Thanks for using our websites and services. Personal integrity is important to us and we take your privacy seriously.

Here you will find out for example what personal data we process about you, why and how we do it, where it came from, who is involved, and how it is lawful for us to do it.

This is where we explain how we process your personal data and what we do to respect your integrity. We encourage you to read this Privacy Policy and to use it to help you make informed decisions.

Please read this Privacy Policy carefully – by continuing to use our websites and services, you confirm that you have read and understood this Privacy Policy in its entirety. By reading this Privacy Policy, we hope you feel confident that we work hard to live up to your expectations.

Please contact us if you have any questions regarding this Privacy Policy or in general questions regarding your personal data. You can always contact us by sending an email to dataprotection@superb.community

SUPERB ApS, CVR. 39478021, Nordre Fasanvej 7, Frederiksberg, Copenhagen, Denmark (“SUPERB”, “we”, “our” or “us”), including our affiliates, is committed to protecting and respecting the privacy of any individual whose personal data we process as part of us providing our products and services (altogether “services” below, and also includes products and services provided by affiliates within our group “SUPERB Group”).

This Privacy Policy aims to provide you with sufficient information regarding our use of your personal data, including providing you with answers to the following questions:

  • What is personal data?
  • What is processing of personal data?
  • Who should read this Privacy Policy?
  • Does this Privacy Policy cover all our processing activities?
  • In relation to whom is SUPERB a data controller?
  • What information do we process about you, for what purposes and how is it lawful for us to do it?
  • What Personal Data do we collect from third parties?
  • How will we not use your information?
  • What about automated decision making?
  • Want to know more about our policy of sharing data with third parties?
  • What about transfers to a third country?
  • Security and Integrity – how do we protect your Personal Data?
  • How long do we store your personal data?
  • What say do you have in how we process your data (aka. your rights)?
  • How do you exercise your rights and how can you contact us or the data protection authority?
  • What about cookies?
  • What about other third-party websites and services?
  • How may we change this Privacy Policy?

WHAT IS PERSONAL DATA?

Personal data is all kind of information directly or indirectly identifying a physical person being alive. This means that e.g. name, address, phone number but also log data and encrypted data and other types of electronic ID’s (e.g. IP-addresses) is personal data in the event they can be connected to a physical person being alive may be personal data.

WHAT IS PROCESSING OF PERSONAL DATA?

Processing of personal data is every action that is taken in relation to personal data, irrespective of if it is done in an automated way or not. Examples of common processing actions is collection, registration, organization, structuring, storaging, adaptation, transfer and deletion.

WHO SHOULD READ THIS PRIVACY POLICY?

This Privacy Policy is relevant for anyone visiting our websites, using our services, products or otherwise interacting with us.

DOES THIS PRIVACY POLICY COVER ALL OUR PROCESSING ACTIVITIES?

Yes, it concerns the processing of personal data for which we are the data controller – in other words, where we decide the purposes (why the personal data is collected) and means (which personal data is collected, for how long it is stored, etc.) of the processing.

IN RELATION TO WHOM IS SUPERB A DATA CONTROLLER?

Restaurant

SUPERB is the data controller for personal data processed when our customers register for and/or use our services and when our customers purchase products from us such as any payment related services, if they are a natural person (“Restaurant”).

This means that we are a data controller for any personal data that we process about you as a sole trader or an individual.

CEO, Board Members, Beneficial Owners And Authorised Signatories Of Our Customers

SUPERB is the data controller for personal data obtained when our customers, other than sole traders, register for our services and during the registration process provide information regarding their corporate structure which may include personal data.

This means that SUPERB is the data controller in relation to personal information in relation to the CEO and board members of any of our business customers that are a limited liability company or equivalent and in relation to personal information of the beneficial owners, if they are a natural person, of our business customers.

SUPERB is also the data controller in relation to the authorised signatories of our business customers.

Representatives Of Customers

SUPERB is also the data controller of personal data relating to customer representatives who are the representatives of our business customers and the people who use our services and/or products.

This also means that SUPERB is the data controller for representatives of potential customers/guests who are either website visitors who submit personal data through any of the forms on our websites, applications or otherwise contact us through for example our customer support or people who might be interested in our services and/or products whose information we got from other sources.

End-Customers

SUPERB is the data controller for the processing of personal data that takes place when a customer of our Partner/Restaurant (“End-customer”) chooses to pay

  1. by card through the use of the SUPERB app on our Restaurant´s smartphone, tablet or other compatible devices connected to an SUPERB application.
  2. by invoice and pays such invoice online using a card or any other online payment method made available by us in the relevant jurisdiction,
  3. through a payment link provided by e-mail, text message or similar communication tool,
  4. by card online or any other online payment method made available by us in the relevant jurisdiction
  5. through the use of third party payment providers for the services and/or products provided by any of our Restaurants who use SUPERB in its physical store as applicable.

SUPERB is also the data controller when End-customers want to receive a receipt for the services and/or products provided by any of our Restaurants who use SUPERB in its physical store or Online Store, as applicable.

Website Visitors And Individuals Telephoning Or E-Mailing Our Support

For existing customers visiting our website:

Behavioural and tracking details: e.g. location data, behavioural patterns, personal preferences, IP-number, cookie identifiers, unique identifier of devices you use to access and use the services and our websites.

SUPERB is furthermore the data controller for personal data processed when someone telephones to our customer support or uses our website or otherwise contacts us through our support channels.

This means that SUPERB is the data controller for personal data processed about website visitors (i.e. the people that merely browse our websites).

WHAT INFORMATION DO WE PROCESS ABOUT YOU, FOR WHAT PURPOSES AND HOW IS IT LAWFUL FOR US TO DO IT?

Restaurants

Categories Of Personal Data We Process

  • Identification information: e.g. identification number, ID, passwords or equivalent
  • Contact information: e.g. name, address, phone number, email or equivalent
  • Information related to legal requirements: e.g. customer due diligence and anti-money laundering requirements, bookkeeping.
  • Behavioural and tracking details: e.g. location data, behavioural patterns, personal preferences, IP-number, cookie identifiers, unique identifier of devices you use to access and use the services and our websites
HOW DO WE USE IT (PURPOSE OF PROCESSING)LEGAL BASIS FOR THE PROCESSING (WHY THE DATA PROCESSING IS NECESSARY)
To provide our services and products, to fulfil relevant agreements with you and to otherwise administer our business relationship with you.Fulfil our contractual obligations towards you, to comply with applicable laws and to pursue the legitimate interests of SUPERB
To confirm your identity and verify your personal and contact details.Fulfil our contractual obligations towards you and to comply with applicable laws
To prove that transactions have been executed.Fulfil our contractual obligations towards you and to comply with applicable laws
To establish, exercise or defend a legal claim or collection procedures.Fulfil our contractual obligations towards you, to comply with applicable laws and to pursue the legitimate interests of SUPERB
To comply with internal procedures.Fulfil our contractual obligations towards you and to comply with applicable laws
To administer your payment for products and/or services and the customer relationship i.e. to carry out our obligations arising from any contracts entered into between you and us and to provide you with the information, products and services that you request from us.Fulfil our contractual obligations towards you, to comply with applicable laws and to pursue the legitimate interests of SUPERB
To assess which payment options and payment services to offer you, for example by carrying out internal and external credit assessments.Fulfil our contractual obligations towards you, to comply with applicable laws and to pursue the legitimate interests of SUPERB
For customer analysis, to administer SUPERB´s services, and for internal operations, including troubleshooting, data analysis, testing, research and statistical purposes.Fulfil our contractual obligations towards you and to pursue the legitimate interests of SUPERB
To ensure that content is presented in the most effective way for you and your device.Fulfil our contractual obligations towards you and to pursue the legitimate interests of SUPERB
To prevent misuse of SUPERB´s services as part of our efforts to keep our services safe and secure.Pursue the legitimate interests of SUPERB
To carry out risk analysis, fraud prevention and risk management.Pursue the legitimate interests of SUPERB
To improve our services and for general business development purposes, such as improving credit risk models in order to e.g. minimize fraud, develop new products and features and explore new business opportunities.Pursue the legitimate interests of SUPERB
Marketing, product and customer analysis. This processing forms the basis for marketing, process and system development, including testing. This is to improve our product range and to optimize our customer offering.Pursue the legitimate interests of SUPERB
To comply with applicable laws, such as anti-money laundering and book keeping laws and regulatory capital adequacy requirements and rules issued by our designated banks and relevant card networks. This means that we process personal data for know-your-customer (“KYC”) requirements, to prevent, detect and investigate money laundering, terrorist financing and fraud. We also carry out sanction screening, report to tax authorities, police enforcement authorities, enforcement authorities, supervisory authorities.Comply with applicable laws and to pursue the legitimate interests of SUPERB
To administer you order and/or purchase.Fulfil our contractual obligations towards you
To be able to administer participation in competitions and/or events.Pursue the legitimate interests of SUPERB
Risk management obligations such as credit performance and quality, insurance risks and compliance with capital adequacy requirements under applicable law.Comply with applicable laws and to pursue the legitimate interests of SUPERB
To administer payments information carried out by using our services from a Restaurant.Comply with applicable laws and to pursue the legitimate interests of SUPERB
To communicate with you in relation to our services.Fulfil our contractual obligations towards you and to pursue the legitimate interests of SUPERB

Other Than End-Customer Or Restaurant

CEO, board members, beneficial owners and authorised signatories of our customers

Categories Of Personal Data We Process

  • Identification information: e.g. identification number, ID or equivalent
  • Contact information: e.g. name, address, phone number, email or equivalent
  • Information related to legal requirements: e.g. customer due diligence and anti-money laundering requirements.
HOW DO WE USE IT (PURPOSE OF PROCESSING)LEGAL BASIS FOR THE PROCESSING (WHY THE DATA PROCESSING IS NECESSARY)
To provide our services and productsComply with applicable laws and pursue the legitimate interest of SUPERB
To confirm your identity and verify your personal and contact details.To comply with applicable laws.
To establish, exercise or defend a legal claim or collection procedures.Comply with applicable laws and pursue the legitimate interest of SUPERB
To comply with internal proceduresPursue the legitimate interest of SUPERB
To prevent misuse of SUPERB´s services as part of our efforts to keep our services safe and secure.Pursue the legitimate interest of SUPERB
To carry out risk analysis, fraud prevention and risk management obligations such as credit performance and quality, insurance risks and to comply with capital adequacy requirements.Pursue the legitimate interest of SUPERB
To comply with applicable laws, such as anti-money laundering and book keeping laws and rules issued by our designated banks and relevant card networks.Comply with applicable laws and pursue the legitimate interest of SUPERB

Representatives Of Customers

Categories Of Personal Data We Process

  • Identification information: e.g. identification number, ID or equivalent
  • Contact information: e.g. name, address, phone number, email or equivalent

For Existing Customers:

  • Behavioural and tracking details: e.g. location data, behavioural patterns, personal preferences, IP-number, cookie identifiers, unique identifier of devices you use to access and use the services and our websites
HOW DO WE USE IT (PURPOSE OF PROCESSING)LEGAL BASIS FOR THE PROCESSING (WHY THE DATA PROCESSING IS NECESSARY)
To provide our services and products.Comply with applicable laws and pursue the legitimate interest of SUPERB
To confirm your identity and verify your personal and contact details.Comply with applicable laws and pursue the legitimate interest of SUPERB
To establish, exercise or defend a legal claim or collection procedures.Comply with applicable laws and pursue the legitimate interest of SUPERB
To comply with internal procedures.Pursue the legitimate interest of SUPERB
For customer analysis, to administer SUPERB´s services, and for internal operations, including troubleshooting, data analysis, testing, research and statistical purposes.Pursue the legitimate interest of SUPERB
To ensure that content is presented in the most effective way for you and your device.Pursue the legitimate interest of SUPERB
To prevent misuse of SUPERB´s services as part of our efforts to keep our services safe and secure.Pursue the legitimate interest of SUPERB
To carry out risk analysis, fraud prevention and risk management.Pursue the legitimate interest of SUPERB
To provide you with information, news and marketing about our and similar services.Pursue the legitimate interest of SUPERB

End-Customers

Categories Of Personal Data We Process

  • Identification information: we do not process any identification information about you.
  • Contact information: e.g. your name, phone number, address and email address or equivalent.
  • Information related to legal requirements: e.g. customer due diligence and anti-money laundering requirements, bookkeeping.
  • Behavioural and tracking details: e.g. location data, behavioural patterns, IP-number, cookie identifiers, unique identifier of devices you use to access and use the services and our websites

Website Visitors And Individuals Telephoning Or E-Mailing Our Customer Support

Categories Of Personal Data We Process

  • Contact information: e.g. name, address, phone number, email or equivalent

For Existing Customers Visiting Our Website:

  • Behavioural and tracking details: e.g. location data, behavioural patterns, personal preferences, IP-number, cookie identifiers, unique identifier of devices you use to access and use the services and our websites

WHAT PERSONAL DATA DO WE COLLECT FROM THIRD PARTIES?

Third parties from which we obtain personal data can also be e.g. social networks or similar that you have linked your account with when using SUPERB.

HOW WILL WE NOT USE THE INFORMATION ABOUT YOU?

We will never use your personal data for any other purposes than those listed in this Privacy Policy, unless we collect your written consent or inform you prior to initiating any processing for new purposes or a purpose that is compatible with the purpose for which we collected the personal data, all in accordance with applicable laws and regulations.

What We Will Not Do With Your Personal Data:

We will not share personal data with third parties for them to use for their own marketing purposes without ensuring that there is a lawful ground to do so.

We will not sell your personal data to third parties.

WHAT ABOUT AUTOMATED DECISION MAKING?

Currently, SUPERB does not carry out any such processing that is defined as solely automated decision making, including profiling, under the General Data Protection Regulation (“GDPR”) that has ”legal effects” or otherwise similarly significantly affect you.

WANT TO KNOW MORE ABOUT OUR POLICY OF SHARING DATA WITH THIRD PARTIES?

Restaurants.

If you are an End-customer, SUPERB may share your data with the Restaurant from which you made a purchase. Such personal data is necessary for the Restaurant to execute and administer your purchase, including for handling potential complaints and disputes. For the personal data shared with Restaurants, the Restaurant’s data protection policy and personal data handling procedures apply. This means that SUPERB may share personal data pertaining to such End-Customers that purchase something from the Restaurant in the Online Store.

Third Party Service Providers.

We do not disclose any of your information to third party service providers. This is an important philosophy of SUPERB which we follow.

However, if you use our payment services our designated banks and relevant card networks may also come to process your personal data for their own fraud prevention and risk management. Selected service providers, such as certain credit bureaus, may also come to process your personal data to enhance and develop their own services.

Third Parties That Are Data Processors.

Some of the third parties that we share personal data with are data processors. A data processor is such a party that processes personal data on our instructions and on our behalf.

We collaborate with selected suppliers, which include processing of personal data on behalf of us. Examples include suppliers of IT development, maintenance, hosting and support but also suppliers supporting us with marketing.

When we share your personal data with data processors we only share them for purposes compatible with the purposes for which we have collected the data (such as performance of a contract). We always control all data processors and ensure that they can provide adequate guarantees as regards security and confidentiality of personal data. We have written agreements in place with all data processors through which they guarantee the security and confidentiality of personal data that they process on our behalf and limitations as regards third country transfers.

Third Parties That Are Data Controllers.

Some of the third parties that we share personal data with are independent data controllers. This means that we are not the ones that dictate how the data that we provide shall be processed. Examples are acquirers and other financial institutions. When your data is shared with independent data controllers their data policies and personal data processing principles apply.

WHAT ABOUT TRANSFERS TO A THIRD COUNTRY?

If we transfer your personal data to a third country, i.e. a country outside of the European Economic Area (“EEA”) we will comply with all applicable laws in respect of such transfer, including making sure that your personal data is kept secure, and ensure that appropriate safeguards are in place to ensure there is adequate protection, such as entering into contracts in the form approved by the European Commission.

Our preferred basis for transfer is the use of Standard Contractual Clauses.

SECURITY AND INTEGRITY – HOW DO WE PROTECT YOUR PERSONAL DATA?

We always process personal data in accordance with applicable laws and regulations, and we have implemented appropriate technical and organizational security measures to prevent that your personal data is used for non-legitimate purposes or disclosed to unauthorized third parties and otherwise protected from misuse, loss, alteration or destruction. The technical and organizational measures that we have implemented are designed to ensure a level of security appropriate to the risks that are associated with our data processing activities, in particular accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to your personal data including access control to premises, facilities, systems and data, disclosure control, input control, job control, availability control and segregation control.

HOW LONG DO WE STORE YOUR PERSONAL DATA?

We will not process personal data for a longer period than is necessary for fulfilling the purpose of our services, as set out in this Privacy Policy.. Your personal data will be anonymized or deleted once it is no longer relevant for the purposes for which it was collected.

This means that we as an example will only keep your data for as long as necessary for the performance of a contract and as required by applicable laws. If we keep your data for other purposes than those of the performance of a contract, such as bookkeeping and regulatory capital adequacy requirements, we keep the data only if necessary and/or mandated by laws and regulations for the respective purpose.

The data retention obligations will differ within the SUPERB company subject to applicable local laws.

WHAT SAY DO YOU HAVE IN HOW WE PROCESS YOUR DATA (AKA. YOUR RIGHTS)?

Generally, we believe you have the right to have your data processed only in accordance with your expectations. But you also have rights laid down by applicable law. Below you can read more about your rights, in the order we believe might be most relevant for you.

The Rights We Believe Are Most Relevant For You

  • You have the right to be informed about certain details on the processing of your personal data. We provide this information through this Privacy Policy.
  • You have the right to receive a copy of the personal data we process about you. You can contact us at dataprotection@superb.community for further information.
  • You have the right to correct the personal data we process about you if you see that it is inaccurate.
  • You have the right to object to our processing of your personal data.

Please note that there are exceptions to the rights below, so access may be denied, for example where we are legally prevented from making a disclosure.

Your Rights In Connection To Your Personal Data

Right To Be Informed

You have the right to be informed about how we process personal data about you. We do this in this Privacy Policy. You may however always contact us if you have any further questions.

Right Of Access

You have the right to access the personal data that we hold about you. In this respect, you may receive a copy of the personal data that we hold about you. For any further copies, we reserve the right to charge a reasonable fee based on our administrative costs. To exercise this right, please contact us as set out below. Please note that much of the personal data that we process about you is available and visible for you in your SUPERB Account.

This right means that you have a right to:

  • receive a confirmation about what personal data that we process about you
  • get access to your personal data, and
  • receive such supplementary information (which corresponds to the information that is provided in this Privacy Policy).

Please note that we might have to ask you to provide further information about yourself in order for us to be able to identify you and handle the request in an efficient and secure way. This may mean that we may require you to send in a copy of a valid ID, which we will also require you to sign.

Right To Rectification

We ensure that inaccurate or incomplete Personal Data is erased or rectified. You have the right to rectification of inaccurate or incomplete personal data that we hold about you.

Right To Erasure Of Your Personal Data (”Right To Be Forgotten”)

You have the right to erasure if:

  • the personal data is no longer necessary for the purposes it was collected or processed for (and no new lawful purpose exists)
  • your particular situation gives you the right to object to processing on grounds of legitimate interest (see more below) and there is no justified reason for continuing the processing;
  • the lawful basis for the processing is your consent, and you withdraw your consent, and no other lawful grounds exist,
  • processing the personal data has been unlawful, or
  • there is a legal obligation for us to erase the data.

Please note that due the fact that we provide such financial services which are subject to a license, we are in many cases obliged to retain personal data on you during your customer relationship, and even after that, e.g. to comply with a statutory obligation or where processing is carried out to manage legal claims.

Right To Restrict The Processing Of Your Personal Data

You have the right to request us to restrict the processing of your data (meaning that the personal data may only be held by us and may only be used for limited purposes) if:

  • the personal data we have about you is inaccurate,
  • the processing is unlawful and you ask us to restrict the use of the personal data instead of erasing it,
  • we no longer need the personal data for the purposes of the processing, but if we still need it for the establishment, exercise or defense of legal claims, or
  • you have objected to the processing claiming that the legal basis of legitimate interest is invalid and are waiting for the verification of this claim.

Right To Object To The Processing Of Your Personal Data

Where our lawful basis for processing your data is our legitimate interests, you have the right to object to the processing of your data if:

  • you can show that your interests, rights and freedoms regarding the personal data outweigh our interest to process your personal data, or
  • we process your personal data for direct marketing purposes, including but not limited to profiling.

This means that we will cease such processing unless we:

  • demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or
  • require the personal data in order to establish, exercise or defend legal rights.

If you choose to object to our further processing of your personal data as described in this Privacy Policy, please note that we may no longer be able to provide you with the services you have requested and may therefore terminate relevant agreements with you, see relevant terms and conditions for more information. In addition, we may continue to process your personal data for other legitimate purposes, such as to fulfil an agreement with you, to protect our interests in connection with legal proceedings and to fulfil our legal obligations.

If you have received marketing from us, you may at any time object to the marketing by contacting us at dataprotection@superb.community or opt out by following the instructions in the marketing material.

Right To Data Portability

You have the right to data portability:

  • for personal data that you provided to us, and
  • if the legal basis for the processing of the personal data is the fulfilment of contract or consent.

We will send a copy of your data in a commonly used and machine-readable format to you or a person/organization appointed by you, where technically feasible and where the exercise by you of this right does not adversely affect the rights and freedoms of others.

HOW DO YOU EXERCISE YOUR RIGHTS AND HOW CAN YOU CONTACT US OR THE DATA PROTECTION AUTHORITY?

Send us an email at dataprotection@superb.community and we’ll do our best to figure it out together.

WHAT ABOUT COOKIES?

Cookies are text files placed on your computer to collect standard internet log information and visitor use of the website and to compile statistical reports on website activities. You may set your browser not to accept cookies. However, in a few cases some of our website features may not function as a result.

Our website thus uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our website.

WHAT ABOUT OTHER THIRD-PARTY WEBSITES AND SERVICES?

Our websites and services may from time to time contain links to third party websites that are not controlled by us. If you visit such websites or use such services, please be aware that this Privacy Policy does not apply for such third parties’ processing, and we encourage you to carefully review how such third parties process personal data before using their websites or services.

HOW MAY WE CHANGE THIS PRIVACY POLICY?

We are constantly working on improving and developing our services, products and websites, so we may change this Privacy Policy from time to time. We will not diminish your rights under this Privacy Policy or under applicable data protection laws in the jurisdictions in which we operate. If the changes are significant, we will provide a more prominent notice, when we are required to do so by applicable law. Please review this Privacy Policy from time to time to stay updated on any changes.

Last updated:

25/05/2018