WHO ARE WE AND HOW CAN YOU CONTACT US?
Zoku International B.V.
1018 VN Amsterdam
Chamber of Commerce: 59203927
If you have any questions or wishes in connection with your personal data, you may also contact our data protection officer by sending an email to us through firstname.lastname@example.org
HOW DO WE USE YOUR PERSONAL DATA?
Below is an overview of the purposes for which Zoku processes your personal data. In this overview, Zoku indicates the personal data Zoku uses for a specific purpose, what the legal basis is for processing this data, and how long Zoku stores the data. To keep things organised, we have grouped everything by type of data stream.
Legal bases: explanatory note
Article 6.1(b) GDPR* – This means that we need your personal data to enter into a contractwith you or to take steps at your request prior to entering into a contract.
Article 6.1(c) GDPR* – This means that we need your personal data to comply with a legal obligationto which we are subject.
Article 6.1(f) GDPR– This means that we need your personal data for the purposes of a legitimate interestpursued by us or by a third party.
Article 6.1(a) GDPR– This means that we process your personal data based on your consent.
*Please note that if we need specific personal data in order to comply with a legal obligation or enter into/perform an agreement with you, your refusal to provide such data may result in the inability for you to make a reservation or use the relevant service.
|Reservation / check-in||When you make a reservation, you provide Zoku with your name, address, email address, phone number, reservation details and payment information as applicable. We use this data to process the reservation, for billing purposes, and to communicate with you about your reservation. The processing of your personal data is therefore necessary for the performance of a contract to which you are party (Article 6(b) GDPR).
|Customer service||To provide (international) customer service Zoku may collect your personal data to respond to your questions you submit through email or the contact form on the website, including helping you with any issues which may arise regarding our website and/or services. The processing of these personal data is necessary for the purposes of the legitimate interests pursued by Zoku (Article 6.1(f) GDPR), namely being able to serve you efficiently and to optimize Zoku´s customer service.
|Security/CCTV||We endeavour to prevent our services and facilities from being used for illegal purposes of any kind. The processing of your personal data is necessary for the purposes of the legitimate interests pursued by Zoku (Article 6.1(f) GDPR), to guarantee the safety of guests and employees.
|Zoku wishes to inform you on the developments of its services, if you have signed up for Zoku’s newsletters. If, at any moment, you do not wish to receive emails of Zoku anymore, you can unsubscribe by using the opt-out option that is provided in the email that Zoku sends you. You may also unsubscribe by sending an email to email@example.com.
To subscribe you have to provide us with your email address. The processing thereof is necessary for the purposes of the legitimate interests pursued by Zoku (Article 6.1(f) GDPR), namely direct marketing. Zoku retains your e-mail address for as long as you are subscribed to the newsletter and nog longer than 1 month after you unsubscribe.
|Careers||If you apply for a position at Zoku, you will provide your personal data such as your first and last name, full address, email address, phone number and your CV and other attachments to your application. Zoku uses this information to review your application and respond to your application. The processing of these personal data is necessary for the purposes of the legitimate interests pursued by Zoku (Article 6.1(f) GDPR, namely recruitment.|
DOES ZOKU SHARE YOUR PERSONAL DATA?
To provide the services, Zoku shares your personal data with service providers. These service providers process your personal data on behalf of Zoku. The processing by service providers is governed by a so called data processing agreement in which Zoku has ensured that that the service provider shall only process the personal data on instructions of Zoku. Third parties are:
- external hosting providers, including cloud providers for the storage and management of data;
- external parties with applications and tools for recruitment, assessments, personnel management;
- other specific tasks that have been outsourced include IT support and facility management.
Zoku may disclose personal data or information regarding the use of its Services if, for any reason, in Zoku’s sole discretion it believes that it is necessary to do so in order to satisfy laws, regulations, or other legal requests for such information; to cooperate with law enforcement agencies; to disclose information that is necessary to identify, contact, or bring legal action against someone who may be violating the Zoku Terms of Service or other policies; to operate the Services; to protect Zoku, its services, employees or advisors, or its Users; or in connection with a proceeding, transaction or proposed transaction involving the transfer of the business or assets to which the information pertains.
DOES ZOKU TRANSFER YOUR PERSONAL DATA OUTSIDE THE EUROPEAN ECONOMIC AREA?
Some of our service providers are also located outside the European Economic Area (EEA), in this case the United States[A1].
To comply with EU data protection laws around international data transfer, Zoku only allows service providers and/or subsidiaries outside the EEA to process your personal data if they are self-certified under the E.U.-U.S. Privacy Shield and the Swiss-U.S. Privacy Shield framework (Article 46.2(a) GDPR) or in accordance with a contract entered into between the Zoku and the service provider, incorporating the European Commission’s Standard Contractual Clauses, which ensure that adequate data protection arrangements are in place (Article 46.1(c) GDPR). For more information on where and how the relevant document may be accessed or obtained, please contact us at firstname.lastname@example.org.
WHAT ARE YOUR RIGHTS?
Under the GDPR, you have a number of rights with regard to your personal data and the processing thereof:
|Right to access||You have the right to obtain confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to your personal data and additional information about the processing of your personal data.|
|Right to rectification||You have the right to request the rectification of inaccurate personal data concerning you.|
|Right to be forgotten||You have to right to ask us to erase your personal data (right to be forgotten) for example if the personal data are no longer necessary in relation to the purposes for which they were collected; you withdraws consent on which the processing is based, and where there is no other legal ground for the processing; or the personal data have been unlawfully processed.|
|Right to restriction||You have the right to obtain restriction of processing of your personal data, for example when you have contested the accuracy of your personal data.|
|Data portability||You have the right to receive your personal data which you have provided to us in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller, where the processing is based on your consent or on a contract.|
|Right to object||You have the right to object to processing of personal data which is based on our legitimate interests. We shall no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims;
Where personal data are processed for direct marketing purposes, you always have the right to object to processing of personal data for such marketing. In that case, we shall no longer process your personal data for such purposes.
|Withdraw consent||Where the processing of your personal data is based on your consent, you have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.|
You may send your request to email@example.com. Zoku shall respond to your request without undue delay and in any event within one month of receipt of the request. That period may be extended by two further months where necessary, taking into account the complexity and number of the requests. Zoku shall inform you of any such extension within one month of receipt of the request, together with the reasons for the delay.
If Zoku does not take action on your request, Zoku shall inform you without delay and at the latest within one month of receipt of the request of the reasons for not taking action. In that case, you also have the right to lodge a complaint with the supervisory authority and to seek a judicial remedy.
WHAT ARE COOKIES AND HOW DOES ZOKU USES THEM?
When using the website or app, various cookies are saved on your computer, mobile device and/or tablet (“Devices”), which can then be accessed. Cookies are small pieces of information (in the form of text) that a server sends to the browser (such as Internet Explorer or Firefox) with the intention that the browser sends this information back to the server the next time a user makes use of the website. Cookies cannot damage your Devices or the files saved on it.
THIRD PARTY COOKIES
Additional third-party cookies are placed when you use the Zoku Services. These are for example to track how long you stay on our site and to determine what region you come from.
Google Analytics cookies: Only Google Analytics can store and read information with these cookies. If you want to opt-out of Google Analytics, you may download a Google Analytics opt-out plug-in for your browser by visiting http://tools.google.com/dlpage/gaoptout.
Facebook cookies: Only Facebook can store and read information with these cookies. See http:// facebook.com/help/cookies for more
Twitter cookies: Only Twitter can store and read information with these cookies. See https://twitter.com/privacy for more information.
LinkedIn cookies: Only LinkedIn can store and read information with these cookies. See https://www.linkedin.com/legal/privacy-policy for more information.
Pinterest cookies: Only Pinterest can store and read information with these cookies. See https://about.pinterest.com/en/privacy-policy for more information.
YouTube cookies: Only YouTube can store and read information with these cookies. See www.youtube.com/static?template=privacy_ guidelines for more information .
Zoku may change this policy from time to time. At such time, Zoku will notify you by e-mail (if it has such information), and by updating this page. If you have not shared an e-mail address with Zoku, please check this page from time to time for the latest information.
In case you suspect a breach of data protection legislation and the matter is not solved amicably between us in negotiations, you also have the right to lodge a complaint with a supervisory authority.