Protection of your personal data

This privacy statement provides information about the processing and the protection of your personal data.

  • Introduction
  • Why and how do we process your personal data?
  • On what legal ground(s) do we process your personal data?
  • What personal data do we collect and further process?
  • How long do we keep your personal data?
  • How do we protect and safeguard your personal data?
  • Who has access to your personal data and to whom is it disclosed?
  • What are your rights and how can you exercise them?
  • Contact information

Introduction

Four Star Pizza (Ireland) Limited (hereafter ‘FSP’) is committed to protect your personal data and to respect your privacy. FSP collects and further processes personal data pursuant Regulation (EU) 2016/679 of the European Parliament and of the Council of 27th day of April 2016.

This privacy statement explains the reason for the processing of your personal data, the way we collect, handle and ensure protection of all personal data provided, how that information is used and what rights you have in relation to your personal data. It also specifies the contact details of the responsible Data Controller with whom you may exercise your rights, the Data Protection Officer and the European Data Protection Supervisor.

 

Why and how do we process your personal data?

Purpose of the processing operation

FSP collects and uses your personal information to allow you to purchase its products and arrange for their payment and delivery and, also, to contact you with information in relation into special offers and other product promotions and in this way personalise your user experience. This includes the possibility of signing up to its website so that access to the online services is shortened and more personal to you. Additionally, on signing up your personal data will be used so that loyalty bonuses will be made available to you.

From time to time, FSP will carry out surveys and will sometimes use your personal data for establishing better access to its products for different areas and different customers. Additionally, surveys will be carried out on anonymised data too. In either case you will have the option to take part or refuse to take part in those surveys.

The processing operation consists of storing the personal data you provide us with when you register and or purchase one of our products and using it to provide you with the requested services. In addition, your personal data will be used to provide you with push notifications of offers and loyalty programme benefits. Where opted in by you mobile and email communications will also use your personal data.

On what legal ground(s) do we process your personal data?

We process your personal data, because:

• processing is necessary for the performance of the contract for the purchases of our products
• by registering you have given consent to the processing of your personal data for one or more specific purposes, including where appropriate consent for the use of your personal data for completion of surveys and notifications of offers and loyalty bonus schemes.

Legal basis for the processing

Article 6 of GDPR 2016/679

• 1(a) the data subject has given consent to the processing of his or her personal data for one or more specific purposes
• 1(b)processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject to entering into a contract
• 1(f)processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental right and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

Which personal data do we collect and further process?

In order to carry out this processing operation, FSP collects the following categories of personal data:

• for access to FSP Loyalty Programme: first name, surname, email address. If provided, also your preferred language and if appropriate whether you want to be informed about FSP Offers
• for purchasing FSP products: first name, last name, email address, as well as information on your orders, your address or the delivery address if different, banking or credit card details and whether you want to be informed about FSP offers;
• for participation in surveys: requested personal data varies depending on the purpose of the survey. However, it is unlikely to extend beyond your location and the data describing the purchases you have made from FSP whether online or instore.

The provision of personal data is mandatory if you want to benefit from the listed services.

How long do we keep your personal data?

FSP only keeps your personal data for the time necessary to fulfil the purpose of collection or further processing, namely for providing you with the requested services.

• Registration and loyalty programme
• when your account has been inactive for a prolonged period and it is deemed by FSP to be inactive you will receive an email informing you that unless you login again we will delete your account after a further 30 days
•
• Receiving the FSP promotions
• If you have provided your explicit consent to receiving promotional material from FSP you will remain on the mailing list until you unsubscribe.
• For participation in surveys
• Your data will be kept as long as it is necessary to fulfil the purposes of the survey.

How do we protect and safeguard your personal data?

All personal data in electronic format (emails, documents, databases, uploaded batches of data, etc.) are stored on the servers operated by contractors of FSP in compliance with FSP’s and the contractor’s compliance with GDPR Regulation (EU) 2016/679

FSP’s contractors are bound by a specific contractual clause for any processing operations of your data on behalf of FSP, and by the confidentiality obligations deriving from the General Data Protection Regulation (‘GDPR’ Regulation 2016/679). Further in some case the contractors if based outside the EU will either have agreed to standard contractual clause or be located in a country or be an international organisation which the Commission has decided ensures an adequate level of protection.

In order to protect your personal data, FSP has put in place a number of technical and organisational measures. Technical measures include appropriate actions to address online security, risk of data loss, alteration of data or unauthorised access, taking into consideration the risk presented by the processing and the nature of the personal data being processed. Organisational measures include restricting access to the personal data solely to authorised persons with a legitimate need to know for the purposes of this processing operation.

If you participate in a survey, we may transfer your personal data to our contractor to fulfil the purpose of the survey.

Who has access to your personal data and to whom is it disclosed?

Access to your personal data is provided to FSP staff and by staff of processors responsible for carrying out this processing operation and to authorised staff according to the “need-to-know” principle. Such staff abide by statutory rules and, when required, additional confidentiality agreements.

What are your rights and how can you exercise them?

You have specific rights as a ‘data subject’ under Chapter III (Articles 12-23) of Regulation (EU) 2016/679, in particular the right of access to, rectification or erasure of your personal data and the right to restrict the processing of your personal data. Where applicable, you also have the right to object to the processing or the right to data portability.

Where you have consented to provide your personal data to FSP you can withdraw your consent at any time by notifying the data controller. The withdrawal will not affect the lawfulness of the processing carried out before you have withdrawn the consent.

You can exercise your rights by contacting FSP, the data controller, at the address specified below. If necessary, you can also address the Data Protection Commissioner at 21 Fitzwilliam Square Dublin 2.

If you wish to exercise your rights in the context of one or several specific processing operations, please provide their description in your request.

Contact information

• The Data Protection Officer (DPO) of FSP

You may contact the Data Protection Office of FSP with regard to issues related to the processing of your personal data under GDPR by contacting the following email address;[email protected]

• The Data Protection Commissioner

You have the right to have recourse (i.e. you can lodge a complaint) to the Data Protection Commissioner if you consider that your rights under Regulation (EU) 2016/679 have been infringed as a result of the processing of your personal data by FSP.