Privacy Policy

Introduction

beahubnovaex AG ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with our restaurant delivery analytics platform.

Data Controller Information

The data controller responsible for your personal data is:

Data Collection

We collect various types of information in connection with our services. The data we collect includes both personal information that you provide directly to us and information that is automatically collected when you use our services:

Information You Provide

• Contact Information: Name, email address, phone number, company name, and postal address
• Account Information: Username, password, and account preferences
• Business Information: Restaurant details, operational data, financial information related to delivery operations
• Communication Data: Messages, enquiries, and feedback you send to us
• Support Data: Information provided when requesting technical support or customer service

Automatically Collected Information

• Usage Data: Information about how you use our website and services
• Device Information: IP address, browser type, operating system, and device identifiers
• Log Data: Server logs, access times, and pages viewed
• Analytics Data: Website performance metrics and user interaction patterns

How We Use Your Information

We use the personal data we collect for various purposes related to providing and improving our restaurant delivery analytics services. How we use your information depends on which services you use and your preferences:

Service Provision

• Providing our restaurant delivery analytics platform and related services
• Processing and fulfilling service requests and transactions
• Maintaining and improving our analytics algorithms and recommendations
• Generating reports and insights for your restaurant operations

Communication and Support

• Responding to your enquiries and providing customer support
• Sending service-related notifications and updates
• Providing training and onboarding assistance
• Communicating about new features and service improvements

Legal and Compliance

• Complying with legal obligations and regulatory requirements
• Protecting our rights and interests and those of our clients
• Preventing fraud and ensuring platform security
• Conducting internal audits and maintaining business records

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use and how to manage them, please refer to our Cookie Policy.

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Contractual Necessity: Processing necessary for the performance of our service agreements
• Legitimate Interests: For business operations, service improvement, and fraud prevention
• Consent: Where you have provided explicit consent for specific processing activities
• Legal Obligation: To comply with applicable laws and regulations

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

Service Providers

We may share information with trusted third-party service providers who assist us in operating our business, provided they agree to maintain confidentiality and security standards consistent with this policy.

Legal Requirements

We may disclose information when required by law, court order, or government regulation, or when we believe disclosure is necessary to protect our rights or comply with legal proceedings.

Business Transfers

In the event of a merger, acquisition, or sale of business assets, personal information may be transferred as part of the transaction, subject to appropriate confidentiality protections.

Data Security

We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest using industry-standard protocols
• Regular security assessments and vulnerability testing
• Access controls and authentication mechanisms
• Employee training on data protection and security practices
• Incident response procedures and monitoring systems

Data Retention

We retain personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Our data retention practices include:

• Active Accounts: Personal data is retained while your account remains active and for a reasonable period thereafter
• Business Records: Certain information may be retained for longer periods to comply with legal and regulatory requirements
• Analytics Data: Aggregated and anonymised data may be retained indefinitely for research and service improvement purposes

Your Rights

Under GDPR and applicable data protection laws, you have the following rights regarding your personal data:

• Right of Access: Request access to your personal data and information about how it is processed
• Right to Rectification: Request correction of inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal data under certain circumstances
• Right to Restrict Processing: Request limitation of processing activities under specific conditions
• Right to Data Portability: Request transfer of your data to another service provider
• Right to Object: Object to processing based on legitimate interests or for marketing purposes
• Right to Withdraw Consent: Withdraw consent for processing activities where consent is the legal basis

To exercise any of these rights, please contact us using the information provided in the contact section below.

International Data Transfers

Your personal data is primarily processed and stored within the European Union. If we transfer data outside the EU, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions by the European Commission.

Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child, we will take steps to delete such information promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date.

Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Supervisory Authority

You have the right to lodge a complaint with the relevant data protection supervisory authority if you believe your data protection rights have been violated. In Austria, this is the Austrian Data Protection Authority (Datenschutzbehörde).