Privacy statement

In this privacy statement we will explain what data we collect, how we use and protect data and how you can have a say in how your personal data is used.

1. What data do we collect?

We may collect data about you when you register to use our services, use our website, visit our restaurants or contact us in some other way. The data we collect can be divided into two categories based on the data source: (a) the data you have given us; and (b) the data we collect automatically. We may connect data you have given us to automatically collected data.

Data given by you:

We may collect personal data given by you, including your first and last name, phone number, email address. We may also collect other data you have given us. In addition, the register will also contain information about whether or not you have given your consent to receive direct marketing via electronic devices as specified by law.

Automatically collected data:

We may use different methods to automatically collect data from your computer or mobile device when you use our website. Automatic methods may include cookies, web beacons and other technologies. Automatically collected data may include your IP address, location, the operating system of your computer or mobile device, the browser you use, the type and settings of your mobile device and how you use our services, such as sites you have visited on our website or mobile application. The majority of the automatically collected data about how you use our website and mobile application are only stored temporarily. You may prevent data based on cookies from being collected automatically by blocking cookies in your browser settings. However, some services may not work correctly if you block cookies. You can also adjust what data are automatically collected on your mobile device by changing the permissions you have granted our application in your mobile device’s settings.

2. How do we use the data we collect?

Providing and improving services:

We may use your data to provide services and loyal customer benefits to you as well as to contact you in matters related to your customer relationship with us. We may also use your data to advertise and market restaurant services we believe may interest you. Finally, we may also use the data we collect to improve our services.

Basis for processing personal data:

The primary basis for processing personal data is to maintain the customer relationship between the restaurant and you (relevant connection) and the related legitimate interest in managing the customer relationship and offering targeted marketing. We may also process your data on the basis of consent you have given.

3. Do we share and disclose the data we collect?

We do not sell your personal data and we only disclose your data in the manner described in this privacy statement. The data are disclosed in accordance with the data protection legislation in force. Your personal data are not transferred outside the European Union or the European Economic Area.

We may disclose your data within the two restaurants to persons responsible for customer loyalty programs and sales and marketing. In order to provide customer service, we may transfer your personal data to service providers who provide us with services such as data processing and other IT services, campaign, competition and raffle services and opinion and market research services. We do not allow such service providers to use or disclose your personal data for any other purpose than to provide a service on our behalf.

If we decide to sell or transfer our business operations, in full or in part, for strategic or business reasons, we may, as part of such sale or transfer, disclose data we collect and store, including customer details containing your personal data, to any party involved in the said sale or transfer.

We may also disclose your personal data if we deem it necessary in accordance with the applicable laws, regulations or requests made by the authorities.

4. Data security

We store your data in an electronic register and we have taken the appropriate measures to protect your data against data breaches. Accessing the register to modify or process the data contained there requires a username and password and an encrypted connection. The register can only be accessed by authorised persons who are responsible for maintaining and managing the system and customer relationships. The data contained in the register are protected against unauthorised access and the use of the register is monitored.

5. Storing and deleting data

We store the personal data we collect only for as long as it can be deemed appropriate to keep the data in terms of the purposes described in this privacy statement, unless storing the data for longer is required or permitted by law. We will delete your data saved in the register if you withdraw from the list of loyal customers.

6. Changes to the data security policy

We may occasionally make changes to this privacy statement and our data security policy. If the changes are significant, we will notify our customers on our website or via other channels, such as email. We hope that you will read this privacy statement carefully so that you are up-to-date on our data protection policy.

7. Your rights and exercising them

You have the right to review data about you and to request rectification, erasure or completion of inaccurate or incomplete personal data. You have the right to exercise any rights granted to you by data protection legislation, such as the right to restrict and object to the processing of data as well as the right to transmit your data from one system to another. However, we ask that you keep in mind that in some situations, you may not be able to use or register to use a service unless you consent to your data being collected, stored and processed.

You also have the right to prohibit the use of your personal data for direct advertising, distance selling or other direct marketing purposes by requesting to be withdrawn from the customer list. If you have consented to receiving direct marketing from us, you may later withdraw your consent by following the instructions included in our direct marketing messages.

8. Contact details

If you have any questions about our data protection policies or if you want to exercise your data protection rights, please email or write to us:

LULUS@HAWAIIRESTAURANTS.FI

LATITUDE25@HAWAIIRESTAURANTS.FI

Latitude 25 oy