1. The identity and the contact data of the Supplier of products and/or services and the contact data of the data protection officer
Identity and the contact data of the Supplier of products and/or services (also referred to in this Privacy Policy the “Supplier of products and/or services” or the”Controller”):
- Liberty Theatre
- Address: 9 W Main St, Carnegie 73015, Oklahoma, United States
- Public phone: +1 580 654 1188
2. Purposes (and related legal basis) of the proceeding(s)
2.1. The Controller shall process the personal data you (also referred to in this privacy policy ”you” or the “client” or the “data subject”) provided by the client (eg. Name, surname, address, phone no., email address) when ordering products and/or services through the application of the Provider (referred to in this Privacy Policy the “application” or the ”solution”), and communicated by the Provider to the Controller, for any purposes in order to take the steps in order to conclude a contract with the client (following a request expressed by the client when using the application) and to perform the agreement concluded with the client (the “agreement”).
2.2. Your electronic contact details provided in the context of selling a product or a service may be used for direct marketing (unsolicited communications) regarding similar products or services. You can always withdraw your consent by using the unsubscribe link available prior to any ordering session of yours or in the footer of any marketing email communication received from us.
2.4. Without affecting the generality of the foregoing and for the sake of clarity, your (electronic contact) data may be used by the Controller and/or the suppliers of products and/or services in order to send you direct marketing communications (unsolicited communications, for products or services that are not similar to those in the context of which you provided your data), as long as you gave your consent for such purpose. You can always withdraw your consent by accessing the provided link.
2.5. The Controller will store and process any of your personal data to the maximum extend and period provided by the mandatory applicable legal regulations in force.
2.6. The Controller will also process your personal data for any other purposes for which you expressed unambiguous consent.
3. Legal basis of the processing
To the maximum extent permitted by the legal regulations in force, the personal data processing for direct marketing purposes may be performed for a legitimate interest, taking into consideration there is a relevant and adequate relationship between the data subject and the Controller, the data subject being/becoming a client of the Controller. The legitimate interests pursued by the Controller through the direct marketing communications, mainly are the possibility of keeping the client updated with the activity of the Controller.
4. Recipients or the category of recipients of the personal data
4.1. Sending your data to different recipients and in different (third) parties, recipients that are processing the personal data for (compatible, related and correlated purposes with) the purpose of executing the contract you have with the Controller, namely: delivery providers, printing providers, billing providers, loyalty providers, etc.
4.2. Also, without affecting the generality of the foregoing and for the sake of clarity, the following information, will be transmitted to the following categories of recipients, for the following purposes:
4.2.1. Your details, namely: last name, first name, email address, phone number, delivery address (if relevant), provided together with the details of your order, in an electronic format (excluding the details of the payment card, if you have chosen the online payment process) will be (re)transmitted through email messenger operators to the Controller and back to you, to your email address, in order to process the order and in order to offer you the relevant notifications regarding the information about confirmation or rejection of the order or about the missed orders and about the delivery of your order.
4.2.2. If possible, your details, namely : last name, first name, email address, phone number, delivery address (if relevant), provided together with the details of your order, in an electronic format (excluding the details of the payment card, if you have chosen the online payment process) will be (re)transmitted through SMS messenger operators to the suppliers of products and/or services and back to you, by SMS, in order to process the order and in order to offer you the relevant notifications regarding the information about confirmation or rejection of the order or about the missed orders and about the delivery of your order.
4.2.3. In addition to the foregoing, personal data will be stored by data storage providers for archival and recordation purposes.
5. Transfers of personal data to third parties or law enforcement organization
5.1. An eventual transfer or a set of transfers of personal data to a third party shall take place only on one of the following conditions:
(a) the data subject has explicitly consented to the proposed transfer, after having been informed of the possible risks of such transfers for the data subject due to the absence of an adequacy decision and appropriate safeguards;
(b) the transfer is necessary for the performance of a contract between the data subject and the Controller or the implementation of pre-contractual measures taken at the data subject’s request;
(c) the transfer is necessary for the conclusion or performance of a contract concluded in the interest of the data subject between the Controller and another natural or legal person;
(d) the transfer is necessary for important reasons of public interest;
(e) the transfer is necessary for the establishment, exercise or defense of legal claims;
(f) the transfer is necessary in order to protect the vital interests of the data subject or of other people, where the data subject is physically or legally incapable of giving consent;
g) existence of a adequacy decision according with the Regulation;
h) existence of appropriate safeguards, including binding corporate rules according with the Regulation;
5.2. The following data will be transferred to the following third countries, as follows:
5.2.1. Last name, first name, email address, phone number, delivery address (if relevant) will be sent to Carnegie Telephone Company Inc, based in Carnegie OK, in order to offer you the relevant notifications regarding the information about confirmation or reject of the order or about the missed orders and about the delivery of your order via email.
5.2.2. Last name, first name, email address, phone number, delivery address (if relevant) will be sent to Peaberry Software Inc. d/b/a Customer IO based in New York – USA, in order to process the order and in order to offer you the relevant notifications regarding the information about confirmation or reject of the order or about the missed orders and about the delivery of your order.
5.2.3. Last name, first name, email address, phone number, delivery address (if relevant) will be sent to Twilio Inc., in San Francisco, California – USA, in order to process the order and in order to offer you the relevant notifications regarding the information about confirmation or reject of the order or about the missed orders and about the delivery of your order.
5.2.4. Last name, first name, email address, phone number, and delivery address (if relevant) Order session originating IP will be sent to Stripe Payments in USA, in order to be stored and/or in order to process the order and in order to offer you the relevant notifications regarding the information about confirmation or reject of the order or about the missed orders and about the delivery of your order.
5.2.5. If online payment is available and you choose to use it, then the last name, first name, email address, phone number, delivery address (if relevant), order session originating IP, card holder name, card expiration date, card number, CVV (if required) will be sent to Spreedly Inc. based in Durham North Carolina USA, in order to process the order and in order to offer you the relevant notifications regarding the information about confirmation or reject of the order or about the missed orders and about the delivery of your order.
5.2.6. Third parties may be added and/or removed from time to time by the Controller, as and if the case may be required and determined at its sole discretion.
6. The period for which the personal data will be stored/ The criteria used to determine that period.
The personal data will be stored for 1 year but not less than the period provided by the legal regulations in force.
The personal data will be (mainly) stored in order to execute the agreement as well as for fiscal and/or legal purposes and additionally, specifically and without affecting the generality of the foregoing, the email address and the phone number (as and if the case may be) will be stored for direct marketing purpose.
7. Obligation to provide the personal data and of the possible consequences of failure to provide such data
The provision of the personal data is a contractual requirement.
The data subject is obliged to provide the personal data.
The refusal to provide (certain) (personal) data will lead (as consequences of not fulfilling the obligation to provide respective data) to the impossibility of (fully) using the application and/or certain functionalities of the application and/or to the impossibility to order and/or to buy and/or to pick-up and/or delivery of products and/or services, as the case may be, the Controller being entitled not to process the order.
Without affecting the generality of the foregoing and for the sake of clarity:
i) In case the data regarding the location were the products has to be delivered are not provided, the products cannot be delivered;
ii) In case the email address is not provided, we cannot send you any information about confirmation or reject of the order or about the missed orders and/or other information regarding your order and the communications with you cannot be performed;
v) In case the name and surname are not provided, we will not have the minimum identification data to have a valid agreement with you and also your order will not be processed and we won’t be able to send you the information about confirmation or reject of the order or about the missed orders
vi) In case the IP addresses are not provided, no further investigations can be performed in order to determine what happened and whether or not you were a victim of a fraudulent ordering session (e.g. fake orders, prank orders or purchase impersonation), therefore the order may not be safely accepted.
vii) In case the phone number is not provided the Controller may not contact you back in a timely manner for order-related clarifications or delivery address clarifications, as the case may be.
8.Cookie Policy
Controller’s website and/or app/application may use “cookies.”
Cookies are text files containing small amounts of information which are downloaded to your device when you visit and use the web application. Cookies are then sent back to the originating URL on each subsequent visit, or to another URL that recognises that cookie. Cookies are useful because they allow a website to recognise a user’s device. You can find more information about cookies at: www.allaboutcookies.org and www.youronlinechoices.eu . For a video about cookies visit www.google.co.uk/ goodtoknow/data-on-the-web/cookies.
Cookies do lots of different jobs, like letting you navigate between pages efficiently, remembering your preferences, and generally improve the user experience.
They can also help to ensure that advertisements you see online are more relevant to you and your interests.
You may set and/or adjust your (browser) settings and preferences regarding cookies at any time, and you may disable cookies. Disabling them may prevent you from using certain parts/functionalities of the Controller’s web application.
We may collect anonymous information, including for statistical or research purposes.
We use the following categories on our web based application:
Category 1 — Strictly Necessary Cookies
These cookies are essential in order to enable you to move around Controller’s web application and use its features, such as accessing secure areas. Without these cookies services like shopping baskets or e-billing cannot be provided.
Category 2 — Performance Cookies
These cookies collect information about how you use the Controller’s web application — for instance, which pages you go to most, and if they get error messages from web pages and/or the web application. These cookies don’t collect information that identifies a visitor. All information these cookies collect is aggregated and therefore anonymous. It is only used to improve how the Controller’s website(s) and/or the application works.
As 3rd party cookies in this category we use Google Analytics, a service which transmits website traffic data to Google servers in the United States. The reports provided by Google Analytics help us understand website traffic and webpage usage. Google Analytics does not identify individual users or associate your IP address with any other data held by Google.
Google Analytics: For more information about Google Analytics cookies, please see Google’s help pages and privacy policy:
Google has developed the Google Analytics opt-out browser add-on; if you want to opt out of Google Analytics, you can download and install the add-on for your web browser here.
Third Party Analytics. We have engaged Inspectlet to analyse the activities of visitors to this website, and Inspectlet’s authorized use of cookies and other tracking technologies enable it to have access to Personal Information of visitors to this website. Such access to and use of Personal Information by Inspectlet is governed by Inspectlet’s Privacy Policy.
Category 3 — Functionality Cookies
These cookies allow the Controller’s web application to remember choices you make while browsing and/or using the application (such as your user name, language or the region you are in) and provide enhanced, more personal features.
These cookies can also be used to remember changes you have made to text size, language and other parts of web pages that you can customize.
The information these cookies collect will not personally identify you, and they cannot track your browsing activity on non- Controller’s websites.
For reliable review of your order status, on-screen on the application, in real-time, and also for easy reordering, your data may be saved on your device, serving a cookie locally.
Category 4 – Targeting cookies or advertising cookies
These cookies will usually be third-party cookies, although if a user is visiting the advertising network’s own website it is technically possible these could be first party. They will always be persistent but time-limited cookies. These cookies can be associated with services provided by the third party but this is not always the case. These cookies contain a unique key that is able to distinguish individual users’ browsing habits or that can be translated into a set of browsing habits or preferences using information stored elsewhere. Generally speaking, the privacy statement should indicate if the cookie is being used as part of an advertising network. Cookies may also be used to limit the number times a user sees a particular ad on a website and to measure the effectiveness of a particular campaign.
Examples include:
• Cookies placed by advertising networks to collect browsing habits in order to target relevant adverts to the user. The site the user is visiting need not actually be serving adverts, but often this will also be the case.
• Cookies placed by advertising networks in conjunction with a service implemented by the website to increase functionality, such as commenting on a blog, adding a site to the user’s social network, providing maps or counters of visitors to a site.
By default, the web ordering application and its originating website URL is not serving category 4 cookies. However, it may be possible to order online from other websites that frame-in or facilitate access to the online menu and web application. Therefore, please always check the cookie policy of the visited website from which you initiated an online ordering session in order to find out if any category 4 cookies are served and which is the way to opt-out or opt-in for them, as the legal case may be.
9. Processing of your personal data by the Provider as the processor of the suppliers of products and/or services
The Provider may also process your personal data as the processor of the supplier of products and/or services, including without limitation for the following purposes, according to those agreed with the suppliers of products and/or services : i) data storage for the suppliers of products and/or services; ii) sending notifications to you regarding the information about confirmation or reject of the order or about the missed orders and about the delivery of your order; iii) sending to you direct marketing communications; iii) collection of the IP addresses in order to be used in case of any litigation and/or fraud regarding the payments; iv) sending your data to different recipients and in different (third) countries, recipients that are processing the personal data for compatible, related and correlated purposes with the purpose of executing the contract you have with the suppliers of products and/or services, namely: delivery, printing, pos billing, loyalty, online payment processing, etc.
10. Miscellaneous
10.1. You have all the rights mentioned in the present Privacy Policy as well as any other rights mentioned by the mandatory legal regulations in force regarding personal data processing.
10.2. Except otherwise required by the mandatory legal regulations in force, the Controller reserves the right to update and change the Privacy Policy from time to time without specific notice.