Please read with understanding before using our services.
Dear Customer,
We are pleased that you are interested in data protection. We would like to give you an easily understandable overview of our data protection process.
Our goal is to provide you with an amazing and protected customer experience that also means that you can always trust us, and that we are always transparent and honest with you. Your trust in our product is the reason why we can provide you with an amazing customer experience. We would like to thank you for this cooperation.
We are TRIO TOWN with registration number: 192101, you can always contact us via the following ways:
Via e-mail: info@triotown.com Address:
TRIO TOWN
Erbil,100m St. next to Iraqi Airways, Opposite Erbil International Airport
+964 750 2000 446
KRG - IRAQ
RIGHT OF MODIFICATION
We reserve the right to update this privacy policy in compliance with the statutory provisions. We will inform you of any significant changes, such as changes of purpose or new purposes of the processing. In this case, we will not process your personal data unless having your consent on the modifications.
PRIVACY IS YOUR RIGHT AND YOU HAVE THE CHOICE
As a customer, you have the choice of which information you would like to share with us. Of course, we need some information for the fulfillment of our contract. However, this does not always require all the data which you can make available to us.
Data processing
We use required personal data only so we can serve you which is mandatory for us to be able to deliver to you. Without your consent on using your data, you will not be able to use our services.
You have the right to view and consent to the personal data privacy policy before processing your personal data.
You have the right to be informed which data we store and process about you.
If you notice that stored data is incorrect, you can correct your data directly in your profile.
You can ask us at any time to delete the data we have stored about you and then your account will be deactivated.
You can ask us to transmit the data stored about you in a machine-readable format to you. In this context, we will make the data available to you in electronic format.
If you believe that we have done something wrong with your personal data or your rights, you can raise a complaint at any time by sending an email to info@triotown.com.
We process your personal data only in accordance with strict legal requirements. We pay particular attention to the fact that all principles for the processing of personal data are taken into account. TRIO TOWN pays great attention to transparency. Therefore, we only process your data if this is lawful and you can reasonably expect it to be processed. If, in the course of our evaluation, we come to the conclusion that the processing cannot reasonably be expected, we will only carry out the processing with your express consent.
In the following description of our processing activities, we refer in each case to categories of personal data. A category includes several personal data, which are usually processed together for purposes.
Personal data is information that can identify you or even make you identifiable.
We generally process the following categories of personal data for the following reasons:
Name, Cell Phone number, email address, your ID from any social media (if applicable).
Reason:
If you contact us, we collect this data because we need to know who we are talking to and what we have been talking about so that we can help you with your reason for contacting us. This also applies if you leave comments on social
media on our fan pages. We do not combine this data with your profile data on our platform, but we can still identify you by your social media ID.
Addresses, City, Country, Longitude, Latitude
Reason:
We need this data to be able to deliver your orders. We create the longitude and latitude automatically in order to be able to process your delivery address in our other linked systems, such as our Rider app, and to display your address to our riders or riders of restaurants.
Name, email address, Cell phone number, delivery address, and Date of Birthday.
Reason:
This data is your master data, which we absolutely need for our services. Without a cell phone number, you cannot create a profile. Together with your name, e-mail, and delivery address, this is your master data.
Device ID, device identification, operating system & corresponding version, device location, time of access, configuration settings, and information on Internet connection (IP address).
Reason:
With each access, this information is stored by us for technical reasons. We also use parts of this information to detect suspicious behavior at an early stage and to avert damage.
Order history, selected restaurants, invoices, order ID, rating on orders, information on the payment method, delivery address, successful orders, and canceled orders.
Reason:
Each time you place an order, this information will be added to your profile. You can view recent order information in your profile at any time. The information should give you an overview of your own interests and previous orders. We will also use the same information to improve our services. In addition, we will anonymize this information when you request a deletion.
Name, email address, cell phone number, and device ID.
Reason:
If you would like to receive emails, SMSs or in-app push notifications from us, we need certain information to send you the messages. Instead of addressing you with "Hey You", we find it more customer friendly to address you with your name. This category of personal information is also used by us to contact you, for example, if a product cannot be delivered and we want to offer you an alternative instead.
Name, delivery address, phone number, and order ID.
Reason:
In accordance with the principle of data minimization, we only provide our riders and restaurants with the information that they need from you to prepare and deliver your order.
We use different riders for delivery. These can be freelancers or third parties who provide us with riders on the basis of a data processing agreement when we deliver our orders. In all these cases we send your personal data to the riders so that they can deliver your order quickly
Your satisfaction is our biggest goal. Therefore, we are very keen to be available for all your questions and to answer them. In order to be able to answer these questions and understand the overall problem, we store the conversation content in our Customer Relationship Management System when you contact us. The content of the information we store depends on the information you provide to us as part of our communications.
Whenever needed to contact you, our call center agents might call you and we store the conversation with you. In individual cases, we also use the recordings for Quality improvement in customer service, i.e. for training purposes (coaching) with our employees. The content of the information we store depends on the information you provide to us as part of our communications. The stored telephone calls are deleted after 12 months at the latest or if the purpose of the storage, i.e. the quality check, is fulfilled earlier.
In order to protect our customers and our platform from possible attacks, we continuously monitor the activities on our website for all visitors. To this end, we
use various technical measures to ensure that suspicious behavior patterns are detected at an early stage and prevented in a good time. To achieve this goal, several monitoring mechanisms run in parallel and prevent potential attackers from accessing our website at all.
The decision-making process is automated and can have a legal effect on the person concerned or affect them in a similar way. If automated decision-making leads to a negative result for you and you do not agree with this, you can contact us at Wecare@hungerstation.com. In this case, we will individually assess the circumstances of your case.
We would also like to inform you that in the event of a merger with or acquisition by another company, we will disclose information to that company. Of course, we will require the company to comply with the legal data protection regulations.
We never give your data to unauthorized third parties. However, as part of our work, we obtain the services of selected service providers and give them limited and strictly monitored access to some of our data. All data recipients must meet the legal data protection requirements and prove their data protection level with appropriate proof.
We use different data processors in our daily processing. Those process your personal data in accordance with CITC “Communications and Information Technology Commission” requirements and our standards and have no claims whatsoever on these data. We also check regularly our processors and include only those who meet our standards. Some of our service providers are based outside KRG - IRAQ.
In addition to data processors, we also work with third parties, to whom we also transmit your personal data, but who are bound by data protection policies.
These are for example, our consultants, lawyers, or tax consultants who receive your data from us on the basis of a contract and process your personal data for legal reasons or to protect our own interests. We do not sell or rent your personal data to third parties under any circumstances. This will never take place without your explicit consent.
Unfortunately, it can happen that a few of our customers and service providers do not behave fairly and want to harm us. In these cases, we are not only obliged to hand over personal data due to legal obligations, but it is also in our interest to prevent damage and enforce our claims, and reject unjustified claims.
HOW LONG DO WE STORE YOUR DATA
We will delete your personal data only if you wish and let us know and we will also delete your account. Before this happens, you will receive a separate notification from us to the email address registered in your user account.
In addition, there are other legal retention periods that we must also observe. For example, tax data must be kept for a period of between six and ten years or even longer in some cases.
These special retention periods vary according to local legal requirements.
Therefore, despite your request for the deletion of your data, we may still have to store some of the stored data due to legal regulations. In this case, however, we will restrict data from further processing.
Furthermore, we will continue to store your data if we have the right to do so in accordance with CITC rules. This applies in particular if we need your personal data for the establishment, exercise, or defense of legal claims.