Privacy Policy
The Captain Cook and all Captain Cook franchisees undertake to protect the privacy of their visitors and users. The following data protection declaration describes which data the Captain Cook Limited (hereinafter referred to as “we”) processes and how we use the relevant data to help our users and visitors use our customer application for mobile device users, via a web application on a website (e.g captaincookng.com) or via an application on a “self-order kiosk” (the “Applications”) and our on-demand services ( collectively referred to as the “services”) to offer even greater benefits. Please read the following provisions carefully so that you become aware of our data protection declaration. Please note that Captain Cook Nigeria Captain Cook Limited involves MENU Technologies AG (“MENU”) as data processor as part of data processing and that it also processes your personal data for us as listed in this data protection declaration.
Captain Cook Limited reserves the right to change this privacy policy. If you have any questions about this data protection declaration, please contact us at info@captaincookng.com
1. Definition
“User” refers to a person who uses the applications and / or has registered and registered with Captain Cook Limited for the use or potential use of the service.
Products: Means the goods and products both tangible and intangible offered on the website.
Personal Data: means any information collected from you in relation with your use of this service which is capable of identifying you.
Third Party: means any natural or legal person, public authority, establishment or any other body other than the data subject, the data controller, the data administrator and the persons engaged by data controller or the data administrator to process personal data.
“Participating restaurant” refers to Captain Cook Franchisee. These are solely responsible for the catering and restaurant services.
2. General
This privacy policy is designed to inform you about the personal data we collect, how we collect this data, the uses of this data, and your rights relating to the personal data when you use this service or purchase the products offered on the websites.
We are committed to protecting your personal data while you use this website.
Captain Cook Limited never knowingly collects personal information from children under the age of 13. The applications are only intended for use by adults. If you believe that your child under 13 years of age used the applications and thus provided us with personal data, please contact us at info@captaincookng.com. We will then endeavour to delete the application account and the corresponding personal data.
The responsibility for the processed personal data is Captain Cook Limited,
Captain Cook Limited, participating restaurants and other companies (e.g. MENU) may be involved in the processing of data that are related to activities via the applications and / or in connection with the services described in the data protection declaration. Captain Cook Limited, the participating restaurants and any other companies act for the purposes stated in this data protection declaration and comply with the applicable data protection laws.
Captain Cook Limited, participating restaurants and other companies (e.g. MENU) may be involved in the processing of data that are related to activities via the applications and / or in connection with the services described in the data protection declaration. Captain Cook Limited, the participating restaurants and any other companies act for the purposes stated in this data protection declaration and comply with the applicable data protection laws.
THE PERSONAL DATA WE COLLECT FROM YOU
We collect various information to enable us provide good service to all our users. (for the sake of orderliness the data collected should be group)
Depending on how our service will be used, the different types of personal data we collect are as follows:
In cases where you provide us with data on other persons within the legally permissible framework (such as when issuing a receipt), it is your responsibility to ensure that the personal data concerned and the further processing by us is in accordance with them and that the Data protection declaration complies with the applicable data protection laws. For example, you must inform the data subject and, if necessary, obtain their consent to the processing of their personal data for the purposes described in this data protection declaration.
Your personal data will be processed by MENU and saved by an external provider.
We collect various information to enable us provide good service to all our users. (for the sake of orderliness the data collected should be group)
Depending on how our service will be used, the different types of personal data we collect are as follows:
- REGISTERED USERS: During the process of your registration / changing user profile, we may collect the following information like name, email address, password (encrypted), restaurant orders, user agent when logging in, IP address, credit card information (will not be saved ), comments on orders, business e-mail address, home and / or delivery address, hosted persons, occasion, signature, possibly collected and / or redeemed points Captain Cook Limited, type of bonus for redeeming points.
- FOR PARTICIPATING RESTAURANTS: name, address, email address, password (encrypted), telephone number, vat, currency, tip (if any), contact person and bank details (will not be saved by or MENU; see paragraph 3.4 below.
- UNREGISTERED USERS: (if you place an order via an application on a “self-order kiosk” or web-application without having registered or logged in) the orders placed will be processed by us and the participating restaurant will only receive the data for order processing like order, payment details store location.The receipts are saved on our servers, i.e. those of MENU. The payment information is processed by the payment processor. The payment process is authorised by the payment processor and confirmed back to us, i.e. MENU. When ordering from a “self-order kiosk” with a login (if any) – provided that personal data is being processed – no more data is processed than when ordering via the other applications.
In cases where you provide us with data on other persons within the legally permissible framework (such as when issuing a receipt), it is your responsibility to ensure that the personal data concerned and the further processing by us is in accordance with them and that the Data protection declaration complies with the applicable data protection laws. For example, you must inform the data subject and, if necessary, obtain their consent to the processing of their personal data for the purposes described in this data protection declaration.
Your personal data will be processed by MENU and saved by an external provider.
3. For What Purposes we Process Your Personal Data?
3.1. Technical Operation and Functionality of the Website and Application
When you visit our website, e.g. to use our web application, our web administrators can store your personal data, including technical data, such as your IP address, the websites you visit, the internet browser you use, the one you used beforehand and subsequently visited websites and the duration of the visit / session, so that we can guarantee the proper functioning of our website. In certain cases, the browser can also query your current location to optimize your user experience. This technical data enables our web administrators to manage the website, for example by solving technical problems or improving access to certain areas of the website. This is how we ensure that you can (still) find the information provided on the website quickly and easily.
If you use our mobile application or web application, we also process your personal data, including technical data, such as for example your IP address and your device type. We use this data to provide the services, to guarantee the functions of the application, to solve technical problems, to provide you with the correct and up-to-date version of the application and to further improve the functionality of the application.
In so far as GDPR is applicable, the legal basis for the technical operation and functionality of the website and the application is Art. 6 Para. 1 lit. f GDPR (balancing interests, based on our legitimate interest in providing you with the functions of the website and the application) and Art. 6 Para. 1 lit. b GDPR (contract initiation and contract fulfilment).
Also, section 2.2(a) of the NDPR stipulates that processing shall be lawful where the processing of the data is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
If you use our mobile application or web application, we also process your personal data, including technical data, such as for example your IP address and your device type. We use this data to provide the services, to guarantee the functions of the application, to solve technical problems, to provide you with the correct and up-to-date version of the application and to further improve the functionality of the application.
In so far as GDPR is applicable, the legal basis for the technical operation and functionality of the website and the application is Art. 6 Para. 1 lit. f GDPR (balancing interests, based on our legitimate interest in providing you with the functions of the website and the application) and Art. 6 Para. 1 lit. b GDPR (contract initiation and contract fulfilment).
Also, section 2.2(a) of the NDPR stipulates that processing shall be lawful where the processing of the data is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
3.2. Customer Services
When you register as a user, we collect your name, your email address, your password, your IP address and your device type as well as your credit card number and the expiry date of the card (see above).
We use your personal data and contact information to provide the services, for communication purposes relating to your orders, for advertising offers and for announcements related to the services, such as when our services are temporarily unavailable due to maintenance work. By the continued use of our website, you acknowledge that you have reviewed the privacy policy and agree to its terms. This also means that you have consented to the use of your personal data and have accepted the applicable disclosures. We reserve the right to deactivate your account if we suspect that you are using our application to commit fraudulent or illegal acts or if you violate our terms of use.
As far as GDPR is applicable, the legal basis for customer service is Art. 6 Para. 1 lit. f GDPR (balancing of interests, based on our legitimate interest in providing you with the services of our customer service) and Art. 6 Para. 1 lit. b GDPR (contract initiation and contract fulfilment).
We use your personal data and contact information to provide the services, for communication purposes relating to your orders, for advertising offers and for announcements related to the services, such as when our services are temporarily unavailable due to maintenance work. By the continued use of our website, you acknowledge that you have reviewed the privacy policy and agree to its terms. This also means that you have consented to the use of your personal data and have accepted the applicable disclosures. We reserve the right to deactivate your account if we suspect that you are using our application to commit fraudulent or illegal acts or if you violate our terms of use.
As far as GDPR is applicable, the legal basis for customer service is Art. 6 Para. 1 lit. f GDPR (balancing of interests, based on our legitimate interest in providing you with the services of our customer service) and Art. 6 Para. 1 lit. b GDPR (contract initiation and contract fulfilment).
3.3. Activation of Captain Cook Limited-Application
3.3.1. Location Information
Information about you location can also be collected where you provide your address or postal/zip code or we may approximate your location based on your IP address. If you provide our mobile applications access to location services on your device, we and our third party providers may collect location data through GPS, WIFI, wireless network triangulation or other similar methods.
We collect and process location information, for example in participating restaurants or when you place an order via the applications, provided you have given us your prior consent. We use the relevant data to inform the relevant participating restaurant in which the respective order was placed so that the service staff can process the order accordingly.
In so far as the GDPR is applicable, the legal basis for processing the location information is Art. 6 Para. 1 lit. b GDPR (contract initiation and contract fulfilment).
We collect and process location information, for example in participating restaurants or when you place an order via the applications, provided you have given us your prior consent. We use the relevant data to inform the relevant participating restaurant in which the respective order was placed so that the service staff can process the order accordingly.
In so far as the GDPR is applicable, the legal basis for processing the location information is Art. 6 Para. 1 lit. b GDPR (contract initiation and contract fulfilment).
3.3.2. Orders
When you place an order via the application, we process in particular your first and / or last name, your order and your telephone number and forward it to the participating restaurant so that the service staff is able to process your order accordingly and notify you once your order is ready for pick-up. If one of our restaurants serves the orders to the table, the table number or your location is also determined so that the service staff can serve your order accordingly to your table. If you have placed an order for delivery, your home and / or delivery address will also be processed in order to be able to deliver. If you collect points with your order, we will credit it to the points account we hold for you. If you redeem points with an (award) order, we also book this redemption in the points account we hold for you.
Insofar as GDPR is applicable, the legal basis for processing the above-mentioned order data is Art. 6 Para. 1 lit. b GDPR (contract initiation and contract fulfillment).
Insofar as GDPR is applicable, the legal basis for processing the above-mentioned order data is Art. 6 Para. 1 lit. b GDPR (contract initiation and contract fulfillment).
3.3.3. Payment Processing
If you register as a user, your credit card data and data of other payment methods will be forwarded by MENU to a PCI-compliant payment processing provider and processed by the latter in order to process payments for orders placed by you via the applications. Captain Cook , Captain Cook Limited Franchisee and MENU are allowed to transfer the credit card details or data of other payment methods you have registered to other PCI-compliant payment processors. Captain Cook, Captain Cook Limited FN and MENU itself do not collect credit card information.
As far as the GDPR is applicable, the legal basis for payment processing is Art. 6 Para. 1 lit. b GDPR (contract initiation and contract fulfilment).
As far as the GDPR is applicable, the legal basis for payment processing is Art. 6 Para. 1 lit. b GDPR (contract initiation and contract fulfilment).
3.3.5. Marketing
Captain Cook and Captain Cook Limited Franchisee can use your contact information to send you general information about what’s new at Captain Cook. We may share limited data with our preferred marketing and strategic business partners so that they can provide you with information and marketing messages about product or services that may interest you. You can unsubscribe from these notifications at any time.
As far as GDPR is applicable, the legal basis for processing for marketing purposes is Art. 6 Para. 1 lit. f GDPR (balancing interests, based on the legitimate interest of the person responsible to advertise his services).
As far as GDPR is applicable, the legal basis for processing for marketing purposes is Art. 6 Para. 1 lit. f GDPR (balancing interests, based on the legitimate interest of the person responsible to advertise his services).
3.3.6. Compilation of Administrative and Statistical Data
Captain Cook Limited and MENU use your personal data in an anonymous and aggregated form to monitor exactly which functions of the service are used the most, to analyse usage patterns and to determine where they offer their services and where they should focus. You can provide this information to third parties for industry analysis and statistical purposes.
3.3.7. Cookies / Google Analytics
Captain Cook Limited uses cookies. Cookies are small text files that a website places on your computer or mobile device when you visit a page or website for the first time. Cookies help us to recognize your device the next time you visit the website. Cookies have different functions. With their help we can, for example, recall your attitudes and interests. Cookies can help us to analyze how well our website works or to adapt our content so that the relevant information is provided to you. Only the session ID is saved and transmitted in the cookies.
As far as GDPR is applicable, the legal basis for the processing of personal data using cookies is Art. 6 Para. 1 lit. f GDPR.
Most browsers can be set in the settings so that they no longer accept cookies or you will be notified when you receive a cookie. In most browsers you will find information on possible changes to your browser settings under the “Help” menu item. If you decide to deactivate and / or delete cookies in the future, you must take into account that some Captain Cook Limited functions will then no longer be available to you.
As far as the GDPR is applicable, the legal basis for the processing of personal data using cookies is Art. 6 Para. 1 lit. f GDPR.
We may collect analytics, data or use third party analytics tools to help us measure traffic and usage trends for the service and to understand more about the demographics and behaviours of our users. To remember information so that you will not have to re-enter it during your visit or the next time you visit the sites. To provide custom personalised content and information including targeted content advertising.
As far as GDPR is applicable, the legal basis for the processing of personal data using cookies is Art. 6 Para. 1 lit. f GDPR.
Most browsers can be set in the settings so that they no longer accept cookies or you will be notified when you receive a cookie. In most browsers you will find information on possible changes to your browser settings under the “Help” menu item. If you decide to deactivate and / or delete cookies in the future, you must take into account that some Captain Cook Limited functions will then no longer be available to you.
As far as the GDPR is applicable, the legal basis for the processing of personal data using cookies is Art. 6 Para. 1 lit. f GDPR.
We may collect analytics, data or use third party analytics tools to help us measure traffic and usage trends for the service and to understand more about the demographics and behaviours of our users. To remember information so that you will not have to re-enter it during your visit or the next time you visit the sites. To provide custom personalised content and information including targeted content advertising.
3.3.8. Legal Basis for the Processing of Personal Data
As far as GDPR is applicable, the following applies:
Insofar as we obtain the data subject’s consent for the processing of personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) as the legal basis for the processing of personal data.
When processing personal data, which is necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR as the legal basis.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.
If processing is necessary to safeguard the legitimate interests of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 (1) lit. f GDPR as the legal basis for processing.
3.3.9. No Obligation to Provide Personal Data
You are not obliged to provide your personal data. Without your personal data, however, we cannot provide our special services to you, or only partially, through the applications.
4. Release of your Data by us / Transmission in third Countries.
We may use various third parties and external companies to enable or provide the services for us, process payments, provide customer support, provide location information to participating restaurants, provide marketing services, and provide website-related services (including maintenance services, database management, web analysis) and improving website functions) or to support us in analysing the use of our services. These third parties have access to your personal data and process it in order to fulfil the tasks mentioned for us. This is in particular MENU, which operates the application and services for us.
For this purpose, your personal data will be transmitted to and processed in countries other than Switzerland, including countries (such as the USA) that do not have data protection laws comparable to Switzerland. You hereby consent to the transfer and processing of your personal data to such countries, particularly to the United States. We transfer personal data to locations in countries outside the European Union (so-called third countries) so far
it is required by law (e.g. tax reporting requirements),
You have given your consent,
this is legitimated by the legitimate interest under data protection law and there are no higher interests worthy of protection of the data subject that conflict with this or
it is necessary to provide our services to you
These are in particular:
Captain Cook Limited discloses your personal data to the extent legally required or necessary for the establishment, exercise and defence of legal claims and legal procedures and, in an emergency, also data relating to security.
In addition, we transmit your personal data via the cash register system to the participating restaurant in which you would like to place an order.
- PCI compliant payment processor for payment processing
- Hosting provider especially for hosting data and applications;
- Helpdesk/Support;
- Business Intelligence Provider
- Communications Service;
- Business applications for email communication.
Captain Cook Limited discloses your personal data to the extent legally required or necessary for the establishment, exercise and defence of legal claims and legal procedures and, in an emergency, also data relating to security.
In addition, we transmit your personal data via the cash register system to the participating restaurant in which you would like to place an order.
5. Your Rights
THE RIGHT TO BLOCK PERSONAL DATA PROCESSING IN VIOLATION OF ANY LAW.
THE RIGHT TO BE INFORMED ABOUT ANY RECTIFICATION OF ANY PROCESSING CARRIED OUT.
As a user, you have a right to information about your personal account. This also applies to information that you have provided to us with regard to orders placed via the application. You can exercise your rights under applicable data protection laws, such as: a. enforce the right to request the correction or deletion of your personal data or to object to the processing of your personal data at any time by sending us an email at info@captaincookng.com or contacting us at the address given in section 10. A copy of your ID card or passport must be enclosed for clear identification.
As far as GDPR is applicable, the following applies: According to Article 15 GDPR, every data subject has a right to information. According to Article 16 GDPR, the data subject can request the correction of incorrect personal data. According to Article 17 GDPR, the data subject has the right to erasure or, according to Article 18, the right to restrict processing. Likewise, the person concerned can object to the processing of personal data relating to them under the conditions of Article 21 GDPR. According to Article 20 GDPR, the data subject has the right to data portability. Sections 34 and 35 BDSG also apply to the right to information and the right to erasure in Germany. To exercise these rights, you can contact the following office: Captain Cook Limited, Mokola Rd, Mokola Hill 200285, Ibadan..
You have the right to withdraw your declaration of consent under data protection law at any time. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal. In addition, you have a right to lodge a complaint with the competent data protection supervisory authority in accordance with Article 77 GDPR in conjunction with Section 19 BDSG [insert other reference to local law if necessary].
Captain Cook Limited reserves the right to charge reasonable processing fees for providing relevant information in the event of unsubstantiated or excessive requests.
You can also change your personal data via your Captain Cook Limited account and revoke the consent you have given.
THE RIGHT TO BE INFORMED ABOUT ANY RECTIFICATION OF ANY PROCESSING CARRIED OUT.
As a user, you have a right to information about your personal account. This also applies to information that you have provided to us with regard to orders placed via the application. You can exercise your rights under applicable data protection laws, such as: a. enforce the right to request the correction or deletion of your personal data or to object to the processing of your personal data at any time by sending us an email at info@captaincookng.com or contacting us at the address given in section 10. A copy of your ID card or passport must be enclosed for clear identification.
As far as GDPR is applicable, the following applies: According to Article 15 GDPR, every data subject has a right to information. According to Article 16 GDPR, the data subject can request the correction of incorrect personal data. According to Article 17 GDPR, the data subject has the right to erasure or, according to Article 18, the right to restrict processing. Likewise, the person concerned can object to the processing of personal data relating to them under the conditions of Article 21 GDPR. According to Article 20 GDPR, the data subject has the right to data portability. Sections 34 and 35 BDSG also apply to the right to information and the right to erasure in Germany. To exercise these rights, you can contact the following office: Captain Cook Limited, Mokola Rd, Mokola Hill 200285, Ibadan..
You have the right to withdraw your declaration of consent under data protection law at any time. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal. In addition, you have a right to lodge a complaint with the competent data protection supervisory authority in accordance with Article 77 GDPR in conjunction with Section 19 BDSG [insert other reference to local law if necessary].
Captain Cook Limited reserves the right to charge reasonable processing fees for providing relevant information in the event of unsubstantiated or excessive requests.
You can also change your personal data via your Captain Cook Limited account and revoke the consent you have given.
6. Automated decision in individual cases including profiling
As far as GDPR is applicable, the following applies: In connection with the provision of our services, you will not be subject to a decision based on automated processing in accordance with Article 22 GDPR. If we use such procedures in individual cases, you will be informed about them and your associated rights within the framework of the legal requirements.
Some of your data is processed automatically in order to evaluate certain personal aspects (profiling). In particular, their order behaviour for the promotion of products is analysed.
Some of your data is processed automatically in order to evaluate certain personal aspects (profiling). In particular, their order behaviour for the promotion of products is analysed.
7. Data Storage
Unless otherwise stated in this data protection declaration, we store your data until you delete your Captain Cook Limited account. If you would like to delete your Captain Cook Limited account or request that we no longer use your data in the future to provide services to you, please contact us at info@captaincookng.com. If these are not necessary to comply with legal obligations or to settle disputes, we will delete your personal data after deleting your account.
8. Safety
Captain Cook Limited has taken appropriate technical and organizational security measures against the loss or unlawful processing of your personal data. For this purpose, your personal data will be securely stored in our database, i.e. the database of MENU. We use industry-standard, economically appropriate security measures, such as firewalls and SSL (Secure Socket Layers), and also physically secure the locations where the data is stored.
As effective as our security measures are, no security system is infallible. We cannot guarantee the security of our database, nor can we guarantee that the information you provide will not be intercepted when it is transmitted to us over the Internet. The transfer of your data to Captain Cook Limited is always at your own risk. We recommend that you do not disclose your password to anyone.
As effective as our security measures are, no security system is infallible. We cannot guarantee the security of our database, nor can we guarantee that the information you provide will not be intercepted when it is transmitted to us over the Internet. The transfer of your data to Captain Cook Limited is always at your own risk. We recommend that you do not disclose your password to anyone.
9. Changes to this Privacy Policy
We can update this privacy policy to reflect changes in our information and data processing practices. In the event of significant changes, we will inform you before the corresponding change takes effect by e-mail and via a message on our website. By continuing to use the website and / or application and / or services, you acknowledge and agree to the updated data protection declaration. We recommend that you visit this page regularly to find out about the latest innovations in our data protection measures.
10. Contact Information
11. Information about your right to object in accordance with Article 21 GDPR
11.1 Right to object on a case-by-case basis
As far as GDPR is applicable, the following applies: You have the right, for reasons that arise from your particular situation, at any time against the processing of your personal data, which is based on Article 6 (1) lit. e (data processing in the public interest) or lit. f (data processing based on a balance of interests), to object; this also applies to profiling based on these provisions.
A data subject has the right to object to the processing of his/her data where the data controller intends to process the data for marketing (Section 2.8(a) of the NDPR).
If you file an objection, we will no longer process your personal data. Something else only applies if we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms or if the processing serves to assert, exercise or defend legal claims.
A data subject has the right to object to the processing of his/her data where the data controller intends to process the data for marketing (Section 2.8(a) of the NDPR).
If you file an objection, we will no longer process your personal data. Something else only applies if we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms or if the processing serves to assert, exercise or defend legal claims.
11.2 Recipient of an objection
The objection can be made informally with the subject “objection” stating your name, address and date of birth and should be addressed to: info@captaincookng.com.