Cookie Policy

1. Introduction and organizational information

RiseRank AB, company registration no. 559177-2875, Textilgatan 43, 120 30 Stockholm, Sweden ("RiseRank", "we", or "us"), is the data controller and is dedicated to serving our customers and contacts to the best of our abilities. Part of this commitment involves the responsible management of personal information collected through the website restauranger.se and any related interactions. Our primary goals in processing this information include:

• Enhancing the user experience on our platform by understanding customer needs and preferences.
• Providing timely support and responding to inquiries or service requests.
• Improving our products and services to meet the evolving demands of our users.
• Conducting necessary business operations, such as billing and account management.

It is our policy to process personal information with the utmost respect for privacy and security. We adhere to all relevant regulations and guidelines to ensure that the data we handle is protected against unauthorized access, disclosure, alteration, and destruction.

We have a designated Data Protection Officer (DPO). If you have any questions or require further information about how we manage personal information, please contact us at max@riserank.com. Personal information processed under this policy is retained only for as long as necessary for the purposes described below, to comply with legal obligations, or until you withdraw your consent.

2. Scope and application

This policy is designed to protect the personal information of all our stakeholders, including website visitors, registered users, and customers on restauranger.se. Whether you are just browsing the website, using our services as a registered user, or engaging with us as a valued customer, we ensure that your personal data is processed with the highest standards of privacy and security.

3. Data collection and processing

3.1. Types of personal information we process

We collect personal information through various interactions, including when you use restauranger.se to discover restaurants, leave reviews, or book a table, or when you provide information to us directly. The following list details the types of personal information we may process:

• First and last name
• Email address and/or phone number
• Device ID, IP address, browser information and language, operating system and version
• Real-time location (e.g., GPS) and IP-based approximate location
• Interaction logs (e.g., clicks, time spent on pages) and browsing history

We only process information that is essential for delivering our services, complying with legal obligations, or enhancing your user experience.

3.2. How we use personal information

The data we collect serves multiple purposes: customizing user experience, authentication and security, content delivery, communication, analytics and performance tracking, marketing and advertising, customer support, fraud prevention and risk management, and research and development.

3.3. Legal basis for processing

We process your personal information on the basis of the following legal grounds under Art. 6 GDPR, depending on the purpose:

• Performance of a contract (Art. 6(1)(b) GDPR): to provide our services to you, e.g. account management, bookings, and customer support.
• Legitimate interest (Art. 6(1)(f) GDPR): for analytics, performance tracking, fraud prevention, and improving our services, following a balancing test that ensures your rights do not override our interest.
• Consent (Art. 6(1)(a) GDPR and the Swedish Electronic Communications Act (LEK), Chapter 6, Section 18): for non-essential cookies, marketing, and targeted advertising. Consent can be withdrawn at any time.
• Legal obligation (Art. 6(1)(c) GDPR): for matters such as accounting and compliance with statutory requirements.

4. Data storage and protection

6. Your rights and choices

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), to object (Art. 21), and to withdraw consent (Art. 7(3)). You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection, IMY (Art. 77). To exercise any of these rights, please contact us at max@riserank.com. We will respond to your request within the timeframes stipulated by law.

8. International data transfers

We may transfer your personal information to locations outside the EU/EEA, including to the United States, to the extent we use providers such as Amazon Web Services, Google, and Mailchimp that are established or process data there. Any such transfers are always carried out under a valid transfer mechanism under Chapter V GDPR, primarily the European Commission's Standard Contractual Clauses (SCCs) or, where applicable, reliance on a recipient's certification under the EU-U.S. Data Privacy Framework (DPF). You may request a copy of the safeguards applied by contacting us at max@riserank.com.

9. Direct marketing and communications

We may use your personal information to send direct marketing communications about our products, services, and promotions, in compliance with the GDPR and the ePrivacy Directive. We will obtain your explicit opt-in consent before sending direct marketing where required by law. Every communication includes clear instructions on how to unsubscribe. Direct marketing may be sent via email, push notifications, and in-app messaging. You can manage your preferences via the unsubscribe link in our emails or text messages.

10. Data breach notification procedures

If a data breach is likely to result in a risk to your rights and freedoms, we will notify the Swedish Authority for Privacy Protection (IMY) without undue delay and, where feasible, within 72 hours of becoming aware of it, in accordance with Art. 33 GDPR. If a data breach poses a high risk to your rights and freedoms, we will notify you without undue delay, in accordance with Art. 34 GDPR, providing clear information about the breach and the steps you can take to protect yourself.

Point of contact: If you have any questions about a data breach, please contact us immediately at max@riserank.com.

11. Policy updates and changes

We may update this policy from time to time to reflect changes in legal requirements, industry standards, or our business operations. For material changes we will notify you via email, website notifications, or other appropriate channels, and indicate the effective date at the top of the document. For material changes requiring your consent under the GDPR, we will seek your explicit opt-in consent before implementing the changes.

12. Contact us

If you have any questions or concerns about this policy, please contact us at max@riserank.com.

RiseRank AB (company registration no. 559177-2875)
Textilgatan 43
120 30 Stockholm, Sweden
www.restauranger.se