GetSnack – privacy policy

We are Applifting s.r.o., ID No.: 02542072, with registered office at Rohanské nábřeží 670/19, Karlín, 186 00 Praha 8 and with this document, We would like to inform you, how We handle Your personal data, when You use our GetSnack application (hereinafter also the "Application").

The app is a simple and smart solution to help You keep Your payments and snack bar purchases under control. The Application is a way for You and Your colleagues (or friends) to keep track of stock levels and control everything easily via the Application.

However, in order to operate the Application, We need to know certain personal information. In this document, We will explain You, what personal data We process, why We process it, what Your rights are and provide You with all other necessary information.

Processing is carried out in accordance with the Regulation (EU) 2016/679 of the European parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter also the „GDPR“).

1. What will We process and why?

To use the Application, You must create a user account. Unfortunately, there is no other way, because the user account is always linked to a specific account, for which the inventory is calculated and other processes in the Application are linked to it. At the same time, Your account can be linked to a specific organization, company, employer or group that manages its inventory. Thus, You can’t use the Application without creating an account. To create an account, We will need:

· The E-mail address, that We use to create an account and identify You. In addition to identifying You, We will also use this e-mail address to send You information about transactions, outage notifications, or news and snack bar products that You request. We will do so on the basis of a mutual contractual relationship created by Your acceptance of the terms of use, when You created Your user account within the meaning of Article 6(1)(b) of the GDPR.

Okay, Your account is created and now You can start using the Application, choose what You like, set up payment methods, or just use the Application as the Application allows You. Even in this case, We will process some of Your personal data. This will mainly be about the individual transactions You have made on the Application (what You bought, how much it was and how much it cost), information about which snack bar You are connected to, or the Application will request access to Your camera so that You can scan the barcode (don't worry, the Application will not look at the photos). We will primarily process all of the above information in order to provide You with the services associated with the Application, based on the performance of a mutual contractual relationship within the meaning of Article 6(1)(b) of the GDPR.

Technical information running in the background. Not all of the information We collect is visible and recognizable to You. Therefore, although We hope it never happens, it may happen that the Application stops working, freezes, or some other problem occurs. Therefore, We use technical information about the device on which the Application is installed. Yes, this is also personal information because it can be linked to Your user account and We then know, that this technical information is Yours. We only use this information to enable Us to further improve the Application and to troubleshoot any bugs, based on the performance of our contractual relationship under Article 6(1)(b) and our legitimate interest in ensuring the functionality of the Application.

We will also keep a record of all of the above information, whether it is Your email address, information about Your use of the Application, or technical information, so that We can work together to resolve any problems, complaints or other claims You may have against Us. The legal basis for this is our legitimate interest in protecting our own legal and proprietary claims. Should any of the above information be needed due to legal obligations, We will also process this data for the purpose of fulfilling legal obligations under Article 6(1)(c) GDPR.

The application is intended for persons over the age of 18.

If You are the person, who is in charge of a particular snack bar and We provide You with the service of the Application, We may also require other information necessary to make payment and perform our mutual obligations under the contract, based on Article 6(1)(b) of the GDPR and to fulfil our legal obligations under Article 6(1)(c) of the GDPR. Alternatively, We may also use them to protect our own legal and property claims based on legitimate interest.

In case You want to contact Us via the web form at https://www.getsnack.cz We will process everything You give Us, but only for the purpose of replying to Your message.

2. Where is the data stored and who can access it?

The following recipients have access to personal data:

· The storage provider, which is Google – but We store everything on servers in the EU.

· Google and Apple may have access to Your data because the App is hosted on their stores.

· Google, which provides Us with a service called Google Firebase – this service allows Us to check for any technical issues and outages with the Application.

· Providers of other tools that help Us ensure the smooth running of the Application.

· Our developers and staff - there are enough people involved in the development process that We may pass Your information to them if necessary, but only for the purpose of that development.

· The people who manage the snack bar of which You are a part of. This allows the snack bar manager to see the personal information of others, who are associated with that snack bar in the Application.

All of the aforementioned recipients of personal data guarantee the same privacy protections as those set out in this policy. If You are interested in knowing who are the specific recipients involved, please email Us at info@getsnack.cz.

3. How long will We keep the personal data?

We will always store personal data for as long as the storage is necessary in view of the purpose We have for the processing. Thus, We will keep personal data for as long as You have set up Your account in the Application. You can, of course, cancel Your account at any time. We have set up a policy, that We will inform You if You do not use the account for a long time.

The storage period will therefore always be based on the existence of the user account.

After cancelling a user account, We will only retain the personal data that We are required to retain by law, where there have been problems in the course of using the Application or in order to protect our own claims.

4. What are Your rights?

In relation to our processing, You can exercise:

· the right of access to personal data;

· the right to rectification;

· the right to erasure ("right to be forgotten");

· the right to restriction of data processing;

· the right to object to processing;

· the right to data portability;

· the right to file a complaint about the processing of personal data.

The right of access means that You can ask Us at any time to confirm whether or not the personal data relating to You is being processed and, if so, for what purposes, to what extent, to whom it is disclosed, how long We will process it, whether You have the right to rectification, erasure, restriction of processing or to object, where We obtained the personal data and whether or not automated decision-making, including profiling, is taking place on the basis of the processing of Your personal data. You also have the right to obtain a copy of Your personal data.

The right to rectification means that You can ask Us to correct or complete Your personal data at any time if it is inaccurate or incomplete. You can exercise this right without contacting Us, for example by clicking on Your user profile and selecting "Edit Account". You can then very easily correct any inaccurate information You have provided to Us.

The right to erasure means that We must delete Your personal data if (i) it is no longer necessary for the purposes for which it was collected or otherwise processed, (ii) the processing is unlawful, (iii) You object to the processing and there are no overriding legitimate grounds for the processing, (iv) We are required to do so by law, or (v) You withdraw Your consent in relation to the personal data You have consented to the processing of. Or simply write that You think We should no longer hold Your data and We will be sure to look into it and let You know.

The right to restrict processing means that until We have resolved any disputed issues about the processing of Your personal data, We must not process Your personal data other than to store it and, where appropriate, We may only use it with Your consent or for the establishment, exercise or defense of legal claims.

The right to object means that You can object to Us processing Your personal data for direct marketing purposes or for legitimate interest, including profiling based on our legitimate interest. If You object to processing for direct marketing purposes, Your personal data will no longer be processed for these purposes (this means, for example, newsletters You receive from Us). In the event of an objection to processing based on other grounds, this objection will be evaluated and We will then tell You whether We have complied with the objection and will no longer process Your data, or that the objection was not justified and the processing will continue. In any case, processing will be restricted until the objection is resolved.

The right to data portability means that You have the right to obtain personal data concerning You that You have provided to Us on the basis of consent or a contract, which is also processed by automated means, in a structured, commonly used and machine-readable format, and the right to have that personal data transmitted directly to another controller.

If You have any comments or complaints about data protection or a question or to exercise any of Your rights, please contact Us at info@getsnack.cz. We will respond as soon as possible, but no later than one month.

Our activities are also overseen by the Data Protection Authority in Czech republic, to whom You can file a complaint if You are dissatisfied. You can find out more on the website of the Authority (www.uoou.cz). However, We would be happy if You consult Us first about any problem.

5. How up to date is this policy?

We prepared and issued the policy on the date the Application was made available, so it is effective from 1 Nov 2022. However, there may be changes in the future. If this happens, We will inform You before processing and We will also keep past versions so that You have an overview of what was in effect when.