PRIVACY POLICY

By Dres and its affiliates (“we”, “our”, or “us”) provide this Privacy Policy to explain our privacy and information practices for (i) our websites that link to this Privacy Policy, and our social media pages and events (the “Online Services”) and (ii) our physical facilities (“Facilities”, together with Online Services, “services”). This Privacy Policy describes the types of personal data we collect, how that personal data is used and disclosed, and your rights and choices regarding your personal data.

​

This Privacy Policy does not apply to the extent we process personal data in the role of a processor or service provider on behalf of our customers. Please directly contact the relevant controller for more information about their privacy practices. If you have any further questions, please contact privacy@bydres.com.

1. Personal data we collect

“Personal data” is defined as any information that can identify, relate to, describe, be associated with, or be reasonably capable of being associated with a particular individual. Personal data does not include anonymous, de-identified, or non-personal data. We collect personal data through our Online Services and our Facilities. Our Online Services collect the following types of personal data:

​

____________________________

​

A. Our Online Services collect the following types of personal data:

PERSONAL DATA YOU PROVIDE TO US

We collect personal data that you provide directly for a business or commercial purpose, such as when you access our website, enter into a contract, establish a user account with us, register for an event or our Online Services, entering into any sweepstakes or surveys, through social media outlets, in connection with a potential business relationship with us, or by giving us your contact information at various events or online. This personal data may include your name, business name, email and physical address, telephone number, profile, activity and performance information, payment information, and when necessary, government ID or other tax related information.

WHAT WE GET FROM OTHER THIRD PARTIES, AFFILIATES, AND SUBSIDIARIES

In certain circumstances, we collect personal data about you from certain third party partners, affiliates, and subsidiaries for a business and commercial purpose. We may combine this information with personal data provided by you. This helps us update, expand, and analyze our records, identify new customers, and create more tailored advertising to provide Online Services that may be of interest to you. This personal data may include your contact information, professional or social media information, commercial information, and inferences and preferences related to your behavior.

WHAT WE AUTOMATICALLY COLLECT FROM YOU

We collect the following information for a business and commercial purpose from you when you use the Online Services:

GENERAL SYSTEM INFORMATION

Through your use of the Online Services, we collect certain hardware and software information from you and your device such as your device id, device type, network information, time zone, operating system version, order printing information, device id location, IP address, and other general system information.

COOKIES

We use cookies, web beacons, and similar technologies when you use our Online Services. For more information, including how to manage your cookie preferences, see our Cookies Policy.

​

____________________________

​

B. Our Facilities collect the following types of personal data
 

MANAGEMENT AND SAFETY

We collect personal data on incidents and accidents that occur in our Facilities that may include the use of access ID cards, Closed Circuit Television Video (CCTV), video taken from parking lot security cameras, photographs and pertinent personal information regarding accidents/injuries that may have occurred in our Facilities, and other security measures for your protection.

THIRD-PARTY SOURCES

We may obtain personal data about you from third parties and/or link the personal data we collect from you to additional records made available by third parties. For example, in order to provide the requested services, we receive certain personal data related kitchen orders.

PROFESSIONAL AND CLIENT RELATIONSHIPS

In the course of professional or client interactions involving the licensing of space, we collect personal data about you such as your name, position, entity name, and other details surrounding the transaction or potential transaction.

​

____________________________

​

2. Use of personal data

Our primary purpose in collecting personal data is to facilitate and provide the Online Services or information that you have selected to receive. Where required by law, we obtain your consent to use and process your personal data for these purposes. Otherwise, we rely on another authorized legal basis (including but not limited to the performance of a contract or legitimate interest) to collect and process your personal data. We use personal data for the following purposes:

TO PROVIDE YOUR REQUESTED SERVICES

Our primary business and commercial purpose in collecting personal data is to facilitate and provide the services or information that you have selected to receive through either your consent or through entering a contract with us. For example, if you provide personal data to us through our website, we will use your data to respond to the request. We also use it to send administrative information, such as notices related to products and Online Services, or to policy changes.

TO MANAGE USER REGISTRATIONS

If you have registered for an account with us, we process your personal data for a business purpose by managing your user account for the purpose of performing our contract with you according to applicable terms of service.

TO CONTACT YOU

With your consent or, in some cases for our legitimate interest, we use your personal data for our business and commercial purpose to contact you for marketing purposes, including telemarketing calls, text messages, and to send marketing emails that we believe may be of interest to you, such as product announcements, newsletters, informational materials, and details on upcoming events.

TO MANAGE PAYMENTS

If you have provided financial information to us, we process your personal data to verify that information and to collect payments to the extent that doing so is necessary for our business purpose to complete a transaction and perform our contract with you.

TO PLAN, MANAGE, AND FACILITATE EVENTS

With your consent, we use your personal data for our business and commercial purpose in event planning and management, including registration, billing, and connecting with other event attendees, or to contact you further about relevant products and Online Services.

FOR SECURITY, LEGAL OBLIGATIONS, AND INVESTIGATIONS

We use your personal data for our business purpose and legitimate interest to prevent, detect, mitigate, and investigate potential security issues, as well as fraudulent or illegal activity. We may also use your personal data for a legitimate interest to comply with and enforce applicable legal requirements or to protect our interests or the interests of other third parties. This also includes sharing personal data with others in connection with, or during negotiations of, any merger, sale of company assets, consolidation or restructuring, financing, or acquisition of all or a portion of our business by or into another company.

FOR IMPROVEMENTS TO OUR SERVICES AND PRODUCTS

We use your personal data for our business and commercial purpose and legitimate interest in connection with our products and services to diagnose technical problems, track and analyze usage, and make updates or improvements. For example, we may use your comments to improve or help guide future enhancements to our products and services.

TO PERSONALIZE YOUR EXPERIENCE

We may also use your personal data for our business and commercial purpose and our legitimate interest or with your consent to personalize your experience on our websites. We and/or our services providers use website tracking technologies to display products or features that are tailored to your interests and to present advertising on other sites. For more information on these technologies see our Cookies Policy.

____________________________

​

3. Sharing of personal data
 

AFFILIATES AND SERVICE PROVIDERS

We share personal data with our affiliates and like most businesses, we also share personal data with third-party service providers or vendors contracted to provide services on our behalf. Our service providers assist us by handling tasks such as Facility services, IT services, data management, email distribution, or information analytics.

ADVERTISERS

We may share personal data with our advertisers. Our advertisers may use your information to display advertisements to you through the services and advertisements for us on third party websites.

LAW ENFORCEMENT

We may share personal data with law enforcement agencies if we reasonably believe unlawful activities have occurred or the personal data may aid in an ongoing investigation. We may also share personal data with law enforcement agencies if we determine, in our sole judgment, that you have violated our agreements or policies or that the release of your personal data may protect the rights, property, interests, or safety of us, our affiliates or any other third party.

LEGAL PROCESSES

We may share personal data as required by, or permitted by, law, whether in response to subpoenas, court orders, other legal processes, or as we believe is necessary to exercise our legal rights, including defending against legal claims that have been or might be brought against us.

BUSINESS TRANSFERS

Your personal data may be transferred to a third party as a part of a potential sale, merger, reorganization or other similar transaction. In accordance with applicable laws, we will use reasonable efforts to notify you of any transfer of personal data to an unaffiliated third party.

CONSENT

With your consent, we may disclose personal data about you to certain third parties.

____________________________

4. Data protection rights
 

INDIVIDUAL RIGHTS

Subject to applicable privacy laws, you may have certain legal rights over the personal data we hold about you. These rights may include the right to access and to obtain a copy of your personal data processed by us, the right to restrict (including any withdrawal or objection rights) the processing of your personal data, or the right to access, correct, delete your personal data. However, please note that such rights are not absolute. They do not always apply and exemptions may be applicable. In response to any such request, you may be asked to verify your identity and/or provide information that helps us to better understand your request. If we are unable to comply with your request, we will explain why.

EXERCISE OF SUCH RIGHTS

To exercise your individual rights, you may send an email to privacy@bydres.com. If you are not satisfied with how we process your personal data, please let us know and we will take reasonable steps to investigate your concern. If you are not satisfied with our response, you have the right to make a complaint to the data protection authority in the jurisdiction where you live or work, or in the place where you think an issue in relation to your data has arisen.

____________________________

​

5. Data transfer
 

Your personal data may be stored and processed in the United States and in any other country where we or our affiliates, subsidiaries, or third-party service providers maintain facilities or personnel. When you provide personal data to us, we may process and transfer your data within the United States and around the world. We follow applicable data protection laws when transferring personal data, including EU standard contractual clauses. Please contact us at privacy@bydres.com if you have any questions.

____________________________

​

6. Data retention
 

We will retain your personal data for as long as legally permitted in light of the purpose(s) for which it was obtained and as outlined in this Privacy Policy. The criteria used to determine our retention periods include: (i) the length of time we have an ongoing relationship with you and provide the services to you; (ii) whether there is a legal obligation to which we are subject; or (iii) whether retention is advisable in light of our legal position.

____________________________

​

7. Security

We have technical and physical safeguards in place to help protect your personal data. However, no method of storage or transmission is 100% secure. We therefore urge you to exercise caution when conveying any personal data over the Internet. As when disclosing any information on the Internet, you should remain mindful that such information might be accessible by the public and, consequently, may be collected and used by others without your consent. You should also recognize that your use of the Internet and any other means of communication with us is solely at your own risk.

​

____________________________

​

8. Additional terms

​

This Privacy Policy does not apply to websites or applications offered by other organizations or individuals that may be displayed as content on our website, including point of sale systems or any delivery platforms. We encourage you to read the Privacy Policy of any third-party website or applications before transmitting personal data.

​

The services are not directed to individuals under the age of 16 and we do not knowingly collect personal data from individuals under the age of 16.

We reserve the right, at any time, to modify this Privacy Policy. You should review this Privacy Policy periodically so that you keep up to date on our most current policies and practices. We will note the effective date of the latest version of our Privacy Policy at the end of this Privacy Policy.

____________________________

​

9. Communications

​

If you have any additional questions or concerns about our Privacy Policy or any other privacy or security issue, please contact us at:

​

EMAIL

privacy@bydres.com

​

____________________________

​

10. California specific disclosures
 

California Consumer Privacy Act 2018 (CCPA)
This section contains terms that reflect our commitment to comply with the California Consumer Privacy Act of 2018 (the “CCPA”). For the purposes of this section, “personal data” is defined as any information that can identify, relate to, describe, be associated with, or be reasonably capable of being associated with a particular individual or household.

Information we collect, use, and disclose
 

We have collected the following categories of personal data from consumers within the last twelve (12) months:

A. IDENTIFIERS

Such as the personal data you provide us and the personal data that we receive from third parties in the form of your name, business name, email, address, and telephone number.

B. PERSONAL INFORMATION

Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)), such as the personal data you provide us related to your signature, address, phone number, or other contact information.

C. COMMERCIAL INFORMATION

Such as the personal data you provide us, the information we automatically collect from you, and information we receive from third parties. This personal data may be in the form of your contact information, cookies, and certain professional or social media information.

D. INTERNET OR OTHER SIMILAR NETWORK ACTIVITY

Such as the personal data we automatically collect in the form of cookies and general system information as well as other personal data collected from third parties including professional and social media information.

E. PROFESSIONAL/EMPLOYMENT INFORMATION

Such as the information you provide us in the form of your company and your employees and contractors information.

F. INFERENCES

Such as the personal data you provide us and the personal data that we receive from third parties in the form of your name, business name, email, address, and telephone number.

G. IDENTIFIERS

We may draw inferences through the personal data you provide us, the information we automatically collect from you, and the information we receive from third parties. These inferences may relate to your business profiles and other analytics.

H. AUDIO, ELECTRONIC, VISUAL, THERMAL, OR SIMILAR INFORMATION

Such as our CCTVs at our facilities and through our image and video analytics cameras in certain Facilities.

I. FINANCIAL INFORMATION

Such as the personal data you provide us in the form of payment information and/or government ID or tax related information.

​

We have disclosed to service providers and to third parties for a business purpose items a to g. We have collected and used for a business purpose items a to h and items a to f for a commercial purpose. Please visit the Personal Data We Collect and Sharing of Personal Data sections of the Privacy Policy for more information on what personal data we collect and disclose. Please visit the section on Use of Personal Data for additional information on how we use personal data.

Your CCPA rights and choices
The CCPA provides consumers (California residents) with specific rights regarding their personal data. This section describes your CCPA rights.

A. ACCESS TO INFORMATION AND DATA PORTABILITY RIGHTS

Consumers have the right to request a business disclose what personal data (and the categories) it collects, uses, discloses, and sells. Once we receive and confirm your verifiable consumer request, we will disclose to you the specific pieces of personal data we have collected from you. In that disclosure, you will also receive information that describes the following:

​

• The categories of personal data that we have collected in the preceding 12 months

• The categories of sources from which the personal data is collected

• The categories of personal data that we have disclosed for a business purpose

• The categories of third parties to whom the personal data was disclosed for a business purpose

• The business or commercial purpose for collecting personal data

DELETION REQUEST RIGHTS

You have the right to request that we delete all of the personal data that we collected and retained from you, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your personal data from our records, unless an exception applies.

EXERCISING YOUR RIGHTS

To exercise your rights, please visit the section above on Your Data Protection Rights. In order for us to honor your request, we must verify your identity. In your request, please provide us with your email address and name. We will then send you a verification email for you to respond to. Once verified, we will confirm receipt of the request within 10 days and provide information on how the business will process the request. We endeavor to respond to verifiable consumer requests within forty-five (45) days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request’s receipt. You may only make a verifiable consumer request for your personal data twice within a 12-month period. The response we provide will also explain the reasons we cannot comply with a request, if applicable. We will select a format to provide your personal data that is readily usable. Please note that we cannot respond to your request or provide you with personal data if we cannot verify your identity or your authority to make the request and confirm the personal data that relates to you. Only you, or a person you authorized in writing or registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your personal data. You may also make a verifiable consumer request on behalf of your minor.

NON-DISCRIMINATION

We will not discriminate against you for exercising any of your CCPA rights. However, we may offer you certain financial incentives permitted by the CCPA that can result in different prices, rates, or quality levels. Any CCPA permitted financial incentive we offer will reasonably relate to your personal data’s value and contain written terms that describe the program’s material aspects. Participation in a financial incentive program requires your prior opt in consent, which you may revoke at any time.

Sale of personal data

We have not sold (as defined under the CCPA) any personal data of any consumers (including any consumers under 16 years old) to any third parties in the preceding 12 months. We do not “sell” personal data under the traditional sense of the word. However, we use advertising cookies with your consent.

Shine the Light

Under California Civil Code sections 1798.83-1798.84, California residents who have an established business relationship with us are entitled to ask us for a notice describing what categories of personal data we share with third parties for their direct marketing purposes. This notice will identify the categories of information shared with third parties and will include a list of the third parties with which it is shared, along with their names and addresses. If you are a California resident and would like a copy of this notice, please submit a written request to us at the addresses listed below.

Do not track

Some web browsers and devices permit you to broadcast a preference that you not be “tracked” online. At this time, we do not modify your experience based upon whether such a signal is broadcast.

____________________________

​

If we need, or are required, to contact you concerning any event that involves information about you, we may do so by email, telephone, mail, or as otherwise required by law.

​