Privacy Policy for suppliers, business partners and customers of Old Irish Pub

Version: February 2023

When you, as either a contact person at suppliers and business partners or as a customer, interact with Old Irish Pub A/S (hereinafter "Old Irish Pub"), Old Irish Pub collects and processes a number of personal data about you. In this privacy policy, we describe the processing of your personal data as part of entering into agreements with us and as part of the day-to-day operation of Old Irish Pub.

1. Categories of personal data and purposes

Suppliers and other business partners

We process your personal data for these purposes:

• Ongoing contact with external parties, including as customers of suppliers, including

  • Entering into agreements with suppliers
  • Ongoing administration of agreements with suppliers
  • Termination of agreements with suppliers

• Compliance with applicable law, including the EU General Data Protection Regulation and other legitimate purposes, including

  • Obligation to provide documentation
  • Compliance with basic principles for the processing of personal data and legal basis for the processing
  • Implementation and maintenance of technical and organisational security measures
  • Investigation of suspicion or knowledge of security breaches and reporting to individuals and authorities
  • Handling inquiries and complaints from data subjects and others
  • Handling inspections and inquiries from supervisory authorities
  • Handling disputes with data subjects and third parties

Customers

We collect and process personal data about your name, email address, telephone number, gender, country, region, pictures and video recordings, age, photo ID, social media usernames, user settings and preferences, internal server information, unique identification codes, geographical and demographic information, referrer URL, IP address, credit card information, bank details, username on the app, password for the app, mobile ID, pseudonyms, geolocation, network information, previous purchases made, payment history, visited bars, other information you as a customer provide when contacting Old Irish Pub.

We process your personal data for these purposes:

• As part of the day-to-day operation of Old Irish Pub

  • Booking of tables on Old Irish Pub Denmark's website
  • Customers' use of the app "The Old Irish Pub"
  • Video surveillance at the bars
  • Marketing on social media and via SMS targeted customers

• Compliance with applicable law, including the EU General Data Protection Regulation and other legitimate purposes, including

  • Obligation to provide documentation
  • Compliance with basic principles for the processing of personal data and legal basis for the processing
  • Implementation and maintenance of technical and organisational security measures
  • Investigation of suspicion or knowledge of security breaches and reporting to individuals and authorities
  • Handling inquiries and complaints from data subjects and others
  • Handling inspections and inquiries from supervisory authorities
  • Handling disputes with data subjects and third parties.

2. Sources

The personal data is collected directly from you as a contact person for the supplier or partner and from you as a customer of Old Irish Pub.

3. Legal basis for processing of personal data

Legal basis for processing personal data
The processing is necessary for the performance of a contract	In certain cases, the processing of the data is necessary for the performance of a contract to which the data subject is a party or for the implementation of measures taken at the data subject's request prior to entering into a contract, cf. Article 6(1)(f) of the General Data Protection Regulation, cf. Section 6(1) of the Danish Data Protection Act.
Information based on legitimate interests	Old Irish Pub's legitimate interests in being able to communicate with the supplier or the partner and customers, cf. Article 6(1)(f) of the General Data Protection Regulation, cf. Section 6(1) of the Danish Data Protection Act.

4. Volunteerism

When we collect personal data directly from you as a contact person of a supplier or business partner or as a customer, you provide us with the personal data voluntarily. The consequence of not providing the personal data is that we cannot enter into an agreement with the supplier or partner you are representing. The same applies if you as a customer contact us in order to make a booking with us.

5. Disclosure of personal data

Suppliers and other business partners

As a starting point, Old Irish Pub does not disclose your personal data to other data controllers when entering into agreements with suppliers or business partners.

Customers

In certain cases, Old Irish Pub may disclose personal data about customers to the police. This will typically involve the following information:

• CCTV surveillance material
• Contact
• Potential information on criminal offences such as violence, etc.

6. Data processors

We transfer the personal data to our data processors, who may, for example, be suppliers of IT systems, booking systems, etc.

The transfer of personal data to third countries occurs through sub-processors. To the extent that information is disclosed to a data processor located in third countries, the transfer takes place on the basis of the EU Commission's Standard Contractual Clauses (SCC) or one of the exceptions in Article 49 of the General Data Protection Regulation.

You are always welcome to contact us if you need more information about this.

7. Opbevaringsperiode

8. Your rights

You have the following rights, however with exceptions arising from the data protection legislation in force at any time:

• Right of access to personal data
• Right to rectification of inaccurate or misleading data
• Right to erasure
• Right to restriction of processing
• Right to data portability (where processing is based on consent or is necessary for the performance of a contract)

You also have the right to complain to the Data Protection Authority.

Right to Object

You have the right – on grounds relating to your particular situation – to object to the processing of personal data, where the grounds are legitimate interests. Old Irish Pub may then no longer process your personal data unless Old Irish Pub demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defense of legal claims.

9. Contact