Protection of personal data

PRIVACY POLICY
The security of your personal data is a priority for us, just like first-class food prepared from the freshest ingredients. We are careful what happens to your data. Below we describe the way of handling personal data in our company.
1. How to contact us
We are the company ZJEDENE s. r. o. ID number: 54 357 373 with registered office at Račianska 17, Bratislava - Nové Mesto district 831 02, registered in the commercial register of OS Bratislava I, Department: Sro,. Insert number: 159257/B.
You can write us an e-mail at:
info@zjedene.sk
Alternatively, you can send us a letter to the address:
Račianska 17,
Bratislava - Nové Mesto district
831 02
You can exercise all your rights described below on the above contacts.

2. What information do we process and why?
a. Identification data:
We need your basic identification data (name and surname) and address data listed in the next point in order to be able to properly conclude and subsequently fulfill the contracts you conclude with us, or process your orders.
b. Address details:
We need your address information (street name and identification number, city, zip code and state) so that our couriers or delivery companies can deliver the food you ordered to the correct address.
c. Contact information:
We use your contact information (phone number and email) to inform you about the status of the order and for our couriers to deliver it to you properly. We also need to know your contact phone number and email so that we can contact you in case of any complications or changes. If you do not provide us with your identification data, address data and contact data, we will not be able to process your orders, so you will not be able to order food from us.
d. Username and password (registration data)
If you register with us, our system stores the information necessary for you to be able to log in to your account, i.e. username and password. Without this data, we would not be able to allow you to log in.
e. Number and type of products purchased (product information)
As soon as you make a purchase from us, we will also keep information about your purchase so that we can help you with complaints. At the same time, these data serve us to know whether you have actually purchased the claimed product from us.
f. Cookies
In order to make it easier and more pleasant for you to shop on our website and at the same time to constantly improve our website, we also process cookies. If you want to read more about cookies, click here.

3. How do we further use your personal data, if we have obtained your consent?
a. If you order from us, we will keep your email, to which we can send the so-called business announcements, these are emails in which we will inform you about our news, discounts, or events that we believe you will be pleased with.
b. If you have given us your consent, we can also keep your email for other purposes as mentioned above, for example for sending information about our promotions and products that are not so much related to the products you have already bought from us. Also, based on your consent, we can keep your first and last name so that we can deal with you better and address you correctly.
c. With your prior consent, we will also send you a small gift on your birthday. In order to wish you well, we store (with your consent) information about your date of birth.
d. With your prior consent, we can also collect information about what kind of food you most often order and from where, and thanks to this we can offer you promotions and discounts that will be most interesting for you and will be closest to you.

Of course, you can revoke any of your consent at any time by sending us an email to the address info@zjedene.sk and indicating to what extent you are withdrawing your consent.
4. How do we use your personal data based on legitimate interest?
a. We also process your contact personal data (especially email) on the basis of legitimate interest, if you are our former or current customer, for the purpose of direct marketing (sending information and offers regarding our products and promotions). The legitimate interest of our company in processing your contact personal data for the purpose of direct marketing lies in the fact that through the promotion of our company's products and actions to our current and former customers, the development and growth of our company will be provided, at the same time from communication with our former and current customers as part of the feedback, our company is able to identify how to improve our products and actions and how to eliminate possible shortcomings. Our company has an eminent interest in providing its customers with the best and highest quality products, therefore it is a legitimate interest of our company to process the basic contact data of current and former customers based on a legitimate interest to send information about our products and promotions and at the same time from communicating with them, they also received continuous feedback from them. Like that 

due to the fact that you have already ordered our products from us in the past or are our regular customer, our company legitimately promotes its products and promotions by sending information and offers, as our company can reasonably expect that you will order our products again.
b. We also point out the provisions of § 62 par. 3 of Act No. 351/2011 Coll. on electronic communications, as amended, according to which the prior consent of the recipient of electronic mail is not required in the case of direct marketing of own similar goods and services of a person whose contact information for the delivery of electronic mail was obtained by the same person in connection with the sale of goods or services and in accordance with the law in question or with a special regulation.
c. You have the right to object (raise an objection) to the processing of your personal data based on a legitimate interest for the purpose of direct marketing, and after raising an objection to such processing of personal data for the purpose of direct marketing, our company will no longer process this personal data for such purposes, unless we you do not give your consent to this.

5. To whom do we transfer your personal data?

a. Information about browsing pages is processed by Google, Inc. for you, using the Google Analytics tool, which, thanks to cookies (see above), enables measurement and evaluation of the way our website is used.
b. We may pass on your identification data, address data and contact data to the companies and persons who deliver the food to you. Personal data is communicated to these persons only to the extent necessary for the delivery of the products ordered by you.
Some of your data is processed by our processors (such as marketing consultants, accountants, etc.), in any case, we do not disclose your personal data to anyone else, nor do we trade with databases in any way. You don't have to worry about anything, your data is safe with us.

6. How long do we keep your personal data?
a. We store information about your purchase and your identification data, address data and contact data for a period of 2 years. We keep them for such a period so that we can properly process complaints and respond to your possible complaints.
b. We work with the data we have about you thanks to your consent in such a way that after one year of your inactivity we send you an email asking if you still want to use our services. If you do not contact us within one month, we will delete your data.
c. In addition, we are required by law to keep some documents containing personal data. For example, we must keep invoices for 10 years. We keep accounting documents for 5 years.

7. What rights do you have in relation to your personal data?
a. The right to request access to your personal data - that is, you can ask us what personal data we record about you and what has happened and will happen to it during the time that it is with us.
b. Right to rectification – if your personal data that we hold about you is no longer up-to-date or is incorrect, you can request that it be rectified.
c. Right to object - if you believe that we are processing personal data beyond our legitimate interest to prevent repeat ordering and non-collection of products, you can object to such processing, which we must deal with.
d. The right to erasure (the so-called right "to be forgotten") - i.e., at your request, we must delete all personal data that we record about you, e.g. unless you no longer wish to be registered with us. However, it may happen that there will be another reason that authorizes or obliges us to keep the data (e.g. an obligation arising from the Accounting Act, etc.) and in that case we cannot delete it.
e. The right to limit processing - in some cases, although we may store personal data, we may not deal with it in any way; this is the following situation:
1. If you deny the accuracy of the data and we need to verify your notification;
2. If personal data is processed unlawfully, but you do not wish us to delete it and instead of deletion you request only a limitation of processing;
3. If we no longer need the personal data, but you request to keep it for the exercise of your legal claims;
4. If you object to the processing, until we verify whether the personal data will be further processed in our important interest or whether we will not process them.
f. The right to data portability - if you ask us to do so, we will provide you with your personal data, which we process on the basis of the contract we concluded with you, consent, and at the same time we process them automatically. We will provide you with such data in a commonly used, machine-readable format. Alternatively, we may transfer this data to the administrator you designate, as long as he agrees to the transfer.
Mr. The right to file a complaint - if you believe that we are somehow violating the rules of personal data processing, you have the right to file a complaint with the Office for Personal Data Protection.
All personal data are fully secured against misuse.
If you have any questions about privacy protection privacy, you can write to us at info@zjedene.sk. We may update these terms from time to time, so we recommend that you check this page from time to time.

8. Health and fitness data (Health Data)

If you use the ZJEDENÉ mobile app, or fill in the health questionnaire, use the calculator or the food diary in your customer account, we also process data about your health and fitness. This is a special category of personal data under Art. 9 GDPR and we process it solely on the basis of your explicit consent, which you give by voluntarily filling in and submitting the health questionnaire, logging a food diary entry or uploading a medical report after having read this policy, and which you may withdraw at any time.

a. What health and fitness data we collect

• Body data: age, gender, height, weight, waist circumference, body fat percentage.
• Fitness and lifestyle data: physical activity level, steps per day, hours of sleep, work regime, your goal (lose weight, maintain, gain weight or muscle, improve fitness) and the basal (BMR) and total daily (TDEE) energy expenditure calculated from them.
• Dietary data: dietary preferences, allergens you need to exclude, intolerances, disliked foods, number of meals per day and the time you have to prepare a meal.
• Health data: health conditions and illnesses you tell us about, and medications you take.
• Laboratory values you enter or that are extracted from a medical report you upload: total cholesterol, LDL, HDL, triglycerides, HbA1c, fasting glucose, creatinine, eGFR, uric acid, ALT, CRP, TSH, vitamin B12, vitamin D and ferritin.
• Medical reports and test results you upload yourself as a PDF or a photo, and the data extracted from them.
• Food diary entries: the meals and drinks you log, their energy value (kcal), protein, carbohydrates, fat, the amount of water you drink, calories burned and the date of the entry.
• Photos of food you take with the food scanning feature in the app.
• The name of the health or fitness app you use, if you tell us.

b. Why we process this data

We use health and fitness data only to calculate your recommended daily energy intake and macronutrient split, to recommend a suitable calorie variant and menu composition, to exclude allergens and foods you cannot or do not want to eat, to show you an overview of your eating and how it develops over time, and to provide customer support for these features. We do not use health data for advertising or ad targeting, we do not sell it, and we do not share it with third parties for marketing purposes or with data brokers.

c. Scanning food from a photo

If you use the food scanning feature, we send the photo to our processor – a provider of a service that estimates from the image what the meal is and what its nutritional values are. The photo is sent for this purpose only. We store only the result of the estimate in your account (food name, kcal and nutrients); we do not store the photo itself on our servers and do not attach it to the diary entry. The app asks for access to the camera and to photos on your device only at the moment you use this feature, and you can revoke that access at any time in your device settings.

d. Who we share health data with

We share health data only with: (i) the provider of the cloud hosting and databases on which our e-shop and app run; (ii) the provider of the photo-based nutrition estimation service (and only the food photo itself); (iii) our employees and cooperating nutrition advisors who prepare your recommendation on the basis of this data. All of them are bound by confidentiality and by a data processing agreement and may not use the data for any other purpose.

e. How long we keep it and how to delete it

We keep health and fitness data for the duration of your customer account, or until you withdraw your consent – whichever comes first. You may withdraw your consent at any time and you may request deletion of your account and of your health data directly in the app, in your customer account, or by e-mail at info@zjedene.sk. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. You also have all the rights listed in point 7 above in relation to health data, including the right of access, rectification and portability.

f. Connection to Health Connect (Android) and Apple Health (iOS)

If you explicitly allow it, the app reads a single value – active calories burned (kcal) per day from Health Connect on your Android device, or from Apple Health on your iPhone. We do not read any other data from these services and we do not write any data into them. We use this value solely to show your daily energy expenditure in your food diary and compare it with your intake, and we store it with your daily diary record. We do not use data obtained from Health Connect or Apple Health for advertising or ad targeting, we do not sell it, we do not share it with third parties, and we do not use it to train machine learning models. You can revoke the permission at any time in Health Connect settings (Android) or in the Health app (iOS) – from that moment we read no further data. Values already read are deleted together with your account or on your request under point e. above.