Privacy Policy

Introduction

croonihznt S.A. ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website croonihznt.top or use our restaurant delivery analytics services.

This policy applies to all personal data we process about you, whether collected through our website, services, or other interactions with croonihznt.

Data Controller Information

The data controller responsible for your personal data is:

Data Collection

We collect various types of information to provide and improve our services. The data we collect includes:

Personal Information You Provide

When you interact with our services, we may collect personal data that you voluntarily provide, including:

• Name and contact information (email address, phone number)
• Company or restaurant name and business details
• Communication preferences and enquiry details
• Account credentials and profile information
• Payment and billing information

Automatically Collected Information

When you visit our website or use our services, we automatically collect certain information:

• IP address and device identifiers
• Browser type and version
• Operating system and device information
• Website usage patterns and navigation data
• Referral sources and search terms

How We Use Your Information

We process your personal data for various purposes based on legitimate legal grounds. How we use your information depends on how you interact with our services:

Service Provision

We use your data to provide, maintain, and improve our restaurant analytics services, including:

• Processing and responding to your enquiries
• Creating and managing your account
• Delivering our analytics platform and features
• Providing customer support and technical assistance
• Processing payments and managing billing

Communication and Marketing

With your consent or where legally permitted, we may use your information to:

• Send you service updates and important notices
• Provide information about new features and services
• Send marketing communications about relevant products
• Conduct surveys and gather feedback

Legal and Business Operations

We may process your data for legitimate business interests, including:

• Complying with legal obligations and regulations
• Protecting our rights and preventing fraud
• Analysing and improving our services
• Managing business operations and administration

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use, please refer to our Cookie Policy.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal data to third parties. We may share your information in the following circumstances:

Service Providers

We may share data with trusted third-party service providers who assist in operating our business, including:

• Cloud hosting and infrastructure providers
• Payment processing services
• Email and communication platforms
• Analytics and marketing tools

Legal Requirements

We may disclose your information when required by law or to:

• Comply with legal processes or government requests
• Protect our rights, property, or safety
• Prevent fraud or security threats
• Enforce our terms of service

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Generally, we retain data for the following periods:

• Account information: For the duration of your account plus 7 years for legal compliance
• Communication records: 3 years from last contact
• Website analytics data: 26 months
• Marketing data: Until consent is withdrawn or 3 years of inactivity

When data is no longer needed, we securely delete or anonymise it in accordance with our data retention procedures.

Your Rights

Under the General Data Protection Regulation (GDPR) and other applicable privacy laws, you have certain rights regarding your personal data:

• Right of Access: You can request copies of your personal data
• Right to Rectification: You can request correction of inaccurate or incomplete data
• Right to Erasure: You can request deletion of your personal data in certain circumstances
• Right to Restrict Processing: You can request limitation of how we process your data
• Right to Data Portability: You can request transfer of your data to another service
• Right to Object: You can object to processing based on legitimate interests
• Right to Withdraw Consent: You can withdraw consent for processing at any time

To exercise these rights, please contact us at privacy@croonihznt.top or +351 212 905 100. We will respond to your request within one month.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• Encryption of data in transit and at rest
• Access controls and authentication systems
• Regular security assessments and updates
• Employee training on data protection
• Incident response and breach notification procedures

While we strive to protect your personal data, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA) that may not provide the same level of data protection. When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by the European Commission
• Other legally recognised transfer mechanisms

Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at privacy@croonihznt.top.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

You also have the right to lodge a complaint with the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados) if you believe we have not handled your personal data appropriately.