PRIVACY POLICY

Last Updated: 5/3/2022

Welcome to Banditos! This Privacy Notice describes

• • How we collect, use, disclose, and protect the personal information (defined below) of Guests (defined below) and other Site users (defined below) (“you“).
  • The types of information we may collect from you or that you may provide when you contact us or visit the Banditos Sites (defined below).
  • Our practices for collecting, using, maintaining, protecting and disclosing that information.

  If you do not agree with our policies and practices, your choice is not to use our Banditos Sites, or any Banditos Services. By accessing or using the Banditos Sites or using Banditos Services, you indicate that you understand, accept, and consent to the practices described in this policy. We will from time to time update this Privacy Notice as necessary to ensure that it remains accurate and up-to-date. Your continued use of the Banditos Sites or Banditos Services after we make changes indicates that you accept and consent to those changes, so please check the Privacy Notice periodically for updates.

What Does Banditos Do?
Banditos is an innovative restaurant organization that specializes in customer experiences, amazing food and drink services.

We connect with Guests in the following ways:

• • Our guests connect with our sites for contact purposes.
  • Job candidates connect with our sites for employment purposes and for filing job applications with Banditos.

What this Privacy Notice Covers

• • Personal Information Collected From Banditos Sites: This Privacy Notice applies to all users of Banditos websites.
  • Personal Information About Job Candidates: We collect personal information about job candidates in order to process applications for employment.
  • Personal Information About Our Guests: Guests may, at times, enter personal information on our website’s contact forms. Such information may include name, email address, and nature of contact.

What is Personal Information?
“Personal information” is information about you which (i) can be used to identify, contact or locate you; (ii) can be combined with other information that is linked you; or (iii) is defined as “personal data” or “personal information” by applicable laws or regulations relating to the collection, use, storage or disclosure of information about you. Personal information includes contact information (e.g. email address, mailing address, or telephone number), online information (e.g. IP addresses or other identifiers), and other data which can be used individually or in combination with other data to identify an individual (such as gender, age, or general location).

What Personal Information We Collect About You:
We may collect the following categories of personal information from you when you use our Services:

• • Identifiers like your name, address, telephone number, email address, unique personal identifier, IP address;
  • Internet activity on Banditos Sites;
  • General location data like your street address, city, and zip code;
  • Other personal information that you voluntarily provide to us via forms, communications (phone calls, emails, messages, etc.);
  • Job application information such as name, email address, phone number, street address, zip code, city, state of residence, job history, U.S. work authorization, age, work permits, professional references for applications (name, title, phone number, email address, web URL’s, position of employment), education information (college status, high school status, certification information, graduation dates), professional licenses,

How We Collect Your Personal Information
We collect and process personal information in the following ways:

Personal Information You Provide Directly To Us.
Banditos collects personal information from you when you:

• • Provide it to us through one of our Banditos Sites;
  • Contact us via email or phone to communicate with us;
  • Provide your contact information on a form and submit it to us;
  • Connect with our social media pages;
  • Sign up for marketing, an event, a contest, or other offering we may present;
  • Volunteer personal information to us.
  • Applications to job postings and open positions at Banditos.

Personal Information We Collect Automatically.
When you access a Banditos Site, we automatically collect personal information associated with your access and use of the site. This information may include your internet protocol (IP) address(es), the region or general location where your computer or device is accessing the internet, the browser type, operating system and other usage information about the use of the Banditos Site(s), such as your page-views, referral URLs, etc.  Banditos collects and uses this type of information to help us understand how users interact with the Banditos Sites, to provide you with a more relevant experience, and to enhance our business offerings.  We have a legitimate interest in learning how to improve our Banditos Sites, our Services, customer engagement, marketing, and advertising.

Banditos may use cookies and other information gathering technologies on Banditos Sites for a variety of purposes. These technologies may provide us with personal information, information about devices and networks you utilize to access our Banditos Sites, and other information regarding your interactions with our Banditos Sites. Please review our “Cookies” section below to learn more about how we use cookies.

Personal Information We Collect From Others.
On occasion, Banditos receives personal information about individuals. In particular, we may receive personal information about:

• • Site visitors that enter information on contact forms.
  • Site visitors that enter information on job application forms.
  • Visitors to Banditos Sites from our advertising, analytics, and internet service provider partners related to a visitor’s interactions with our Banditos Sites or advertisements.

We don’t buy or sell personal information.

Cookies and Other Tracking Technologies
We use cookies, which are pieces of information that a website transfers to an individual’s computer hard drive for record keeping purposes, and similar tracking technologies on our website and when providing Banditos Sites.  Some cookies are set by us and called first-party cookies. We also use third-party cookies (which are cookies from a domain different than the domain of the website you are visiting) for our advertising and marketing efforts.

You have a choice about the placement of cookies on Banditos Sites. You can use your web browser to directly block all cookies, or just third-party cookies, through your browser settings. Using your browser settings to block all cookies, including strictly necessary ones, may interfere with proper site operation.  Guidance on how to control cookies in popular browsers are contained in their privacy and/or security settings.

You can also find additional information on cookie controls and advertisement here:

• • Network Advertising Initiative
  • Google allows users to opt out of tracking by Google Analytics and Google Analytics Demographics and Interest Reporting services. You can adjust your setting here, or download the Google Analytics Opt-Out Browser Add-on.

How We Use Personal Information We Collect
In addition to the uses described elsewhere in this Privacy Notice and in other notices at or before the point of collection from you, we may use your personal information to:

• • improve your browsing experience by personalizing the Banditos Sites;
  • subject to any consent requirements, send information or content to you which we think may be of interest to you by post, email, or other means and send you marketing communications relating to our business;
  • develop and improve our Services;
  • facilitating our business partnerships, customer assistance, quality assurance, and other operational purposes;
  • subject to any consent requirements, send promote use of our services to you and share promotional and information content with you in accordance with your communication preferences;
  • provide other companies with statistical information about our individuals. When we do so, this information will not be used to identify any individual and will only be shared on an aggregate and de-identified basis;
  • contact you about technical, operational, and administrative matters;
  • send information to you regarding changes to our Terms of Use, Privacy Policy, or other legal agreements;
  • investigate and help prevent security issues and abuse; or
  • meet legal requirements.

How We Share Information With Others
We (or our service providers on our behalf) may share your personal information as required or permitted by law:

• • With our Guests to provide our Service to them;
  • With our service providers pursuant to a contract by which they are required to protect your personal information, including:
    • data processing contractors that provide computer services on our behalf;
    • web hosting or web development firms that host or develop parts of Banditos Sites;
    • distribution firms that will fulfill your requests;
    • billing firms that process your orders;
    • mailing firms that will assist us with our mailings;
    • marketing firms that will assist us with direct marketing;
    • service contractors that provide facilities engineering services on our behalf.
  • To comply with legal orders and government requests, or as needed to support auditing, compliance, and corporate governance functions;
  • To combat fraud or criminal activity, and to protect our rights or those of our affiliates, users, and business partners, or as part of legal proceedings affecting Banditos or our business partners;
  • In response to a subpoena, or similar legal process, including to law enforcement agencies, regulators, and courts in the United States and other countries where we operate;
  • With your consent.

Sharing Information With Our Service Providers
We use a variety of service providers to provide our Services.  For example, we use the following:

• • Google Analytics to provide analytics services. For more information about how Google uses this data, you can visit: How Google uses data when you use our partners’ sites or apps. Additionally, you can use the Google Analytics opt-out browser add-on to opt-out of having your activity on Banditos Owned Sites available to Google Analytics by installing the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (gtag.js, analytics.js) that is running on websites from sharing information with Google Analytics about visit activity.

Wix hosts our website on a global content delivery network (CDN), a collection of connected secure servers located around the world. Our visitors are automatically directed to their closest server, so our site loads faster for everyone, everywhere. We share data with Wix that is collected when you visit Banditos Owned Sites, including (i) information about your browser, network and device; (ii) web pages you visited prior to coming to the Banditos-hosted website; and (iii) your IP address.

Sharing Information With Our Remarketing Providers
Banditos uses Google’s remarketing services to advertise on third party websites to previous visitors to Banditos Owned Sites. Third-party vendors like Google use cookies to serve ads based on someone’s past visits to the Banditos Owned Sites. Any data collected will be used in accordance with our own privacy policy, as well as Google’s privacy policy. You can opt out of Google’s use of cookies or device identifiers by visiting Google’s Ads Settings. Alternatively, you can opt out of a third-party vendor’s use of cookies by visiting the Network Advertising Initiative opt-out page or control the use of device identifiers by using your device’s settings. Canadian users can opt-out of interest based advertising from certain companies using the tools located at: https://youradchoices.ca/en/tools

Data Security
The security of your personal information is very important to us. We use physical, electronic, and administrative measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure.

Unfortunately, the transmission of information via the Internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to the Banditos Sites. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Banditos Sites.

Third Party Links
Banditos Sites may, from time to time, contain links to and from third party websites, such as partners, affiliates, and advertisers.  If you follow a link to any external website, it will have its own privacy policy and we are not responsible for the content or practices of such third-party websites or their policies. We are also not responsible for any information that you might share with such linked websites. You should refer to each website’s respective privacy policy and practices before you submit any personal information.

International Users
Your personal information will be collected and stored in the United States, and subject to the laws of the United States. In these circumstances, the governments, courts, law enforcement, or regulatory agencies of the United States may be able to obtain access to your personal information through the laws of that country. If you reside in a country outside the United States, please note that the data protection and privacy laws of the United States may not be as protective as the laws in your country.

Data Collected From Children
The Banditos Sites are not intended for children under 13 years of age. No one under age 13 may provide any information to the Banditos Sites. We do not knowingly collect personal information from children under 13. If you are under 13, do not use or provide any information on the Banditos Sites. If we learn we have collected or received personal information from a child under 13 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 13, please contact us at [email protected]

Do Not Track Disclosure
Regulatory agencies such as the U.S. Federal Trade Commission have promoted the concept of Do Not Track as a mechanism to permit Internet users to control online tracking activity across websites through their browser settings. Since no industry standard has been adopted, we currently do not process or comply with any web browser’s “do-not-track” signal or other similar mechanism that indicates a request to disable online tracking of individual users who visit Banditos Sites.

Changes to Our Privacy Notice
We may update this Privacy Notice to reflect changes to our data practices.  If we make any material changes we will notify you by email (if applicable) or by means of a notice on our website or in the Banditos Sites prior to becoming effective.  We encourage you to periodically review this page for the latest data on our privacy practices.

Contact Information for Complaints or Concerns
If you have any questions or comments about Banditos’ Privacy Notice please email your questions or comments to [email protected].

We have procedures in place to receive and respond to complaints or inquiries about our handling of personal information, our compliance with this policy, and with applicable privacy laws. To discuss our compliance with this policy please contact us using the contact information listed above.

What are your data protection rights?
Banditos would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

• • The right to access – You have the right to request Banditos for copies of your personal data. We may charge you a small fee for this service.

  • The right to rectification – You have the right to request that Banditos correct any information you believe is inaccurate. You also have the right to request Banditos to complete the information you believe is incomplete.

  • The right to erasure – You have the right to request that Banditos erase your personal data, under certain conditions.

  • The right to restrict processing – You have the right to request that Banditos restrict the processing of your personal data, under certain conditions.

  • The right to object to processing – You have the right to object to Banditos processing of your personal data, under certain conditions.

  • The right to data portability – You have the right to request that Banditos transfer the data that we have collected to another organization, or directly to you, under certain conditions.

  • If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us at our email: [email protected] or via regular mail at: 1200 Light Street, Baltimore, MD 21230

Attention: Privacy Office

More information can be found at:

• • European Union and Switzerland residents should visit the European DAA by clicking here.
  • Canadian residents should visit the DAA of Canada by clicking here.
  • U.S. residents and residents of all other countries or territories not listed above can click here for the DAA site to learn more about the use of cookies, your opt-out choices, and more.