PRIVACY POLICY
Last updated: August, 2024
Users may be subject to different protection standards and broader standards may therefore apply to some.
A section dedicated to Users in the United States and their privacy rights.
A section dedicated to Users in the EEA, UK, and Switzerland and their privacy rights.
EUROPEAN ECONOMIC AREA (EEA), THE UNITED KINGDOM OR SWITZERLAND
WHO WE ARE
NYFTA and associated entities that are authorized to carry the name (together, “NYFTA”, “we”, “our” or “us”) are committed to protecting your privacy and that of your business and employees, while providing you with the opportunity to receive our services.
Company (referred to as either “the Company”, “We”, “Us” or “Our” in this Agreement) refers to NYFTA Inc., 350 E 54th Street, NY, NY 10022.
DATA WE COLLECT
Personal Information Collected:
Contact Information: Name, address state; ZIP/Postal code phone number, email address, and how you learned about us (e.g., via social media).
Communication Information: Contents of messages you send us, including name and contact details.
Purchase Information: Details like registration information, event date and time, budget, headcount, and your preferences in cuisine.
Consumer Satisfaction and Feedback: Results from satisfaction and feedback surveys.
Website Interaction Data: Information collected via cookies and other automated means, as well as data you provide through contact forms.
Branded Promotion Data: Information from forms related to branded promotions.
Join Us Data: Mailing address, food truck name, cuisine type, Instagram handle, and website details provided through our Join Us form.
Public Forum Data: Information shared in public posts on sites.
Video and Photo Data: Images captured around food trucks or properties in public places.
Data collection through third-party services:
Google Analytics Personal Data: number of Users; session statistics; Trackers; Usage Data.
HubSpot Analytics Personal Data: Trackers; Usage Data.
Interaction with live chat platforms HubSpot Chat Personal Data: Data communicated while using the service. Place of processing: United States – Privacy Policy.
User database management HubSpot CRM Personal Data: various types of Data as specified in the privacy policy of the service. Place of processing: United States – Privacy Policy.
How We Collect: We collect personal data when you interact with us, whether by requesting or purchasing services, participating in activities, visiting our physical locations, calling us, or engaging through devices, contact forms, chatbots, or social media. This includes any data necessary to respond to inquiries and fulfill requests.
SECURITY AND RETENTION
The security, integrity, and confidentiality of your information are extremely important to us. We have implemented technical, administrative, and physical security measures that are designed to protect guest information from unauthorized access, disclosure, use, and modification. We regularly review our security procedures to consider appropriate new technology and methods.
Place
The Data is processed at the operating offices in the U.S. and in any other places where the parties involved in the processing are located. It means that data may be transferred to — and maintained on — computers located outside of Your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those from Your jurisdiction.
Retention time
We retain personal information about you where we have an ongoing legitimate business need to do so (for example, as needed to comply with our legal obligations, resolve disputes, and enforce our agreements). When we have no ongoing legitimate business need to process your personal information, we securely delete the information or anonymize it, or if this is not possible, securely store your personal information and isolate it from any further processing until deletion is possible.
PURPOSE OF PROCESSING
To provide and maintain our Service, including monitoring the usage of our Service.
To contact You: To contact You by email, telephone calls, or other equivalent forms of electronic communication.
To manage Your requests: To attend and manage Your requests to Us.
COOKIES
First Party Cookies are those set directly by this Site, whereas Third Party Cookies are placed or provided by other domains.
An objection to the use of cookies for online marketing purposes can also be made via the websites DAA WEBCHOICES BROWSER CHECK be declared. Google Analytics via Opt-out Add-on (by Google).
Google Analytics (Google LLC)
Google Analytics is a web analysis service provided by Google LLC (“Google”).
Personal Data processed: number of Users; session statistics; Trackers; Usage Data.
Place of processing: United States – Privacy Policy – Opt Out.
HubSpot Analytics (HubSpot, Inc.)
HubSpot Analytics is an analytics service provided by HubSpot, Inc.
Personal Data processed: Trackers; Usage Data.
Place of processing: United States – Privacy Policy – Opt Out.
How to manage preferences on this Website
Users can set or update their preferences via the relevant privacy choices panel available on this Website. Users can, for example, find information about how to manage Cookies in the most commonly used browsers at the following addresses:
How to opt out of interest-based advertising
Notwithstanding the above, Users may follow the instructions provided by YourOnlineChoices (EU and UK), the Digital Advertising Alliance (US), or other similar services.
To obtain complete information, Users are kindly requested to consult the privacy policies of the respective third-party services listed in this document.
WITH WHOM WE SHARE DATA
Vendors and Service Providers: To assist us in meeting business operations needs and to perform certain services and functions, we may give access to Personal Information to vendors as information technology providers, among others. Under our instructions, these parties will access, process, or store Personal Information only in the course of performing their duties to us.
Legal Requirements: We may share your Personal Information with government authorities, industry peers, or other third parties (i) if required to do so by law or in the good faith belief that such action is necessary to comply with a legal obligation, (ii) to protect and defend our rights or property, (iii) if we determine, in our sole discretion, that there is a violation of our terms, policies, or the law; (iv) to detect or prevent fraud or other illegal activity; (v) to protect the safety, security, and integrity of our products, employees, or users, or the public, or (vi) to protect against legal liability.
With other users: When you share personal information or otherwise interact in public areas with other users making photos videos, or reviews, such information may be viewed by all users and may be publicly distributed outside including photos on the website.
US RESIDENTS’ RIGHTS
This part of the document integrates with and supplements the information contained in the rest of the privacy policy and is provided by the business running this Website.
The information contained in this section applies to all Users (Users are referred to below, simply as “you”, “your”, “yours”), who are residents in the following states: California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and Montana.
Those rights are:
Access: to learn the categories of information we collect and use, and for those in California, the categories of sources of collection and disclosure and the business purpose for collection. If you are an Oregon resident, you can also request a list of specific third parties, as defined under Oregon law, to which we have disclosed personal information;
Portability: a copy of (Virginia) or specific pieces of (California) Personal Information collected;
Deletion: to have us delete the information we collected from you; and
Correction: asking us to fix your information.
What are the sources of the Personal Information we collect?
You can read more about the Personal Information we collect in “Data we collect” above, how we use Personal Information in “Purpose” above, and how we retain Personal Information in “Security and Retention” above.
Your privacy rights under US state laws
You may exercise certain rights regarding your Personal Information. In particular, to the extent permitted by applicable law, you have:
the right to access Personal Information: the right to know. You have the right to request that we confirm whether or not we are processing your Personal Information. You also have the right to access such Personal Information;
the right to correct inaccurate Personal Information. You have the right to request that we correct any inaccurate Personal Information we maintain about you;
the right to request the deletion of your Personal Information. You have the right to request that we delete any of your Personal Information;
the right to obtain a copy of your Personal Information. We will provide your Personal Information in a portable and usable format that allows you to transfer data easily to another entity – provided that this is technically feasible;
the right to opt out from the Sale of your Personal Information; We will not discriminate against you for exercising your privacy rights.
the right to non-discrimination.
Additional rights for Users residing in Virginia, Colorado, Connecticut, Texas, Oregon and Montana
In addition to the rights listed above common to all Users in the United States, as a User residing in Virginia, Colorado, Connecticut, Texas and Oregon, you have
The right to opt out of the processing of your personal information for Targeted Advertising or profiling in furtherance of decisions that produce legal or similarly significant effects concerning you;
The right to freely give, deny or withdraw your consent for the processing of your Sensitive Personal Information. Please note that certain exceptions outlined in the law may apply, such as, but not limited to, when the collection and processing of Sensitive Personal Information is necessary for the provision of a product or service specifically requested by the consumer.
Additional rights for users residing in Utah
In addition to the rights listed above common to all Users in the United States, as a User residing in Utah, you have
The right to opt out of the processing of your Personal Information for Targeted Advertising;
The right to opt out of the processing of your Sensitive Personal Information. Please note that certain exceptions outlined in the law may apply, such as, but not limited to, when the collection and processing of Sensitive Personal Information is necessary for the provision of a product or service specifically requested by the consumer.
Additional rights for Users residing in California
In addition to the rights listed above common to all Users in the United States, as a User residing in California, you have
The right to opt out of the Sharing of your Personal Information for cross-context behavioral advertising;
The right to request to limit our use or disclosure of your Sensitive Personal Information to only that which is necessary to perform the services or provide the goods, as is reasonably expected by an average consumer. Please note that certain exceptions outlined in the law may apply, such as, when the collection and processing of Sensitive Personal Information is necessary to verify or maintain the quality or safety of our service.
We do not ‘sell’ (as ‘sell’ is traditionally defined) personal information about Our consumers. We do not make available or provide consumer’s names, phone numbers, addresses, email addresses, or other personal information to third parties in exchange for money.
Like many companies, however, We do share personal information with third parties to provide You with personalized advertising from Us or analytics. We make available personal information to third parties (including due to Our use of cookies (or similar technologies) provided by third parties on Our Sites). Our use of some of these services may be classified under California law as a “sale” or “sharing” of your personal information to the companies that provide the services because they collect information from our users (e.g., device data and online activity data) to help them serve ads more likely to interest you. We do not knowingly “sell” or “share” the personal information of California residents under 16 years of age. For more visit Google U.S. Privacy Addendum.
Request Rights:
To exercise your rights, submit a verifiable consumer request to us by either:
Call us at (646) 770-0084
Emailing us at [email protected]
Your verifiable consumer request must:
Provide sufficient identifying information (including name, email address, and company if needed) to allow us to reasonably verify you are the person about whom we collected and retained Personal Information, and/or your authority to make such request on behalf of the data subject, and
Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.
Making Requests for Removal of Content
California Business and Professions Code section 22581 allows California residents under the age of 18 who are registered users of online sites, services, or applications to request and obtain removal of content or information they have publicly posted. To request the removal of such data, and if You are a California resident, You can contact Us using the contact information provided below, and include the email address associated with You..
If You have reason to believe that a child under the age of 13 (or 16) has provided Us with personal information, please contact Us with sufficient detail to enable Us to delete that information.
If you'd like to request more information under the California Shine the Light law, and if You are a California resident, You can contact Us using the contact information provided below.
EUROPEAN ECONOMIC AREA (EEA), THE UNITED KINGDOM OR SWITZERLAND
This section applies to residents of the European Economic Area (EEA), the United Kingdom or Switzerland.
Please be aware that we only offer goods and services within the United States. We do not extend our offerings or services to locations outside of the U.S.
By using our Service, you understand and acknowledge that your Personal Information will be processed and stored in our facilities and servers in the United States and may be disclosed to our service providers and affiliates in other jurisdictions.
Legal basis of processing
necessary for our legitimate interests in carrying out our business, provided those interests are not outweighed by your rights and interests;
necessary to perform a contract with a third party or with you;
necessary to comply with a legal obligation;
based, when necessary and appropriate, on your consent.
Further information about retention time
Unless specified otherwise in this document, Personal Data shall be processed and stored for as long as required by the purpose they have been collected for and may be retained for longer due to applicable legal obligation or based on the User’s consent.
The rights based on the General Data Protection Regulation (GDPR)
Users have the right to do the following, to the extent permitted by law:
Withdraw their consent at any time.
Object to processing of their Data.
Access their Data.
Verify and seek rectification.
Restrict the processing of their Data.
Users have the right to obtain the erasure of their Data from us.
Receive their Data and have it transferred to another controller.
Complain. Users have the right to bring a claim before their competent data protection authority.
How to exercise these rights
Any requests to exercise User rights can be directed to us through the contact details provided in this document.
In addition, we will not respond to any request unless we can appropriately verify the requester’s identity.
ADDITIONAL INFORMATION
If You click on a third-party link, You will be directed to that third-party’s site. We strongly advise You to review the Privacy Policy of every site You visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
Changes to this Privacy Policy
We may update our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page. Changes to this Privacy Policy are effective when they are posted on this page.
CONTACT US
If you have any questions about this Privacy Policy, You can contact us:
350 E 54th St New York, NY 10022
(646) 770-0084