on the right of withdrawal

You may withdraw your consent to any future action at any time by sending a message to support@menuground.com or by clicking the unsubscribe option at the end of each newsletter.

3.3.3. Product recommendations by email

As a current customer, you will receive regular product recommendations from us via email. You will receive these product recommendations regardless of whether you are subscribed to any of our newsletters. In doing so, we will use the email address you provide at the time of purchase to advertise our products and/or services similar to those you have already ordered. The legal basis for this data processing is Article 6(1)(f) GDPR.

Note on the right to object

You can make a free, future-action objection to our product recommendations at any time by sending a message to support@menuground.com or at the end of any product recommendation email.

3.3.4.Winning Games

If you register/participate in the prize draw games organised by MENUGROUND (hereinafter referred to as "Participation" for short), we will use the data provided by you in the respective Participation for the purpose of fulfilling the Participation Contract and in particular to notify you of your winnings and possibly to advertise our and/or our partners' offers in the prize draw games. Detailed instructions can be found in the terms and conditions of participation of the respective prize game. The legal basis for this data processing is Article 6(1)(a) GDPR, Article 6(1)(b) GDPR as well as Article 6(1)(f) GDPR.

3.4. Online access and service optimization

3.4.1. Google Analytics

For the purposes of user-oriented layout and continuous optimisation of our pages, on the basis of Article 6(1)(f) GDPR, we use Google Analytics, an electronic analysis service of Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and that enable an analysis of the use of the website to be made. In this connection, pseudonymised user profiles are generated and cookies are used. Cookies are used to generate the following information about your use of this website:

browser type/version,

operating system used,

URL (the previously visited page),

Host name of the accessing computer (IP address),

time of request to the server

On behalf of the operator of this website, Google will use this information to analyse your use of the website, compile reports on your activity on the website and provide the operator with additional services relating to the use of the websites and the internet. The IP address of your browser, as established within Google Analytics, is not linked to other Google data. You can prevent cookies from being saved by setting your browser software accordingly; however, we draw your attention to the fact that in this case you will probably not be able to use all functions of this website to their full extent. You can furthermore stop the collection of the data generated by the cookies relating to your use of the website (including your IP address) for Google, as well as the processing of this data by Google, by downloading and installing the available browser Plugin from the following link: tools.google.com/dlpage/gaoptout.

Alternatively to Browser-Add-on (browser extension), especially on mobile endpoint browsers, you have the option to stop Google Analytics data collection by clicking this link . An opt-out cookie (Opt-Out-Cookie) is applied to prevent future collection of your data when you visit this website. The opt-out cookie only applies to this browser and only to our website and is saved on your device. If you delete the cookies in this browser, you must save the opt-out cookie again. Further information on data protection in relation to Google Analytics can be found on the Google Analytics website.

3.5 Online Marketing

We use various information on our website for marketing purposes. Our goal is to only display advertising that is based on your actual or perceived interests and not to engage you with advertisements that are not of interest to you. To do this, we use various forms of advertising (e.g. retargeting) and technologies of MENUGROUND and third party companies (third parties), some of which process data for us partly as controllers, partly as data controllers. A controller is a natural or legal person, office, institution or other body that processes personal data on behalf of the data controller. Controllers do not use the data for their own purposes, but carry out the data processing only for the data controller. This enables us to direct users to online advertising not only on our websites, but also on the websites of our partners who have already shown an interest in our store and our products. We know from research that displaying personalised, interest-based advertising is more interesting to internet users than advertising that has no such personal connection.

3.5.1. Google Marketing Platform

This website uses the online marketing tool Google Marketing Platform of the operator Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("GMP").

GMP uses cookies to serve ads relevant to users, to improve campaign performance reporting, or to prevent a user from seeing the same ads repeatedly. Google uses a cookie identifier to record which ads are shown in which browser and can thus prevent ads from being shown multiple times.

In addition, GMP may log conversions related to advertising requests using cookie identifiers. This is the case, for example, if a user sees a GMP advertisement and later accesses the advertiser's website when using the same browser and purchases something through that website. According to Google, GMP cookies do not contain any personal information. Based on the marketing tools used, your browser automatically establishes a direct connection to Google's server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore provide information based on our level of knowledge as follows. If you are registered with a Google service, Google can attribute the visit to your account. Even if you are not registered with Google or have not logged in, it is possible for the provider to find and store your IP address. When using GMP, personal data may also be transferred to Google LLC's servers in the USA.

You can find more information about the GMP data protection regulations on Google here: https://www.google.de/policies/privacy/

To the extent legally required, we have obtained your consent to the processing of your data described above in accordance with Article 6(1)(a) of the GDPR. You can withdraw your consent at any time at our preference centre.

3.5.2. Google Ads Remarketing

Our website uses Google Ads Remarketing features, so we advertise our websites in Google search results and on third party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). For this purpose, Google sets a cookie on your end device browser that automatically activates interest-based advertising using a pseudonymous cookie ID and based on the pages you have visited.

Any additional data processing will only take place if you have agreed to Google linking your internet and app browser history to your Google Account and using your Google Account information to personalise the ads you see on the web. In this case, if you log in to Google while visiting our website, Google will use your data along with Google Analytics data to create and define remarketing target lists on different devices. For this purpose, Google temporarily links your personal data with Google Analytics data to form target groups. As part of the use of Google Ads remarketing, personal data may also be transmitted to Google LLC. servers in the USA.

You can permanently disable the setting of cookies for advertising purposes by downloading and installing the browser plugin available at the following link: https://www.google.com/settings/ads/onweb/

You can find further information and data protection regulations on advertising and Google here: https://www.google.com/policies/technologies/ads/

To the extent legally required, we have obtained your consent to the processing of your data described above in accordance with Article 6(1)(a) of the GDPR. You can withdraw your consent at any time at our preference centre.

3.5.3 Google Conversion Tracking

In addition, we use so-called Conversion Tracking as part of the AdWords service. If you click on a Google-activated message, a Conversion Tracking cookie is stored on your computer/end device. These cookies lose their validity after 30 days, do not contain personal data and therefore do not serve to identify you. The information collected using the Conversion cookie is used to compile Conversion Statistics for AdWords customers who have opted to use Conversion Tracking.

The legal basis for this processing is Article 6(1)(a) of the GDPR.

You can prevent cookies from being stored by adjusting your browser software accordingly; however, please note that you may not be able to use the full functionality of our services in this case. In addition, you can deactivate your interest-based messages on Google as well as your interest-based messages on the Internet (within the Google display network) in your browser by activating the "Deactivate" interface in www.google.de/settings/ads or performing the deactivation on www.aboutads.info/choices/. Further information on your setting options in this respect and on privacy protection at Google can be found at www.google.de/intl/de/policies/privacy/?fg=1 . You can withdraw your consent at any time in our preference centre.

3.5.4. Google AdSense

We use the online advertising service Google AdSense, which can be used to present advertising tailored to your interests. We are interested in showing you ads that may be of interest to you to make our services more interesting to you. For this purpose, statistical information about you is collected and processed by our advertising partners. These adverts can be recognised by the "Google Ads" notice in the relevant advert.

Google receives the information that you have visited our website. To do this, Google uses a web beacon to set a cookie on your computer. If you are logged in with your Google account, your data can be linked directly to it. This data may be transmitted to Google's contractual partners, third parties and authorities. The legal basis for the processing of your data is Article 6 (1) sentence 1 (a) GDPR.

Further information on the purpose and scope of data collection and processing, as well as additional information on your rights in this regard and setting options to protect your privacy can be found here: http://www.google.de/intl/de/policies/technologies/ads .

3.5.5 Facebook retargeting and conversion

We use the pixel from Facebook Ireland Limited (custom website audience pixel). Through this pixel, information about the use of this website (e.g. information about items viewed) is collected by MENUGROUND and Facebook Ireland Limited on a joint responsibility and transmitted to Facebook Ireland Limited. This information can be linked to you using additional information that Facebook Ireland Limited has stored about you, e.g. due to you having a Facebook account. Based on the information collected through the pixel, you may be shown advertisements relevant to your interests (retargeting) on your Facebook account. In addition, the information collected through the pixel may be aggregated by Facebook Ireland Limited, and the aggregated information may be used by Facebook Ireland Limited for its own web purposes and third-party advertising purposes. For example, Facebook Ireland Limited may infer certain interests from your browsing behaviour on this website and may also use this information to advertise third party offers. Facebook Ireland Limited may also combine information collected through Pixel with other information that Facebook Ireland Limited has collected about you through other websites and/or in connection with your use of the social network "Facebook" so that a profile about you may be stored on Facebook Ireland Limited. This profile may be used for advertising purposes. Facebook Ireland Limited is solely responsible for the permanent storage and further processing of tracking data collected through user pixels used on this website

We've also enabled automatic advanced matching as part of the Facebook Pixel feature. This feature of the Pixel allows us to send hashed emails, names, gender, city, county, postcode and date of birth or phone number to Facebook as additional information, provided you have provided this data to us and consented to this. This activation allows us to tailor Facebook advertising campaigns even more precisely to people who are interested in our services or products.

The legal basis for this data processing is Article 6(1)(a) GDPR.

You can find more information about data protection at Facebook Ireland Limited https://www.facebook.com/policy.php. Here you will also find the possibility to assert your rights as a data subject (e.g. right to erasure) against Facebook Ireland Limited. You can withdraw your consent at any time in our preference centre.

3.5.6. Pinterest Retargeting (Pinterest Tag)

We use a Pinterest Tag from Pinterest Europe Ltd (Palmerston House, 2nd floor, Fenian Street, Dublin 2, Ireland). Through this pixel, usage information (e.g. information about viewed items) is collected under the joint responsibility of Pinterest Europe Limited and MENUGROUND, and transmitted to Pinterest Europe Limited. The further processing of the data transmitted to Pinterest Europe Limited is the sole responsibility of Pinterest Europe Limited in accordance with data protection law. This information transmitted to Pinterest Europe Limited can be linked to you by means of additional information that Pinterest Europe Limited has stored about you, e.g. due to a social network account you have with Pinterest. On the basis of the information collected through the pixel, you may be shown advertisements relevant to your interests (retargeting) on your Pinterest account. The information collected through the pixel may also be aggregated by Pinterest Europe Limited, and the aggregated information may be used by Pinterest Europe Limited for its own advertising purposes and for the advertising purposes of third parties. For example, Pinterest Europe Limited may infer certain interests from your browsing behavior on this website and may also use this information to advertise third party offers. Pinterest Europe Limited may also link information collected through Pixel to other information Pinterest Europe Limited has collected about you through other websites and/or in connection with your use of the Pinterest social network, so that Pinterest Europe Limited may maintain a profile about you. This profile may be used for advertising purposes. The legal basis for this data processing is Article 6(1)(a) GDPR.

You can find more information about data protection at Pinterest Europe Limited here: https://policy.pinterest.com/de/privacy-policy

Here you can also assert your rights as a data subject (e.g. right to erasure) with regard to the data that Pinterest Europe Limited processes as data protection officer. You can withdraw your consent at any time in our preference centre.

3.6 Fan Pages

MENUGROUND maintains social media accounts on Facebook and Instagram ("Fanpages"), services of Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook"), where we regularly post and share content and offers. If you visit our Fanpages or other websites on Facebook or Instagram, the operators of the social networks log your user behaviour with cookies and similar technologies. MENUGROUND may obtain for its fan pages general statistics about the interests and demographic characteristics (such as age, gender, region) of its users. If you use social networks, the type, scope and purpose of social network data processing is primarily determined by the social network operators. There is an exception for so-called Seiten-Insights, for which we are responsible together with Facebook and which are explained below.

Processing of your data by Facebook

Data protection notices on Facebook

Instagram data protection notices

Use Analysis (Seiten-Insights)

When you visit our fan pages, Facebook uses cookies and similar technologies to record your usage behaviour. In this context, MENUGROUND receives "Seiten-Insights", which contain statistical, non-personalised (anonymised) information about visitors. It is not possible for us to contact you with this information. The selection and preparation of information for Seiten-Insights is carried out exclusively by Facebook. Seiten-Insights help us understand how our fan pages are used, what visitors are interested in, and which topics and content are particularly popular. We use this information to offer visitors to our fan pages relevant content and to better address the interests and usage habits of our visitors.

MENUGROUND and Facebook are jointly responsible for the processing of your data for the provision of Seiten-Insights (Article 26 GDPR). There is an agreement between MENUGROUND and Facebook which specifies which company fulfils which data protection obligations in accordance with the GDPR with regard to the processing of data for Seiten-Insights.

The agreement with Facebook is available here.

Facebook summarizes the main content of this agreement (including a list of Seiten-Insights data) here: https://www.facebook.com/legal/terms/information_about_page_insights_data

If you have given your consent on Facebook to the aforementioned creation of Seiten-Insights, the legal basis is Article 6(1)(a) GDPR. For the rest, the legal basis is Article 6(1)(f) GDPR, and our legitimate interest derives from the above-mentioned purposes.

3.7 Social-Media Plug-Ins

We may use social plug-ins from Facebook and Twitter on our services on the basis of Article 6(1)(a) GDPR to increase the visibility of our company. Responsibility for operating in accordance with data protection regulations must be ensured by their respective provider.

Information on the purpose and scope of the collection of personal data and their further processing and use by the respective provider, as well as on your rights in this regard and your options for adjustment in order to protect your privacy, can be obtained from the respective privacy statement of the provider, to which we provide a link below.

Facebook

On some websites, we use plug-ins from the social network facebook.com, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). You can find the link to Facebook's privacy policy here.

Twitter

On some websites, we use plugins from the social network Twitter, which is operated by Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA ("Twitter"). You can find the link to Twitter's data protection declaration here.

When plug-ins are enabled, your web browser establishes a direct connection to the web servers of the respective social network and the content of the plug-in is transmitted directly from the social network to your web browser and integrated by it into our website. By integrating the plug-ins, the social network receives the information that you have visited the corresponding page on our website and can record device and access data. If you are logged into the social network, this can also link the visit to your account on the relevant social network.

By logging out of the social networking sites, as well as deleting the saved cookies, you can prevent the information collected during your visit to www.aboutyou.bg from being linked to your user profile in the respective social network. If you do not want the social networks to link the data collected in connection with your access to our website directly to your profile, you must log out of the relevant social networks before visiting our website. You can also completely stop the loading of plug-ins with the "Add-On" extensions for your browser, e.g. with the "NoScript" ScriptBlocker, which can be found at: noscript.net .

3.7.1. Facebook Connect/Login

MENUGROUND offers the user the possibility to sign up for the service via their Facebook account (the so-called Facebook-Connect function). Facebook-Connect is a service of the social network Facebook, which is provided by Facebook Inc. (1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). No further registration with MENUGROUND is then necessary. For the registration, the user is referred to the Facebook page, where he can register with his user data. In this way, the Facebook account and the MENUGROUND service are linked. Thanks to this connection, MENUGROUND automatically receives from Facebook the information that the user has agreed to provide (e.g. first name, last name, email address, profile picture, gender, friends list). We use this information to be able to identify you within the scope of your use of MENUGROUND.

The legal basis for this processing is Article 6(1)(a) GDPR.

Further information about Facebook-Connect and your privacy settings can be found here.

3.8. Customer profile/user profile

In order to provide you with the greatest possible comfort, we offer you permanent storage of your personal data in a password-protected customer/user profile.

The creation of a customer profile is in principle voluntary. When you create a customer profile, the processing of your data collected therein is based on Article 6(1)(b) GDPR. No data re-entry is necessary after creating a customer profile. Furthermore, you have the possibility to check and modify the data stored in your customer profile at any time.

The creation of a customer profile is mandatory for the execution of the contract only when you want to place an order via our website/application.

In addition to the data required for the order, you must enter a password of your choice to create a customer profile. This serves, together with your email address, to access your customer profile. Keep your personal access data confidential and do not provide it to unauthorised third parties. Please note that you remain automatically logged in to your account after leaving our website, unless you intentionally log out.

You have the option to delete your customer profile at any time. Please note that if you have already placed an order with us once, the data visible in your customer profile is not deleted. The deletion of your data takes place automatically after the expiration of the retention periods applicable to us under commercial and tax law. The legal basis for this further processing is Article 6(1)(c) GDPR as well as Article 6(1)(f) GDPR.

3.9. Making contact

You can contact us in various ways: by email, by phone or by post. When you contact us, we use those personal data that you have voluntarily provided to us in this framework for the sole purpose of getting in touch with you and being able to process your enquiry.

3.10. Payments

We process your payment information for the purpose of processing payment, e.g. if you have purchased or used a product and/or service through www.aboutyou.bg. Depending on the method of payment, we forward the payment information to third parties (e.g. in the case of a credit card payment to your credit card issuer).

If you pay by cash on delivery, your delivery and payment details will be sent to our delivery partner for transmission and acceptance of payment.

The legal basis for this processing is Article 6(1)(a), Article 6(1)(b) of the GDPR as well as Article 6(1)(f) of the GDPR.

4. Administrators

We use so-called administrators in some areas as part of the processing of your data. A controller is a natural or legal person, public authority, agency or other body that processes personal data on our behalf where we remain responsible for the processing of the data. Controllers do not use the data for their own purposes, but only carry out data processing for the data controller.

5. Duration of data storage and deletion

MENUGROUND only retain personal data for as long as is necessary for the purposes set out in this data protection declaration, in particular to fulfil our contractual and legal obligations. We will potentially store your personal data for other purposes if or to the extent that further storage is legally permitted for certain purposes.

If you close your customer/user account, we will delete all stored personal information. If complete deletion is not possible or not necessary for legal reasons, we will block that information. The blocking takes place, for example, if commercial or tax retention requirements apply, e.g. from the HGB (HGB) and the AO (AO). Here, we are obliged to keep this information for tax inspections and audits for up to ten years. In certain legally permitted cases, we may also refrain from immediate deletion, even if there is no legal retention requirement. This applies, for example, if the information in question may still be required for further processing of the contract or legal prosecution or legal defense (for example, in the case of claims). The relevant criteria for the duration of the blocking are the respective statutory limitation periods after which we delete the information.

6. Recipients outside the EU

Except for the processing described, we do not provide your data to recipients based outside the European Union or the European Economic Area. The processing described above involves the transfer of data to the servers of our authorised providers of tracking and targeting technologies. These servers are located in the USA. The transfer of data takes place on the basis of so-called standard contractual clauses of the European Commission.

7. Your rights

7.1. Overview

In addition to the right to withdraw your consent, you also have the following other rights, subject to the relevant legal prerequisites:

the right to obtain information about your personal data stored with us (Article 15 GDPR), in particular you can request information about the purposes of the processing, the category of personal data, the categories of recipients to whom the personal data are or will be disclosed, the intended period for which the personal data will be stored, the source of your data where the personal data are not collected directly from you;

the right to rectification of inaccurate personal data or completion of incomplete personal data (Article 16 GDPR),,

the right to erasure of your personal data stored with us (Art. 17 GDPR) insofar as we do not have to comply with statutory or contractual retention periods or other legal obligations or further retention rights.

the right to restrict the processing of your data (Article 18 GDPR) if you contest their accuracy, if the processing is unlawful but you do not want them to be erased; if the controller no longer needs the personal data but you require them for the establishment, exercise or defence of legal claims or if you have objected to the processing under Article 21 GDPR,

the right to data portability under Article 20 of the GDPR, i.e. the right to receive the personal data stored with us in a commonly used and machine-readable format or to request that this data be transferred to another responsible person

the right to lodge a complaint with a supervisory authority. . As a general rule, you can apply to the supervisory authority of your usual place of residence or work, or of our registered office.

You may assert the above rights against us at support@menuground.com.

7.2. Right to object

Subject to Article 21(1) of the GDPR, the data subject shall have the right, on grounds relating to his or her particular situation, to object to processing of personal data concerning him or her.

The general right of objection referred to above applies to all the processing purposes described in this privacy statement which are processed on the basis of Article 6(1)(f) GDPR. Unlike the specific right to object, which applies to processing for advertising purposes, under the GDPR we are only obliged to apply such a general right to object if you provide us with valid reasons (e.g. a possible danger to life and health).

7.3. Right of withdrawal

As we process data on the basis of your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not invalidate the processing carried out on the basis of consent before it was withdrawn.

7.4 Fanpages

For the processing of your Seiten-Insights information together with Facebook, we have agreed with Facebook that Facebook is primarily responsible for providing you with information about the processing of your Seiten-Insights information and for allowing you to exercise your data protection rights (e.g. right to object). You can find more information about your data protection rights in relation to Seiten-Insights and how you can claim them directly on Facebook here.

If you assert your rights against MENUGROUND, we will forward your request to Facebook.