Our collection and processing of personal information is based on the following: 1) Personal data can be processed if it is necessary for a strictly legitimate interest of BurgerIndex. Legitimate interests are generally of a legal or commercial nature and refer to instances in which BurgerIndex has a vital interest that could not be achieved other than by using personal data (e.g., conducting aggregate analyses for business and commercial purposes, using Publicly Available Data, performing statistical analyses, initiating legal proceedings, security reasons ). In the context of processing Publicly Available Data, it is BurgerIndex’s legitimate interest to process such data for statistical purposes that support and inform its trend and volume analysis services and products, given that such Publicly Available Data is processed in accordance with the provisions of Article 89 of the GDPR and as set forth in this statement. The foregoing is also in line with the Article 29 Working Party Opinion 06/2014 on the notion of legitimate interests of the data controller under Article 7 of Directive 95/46/EC, which explicitly articulates that processing for statistical purposes, including in commercial context, would be considered legitimate interest of the controller. It is BurgerIndex’s position that, in line with the above mentioned Opinion, the legitimate interest in processing such Publicly Available Data is not overridden by the rights of the data subject, mainly due to the fact that the processing of such Publicly Available Data is trivial and that Influencer Data, which is publicly available, trivial and published by the individual in a business context, and both do not involve automated decision-making, including profiling, and does not pose significant risk to the rights and freedoms of the data subjects. This is also supported by the fact that such Publicly Available Data and Influencer Data are, evidently, made publicly available by the data subjects themselves and are available for review by any internet user. Therefore, subject to the safeguards applied to such Publicly Available Data, BurgerIndex bases its use of such Publicly Available Data, to the extent that the underlying datasets include any Personal Data, on its Legitimate Interest. In addition, to the extent that we use the personal information to improve this website or for analysing statistics, the basis for collection of data is our legitimate interest to conduct such improvements and analysis. 2) Our need to carry out the above processing of information, specifically for the purpose of processing your purchases of products and services or for the purpose of customer support and inquiries, which is in anticipation of entering into commercial engagements or as part of the performance of existing engagements with you or the organization you work for. 3) To the extent that we use the personal information for advertising or promotional activities, we will request your specific, freely-given, unbundled, informed and separate consent to such uses. Information Sharing and Disclosure Because BurgerIndex is a global company, your personal information may be shared with other BurgerIndex offices or subsidiaries around the world. All such entities are governed by this Privacy Policy or are bound by the appropriate confidentiality and data transfer agreements. BurgerIndex may send your personal information to other companies or people under any of the following circumstances: when we have your consent to share the information; we need to share your information to provide the product or service you have requested as part of our contractual relationship; we need to send the information to companies who work on behalf of BurgerIndex to provide a product or service you have requested as part of our contractual relationship (we will only provide those companies the information they need to deliver the product or service, and they are prohibited from using that information for any other purpose); in the event of sale or transfer of all or substantially all of BurgerIndex or any BurgerIndex affiliate’s shares or assets, in cases of mergers or in case of negotiations with respect to the foregoing; or we want to keep you up to date on the latest product announcements, software updates, special offers or other information we think you’d like to hear about either from us or from our business partners (unless you have opted out of these types of communications), only if you gave your explicit, free and informed consent to such processing activities, as detailed above. We will also disclose your personal information if required to do so by law, or in urgent circumstances, to protect personal safety, the public or our website. For the above purposes, personal information may be transferred to recipients in countries around the world (which may be located outside the EU/EEA, European Economic Area) which in some cases may have a lower level of protection than that within the EU/EEA. When transferring personal data to countries outside the EU/EEA, to jurisdictions that did not receive an adequacy decision by the European Commission, we use standard contractual clauses approved by the European Commission to ensure a sufficient level of protection for your personal information. The standard contractual clauses can be found at this link. Other than as described above, any other transfer of your personal information to third parties will be subject to your consent. Data Retention BurgerIndex stores the personal information as long as it is necessary to fulfil the purpose for which the data has been collected. This means that BurgerIndex deletes your personal information when such information is no longer necessary. Statistics which has been anonymised may be saved thereafter. Publicly Available Data processed by BurgerIndex for statistical purposes, shall be retained, either in cache or storage, for fulfilling the statistical purpose of validating the datasets and updating the statistical results based thereon, as prescribed under Recital 65 and Article 17 paragraph 3(d) of the GDPR. Data Subject Rights You may at any time request the rectification or erasure of your personal information. Please note however that deletion could mean that BurgerIndex cannot process your requests or provide you any requested services. Furthermore, with respect to Publicly Available Data processed for statistical purposes, and as prescribed under Recital 65 and Article 17 paragraph 3(d) of the GDPR, BurgerIndex will not be able to accommodate erasure requests, due to the nature of processing as well as due to the de-identification measures taken by it which may prevent the ability to identify any personal data relating to the requesting Data Subject. You have the right to request a copy of your personal information from our record. With respect to Publicly Available Data processed for statistical purposes, Data as a Service may deny such access request due to its inability to relate any personal data to the requesting data subject given the de-identification measures taken. You have the right to request a limitation of the use of your personal information (for example if you deem the information to be incorrect) or the termination of use of your personal information (for example as regards the use of the information to improve our services).