Express 24 Privacy Notice
Express 24 offers food delivery service available via mobile and web applications.
1. WHAT IS THIS PRIVACY NOTICE FOR?
We are committed to protecting privacy and we want to be transparent about our activities and the way we process your personal data.
The purpose of this Privacy Notice is therefore to inform you how and why we process your personal data.
2. WHO IS PROCESSING YOUR PERSONAL DATA?
2.1 Your personal data is processed by Foreign Enterprise Yandex Eats LLC located at 2 Shahrisabz str., Tashkent, Uzbekistan.
3. WHAT PERSONAL DATA IS PROCESSED, HOW, AND WHY?
The categories of personal data we process, the source of this data, the purposes and the legal basis of the processing are as follows:
| Source | Categories of Data | Purposes | Legal basis |
| You provide us with | Name or pseudonym, phone number | i) To identify and authorise you as our user, register your account, and communicate with you about your order
ii) To process your payments | Contract* |
| Addresses for orders | To show you the services or goods available to order, purchase, and deliver in your area, to place, process and fulfil your order, to help you quickly select addresses, to provide support for your account | Contract* | |
| Customer comments and preferences | To process and fulfil your order according to your preferences | Contract* | |
| Banking information | To process your payments | Contract* | |
| Email address | i) To send you service information about your orders, to resolve issues with our apps
ii) To inform you about our products and offers and those of our partners, arrange your participation in marketing contests or any other activities. | i) Contract*
ii) Consent
| |
| Data in fill-in forms: name, phone number, e-mail address, user’s message or feedback | i) To provide feedback
ii) To process your customer support request
iii) To publish your business and store reviews | i) Contract*
ii) Consent
| |
| Received from your device and our apps | IP address, device ID, device type and model, mobile operating system, browser or mobile application details | To secure access to your account and our IT systems | Consent |
| Advertising identifier | To customise targeted ads | Consent | |
| Generated when you interact with our apps | User ID, frequency of orders, time taken to complete an order, most frequently ordered services or goods, number of screens viewed when interacting with the apps, average order value | i) To improve the app and user experience, to provide relevant features, to modify apps interfaces, to prevent unauthorised orders ii) To analyse user activity for marketing purposes, to improve our marketing and business strategy iii) To arrange your participation in marketing contests or any other activities | Consent
|
| Details of your orders: date and time of order, price, payment method, | To provide you with a history of your orders, to enable the repeat order feature, and to resolve issues with our apps | Contract* | |
| You provide to the customer support team | Order details and history, contact details, comments, attachments, other details that you specify at your discretion or that the support team requests at its discretion | To provide you support and help you resolve issues with our apps | Contract* |
| Generated when you communicate with our customer support team, drivers, couriers, deliverers, agents, or partners through the apps | Recordings of conversations, your communications within the apps or by other means, and other data provided by you or generated by our apps | To protect our legitimate rights and the rights of third parties, to resolve disputes and legal claims, to conduct audits, to control the quality of the service provided | Consent |
| Source | Categories of Data | Purposes | Legal basis |
| You provide us with | Name or pseudonym, phone number | i) To identify and authorise you as our user, register your account, and communicate with you about your order
ii) To process your payments | Contract* |
| Addresses for orders | To show you the services or goods available to order, purchase, and deliver in your area, to place, process and fulfil your order, to help you quickly select addresses, to provide support for your account | Contract* | |
| Customer comments and preferences | To process and fulfil your order according to your preferences | Contract* | |
| Banking information | To process your payments | Contract* | |
| Email address | i) To send you service information about your orders, to resolve issues with our apps
ii) To inform you about our products and offers and those of our partners, arrange your participation in marketing contests or any other activities. | i) Contract*
ii) Consent
| |
| Data in fill-in forms: name, phone number, e-mail address, user’s message or feedback | i) To provide feedback
ii) To process your customer support request
iii) To publish your business and store reviews | i) Contract*
ii) Consent
| |
| Received from your device and our apps | IP address, device ID, device type and model, mobile operating system, browser or mobile application details | To secure access to your account and our IT systems | Consent |
| Advertising identifier | To customise targeted ads | Consent | |
| Generated when you interact with our apps | User ID, frequency of orders, time taken to complete an order, most frequently ordered services or goods, number of screens viewed when interacting with the apps, average order value | i) To improve the app and user experience, to provide relevant features, to modify apps interfaces, to prevent unauthorised orders ii) To analyse user activity for marketing purposes, to improve our marketing and business strategy iii) To arrange your participation in marketing contests or any other activities | Consent
|
| Details of your orders: date and time of order, price, payment method, | To provide you with a history of your orders, to enable the repeat order feature, and to resolve issues with our apps | Contract* | |
| You provide to the customer support team | Order details and history, contact details, comments, attachments, other details that you specify at your discretion or that the support team requests at its discretion | To provide you support and help you resolve issues with our apps | Contract* |
| Generated when you communicate with our customer support team, drivers, couriers, deliverers, agents, or partners through the apps | Recordings of conversations, your communications within the apps or by other means, and other data provided by you or generated by our apps | To protect our legitimate rights and the rights of third parties, to resolve disputes and legal claims, to conduct audits, to control the quality of the service provided | Consent |
* The personal data is processed on the basis of a contract defined by the Licence Agreement and the Terms of Use of our services (available at yandex.uz/legal/express24_tos; yandex.uz/legal/express24_eula), which you accepted when you created your account and accessed the respective services.
4. WHO DO WE SHARE WITH OR TRANSFER TO YOUR PERSONAL DATA?
4.1 Recipients of Your Personal Data
Your personal data is only shared with parties:
i) Directly involved in the provision of the services within the app:
- Our partners who are involved in obtaining and handling your order and who provide software solutions for the same purpose;
- Payment service providers and mobile money service providers that facilitate electronic transactions;
- Insurance companies;
- Our affiliates who provide authentication tools;
- Our affiliates and third parties who provide us with servers, data storage and other infrastructure facilities; and
- Our affiliates and third parties who assist us with customer support.
The entities that may be involved in personal data processing are listed on the following page: https://yandex.com/legal/affiliates. Not all the entities listed are necessarily involved in the processing of your data, as their involvement depends on the service you use and the country where you use it. We do not share personal data between our companies in violation of the privacy laws of your country.
ii) Entitled to receive your personal data under the law to which the relevant data controller is subject:
- For example, if law enforcement authorities have a lawful right to have access to your personal data, or financial regulators are duly entitled to investigate suspicious activities or transactions (according to the applicable law in your country and/or the country where our entity providing a service to you is incorporated). We do not share your personal data with state authorities contrary to the applicable privacy law.
iii) Helping us to improve our app:
- For example, data about technical errors encountered while using our services are shared with our affiliates who are involved in the development of our apps.
iv) Helping us to inform you about products, services, and offers:
- For example, advertising or device identifiers may be shared with companies that provide us with advertising or analytics services.
4.2 International Transfers of Your Personal Data
Parties we share your personal data with may be located in different countries.
Some of these countries may not provide the same level of data protection or data subject rights as the country where you use a service. In such cases, we follow the necessary procedures to ensure that your rights are respected and that your personal data are protected during and after the transfer.
Such procedures may include (subject to applicable privacy laws):
i) Commitments through data protection agreements based on standard contractual clauses for data transfers issued by relevant authorities;
ii) Additional contractual obligations based on our assessment of the local law of the country where your personal data are transferred and processed;
iii) Registration or authorisation of the transfer from competent data protection authority; and/or
iv) Additional technical and organisational security measures to prevent unlawful, i.e. incompatible with the laws of the country where we provide the service, or unauthorised access to your personal data.
We always comply with the privacy laws of the countries where we operate, including international data transfer requirements and limitations.
5. WHAT ARE THE RETENTION PERIODS FOR PERSONAL DATA?
5.1 We process your personal data until the purpose of the processing has been achieved.
5.2 The actual retention period depends on the personal data processed and the country where the processing takes place. For example, the recordings of phone conversations with our customer support team, drivers, or couriers are usually kept for no longer than 3 months.
5.3 We may continue to process your personal data, even after you deleted it from the app, if such processing is required by law or is necessary to protect our rights and interests or the rights and interests of third parties, in particular in the context of court proceedings.
The ability to delete data may also be limited by laws relating to freedom of expression and information.
6. WHAT ARE YOUR RIGHTS?
You have a number of rights under privacy laws. The rights that are available to you depend on the reason we process your personal data and the applicable law.
You can always access, rectify or erase your personal data yourself after logging into the app using our authentication tool.
You may exercise the following rights by contacting our customer support team through our apps:
6.1 Right of Access
You always have access to your personal data. You have the right to request a copy of your personal information.
6.2 Right to Rectification
You have the right to ask us to update or rectify information that you believe is incorrect, inaccurate, or outdated. You also have the right to ask us to complete any information that you believe is incomplete.
6.3 Right to Withdraw Consent
You have the right to withdraw your consent to the processing of your personal data where such processing is based on your consent.
6.4 Right to Erasure
You have the right to ask us to erase your personal data in certain circumstances, for example, if the data is no longer needed for our purposes, if we process your data without a valid legal basis or otherwise unlawfully, if you have withdrawn your consent (if the processing was based on your consent), if we collected your data when you were a child, or in other circumstances according to applicable laws.
6.5 Right to Restriction of Processing
You have the right to restrict the processing of your personal data in certain circumstances. For example, if you wish to exercise your right to rectification, you may request that we restrict the processing of your data until it has been rectified.
6.6 Right to Data Portability
If your personal data is processed by automated means based on your consent or based on a contract with us (e.g. to provide you with the features of the app), you have the right to receive your data in a structured, commonly used and machine-readable format.
6.7 Right to Object
You have the right to object to the processing of your personal data if you consider that the processing violates your rights. Please note that the right to object can only be exercised if we are processing your data on the basis of legitimate interests or public interest.
You have the right not to be subjected to a decision based solely on automated processing, including profiling. We do not take decisions based solely on automated processing, including profiling.
6.8 Right to Lodge a Complaint
We are always ready to consider your complaints and suggestions. Please send them to our customer support team.
You may also file a complaint with the appropriate supervisory authority if you believe that your rights have been violated.
7. HOW TO CONTACT US?
7.1 You can contact our customer support team through the mobile app after logging in.
7.2 Our Data Protection Officer can be contacted by email at dpo-yt@yandex-team.com. Please include the phone number you used to register with our app, this will help us to identify you quickly.
8. HOW IS THIS DOCUMENT MODIFIED?
In the event of substantial changes to this Privacy Notice, we may use any available means (push notifications in the app, SMS, or email) to notify you.
This would be the case, for example, if we add new categories of personal data to be processed or new purposes for which data are processed. You will be notified before such changes take effect.