Privacy Policy

Windy Grill, Bulevar Mihajla Pupina 85-a, Registration number: 7092652 (hereinafter: „Organizer“ or „Windy“)., TIN 100000207 as the data controller has prepared this Notice to inform you about the processing and protection of your personal data.

The data we collect falls into three categories:

• information you provide to us;
• information we collect through automated means; and
• information we collect from other lawful sources.

As a rule, we collect data from you directly, and you provide it to us voluntarily. We will inform you when providing your personal data is necessary for the provision of a service or when required by law. Please note that if the information is necessary for providing the service or mandated by law, and you do not provide the required information, we will not be able to offer you our service. The collection of data depends directly on you.

You may provide us with the following data: personal information such as your name, postal and email address, phone number, date of birth, and other contact details when you register for our online or SMS services, participate in one of our sweepstakes, or contact us by phone or online services to ask a question, give a compliment, or express a complaint about our products and/or services; transaction data, including information about the products you purchase, prices, payment methods, and payment details; account information, such as your username and password that you use to access our online services or to purchase or use our products and services.

We collect the above-mentioned data for the purpose of concluding and fulfilling a contract with you, fulfilling our legal obligations, or based on our legitimate interest in accordance with Article 6, Paragraph 1, Point (b) of the General Data Protection Regulation (hereinafter GDPR), as well as in accordance with Article 12, Paragraph 1, Points 2, 3, and 6 of the Personal Data Protection Act of the Republic of Serbia (hereinafter: the Act). In addition, based on your consent in accordance with Article 6, Paragraph 1, Point (a) of the GDPR and Article 12, Paragraph 1, Point 1 of the Act, we may also collect the following data: information about your profile, including products and services you prefer, the time you most frequently visit us, and other personal data that you voluntarily disclose when communicating with us. We may use automated technology to collect data from your computer or mobile device when you visit our restaurants, use our online services, or interact with technologies in our restaurants. Automated data collection methods may include 'cookies,' locally shared objects, and web browsers. Below is more information about cookies and other technologies.

automated_data_collection

We will strive, whenever technically possible and reasonably expected of us, to request and obtain your consent for the collection and processing of these data by Winndy. You can withhold such consent for data collection by refusing to give the requested consent, as well as by using your device or internet browser settings and following the instructions of your mobile service provider, device manufacturer, or internet browser provider, whom you can contact for this purpose. Some of our online services and technologies in restaurants may not work properly if they do not have information about your location, which we will attempt to inform you about. If you wish to delete information we have collected that may reveal your location, please contact us at the address below. It is possible that we are legally required to retain some of such data. Data collection from other sources: We may collect data about you from other legitimate sources, ensuring that the data is collected legally. We may also collect publicly available information. For example, we may collect information you have posted on your public profile while interacting with us through that profile.

We may use the data we collect in the following ways:

• To provide you with our services and fulfill contractual obligations: to fulfill your requests, place orders, process payments for our products and services; communicate with you regarding your orders, purchases, or your accounts with us, as well as regarding your requests, questions, or comments; enable you to use our online services (including mobile applications); and provide customer support services, including resolving complaints about our services.
• In order to offer or improve our services and for other legitimate business reasons: to inform you about our products and services, sweepstakes, offers, promotions, or special events that we believe may be of interest to you (if you give us permission to do so); to personalize your experience in our restaurants and online services, including using analysis and profiling technologies to tailor the experience, to deliver content developed based on your estimated interests and tailored to how you use our online services or technologies in restaurants, which you always have the right to object to; to manage our business, including developing new products and services, conducting customer and business research, evaluating the effectiveness of our sales, marketing, and advertising; to manage our business, diagnose technical or service issues, manage our online services and restaurant technologies, prevent fraud, collect demographic information about our customers and identify usage patterns of our services; to maintain, manage, and improve our products, offers, promotions, and online services and other technologies.
• for the selection of our employees in competitions for vacant positions in accordance with legal regulations: for protection against, detection, and prevention of fraud and other criminal acts, as well as for protection against or filing our claims and liability claims; for compliance with legal obligations and our policies; for establishing, exercising, or defending against legal claims against us; and for monitoring and reporting on compliance issues.
• With your consent, we may use the data we collect for the following purposes: to provide location-based services; to offer online services to minors under 16 years old (with parental consent); to use cookies and similar technologies; to provide online services (including mobile applications) for you.

We may use the data we collect about you in other ways, which we will inform you about at the time of collection or for which we will seek your consent.

We do not sell your personal data and only share it with others as described in this Privacy Statement. We may share your personal data with vendors who provide certain services for us, such as order fulfillment, data processing, or other information technology services, managing promotions, conducting contests, prize draws, research and analysis, and personalizing user experiences with Windy. In such cases, we take measures (such as using standard data protection clauses) necessary to ensure an adequate level of protection for your personal data. We do not allow these vendors to use or share this information for any purpose other than providing services to us. For strategic or other business reasons, we may decide to sell or transfer all or part of our business. As part of such a sale or transfer, we may also transfer the information we have collected and stored, including personal data, to anyone involved in such a sale or transfer. Sometimes, we may share information that does not directly identify you. For example, we may share anonymous, aggregated statistical data about your use of our online services. Or, we may combine your information with information from other users and share it in a way that does not lead to the identification of any individual subject. Additionally, we are authorized to use and share data when necessary to comply with legal or regulatory requirements, to protect our online services and restaurant technology, to file or defend against claims and other legal demands, to protect the rights, interests, and safety of our companies or third parties, or as part of fraud or crime investigations, or violations of our policies.

When entering payment card data, confidential information is transmitted over a public network in a secure (encrypted) form using SSL protocol and PKI system, as the most advanced cryptographic technologies currently available. The security of data during purchase is guaranteed by the payment card processor. At no time is payment card data accessible to our system.

Windy may use 'cookies', web beacons, and other similar technologies on our online services, as well as in other areas of our business, such as online advertising, to collect information and deliver the services or products you requested. As mentioned earlier in this statement, we will try to obtain your consent for the use of such features in each such case. 'Cookies' and other tools are small text files placed on the user's web browser or device to record and/or collect data about the user. A web beacon is a small object or image embedded in a website, application, or email and is used to track activity. They are sometimes also called 'pixel' or 'tag'.

Please note the following: When you use our online services, you may be sent a 'cookie'. We may use 'cookies' and other tools temporarily ('session cookies' – which last only during your visit to the site) and permanently ('persistent cookies' – which last for a specified period). Our online services, as well as other areas related to our business, may have web beacons. We use 'cookies', web trackers, and other similar tools to collect data for the purposes described in this Statement.

We may use the above-mentioned technologies for the following purposes: to enable you to access and use our online services, which may not function properly without these technologies; to improve our products and services; to monitor the effectiveness of our online services (e.g. traffic, errors, page response time, popularity of individual content, etc.); to allow us to tailor our services to your preferences and interests; for marketing activities through targeted advertising; and for other purposes described in the section of this Statement titled 'How we use collected data.' For example, we may use certain tools to determine if you have opened an email or clicked on a link in the email; or how you use our websites and content of our mobile apps; or if you have opened an online ad for Windy. Windy and third parties (e.g. networks through which we advertise and whose privacy policies we do not control) may use these technologies to collect data about your online activities over a period of time and across third-party websites and devices, as well as during your use of our online content, to tailor our content to your interests.

We advise you to adjust the appropriate settings in your web browser if you do not wish to receive cookies or if you want your browser to notify you when you receive a cookie. Using the ‘Help’ content of your browser, learn how to change the settings regarding cookies. Some newer internet browsers may have a ‘Do Not Track’ option that sends a ‘Do Not Track’ message to all the websites you visit, letting them know you do not wish to have your activities tracked. Windy currently does not take action in response to a ‘Do Not Track’ signal because a unified technological standard for it has not yet been developed. However, we are monitoring the development of these technologies and it is possible that we will adopt such a standard when it is developed.

Targeted Advertising When you use our online services, Windy may collect information about your activities in order to offer you advertising content tailored to your interests. As stated earlier in this policy, the offering of advertising content depends on your consent, which you can withdraw at any time as described earlier in this policy. Please note that our advertisements may also appear on third-party websites from which we or our partners have purchased advertising space to display the advertising content. In this case, the collection and tracking of data related to access to such advertisements will be governed by the advertising site’s rules where the content is displayed. Windy does not control the privacy policies of such advertising sites, but will make reasonable efforts to ensure that its ads are not displayed on advertising sites that have not applied GDPR and other applicable data protection regulations.