(APP) Privacy Policy

JOE & THE JUICE App Privacy Policy

Introduction

At JOE & THE JUICE A/S ("JOE &THE JUICE", "we", "us" or "our") we givehigh priority to confidentiality and data security. This privacy policy appliesto our processing of personal data collected through your use of our app andestablishes guidelines for the way JOE & THE JUICE processes your personaldata and provides you with the information that you are entitled to receiveunder applicable data protection laws. You should read the privacy policy beforeyou hand over your personal data to JOE & THE JUICE.

1. Data controller

The data controller of your personal dataprocessed through JOE & THE JUICE’s app is:

JOE & THE JUICE A/S Address: Østergade26,

1100 København K

CVR-no.: 26589355

Email: privacy@joejuice.com

2. In-app data and web-app cookies

Types of personal data JOE & THE JUICEuses the mobile-app as well as cookies on web-app to collect, and thisconnection processes, your personal data. JOE & THE JUICE may collect thefollowing personal data about you, when you use our app:

• IP address and MAC address
• Device ID and device type
• Operating system and version
• Browser type and screen resolution
• Device manufacturer and model
• Geo-location
• Language
• Interaction with QR codes
• Use of loyalty cards
• Number, type and frequency of products you purchase through the     app
• Sections visited within the app
• Redemption of loyalty cards and gift cards made available     through the app
• Products you have searched for
• Information about your use of our web-app, including     click-behaviour, the website or app that referred you to our app, the     functionality of the app while you use it
• Time and date of your use of the app
• The content you view and features you access, entered search     terms and personal information you make available to us via a social media     platform, such as by clicking on a social media icon linked from our     website.

We use our mobile-app and cookies via theweb-app to collect the above-mentioned personal data.

The purposes of the process

Your personal data may be processed for thefollowing purposes:

• Marketing and advertising, including to promote our products     and brand
• Product and service development
• Statistics and analysis, including to understand how you     interact with the app and to improve the app

Legal basis for processing

JOE & THE JUICE processes your personaldata on the following basis:

•  Legitimate interests: We base the processing of     your personal data on our legitimate interests in, for example, conducting     statistics, analyses, as well as improving and developing our products and     services (Article 6(1)(f) of the General Data Protection Regulation).
• Consent: We only process and     disclose personal data to third parties collected through cookies via the     web-app if you give your prior consent to it through the cookie consent     solution on the web-app (Article 6(1)(a) of the General Data Protection     Regulation). You can always withdraw your consent by contacting us as     described below or by changing your cookie consent as described in our     cookie policy. However, withdrawing your consent does not affect the     legality of the processing that preceded the withdrawal.

Retention period

Personal data collected through our JOE& THE JUICE mobile-app is being stored for as long as you are active on theapp (e.g. when you make purchases via the mobile- or web-app). As a generalrule, your account will be considered "inactive" if you have not madea purchase for more than 2 years (3 years if you have purchased a loyalty card)whereafter your account and personal data will be deleted subsequently.

Personal data which forms part ofbookkeeping material is, however, kept for 10 years from the end of the currentfinancial year to ensure compliance with the legal obligations set out inbookkeeping legislation (cf. Article 6(1)(c) of the General Data ProtectionRegulation).

Cookies are deleted in accordance with ourcookie policy, which is available via the following link https://www.joejuice.com/policy/cookie-policy.Personal data collected through cookies may, however, be processed for up to ayear after collection.

However, the information may be stored fora longer period in anonymised form.

3. If you use the chat

Types of personal data

When you use the chat in the app, JOE &THE JUICE collects and processes your personal data. JOE & THE JUICEcollects, processes, and stores the following types of your personal data:

• Your user information, including your email address
• What your inquiry is about
• Date of your inquiry
• Other information you provide in connection with your inquiry.
• We encourage you not to provide sensitive personal data such as     health information (e.g. allergies or religion) to us. You are, however,     welcome to submit preferences for food and beverages.

The objectives of the process

Your personal data will be processed forthe following purposes:

• Handling of your inquiry/request
• General communication
• Statistics and analysis

Legal basis for processing

JOE & THE JUICE processes your personaldata on the below-mentioned bases. The basis depends on the nature of yourinquiry.

• Legitimate interests: We may     process your personal data on the basis of our legitimate interests in     handling your inquiry, communicating with you, and developing our products     and services (Article 6(1)(f) of the General Data Protection Regulation).

Disclosure

We may disclose your personal data toexternal suppliers or other relevant JOE & THE JUICE entities who, inagreement with us, make sure to provide the service you order. The disclosureis based on our legitimate interest in being able to provide the service youare requesting (Article 6(1)(f) of the General Data Protection Regulation).

Retention period

Your personal data related to the specificinquiry will be stored for 1 year from your inquiry has been marked as closed.Personal data which forms part of bookkeeping material is, however, kept for 10years from the end of the current financial year to ensure compliance with thelegal obligations set out in bookkeeping legislation (cf. Article 6(1)(c) ofthe General Data Protection Regulation). Personal data can be stored for alonger period in anonymised form.

If you are a customer or an employee of oneof our customers, suppliers, or other business partners, we refer to thesection below.

4. When you register as a user

Types of personal data

When you register as a user in the app, JOE& THE JUICE processes your personal data. JOE & THE JUICE may collect,process, and store the following types of your personal data:

• Your name
• Your date of birth
• Your email address, Facebook ID, Google login information or     Apple ID (if you use one of these services to log in)
• Your telephone number (including for SMS marketing if consent     is provided)
• Your gender
• Country
• Loyalty points

The purposes of the process

Your personal data will be processed forthe following purposes:

• Management of user account/profile
• Authentication and fraud prevention using a one-way hash of     your phone number
• To customise your user account to you
• To customise offers to you if you have consented to receiving     marketing material, including SMS marketing, or if we are allowed to promote     our products without your consent

promote our products without your consent

• Statistics and analysis

Legal basis for processing

JOE & THE JUICE processes your personaldata on the following bases:

• Legitimate interests: We process     your information based on our legitimate interest in managing the created     user accounts, as well as our legitimate interest in conducting statistics     and analysis, and customising our platform and marketing material to you     (Article 6(1)(f) of the General Data Protection Regulation).
• Consent: If you have provided your     consent, we may also use your telephone number for SMS marketing (Article     6(1)(a) of the GDPR).  

Retention period

Your personal data will be stored until youdelete your account. However, data related to marketing consent will beretained until you withdraw your consent or delete your account. Additionally,the data can be stored for a longer period in anonymised form.  

5. If you purchase loyalty cards in ourapp

Types of personal data

When you purchase loyalty cards in our app,JOE & THE JUICE processes your personal data. JOE & THE JUICE maycollect, process, and store the following types of your personal data:

• Your user account information (please refer to section 4 above)    
• Your payment information
• Information about your order/purchase history
• Your use of the loyalty card, including items left on the     loyalty card

The purposes of the process

Your personal data will be processed forthe following purposes:

• Completion of your loyalty card order
• Managing of orders, complaints, and returns
• Publication of marketing without consent based on previous     purchases with us in cases where we choose

to avail ourselves of this option in theDanish Marketing Practices Act

• Statistics and analysis

Legal basis for processing

JOE & THE JUICE processes your personaldata on the following basis:

• Legitimate interests: We process     your personal data based on our legitimate interest in marketing us to you     in cases where consent is not required as well as our legitimate interest     in being able to conduct statistics and analysis with the purpose of     developing and improving our services (Article 6(1)(f) of the General Data     Protection Regulation).
• Contractual obligations: We process     your personal data to fulfil the contract of purchase with you, including     to be able to deliver the ordered goods, handle complaints, returns, etc.     (Article 6(1)(b) of the General Data Protection Regulation).

Retention period

As a general rule, we will store yourpersonal data for 3 years after your last purchase. Information relating toaccounting material is kept for 10 years from the end of the financial year towhich the data relate.

However, we can process your personal datafor a longer period in anonymised form.

6. If you order for pickup through ourapp

Types of personal data

When you order for pickup through our app,JOE & THE JUICE processes your personal data. JOE & THE JUICE maycollect, process, and store the following types of your personal data:

• Your user account information (please refer to section 4 above)    
• Your payment information
• Information about your order/purchase history
• Where you choose to pickup your order (location)

The purposes of the process

Your personal data will be processed forthe following purposes:

• Completion of pickup orders
• Managing of orders, complaints, and returns
• Publication of marketing without consent based on previous     purchases with us in cases where we choose to avail ourselves of this     option in the Danish Marketing Practices Act
• Statistics and analysis

Legal basis for processing

JOE & THE JUICE processes your personaldata on the following basis:

• Legitimate interests: We process     your personal data based on our legitimate interest in marketing us to you     in cases where consent is not required as well as our legitimate interest     in being able to conduct statistics and analysis with the purpose of     developing and improving our services (Article 6(1)(f) of the General Data     Protection Regulation).
• Contractual obligations: We process     your personal data to fulfil the contract of purchase with you, including     to be able to deliver the ordered goods, handle complaints, returns, etc.     (Article 6(1)(b) of the General Data Protection Regulation).

Retention period

As a general rule, we will store yourpersonal data for 2 years (3 years if you have purchased a loyalty card) afteryour last purchase. Information relating to accounting material is kept for 10years from the end of the financial year to which the data relate.

However, we can process your personal datafor a longer period in anonymised form.

7. If you sign up for our newsletter(s)

Types of personal data

JOE & THE JUICE collects, processes,and stores your personal data for marketing purposes when you sign up fornewsletter(s). JOE & THE JUICE may collect, process, and store thefollowing types of your personal data:

• Email address
• Your consent
• Your click-behaviour in relation to published material

The purposes of the processing

Your personal data may be processed for thefollowing purposes:

• Marketing, including to promote our products and brand through     the material we send you
• Analysis and statistics, including to understand how you     interact with our marketing material and improve our newsletter content

Legal basis for processing

JOE & THE JUICE processes your personaldata on one or more of the following grounds:

Consent: JOE& THE JUICE will only use your personal data for direct marketing,including for sending out newsletters, and analysis and statistics if you havegiven your prior consent to this (Article 6(1)(a) of the General DataProtection Regulation).

Retention period

Your personal data will be stored as longas you consent to receive newsletters is active.

You can always withdraw your consent byclicking on the unsubscribe link at the bottom of each email or by contactingus as described below. However, withdrawing your consent does not affect thelegality of the processing that preceded the withdrawal.

Documentation of your marketing consent iskept for 2 years from the time you have withdrawn your consent to receivedirect marketing material. The retention period is determined based on JOE& THE JUICE's legitimate interest in being able to document that directmarketing has been carried out in accordance with the applicable legislation(Article 6(1)(f) of the General Data Protection Regulation).

In addition, the information can be storedfor a longer period in anonymised form.

8. Disclosure to other data controllersand outsourcing to data processors

To achieve the above purposes, we may givethird parties access to your personal data, which, based on a contractualrelationship with JOE & THE JUICE, provides relevant services, this couldbe IT suppliers or other suppliers that process personal data for us. Suchsuppliers will only process personal data in accordance with our instructionsaccording to the signed data processing agreements.

In the context of JOE & THE JUICE'sdevelopment, the corporate structure may change, e.g., by the total or partialsale of the company. In the case of a partial transfer of assets containingpersonal data, the processing basis for the related transfer of personal datais, as a rule, Article 6(1)(f) of the General Data Protection Regulation, sinceJOE & THE JUICE has an interest in transferring parts of its assets andmaking commercial/structural changes.

In addition to what is described above,your personal data is generally not disclosed to a third party without yourconsent. However, in certain circumstances, it may be necessary to discloseyour personal data to e.g. the police, lawyers, accountants, courts, otherpublic authorities, potential buyers and group-linked companies. We do thisbased on your consent and our legitimate interests.

Your personal data may be transferred todata processors or data controllers established in countries outside the EU/EEAthat do not have an adequate level of protection. Such transfers will only takeplace once a transfer tool is secured. The transfers will be based on the EUCommission's standard contractual clauses or binding corporate rules, which youhave a right of access to. If you have any questions about the tools fortransfers to countries outside the EU/EEA please contact us at privacy@joejuice.com.

9. Your rights

• You have the right to access the personal data we process about     you
• You have the right to object to our collection and further     processing of your personal data
• You have the right to rectification and deletion of your     personal data, however there are certain statutory exceptions, including     the Bookkeeping Act
• You have the right to ask us to restrict the processing of your     personal data
• In certain circumstances, you may also request to receive a     copy of your personal data and to transmit the personal data you have     provided to us to another data controller (data portability)
• You can withdraw any consents you may have given at any time.     We will then delete your personal data unless we may continue the     processing on another basis. You can cancel our newsletter by clicking on     the link at the bottom of the newsletter

10. Your rights as a California Resident

Persons with disabilities may obtain thisnotice in alternative format. Please send your request to:privacy@joejuice.com.

In addition to the information that hasbeen provided in this Privacy Policy regarding JOE & THE JUICE’s processingof personal information, and the purposes for which they are processed,Californian state laws (CCPA (CPRA)) requires JOE & THE JUICE to provideCalifornian Residents, hereunder “customers”, current and former “employees”and third-party associated “employees”, the following to information regardingtheir privacy rights.

You can see the categories of informationwe collect in the “Types of personal data” sections above.

Please note that there may be circumstancesin which JOE & THE JUICE is not required or permitted under applicable lawto address your request or exercise of your right. Only you or an authorizedagent that you authorize to act on your behalf may make a request related toyour personal information. We cannot respond to a request or provide you accessto personal information if we cannot verify your identity or authority to makea request and confirm the personal information that relates to you.

10.1 Right to Access to/to Know yourpersonal Information

You may have the right to request access toyour personal information and information pertaining to the source of thatpersonal information, the purposes for which we collect it, and the categoriesof third parties to whom we may sell, share, or disclose it to as well as whatpersonal information we sell, share or disclose to set third parties.

As stated by law, you can make anAccess/Know request twice a year (2 times every 12 month) free of charge.

10.2 Right to Request Deletion of YourPersonal Information

In addition to your right to gain access toyour personal data, you may also have the right to request that JOE & THEJUICE delete personal data that we have collected pertaining to you. Pleasenote that certain information may be exempt from such requests under otherlaws, such as personal information that is part of bookkeeping and accountingmaterial.

The personal information that we may stillretain is information pertaining to:

a) protecting our business, systems, andusers from fraudulent activity, b) our contractional obligations to you, c)addressing technical issues that impair existing functionality, d) necessaryfor us, or others, to exercise their free speech or other rights, e) complywith law enforcement requests pursuant to lawful process, f) for scientific orhistorical research, g) for our own internal purposes reasonably related toyour relationship with us, or to comply with legal obligations.

10.3 Right to Correct InaccuratePersonal Information

You have the right to request that JOE& THE JUICE correct inaccurate personal information about you. Thecorrection of your personal information will be done accordingly to the natureof the personal information and the purpose(s) of which the processing of thepersonal information is occurring.

10.4 Right to Limit Use and Disclosureof Sensitive Personal Information

We may collect sensitive personalinformation as part of your employment at or contract with JOE & THEJUICE. As a Californian Resident, you have the right to limit our use, ordisclosure, of this information to the extent that the processing or disclosureof the information is necessary in order for JOE & THE JUICE to perform theservices that we provide. Some sensitive personal information be exempt fromthe CCPA (CPRA) due to it being considered public information and willtherefore not be covered in case you should exercise this right.

The CCPA (CPRA) defines “sensitive personalinformation” as “information that reveals a resident’s:

Government-issued identifiers

i)  Social Security,

ii)  Driver’s license,

iii)  State identification card, or

iv)  Passport number.

Finances

i)  Account log-in.

ii)  Financial account combinedwith any required security or access code, password, or credentials allowingaccess to an account.

iii)  Debit card or credit cardnumber combined with any required security or access code, password, orcredentials.

Geolocation

A resident’s precise geolocation,including address, ZIP code, and city.

Race, religion, and union membership

i)  Racial or ethnic origin,

ii)  Religious or philosophicalbeliefs, or

iii)  Union membership.

Communications

The contents of a resident’s privatecommunications, (Unless the company is the intended recipient of thecommunication.)

Genetics

A resident’s genetic data.

Biometrics

Biometric information which can uniquelyidentify a resident.

Health

Personal information collected andanalyzed concerning a resident’s health.

Sexual orientation

Personal information collected andanalyzed concerning a resident’s sex life or sexual orientation.”

10.5 Right to Opt-Out of Sale or Sharingof Personal Information to Third Parties

You have the right to request that JOE& THE JUICE stop selling or sharing your personal information (“opt-out”).JOE & THE JUICE will after you have exercised this right refrain fromselling nor sharing your personal information until such a time where you againauthorise us to do so again.

10.6 Right to Non-Discrimination/NoRetaliation Following Your Opt-Out or Exercise of Other Rights

JOE & THE JUICE will not retaliate ifyou decide to exercise any of the rights under this Policy where prohibited bylaw. You may exercise your rights by e-mailing privacy@joejuice.com.

11. Links to other websites

Our website may contain links to otherwebsites or to integrated websites. We are not responsible for the content ofother companies' websites or their practices regarding processing of personaldata. When you visit other websites, you are encouraged to read the owner'sprivacy policy, cookie policy, and other relevant policies.

12. Questions and complaints

If you have any questions about thisprivacy policy or if you wish to complain about the way we process yourpersonal data, please feel free to contact us:

JOE & THE JUICE A/S

Address: Østergade 26, 1100 København K

E-mail: privacy@joejuice.com

If your complaint is not resolved by us andyou want to proceed with the case, you can complain to the Danish DataProtection Agency:

Datatilsynet CarlJacobsens Vej 35

2500 Valby Denmark Email:dt@datatilsynet.dk

Phone: +45 33 19 32 00

You may also file a complaint with the dataprotection agency in your country. You can find a list of European dataprotection agencies and their contact information https://edpb.europa.eu/about-edpb/about-edpb/members_en.

‍

‍