Privacy Policy – MealPass

Introduction
MealPass works to ensure that your privacy is protected when using our Services. We therefore have a policy setting out how your Personal Data will be processed and protected. Please stay updated on any changes to this Privacy Policy by visiting our websites and mobile applications (“Platform”). This Privacy Policy only concerns MealPass users of our Platform and Services.

What information do we collect?
MealPass collects information to operate our business and provide you with opportunities for reducing food insecurity & food waste. We collect both Personal Data and Other Information in support of these efforts.

“Personal Data” is information that can be used, directly or indirectly, alone or together with other information, to identify you as an individual Customer. This may include your precise Location Data.

“Other Information” is information that is anonymous, aggregate, de-identified, or otherwise does not reveal your identity. Some examples include browser and operating system, time spent using our Services, and webpages visited. We collect and use this information to understand how you and our Customers as a whole use our Services and constantly tune, enhance, innovate and build products and services to reflect the needs of our Customers.

When you are using a mobile device, we also collect and use your Apple Identifier for Advertising (IDFA) and Google Advertising ID (AAID) to recognise your device and support activities on our Services. These number values are not permanently tied to your device and, depending on your operating system, you can reset it through your device settings.

We collect Personal Data in the following ways:
1. INFORMATION YOU GIVE TO US: When you register with us, we collect registration and demographic details, e.g., name, email address, password, country and exact location. We also collect your mobile phone number.
2. INFORMATION WE AUTOMATICALLY COLLECT FROM YOUR USE OF THE Y Waste PLATFORM: When you use the MealPass Platform, we automatically collect information, including personal information, about the services you use and how you use them. This information is necessary for the adequate performance of the contract between you and us, to enable us to comply with legal obligations and given our legitimate interest in being able to provide and improve the functionalities of the MealPass Platform.
3. When you use or interact with our Services, we may collect information about your precise or approximate location as determined through data such as your IP address or mobile device’s GPS to offer you an improved user experience. Most mobile devices allow you to control or disable the use of location services for applications in the device’s Settings menu. We collect information about your interactions with the Y Waste Platform. We automatically collect log data and device information. We use cookies and other similar technologies. MealPass collects information related to your payment transactions through the MealPass Platform. This information is necessary for the adequate performance of the contract between you and Y Waste
We collect Location Data in several ways:
1. From your wireless carrier,
2. directly from the device on which you use our Services.
The way in which we collect Location Data is different depending on whether you are accessing the Services through a website or a mobile application. If you are accessing the Services through one of our mobile applications, the way we collect Location Data will differ depending on your mobile device’s operating system. In all events, we do not collect Location Data, unless you have allowed its collection when prompted. If you decline to allow Location Data collection in the app, we will not collect your Location Data unless you manually enter it in. Other Information: We may collect other Information about your use of our Services. This includes, for example, your device type, carrier provider, browser type, operating system, internet domain and host name, date and time of access as well as referring and onward URL, as well as transactional data about the activities you undertake and how you interact with the Services, such as what data is displayed, clicked on or shared, the click stream patterns, and the length of time spent on each site or page; and searches you may conduct on the Services.
1. When you connect with us through social media, we may collect account or profile information.
You may choose to enable, log into or sign on to the Services through Facebook or other networking services (“Social Networking Services”). When you connect using your Social Networking Services accounts, we may collect Personal Data that you have provided to that Social Networking Service. For example, when you log in with your Facebook credentials, with your consent we may collect Personal Data from your Facebook profile that is permitted under Facebook’s Terms of Use, such as your email address. If you do not want to provide us with this information, you will need to amend the privacy settings on your Social Networking Services account. For more information, please review the privacy disclosures and terms of your Social Networking Services account, which govern how that account information is collected and shared with us.
1. When you take surveys and enter promotions, contests, and sweepstakes, we collect contact, demographic and eligibility information.
We may sponsor contests, sweepstakes and other promotions (“Promotions”) and we may request that you provide Personal Data, such as name, address, email address, telephone number and age and other information that may be appropriate in order to participate. We may also launch surveys that ask you to answer questions about a range of topics from personal information to brand and product preferences.

How do we use your Personal Data
We use the data we collect to operate our business, advertise and improve our existing Platform, develop new services and to improve and personalize your experiences interacting with us. We also use your Personal Data to communicate with you. We will use your Personal Data for the following purposes:
1. Operate our business and run our Services.
We use your Personal Data to create and manage your personal account at MealPass and to process your orders.

Personalize experiences on our Services, better understand our Customers and gain customer insights
We use your Personal Data to conduct analyses in order to provide you with relevant functionality. This includes showing you a map or list view of nearby stores and suggesting the most relevant stores for you. We may conduct profiling based on your interactions with the MealPass Platform, your purchase history, your profile information and preferences, and other content you submit to the MealPass Platform. We process this information given our legitimate interest in improving the MealPass Platform and our Customers’ experience with it, and where it is necessary for the adequate performance of the contract between you and the Store.

Communicate with you and respond to your requests
When registering an account with us, you have a choice of receiving announcements about us and our products and Services via email and/or push notifications. If you consent to such messages, we may use your Personal Data and Other Information to communicate with you about the MealPass products or Services you have purchased or used and to notify you of other products, promotions and Services we think may be of interest to you. You can manage your communication preferences at any time from the mobile applications. We may use your Personal Data to respond to your requests for technical support, online services, product information or to any other communication you initiate. This includes accessing your account to address technical support requests. Additionally, when you request it, we will use your Personal Data to enrol you in contests, programs, or offers. We also may use your Personal Data to notify you of promotions and other special offers. Please note that irrespective of your email and push notifications settings, we may send you notifications pertaining to the performance of our Services, such as revision of our Terms or this Privacy Policy or other formal communications relating to products or Services you have purchased or use. This also includes emails, push notifications and text messages in the event one or more of your purchases are cancelled by a store. We do this to avoid a situation where you show up at a store to pick up food when the store has no surplus food left to sell.

Tailor our advertising and marketing
We use Personal Data and Other Information to assist us in our advertising and marketing campaigns, to provide you with information on the products and Services that we think are most relevant to you. Given you have provided your consent, we may send you promotional messages, marketing, advertising and other information that may be of interest to you based on your preferences and social media advertising through social media platforms. This includes contests, sweepstakes and other promotional activities. You always have the possibility to demand Y Waste not to send you any promotional material or information. We will process your personal information for the purposes described above given our legitimate interest in undertaking marketing activities to offer you products that may be of your interest.

Create and Maintain a Trusted and Safe Environment
We may use Personal Data to detect and prevent fraud, spam, abuse, security incidents, and other harmful activity. To conduct security investigations and risk assessments, and to verify or authenticate information or identifications provided by you.
Where is your Personal Data stored
1. MealPass uses a variety of third party service providers to help us provide services related to the MealPass Platform. Any such transfer of your Personal Data will be carried out in compliance with applicable laws. These providers have limited access to your information to perform these tasks on our behalf and are contractually bound to protect and to use it only for the purposes for which it was disclosed and consistent with this Privacy Policy. We have – prior to sharing your information with third parties – established the necessary means to ensure an adequate level of data protection. This may be an agreement on the basis of the American Privacy Act, The Australian Privacy Act & the EU Model Clauses (a set of clauses issued by the European Commission).
For how long is your Personal Data stored
1. MealPass will retain your Personal Data for as long as you maintain an Account or as needed to provide you the Services. We will also retain and use your Personal Data as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
Who is responsible for your Personal Data
1. MealPass is the controller of the Personal Data you submit to us and responsible for your Personal Data.
Who has access to your Personal Data
1. our data may be shared within the MealPass corporate family of companies that are related by common ownership or control. We never pass on, sell or swap your data for marketing purposes to third parties outside the MealPass group. Data that is forwarded to third parties is only used to provide you with the services mentioned above, for example media services and agencies for distribution of newsletter and credit reference or debt collection agencies for the purpose of credit rating checks, identity checks and debt collection. MealPass may disclose your information, including personal information, to courts, law enforcement or governmental authorities, or authorised third parties, if and to the extent we are required or permitted to do so by law or if such disclosure is reasonably necessary: (i) comply with our legal obligations, (ii) to comply with legal process and to respond to claims asserted against Y Waste, (iii) to respond to verified requests relating to a criminal investigation or alleged or suspected illegal activity or any other activity that may expose us, you, or any other of our users to legal liability, (iv) to enforce and administer our Terms of Service or other agreements with Members, or (v) to protect the rights, property or personal safety of MealPass and its Members.
How do we protect your Personal Data
1. We have taken technical and organisational measures to protect your data from loss, manipulation and unauthorised access. We continually adapt our security measures in line with technological progress and developments. To make card purchases with us as secure as possible, all information is sent in encrypted form. This means that the information is passed through a secure connection and that external parties cannot read your Personal Data.
What are your rights
1. You may exercise any of the rights described in this section before by sending an email to info@mealpass.org. Please note that we may ask you to verify your identity before taking further action on your request.

Managing Your Information
You may access and update some of your information through your Account settings. If you have chosen to connect your Y Waste Account to a third-party application, like Facebook or Google, you can change your settings and remove permission for the app by changing your Account settings. You are responsible for keeping your personal information up-to-date.

Rectification of Inaccurate or Incomplete Information
You have the right to ask us to correct inaccurate or incomplete personal information concerning you and which you cannot update yourself within your MealPass Account.

Data Access and Portability
You are entitled to request copies of personal information that you have provided to us in a structured, commonly used, and machine-readable format and/or request us to transmit this information to another service provider (where technically feasible).

Data Retention and Erasure
We generally retain your personal information for as long as is necessary for the performance of the contract between you and us and to comply with our legal obligations. If you no longer want us to use your information to provide the MealPass Platform to you, you can request that we erase your personal information and close your MealPass Account. Please note that if you request the erasure of your personal information:
1. We may retain some of your personal information as necessary for our legitimate business interests, such as fraud detection and prevention and enhancing safety.
2. We may retain and use your personal information to the extent necessary to comply with our legal obligations. For example, MealPass may keep some of your information for tax, legal reporting and auditing obligations.
3. Information you have shared with others (e.g., Reviews may continue to be publicly visible on the MealPass Platform, even after your Account is cancelled). Additionally, some copies of your information (e.g., log records) may remain in our database, but are disassociated from personal identifiers.
4. Because we maintain the MealPass Platform to protect from accidental or malicious loss and destruction, residual copies of your personal information may not be removed from our backup systems for a limited period of time.

Withdrawing Consent and Restriction of Processing
You may withdraw your consent at any time by sending a communication to MealPass. Please note that the withdrawal of your consent does not affect the lawfulness of any processing activities based on such consent before its withdrawal.

Objection to Processing
You are entitled to object to MealPass’ processing of your personal information. If you object to such processing MealPass will no longer process your personal information but may also be required to close your account. MealPass can continue processing of personal data for specific purposes if MealPass can demonstrate compelling legitimate grounds for such processing or such processing is required for the establishment, exercise or defence of legal claims. Where your personal information is processed for direct marketing purposes, you may, at any time ask MealPass to cease processing your data for these direct marketing purposes by sending an e-mail to info@mealpass.org.
Business Transfer
1. If MealPass undertakes or is involved in any merger, acquisition, reorganisation, sale of assets, bankruptcy, or insolvency event, then we may sell, transfer or share some or all of our assets, including your information in connection with such transaction or in contemplation of such transaction (e.g., due diligence). In this event, we will notify you before your personal information is transferred and becomes subject to a different privacy policy.
Lodging Complaints
1. You have the right to lodge complaints about the data processing activities carried out by MealPass before the competent data protection authorities of the country concerned.