Confidentiality policy

Welcome to this site, which, belonging to the Company, APPERO — SAS, SAS, 7 place de l'Hôtel de Ville, 7 place de l'Hôtel de Ville, 93600, Aulnay sous Bois registered with the RCS under the siret number 83935649000020 — is co-responsible for the processing of your personal data collected via the Appero application, with the Restaurant owner from whom you are ordering. Appero, an application for taking orders for digitized catering, is committed to the protection of your privacy and your personal data.The purpose of this policy is to gather information concerning the data processing implemented to explain to you how we, Appero, collect, use and communicate the information you provide to us via our institutional site, our store, the sites of our products and services, our dedicated portals and mobile applications. Please read it completely before using this site or sending us information about you. Users of the Appero Application are reminded that this software is a simple intermediary between the Customer and the Catering Establishment, and that as such, no sales contract binds the Customer and the owner of the Application.In the event of a conflict relating to the service or payment, the Customer is therefore invited to take action against the Establishment.The Application has no other purpose than to make the Establishment's communication data accessible to the Customer and to allow the Customer to place an order digitally with the Establishment.However, the Application collects data for this purpose, and it is therefore obliged to comply with the general regulations for the protection of data, whose obligations are described below.

1. A fair and transparent collection

For the sake of transparency, we take care to inform our customers and prospects of each treatment that concerns them. We collect information that you provide to us voluntarily, in particular when you consult and place an order in a Restaurant that is a member of the Appero network.

2. The principle of finality

When we process data, we do so for specific purposes: to allow you to consult and order a drink and restaurant service in an establishment.

3. Proportionate data processing

For each of the treatments implemented, we undertake to collect and use only data that is adequate, relevant and limited to what is necessary for the purposes for which they are processed. We ensure that the data is, if necessary, updated and that procedures are implemented to allow the deletion or correction of inaccurate data.

4. What personal data do we collect?

In particular, we collect and process your name, first name, email address, telephone number, social networks.

We do not process personal data that reveals racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, or genetic data, in order to uniquely identify a natural person, data concerning the sexual life or sexual orientation of a natural person.

5. When do we collect your personal data?

We collect information that you provide to us voluntarily, in particular when:
●You are viewing the smart menu of an establishment;
●You place and pay for an order in a catering service;
●You are participating in a game or competition;
●You contact our customer service;

6. What personal data is mandatory?

In order to be able to contract an order with our customers, certain data is mandatory: in particular those relating to your identity, your social contact details and your payment information

7. What are the legal bases and purposes for the processing of your personal data?

Some of the processing that we implement is necessary for the execution of a contract or for the execution of pre-contractual measures taken at your request. This is the case with treatments that pursue the following purposes:
●The management and monitoring of the commercial relationship: taking orders, managing your customer account, managing complaints;
●Sending information and newsletters;

Finally, treatments that pursue the following purposes are implemented to meet legal and regulatory obligations, namely:
●Billing and accounting management;
●The management of your rights as a data subject within the meaning of the applicable regulations on the protection of personal data.

8. How to manage your personal data?

You can send us your request for us to stop using and exploiting your personal data — unless keeping it is a legal requirement.

9. Who will be the recipients of your personal data?

The personal data that we collect, as well as those collected subsequently, are intended for us in our capacity as joint data controller. We ensure that only authorized persons can access this data. The persons authorized to access your data are:
●Call;
●The service providers with whom we work for the management of your orders and subscriptions as well as for the execution of certain services that we offer you (billing, payment, collection, customer satisfaction, etc...) for the purposes mentioned above, and only within the limit necessary for the accomplishment of the tasks entrusted to them. We strictly require our service providers to use your personal data only to manage the services we ask them to provide. We also ask these service providers to always act in accordance with the applicable regulations on the protection of personal data and to pay particular attention to the confidentiality and security of this data. Your personal data may be communicated in application of a law, a regulation, a decision of a regulatory or judicial authority and finally, if necessary for Appero, in order to preserve its rights and interests.

10. Where is your personal data stored?

Your personal data is stored either in our databases or in those of our service providers, which are located within the European Union.

11. What security measures are there for your personal data?

We attach great importance to the security of your data. Appropriate technical and organizational measures are implemented to ensure that data is processed in such a way as to guarantee its protection against accidental loss, destruction or damage that could affect its confidentiality or integrity.When developing and designing, or when selecting and using the various tools that allow the processing of personal data, we ensure that they allow ensure an optimal level of protection of the data processed. This is why we implement all appropriate measures to prevent, as far as possible, any alteration or loss of your data or any unauthorized access to it.When we use a service provider, we only communicate personal data to it after obtaining from the latter a commitment and guarantees on its ability to meet these security and confidentiality requirements.We conclude We work with our subcontractors with respect of our legal and regulatory obligations: contracts precisely defining the conditions and methods of processing personal data by them.

12. Will your personal data be transferred outside the European Union?

No

13. What are your rights with respect to your personal data?

We are particularly concerned about respecting the rights granted to you in the context of the processing of personal data that we implement, to guarantee fair and transparent treatments taking into account the particular circumstances and context in which your personal data is processed.

13.1 Your right of access

As such, you have the confirmation that your personal data is or is not being processed and when it is processed, you have the right to request a copy of your data and information concerning:
●the purposes of the treatment;
●the categories of personal data concerned;
●the recipients or categories of recipients as well as, where applicable, whether such communications should be carried out;
●where possible, the envisaged period for which personal data will be stored or, where this is not possible, the criteria used to determine this duration;
●the existence of the right to ask the joint data controllers to rectify or delete your personal data, the right to request a limitation of the processing of your personal data, the right to object to this processing;
●the right to file a complaint with a supervisory authority;
●information relating to the source of the data when it is not collected directly from the persons concerned;
●the existence of automated decision-making, including profiling, and in the latter case, useful information regarding the underlying logic, as well as the importance and the intended consequences of this processing for the persons concerned.

13.2 Your right to have your data erased

You can ask us to delete your personal data when one of the following reasons applies:
●personal data is no longer necessary in relation to the purposes for which they were collected or otherwise processed;
●you withdraw the consent previously given;
●you object to the processing of your personal data when there is no compelling legitimate reason for the processing;
●the processing of personal data does not comply with the provisions of applicable legislation and regulations. Your attention is drawn to the fact that the right to delete data is not a general right and that it can only be granted if one of the reasons provided for in the applicable regulations is present. Thus, if none of these reasons are present, Appero will not be able to respond positively to your request; this will be the case if it is required to keep the data due to a legal or regulatory obligation or for the establishment, exercise or defense of legal rights.

13.3 Your right to limit data processing

You can request the limitation of the processing of your personal data in the cases provided for by law and regulations.

13.4 Your right to object to data processing

You have the right to object at any time, for reasons relating to your particular situation, to the processing of your personal data whose legal basis is the legitimate interest pursued by the data controller.In the event of exercising such a right to object, we will ensure that we no longer process your personal data as part of the processing concerned unless we can demonstrate that we can have legitimate and compelling reasons to maintain this processing. These reasons must exceed your interests and your rights and freedoms, or the treatment must be justified for the establishment, exercise or defense of legal rights.You have the right to oppose commercial prospecting as well as profiling insofar as it is linked to such prospection.In particular, in terms of commercial prospecting, it is recalled that you can oppose receiving prospecting by post or by telephone insofar as it is linked to such prospecting. from Appero. In the case of prospecting by electronic mail (Email, SMS), Appero may use it if you gave your consent at the time of collection or if you are already a customer or if we come into contact with you on a professional basis. Therefore, you can object to it at any time by using the link in the email sent to you or by sending stop to the number in the message received.

13.5 Your right to the portability of your data

You have the right to the portability of your personal data. We draw your attention to the fact that this is not a general right. Indeed, not all data from all treatments are portable and this right only concerns automated treatments, excluding manual or paper processes.This right is limited to treatments whose legal basis is your consent or the execution of pre-contractual measures or a contract. You can request data portability according to the procedure defined below by specifying whether you would you like to receive them yourself or if that is technically possible for us, that we transmit them directly to another data controller. In the latter case, you will be sure to tell us the exact name of this data controller, his contact details as well as the service or person who should be receiving it. In order to facilitate the exercise of this right, you must inform this recipient of your request to our services.

13.6 Your right to withdraw your consent

When the data processing that we implement is based on your consent, you can withdraw it at any time. We then stop processing your personal data without calling into question the previous operations for which you had consented.

13.7 Your right to file an appeal

You have the right to file a complaint with the CNIL on French territory, without prejudice to any other administrative or judicial remedy.

13.8 Your right to define post-mortem instructions

You have the possibility to define specific guidelines relating to the storage, deletion and communication of your personal data after your death with our services according to the methods defined below. These specific guidelines will only concern the treatments implemented by us and will be limited to this area alone. Once this person has been appointed by the executive branch, you will also be able to define general guidelines for the same purposes.

13.9 How to exercise your rights

You can exercise these rights at any time by contacting our customer service: hello@appero.co, specifying your customer reference.For the data kept by the Restaurateur, we invite you to consult its privacy policy in the legal notices on its website.Last clarification: any request by post or email must be signed and accompanied by a photocopy of an identity document bearing your signature and specify the address to which the response should be sent to you. A response will then be sent to you within one month of receiving the request.

14. What is the retention period of your personal data?

Data processed for the management and monitoring of the contractual relationship

The entire duration of the contractual relationship plus the duration of legal requirements. The Customer's telephone number and email will be kept by the Restaurant Manager for a period of one week. The invoice can be kept for 5 years from the end of the contract.

Data processed for commercial prospecting of customers

Three years from the end of the commercial relationship

Data processed for the compilation of commercial statistics

3 years after the end of the contractual relationship. They are anonymized.

Data processed for the analysis and establishment of statistics relating to the consultation and use of the site, our services and the advertisements displayed on the site

13 months from collection

Data processed for the management of unpaid invoices

5 years from the end of the debt recovery procedure

Data processed for litigation management

Duration of proceedings until action to enforce a court decision that has become res judicata is prescribed.

Data processed for accounting management

The current fiscal year, increased by 10 years from the end of the year.

Data processed for the management of the right of opposition

Information allowing the right to object to be taken into account must be kept for a minimum of three years from the exercise of the right of opposition.

Data processed for the management of the rights of the persons concerned

1 month, except for the management of the right of opposition.

Shelf life

Purpose

Where required by regulation, these timelines may be longer. In addition, it is specified that in the event of collection of personal data for several purposes, it will be retained until the longest conservation or archiving period is exhausted.

15. Changes to this policy

We regularly update this policy according to legal developments and any updates will be available on this same page.

16. Your obligations as a user of the Application

Restaurant owners who are members of the Appero network are delighted to know that you are likely to share your photos of meals, drinks and other sweets on your social networks. However, we draw your attention to the fact that preparations are likely to be protected by copyright.

Therefore, we ask you to:
- specify the name of the establishment, if possible by tagging it, as well as the name of your dish.
- do not attempt to reproduce this work, in particular for profit.

Be careful not to post photos of people or third parties without their consent.