PRIVACY POLICY – J&TJ BAR
When you visit our bars, purchase our products, or otherwise communicate with us, Joe & The Juice will, as the data controller, collect and process personal data about you.
This policy applies to your visit in a Joe & The Juice Bar (“THE BAR”). It does not refer to our deal with the collection and use of your data in relation to JOE & THE JUICE’s mobile application which is governed by separate Terms & Conditions and Privacy Policy available here or JOE & THE JUICE websites related websites and our social media accounts which is governed by separate Terms & Conditions and Privacy Policy available here.
JOE & THE JUICE A/S (we, our or us) are committed to protecting your privacy. We or our entirely owned subsidiaries are the data controller of the information that you provide to us.
If you have any questions or requests concerning our Policy or how we handle your data, please do not hesitate to contact our data protection team at privacy@joejuice.com.
1. WHAT INFORMATION DO WE COLLECT AND HOW DO WE USE IT?
Generally speaking we will collect some of your personal data whenever you interact with JOE & THE JUICE.
Non-sensitive categories of personal data:
- transaction data including credit card information when you pay with credit card in our bar
- recordings from CCTV.
How do we use your information?
We use your information for the following purposes:
a) Statistical analysis in order to develop and improve the experience for Joe & The Juice’s customers
b) To detect and prevent security breaches or fraud;
c) To maintain necessary or appropriate records for internal administrative purposes;
d) To conduct market research in understanding your needs and wants better;
We may disclose your information to the relevant persons/parties, for instance in connection with an investigation.
2. THE LEGAL BASIS FOR THE COLLECTION AND PROCESSING OF THE PERSONAL DATA
Just as it’s crucial that you understand what personal data we collect and when, it’s equally as important for you to understand why we are processing that personal data. We will only process your data if we have a justifiable reason to do so in accordance with the applicable data protection law, for instance if we have your consent; if we have a legitimate interest in processing such data; if we have a legal obligation to process your data; or if we need to process your data to fulfil our contractual obligations or provide you with a service that you have requested.
To comply with our legal obligations
We process certain personal data to ensure that we comply with relevant and applicable legal requirements. For instance, we will process data to ensure that we are compliant with laws governing bookkeeping and tax.
Where necessary for the performance of our contract
We will use your personal information where it is necessary for us to perform our contract with you and/or to carry our any pre-contract steps you’ve asked us to so that you can enter into a contract. This may include but is not limited to process and deliver your order, to process your payment information when taking payment or refunding you.
Legitimate interest
We will process your data for our legitimate interests, including but not limited to our ability to operate, maintain and improve our business and to preserve and support our relationship with customers such as yourself. Before deciding to process your data in accordance with what we understand to be a legitimate interest, we weigh your own right to privacy against our own interests in processing such data.
We will process certain personal data for the legitimate reasons we have described below:
a) For improvement of the business: we will process personal data to help us create, develop, operate, deliver and improve the performance, effectiveness and quality of the bars
b) For customer support and administrative purposes: to ensure that our customer support team can contact you and/or assist you with any questions, issues or complaints in the most efficient manner.
c) For security purposes: we will process certain data for anti-fraud and security purposes.
d) For claims handling and for legal proceedings: we process personal data in connection with the handling of claims, debt collection and/or legal proceedings.
e) We process your data in order to prevent fraud.
Where you provide consent
We also process your personal information based on your consent. In such circumstances, you are under no obligation to provide your consent or personal information but may choose to do so voluntarily. If you do grant us your consent, you may withdraw your consent at any time as described in the section below.
3. WITHDRAWAL OF CONSENT
For processing of personal data based on your consent, you have the right to withdraw the consent, however, without affecting the lawfulness of processing based on consent before its withdrawal. You can withdraw your consent by contacting us directly at privacy@joejuice.com.
4. DISCLOSURE OF YOUR PERSONAL DATA
We also disclose personal information to service providers, which are companies we use to support our business and who are bound by law and contractual obligations to keep your personal information confidential. Service providers may use information we share with them only for the purposes for which we disclose it to them. We share your personal data with the following categories of service providers for the purposes outlined in this Privacy Policy:
· Auditing and accounting firms that assist us in the creation of our financial records;
· Professional services consultants, such as firms that perform analytics, assist with improving our business, provide legal services, or supply project-based resources and assistance;
· Payment providers who assist and verify any refund or transaction enquiries, and process payments;
· Security vendors, such as entities that assist with security incident verification and response, service notifications, and fraud prevention;
When data is shared with or transferred to service providers on behalf of JOE & THE JUICE, we will take all measures reasonably necessary to ensure that your data is processed solely for the purposes outlined in this Policy, and that such data is processed in a secure manner.
In addition to the above, we will also disclose your personal data when:
· We are required to do so (or we believe we are required to do so) in order to comply with a legal obligation or regulatory requirement;
· We reasonably believe or suspect illegal activity or conduct is or has taken place and report this to law enforcement agencies; and
· For our own legitimate interests if our business enters into a joint venture with, purchases or is sold or merges with another business entity. In such circumstances your information may be disclosed or transferred to the new entity, any new business partners, our advisors or the new entity’s owners or advisors.
5. INTERNATIONAL TRANSFERS OF PERSONAL DATA
If we transfer personal data to recipients in countries outside the EU/EEA, we will, if required, put a contract or other means in place to ensure that your data is adequately protected, for instance, by using the European Commission’s standard contractual clauses for transfers of personal data to non-EU/EEA countries. Wherever your personal information is transferred, stored or processed by us, we will take commercially reasonable steps to safeguard the privacy of your personal information.
6. YOUR EU AND UK PRIVACY RIGHTS
Subject to local data protection legislation, if you are located in the EU or in the UK, you enjoy the following rights in relation to your data that we process:
a) The right to rectification: if your information is incorrect or inaccurate you are entitled to have this information corrected.
b) The right of access: you are entitled to access any information of yours that we are processing.
c) The right to be forgotten: you may ask us to delete your personal from our systems. We will of course comply with such request, unless an exception applies.
d) The right to object: you are entitled to object to the processing of your data if such data is processed for purposes other than those necessary for the fulfilment of the purpose for which that information was collected or for compliance with a legal obligation.
e) The right to restrict the processing: you may also request that we restrict the processing of your personal data. If requested by you, it means that the processing of your data going forward will be suppressed or blocked altogether. If you exercise this right, your information may still be stored by us, but it will not be used any further.
f) The right to data portability: you are entitled to receive a copy of your personal data in a transferable format for your own purposes. However, please note that this right is subject to certain conditions under applicable data protection law.
g) The right to withdraw consent: in situations where you have provided us with your consent to process your data, you have the right to withdraw your consent at any time.
h) The right to lodge a complaint: you are free to lodge a complaint regarding our handling or processing of your personal data with the national data protection authority.
If you have any questions or wish to exercise any of your rights, please do not hesitate to contact us by email at privacy@joejuice.com.
7. YOUR NEVADA PRIVACY RIGHTS
Residents of the State of Nevada have the right to opt out of the sale of certain pieces of their information to other companies who will sell or license their information to others. If you are a Nevada resident and would like to make such a request, please email privacy@joejuice.com.
8. YOUR CALIFORNIA PRIVACY RIGHTS
Persons with disabilities may obtain this notice in alternative format on our website.
Under California’s “Shine the Light” law, California residents may opt out of the disclosure of personal information to third parties for their direct marketing purposes. Any California resident may choose to opt out of the sharing of such personal information with third parties for marketing purposes at any time by directing such request to privacy@joejuice.com.
The California Consumer Privacy Act (“CCPA”) provides California residents, referred to in the law as “consumers,” with rights to receive certain disclosures regarding the collection, use and sharing of personal information, as well as rights to access and control personal information. The CCPA defines “personal information” to mean “information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular” California resident. Certain information we collect may be exempt from the CCPA because it is considered public information (because it is made available by a government entity) or covered by a federal privacy law, such as the Gramm–Leach–Bliley Act, the Health Insurance Portability and Accountability Act, or the Fair Credit Reporting Act.
To the extent that we collect personal information about you that is subject to the CCPA, that information, our practices, and your rights are described in the below disclosures.
RIGHT TO INFORMATION REGARDING THE CATEGORIES OF PERSONAL INFORMATION COLLECTED, SOLD, AND DISCLOSED
You have the right to obtain information regarding the categories of personal information we collect, sell, or disclose. The following is a description of our data collection practices, including the personal information we collect, the sources of that information, the purposes for which we collect information, and whether we disclose that information to external parties. We may use any and all of the information for any of the purposes described in this privacy notice, unless limitations are listed. The categories we use to describe the information are those enumerated in the CCPA.
- PERSONAL IDENTIFIERS:
1. A service provider working on our behalf collects your payment information when you provide it to us, or to a service provider working on our behalf, when you complete a transaction. This information includes your credit card number or bank account number. We use this information to facilitate payments and transactions.
2. We do not collect your Driver’s License number or passport number.
3. We do not collect your social security number.
4. We do not collect any medical information or health information about you.
- PROTECTED CLASSIFICATIONS: We do not collect your age, gender, racial or ethnic origin, or sexual orientation.
- COMMERCIAL INFORMATION: When you engage in transactions with us, we create records of goods or services purchased or considered, as well as purchasing or consuming histories or tendencies. We use this information to measure the effectiveness of our services and to provide you with targeted information, advertisements, and offers.
- BIOMETRIC INFORMATION: We do not collect information about your physiological, biological, or behavioral characteristics.
- AUDIO, ELECTRONIC, VISUAL, THERMAL, OLFACTORY, OR SIMILAR INFORMATION: If you contact us via phone, we may record the call. We will notify you if a call is being recorded at the beginning of the call. We do not collect your image or any thermal, olfactory, or similar information.
- PROFESSIONAL OR EMPLOYMENT-RELATED INFORMATION: We do not collect your professional or employment-related information.
- EDUCATION INFORMATION: We do not collect any information about the institutions you have attended or the level of education you have attained.
We may share any of the above-listed information with service providers, which are external parties that we engage for business purposes and are restricted from using Personal Information for any purpose that is not related to our engagement. The categories of service providers with whom we share information and the services they provide are described in our Privacy Policy.
We may also disclose information to external parties who are not listed here when required by law or to protect our company or other purposes, as described in our Privacy Policy.
RIGHT TO ACCESS INFORMATION
You have the right to request access to Personal Information collected about you and information regarding the source of that information, the purposes for which we collect it, and the third parties and service providers with whom we share it. To protect our customers’ Personal Information, we are required to verify your identity before we can act on your request.
RIGHT TO REQUEST DELETION OF INFORMATION
You have the right to request in certain circumstances that we delete any Personal Information that we have collected from you. To protect our customers’ Personal Information, we are required to verify your identity before we can act on your request. We may have a reason under the law why we do not have to comply with your request, or why we may comply with it in a more limited way than you anticipate. If we do, we will explain that to you in our response.
RIGHT TO OPT OUT OF SALE OF PERSONAL INFORMATION TO THIRD PARTIES
You have the right to opt out of the sale of your personal information to third parties. To exercise this right, please visit our “Do Not Sell My Personal Information” web page. Please note that your right to opt out does not apply to our sharing of personal information with service providers, who are parties we engage to perform a function on our behalf and are contractually obligated to use the personal information only for that function.
HOW TO SUBMIT A REQUEST
You may submit a request to exercise your rights by filling out a Consumer Data Request Form available here, or by calling 1-800-832-8916 or emailing us at privacy@joejuice.com.
In order to process your request to know/access or delete Personal Information we collect, disclose, or sell, we must verify your request. We do this by:
- Asking you to
1. provide personal identifiers we can match against information we may have collected from you previously, including but not limited to a copy of your government issued identity card (if relevant); and/or
2. confirm your request using the email or telephone account stated in the request;
You may authorize another individual or a business registered with the California Secretary of State, called an authorized agent, to make requests on your behalf. We require that you and the individual complete notarized affidavits in order to verify the identity of the authorized agent and confirm that you have authorized them to act on your behalf. Parents of minor children may submit a birth of the child certificate in lieu of an affidavit, in order to make requests on the child’s behalf. Please see sample affidavits here.
10. AMENDMENTS TO THE POLICY
We may amend this notice from time to time. If we do so, an updated version will be available within the Website. You are responsible for regularly reviewing this Policy so that you are aware of any changes to it.
11. CONTACT
Please contact us via privacy@joejuice.com if you have any questions regarding the protection of your personal data or if you wish to exercise your legal rights.
CONSUMER DATA REQUEST FORM
Please, submit your request here.
DO NOT SELL MY PERSONAL INFORMATION
Please, submit your request here.
AFFIDAVITS FOR AUTHORIZED AGENTS
Please, find the affidavits here.