Privacy policy

This document is the Privacy Policy of Salsa Shop, including all group companies listed under item 1 (hereinafter: Salsa Shop). This policy covers the online and offline processing of your Personal Data through the Website and in Salsa Shop’s physical shops. This document applies to all of Salsa Shop’s activities unless expressly agreed or indicated otherwise in writing.

Salsa Shop respects the privacy of its Customers and Visitors of the Website. Salsa Shop exercises care and accuracy when processing your Personal Data and processes Personal Data in accordance with the General Data Protection Regulation (hereinafter GDPR). Below you can read, among other things, which Personal Data Salsa Shop processes, on which legal basis and for which purpose. You will also read how Salsa Shop handles your Personal Data.

Definitions

1. Data subject
   An identified or identifiable natural person who is a Visitor of the Website or a Customer of Salsa Shop.
2. Visitor
   A user of the Website, whether registered or not.
3. Customer
   The natural person or legal entity that purchases a product from Salsa Shop.
4. Personal data
   Any information about an identified or identifiable natural person.
5. Website
   The Salsa Shop website, www.salsashop.com, and any current or future variant(s) thereof.

1. Data controller

The data controller and processor of Personal Data in connection with the Website and the performance of Services is, unless expressly described otherwise, Salsa Shop and all other current and future Salsa Shop locations in Amsterdam, Utrecht, The Hague, Rotterdam, Leiden and Groningen, as listed below:

• Fresh Mexican Kitchen Holding B.V.
• SALSA SHOP Amstelstraat B.V.
• SALSA SHOP Ferdinand Bolstraat B.V.
• SALSA SHOP Amsterdam C.S. B.V.
• SALSA SHOP Kinkerstraat B.V.
• SALSA SHOP Zuidas B.V.
• SALSA SHOP Stadskamer B.V.
• SALSA SHOP Vinkenburgstraat B.V.
• SALSA SHOP Lange Poten B.V.
• SALSA SHOP Stadhuisplein B.V.
• SALSA SHOP Station Leiden B.V.
• SALSA SHOP Zwanenstraat B.V.

2. Applicability

This Privacy Policy applies to all personal data of natural persons (hereinafter Data Subjects) that Salsa Shop processes in the event of online or offline contact, in whatever manner, with Salsa Shop. This also includes information collected through your visit to the Website, when you purchase our products or visit one of our physical locations, use the wifi services or similar technology offered there, when you order products from Salsa Shop via third-party platforms and delivery services, or contact our customer service (hereinafter Salsa Shop services).

If our Website contains a link to the website of a third party and you choose to visit that website, we recommend that you read that third party’s Privacy Policy. Salsa Shop is not responsible for the content of these third-party websites or the Privacy Policy applicable to them.

3. Personal data

If you use Salsa Shop’s Services, we may collect personal data about you. Below is an overview of which personal data we may collect from you in which specific situation.

Special category and criminal personal data

Salsa Shop does not process special category or criminal personal data and does not intend to provide Services to, or collect data about, persons under the age of 16, unless consent has been obtained from a parent or guardian. However, Salsa Shop cannot verify whether a Visitor is older than 16 and therefore advises parents to be involved in their children’s (online) activities, so as to prevent data about children being processed without parental consent. If you believe that Salsa Shop has collected personal data about a minor without such consent, please contact us at info@salsashop.com, and Salsa Shop will delete this data.

Information provided directly

Contact details

If you contact us online or offline, we may collect personal and/or business contact details from you. These include, among other things, your first name, surname, postal address, phone number, email address, and IP address. If you contact our customer service, you may provide us with additional personal data. This can be done by phone, but also by email or one of our other customer service channels. Such additional personal information may include voice recordings, photos and videos.

Payment details

If you pay for your purchase at a physical Salsa Shop location by non-cash means, you provide a credit card/debit card number linked to a name and possibly other related financial data (such as expiry date, security code and billing address), depending on the payment method you choose.

Social media

Through the Website you can link to your Facebook or other social media accounts. This use may result in the collection of the following personal data about you: IP address, your browsing behaviour and which pages you visit on the Website. The information we receive depends on your privacy settings on the relevant social network. We advise you to consult the privacy policies and settings on the social media sites you use before using them.

Salsa Member Card

At Salsa Shop’s physical locations, you can register as a member, whereby the personal data you provide, such as first name, surname, email address and date of birth, are linked to a personal member card with which you earn rewards. This card enables Salsa Shop to keep track of which purchases are made at Salsa Shop, at what times and by whom. We analyse this information to gain better insight into our customers’ preferences and thereby improve Salsa Shop’s service. We are always interested in obtaining a general picture in this respect. Salsa Shop does not offer the option of creating a personal account linked to the member card. The Member Card can be deactivated by submitting a request to info@salsashop.com.

Automatically collected information

When visiting the Website of, or communicating online with, Salsa Shop and its affiliated parties, various technologies may be used that automatically or passively collect information about your online activities. This information may be collected in the following ways:

Cookies

Technologies such as cookies, web beacons, unique advertising IDs and mobile device identifiers are active on the Salsa Shop website to collect information about the use of our Website. For more information, including the types of cookies on the Salsa Shop Website and how to manage cookies, please refer to Salsa Shop’s Cookie Policy and the ‘Targeted advertising’ section below.

Technical data

When you visit the Website, personal data about you may be collected. This includes information such as your Internet Protocol (IP) address, your login details, the type of (mobile) device you use, the operating system and browser type of your device, time zone and location settings, language, a unique identifier for your device, the address of a referring website, the path you take through our Website, and other information about your session on our Website.

Location data

Google Maps is active on the Salsa Shop Website. Through this plugin and the postcode checker, Salsa Shop can collect information about your location when your device is set to provide location data. Through your device’s GPS signal, we can, for example, show you the nearest Salsa Shop. Most mobile devices and computer systems offer the option to withdraw your consent for us to collect this information via your browser or device settings. You can read how to do this in Google’s terms of service. For questions about setting up your mobile device, please refer to the device provider.

WiFi

At some of our physical locations you can use free wifi. As soon as you log in to our network, data about you is automatically collected, including your device’s identification number. If illegal activities take place via our wifi network, we may block your device’s access. Your data will also be handed over to the competent investigative authorities.

Information received from third parties

Salsa Shop may collect information about you via other companies and organisations, including public databases and social media platforms. It is not possible to create an account via Salsa Shop. However, online orders can be placed with Salsa Shop via third parties and delivery services. These parties are UberEats, Deliveroo and Thuisbezorgd.nl. Following such a request, Salsa Shop has access to, among other things, your first and last name, phone number (landline and/or mobile), postal address and email address. Salsa Shop is not responsible for the data processing carried out by these third parties and refers you to their Privacy Policies.

We may also collect information that is publicly available. For example, we may collect public information about you when you communicate with us via social media. By collecting additional information about you, we can correct inaccurate information, improve the security of your transactions, and offer you product recommendations and special offers that are likely to interest you.

Aggregated information

Anonymised and aggregated information does not identify any specific person and therefore cannot be traced back to a person. Salsa Shop uses such information, among other things, for insight into Facebook conversions, tracking which advertisements placed via Google Adwords are effective, insight into website visits, and data analysis.

CCTV

Salsa Shop uses CCTV in all of its shops. This is important for your safety, as well as that of our colleagues and products. CCTV surveillance is subject to strict rules and standards, which Salsa Shop complies with. The cameras are visibly displayed. Sound is not recorded, and camera footage is deleted after two weeks unless there are valid reasons to retain the footage longer. If these cameras detect a violation or crime, the footage will be used for investigation purposes and may be retained for longer.

4. Legal basis for processing

Under the GDPR, every processing of personal data must be based on one of the statutory legal bases. Salsa Shop processes your data on the basis of the following legal bases:

Consent

If you have given consent for the processing of your personal data, you can withdraw it at any time by emailing info@salsashop.com. Please note that the processing of personal data prior to the moment of withdrawal remains lawful on the basis of consent previously given. This consent is obtained through requests by email or other social media. If third parties process your data on behalf of Salsa Shop (‘sub-processors’), your explicit consent will be requested in writing prior to signing the assignment agreement.

Necessary for the performance of a contract

If you wish to place an order with Salsa Shop, it is necessary to process your personal data to enable the fulfilment of that order. To enable our members to earn points towards rewards via a personal member card, we need your data to link the card.

Legitimate interest

Salsa Shop may have a legitimate interest in processing your personal data, for example for marketing purposes, but also for the protection of our staff and safety. The interest may therefore differ per processing activity. Salsa Shop always weighs its own interest against the interests of the data subject(s). In addition, the data is not retained for longer than necessary for the purpose of the processing.

Compliance with a legal obligation

5. Purposes of processing

Salsa Shop processes personal data for practical reasons, such as keeping its business in good (legal) standing and maintaining administration and invoicing. Processing is also used to achieve optimal use of the Website, and is based on commercial considerations such as marketing purposes and gaining insight into (unique) visitor numbers and other statistics. Salsa Shop also processes Personal Data to contact customers and other suppliers and/or to respond to a question/request; for managing and optimising (monitoring, posting messages and responding to reactions on) social media accounts as well as placing advertisements; for insight into website visitors and browsing behaviour; and to optimise the website.

Service provision

• Optimising service provision;
• Processing and delivering orders;
• Processing payments for purchases;
• Communicating with you about orders and complaint handling, including verifying your identity in such cases;
• Offering customer service via various (social media) channels;

Website optimisation

• Analysing, optimising and improving the Website in order to offer Visitors optimal and personalised use;
• Insight into (unique) visitor numbers and other statistics;

Other interests

• managing our business and keeping it in good standing;
• developing new products;
• conducting consumer and business research;
• assessing the effectiveness of our sales, marketing and advertising;
• reporting to the relevant authorities in the event of a security or product issue;
• complying with applicable legislation;
• protecting the business and its employees against fraud and other forms of crime, (legal) claims and liability;
• complying with legal obligations and our policies;
• bringing or defending a legal claim;
• complying with legislation and reporting on it accordingly.

6. Retention

Your personal data is not retained for longer than necessary to achieve the purposes described above. Salsa Shop may retain your personal data for longer on the basis of a (statutory) obligation and taking into account any limitation periods. Your Personal Data is retained by Salsa Shop for a minimum of two years and a maximum of seven years.

• Data such as first and last name, address and email address is used for administrative and financial purposes. This data is retained for seven years, as Salsa Shop is legally required to retain this data for seven years for the Dutch Tax Authority. This also applies to email addresses and the content of emails.
• For commercial reasons, Salsa Shop uses data such as your company name, first and last name and email address for direct marketing and social media communications. If you share such communications on your social media, Salsa Shop receives a notification. This data is deleted as soon as you indicate that it should be removed.
• Data such as IP addresses is used by Google Analytics to compile statistics. You can read more about this in the Cookie Policy.
• Applicant data is, in principle, destroyed via Spielwork within 4 weeks of the end of the application process if the applicant does not end up working for Salsa Shop.
• Member Card data is retained for a maximum of five years after deactivation.

7. Processing of Personal Data by third parties

In connection with the assignment, your Personal Data is in certain cases provided to third parties. This also includes telephone services, payment services and delivery services. Data processing agreements have been concluded with these parties to safeguard the protection of your personal data during processing.

If disclosure to third parties is necessary in connection with the performance of the assignment, your consent will be requested in writing in advance. Other data is not provided to third parties unless mandatory statutory or regulatory provisions make this necessary. Personal data collected about you may be shared with the following categories of recipients:

Within Salsa Shop

Salsa Shop consists of several companies as set out under item 1. In order to process orders and requests and to improve our product range, your personal data may be shared within the individual companies. Your personal data is processed in accordance with this Privacy Policy.

Delivery services

When you order from Salsa Shop via a delivery service, data such as your first and last name, home address, email address and phone number is processed. Dietary preferences may also be processed for your order. Read more here about the Privacy Policy of Deliveroo, UberEats and Thuisbezorgd.nl.

Other third parties

Your personal data may be shared by Salsa Shop with suppliers that provide services to us, such as business, professional or technical support functions. These include, among others, payment processors, hosting providers, and suppliers that support Salsa Shop with information technology, marketing and analytics services. Your personal data may also be shared with our partners, advertisers, advertising networks, ad servers and analytics companies, or other third parties, in connection with marketing, promotional and other offers, as well as product information. Salsa Shop has entered into a data processing agreement with these parties and does not permit these suppliers to process personal data for any purpose other than providing services on behalf of Salsa Shop.

Other cases

In certain other cases, Salsa Shop may share your personal data with third parties.

Business transfer

Personal data is regarded as a business asset of a company. For this reason, your personal data may possibly be disclosed (due diligence) or transferred in the event of an intended or completed acquisition, or any other variant thereof. This may include, among other things, a sale, reorganisation, merger, joint venture, or acquisition or liquidation of Salsa Shop or part of its activities.

Legal disclosures

If Salsa Shop believes that a legal obligation requires your personal data to be disclosed, or in order to protect Salsa Shop’s own rights, property and the safety of its employees and customers, it may disclose your personal data.

Targeted advertising by third parties

Salsa Shop uses third-party analytics and tracking tools, such as Google Analytics, Google Tag Manager and Facebook, to track, segment and analyse the use of Salsa Shop’s services. Among other things, demographics and interests are determined in this way. On this basis, we can provide you with more targeted (online) advertising. These tools may use technologies such as cookies, web beacons, pixel tags, log files, flash cookies and/or other technologies to collect and store non-personal information.

Usage data regarding visits to the Salsa Shop Website is collected at our request and shared with Salsa Shop. Among other things, this measures the effectiveness of our advertisements and page usage. It also records which advertisements placed via Google Adwords are effective, which adds value in targeting our internet banner advertisements on our websites and on other websites. Salsa Shop has no access to or control over the use of these cookies or other tracking technologies by these third parties. We refer you to the Privacy Policies of these individual parties, as listed in Salsa Shop’s Cookie Policy, for information on cross-device tracking and disconnecting your devices.

8. Transfers to third countries

It may occur that it is necessary for Salsa Shop to transfer your Personal Data to countries outside the European Union (hereinafter: EU). This is the case, for example, if Salsa Shop engages the assistance of companies established in a country outside the EU to carry out or support its Services. These countries do not always offer a level of protection equivalent to that within the EU. Transferring your Personal Data to such companies in connection with the performance of Services can only take place with your explicit consent.

9. Your rights

You have the right at all times to lodge a complaint or objection about the way in which Salsa Shop processes your Personal Data, or to request access, erasure, rectification, completion, data portability, restriction of processing or deletion of your Personal Data. This can be done in writing or by emailing info@salsashop.com. We will ask you to provide us with specific information so that we can confirm your identity. This is a security measure to ensure that your personal data is not disclosed to anyone who does not have the right to receive it. Below you can read what the aforementioned rights entail.

Right of access

You have the right at all times to access your personal data. The right of access only concerns access to your own data. You may request access to your personal information at any time, including a copy of the personal data that Salsa Shop has processed or is still processing about you. It is possible that your data has already been deleted, anonymised, or is no longer available due to legislation and regulations. In that case, Salsa Shop will inform you immediately of the reason why.

Erasure

If there is no longer a legal basis for Salsa Shop to hold your personal data, you may submit a request to have your personal data erased. You also have the right to ask Salsa Shop to erase or delete your data when you have successfully exercised your right to object to the processing, when you are under 16 and the personal data was collected via our Website, when Salsa Shop may have processed your data unlawfully, or when we must erase your personal data to comply with legislation and regulations. It is also possible to have your data erased if you withdraw consent previously given. Please note that, for specific legal reasons, we may not always be able to (fully) comply with your erasure request. Where applicable, we will inform you of this at the time of your request.

Rectification and completion

If you believe that the personal data Salsa Shop holds about you is incorrect or incomplete, you may submit a request to have it corrected. Salsa Shop will make reasonable efforts to correct this where necessary and possible.

Data portability

You have the right to ask Salsa Shop to transfer the personal data we hold about you to yourself or to a third party that provides a similar type of service. Salsa Shop will provide this data in a structured, machine-readable format. Portability only applies to automated data for which we have previously received your consent, or which has been processed in connection with an agreement between Salsa Shop and you.

Objection

In certain circumstances, you may have the right to object to Salsa Shop processing your data. This applies if you believe your rights and freedoms are at stake when Salsa Shop processes your data on the basis of a legitimate ground for processing, or when the processing relates to a legal claim. A balance will then be struck between the interests of Salsa Shop and you as the data subject, in order to assess whether the data processing should be discontinued.

10. Security

Salsa Shop takes appropriate technical and organisational measures to secure the Personal Data it obtains. Salsa Shop uses equipment and software to continuously secure its systems and the Website with antivirus software that complies with the current state of the art. The online programs used by Salsa Shop are all protected with passwords that are changed regularly. In addition, Salsa Shop uses an SSL certificate for the Website for a secure internet connection. The plugins used for the Website are always kept up to date.

11. Complaints to the Dutch Data Protection Authority

If you have a complaint about the use of your Personal Data, you can contact the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) by submitting a report via the form available for this purpose on the AP’s website.

Changes

Salsa Shop may, without prior notice, make changes to this Privacy Policy in the future if this proves necessary in order to be and remain compliant with legislation and regulations, or in connection with (the expansion of) the Services offered by Salsa Shop. It is advisable to check our Privacy Policy regularly. The most current version can be found on the Website.