Privacy Policy
We care about your personal data and we want you to trust that Europe Foods Sverige AB (hereafter referred to as GB Foods) uses your personal data with care. This privacy policy helps you understand what personal data we collect, why we collect it and what we do with it.
When reading our Privacy Policy, please keep in mind that it applies to all GB Foods group companies, as defined below.
Who are we?
This Privacy Policy applies to personal data collected by GB Foods in connection with the services and goods we offer. References to "GB Foods", "we", "us" or "our" in this Privacy Policy include each of the following entities in our group, established in five jurisdictions across Europe:
Sweden
Europe Foods Sverige AB (GB Foods)
Scheelevägen 30
SE-223 63 Lund
SWEDEN
Belgium
(head office and principal place of business)
GB Foods Belgium NV
BE 0458.358.850
Rijksweg 16
B - 2870 Puurs-Sint-Amands
BELGIUM
France
GB Foods France SAS
63 bis, Rue de Sèvres
F-92514 Boulogne Billancourt
FRANCE
GB Foods Production France SAS
1420 Route de Carpentras
CS 80018 Le Pontet
F-84275 Vedène Cedex
FRANCE
Destombes SAS
ZI de l'Alouette - Rue Gutenberg
F-62800 Liévin
FRANCE
Destombes Production SAS
ZI de l'Alouette - Rue Gutenberg
F-62800 Liévin
FRANKRIKE
Germany
GB Foods Germany GmbH
Geniner Strasse 88-100
D-23560 Lübeck GERMANY
GB Foods Production Germany
GmbH Geniner Strasse 88-100
D-23560 Lübeck GERMANY
Finland
GB Foods Suomi Oy
Tammiston kauppatie 7 B
FI-01510 Vantaa
FINLAND
In the course of our business (production and sale of food products such as noodles, soups, juices, broths, vinegars, hot and cold sauces, dessert mixes, etc. through retail partners and other sales channels, as well as follow-up and provision of after-sales services), we collect, retain, disclose and/or process personal data. In accordance with applicable data protection and privacy legislation, the entities listed above are data controllers with respect to the personal data they collect in connection with their local activities. In some cases, they are joint controllers with another group entity. For certain group-wide functions such as purchasing and legal, GB Foods Belgium is the data controller.
What does this privacy policy mean?
We value your right to privacy and make every effort to protect your personal data in accordance with applicable data protection legislation and more specifically with the General Data Protection Regulation ("GDPR") and applicable national data protection legislation.
In this Privacy Policy we describe how we collect personal data, how and for what purposes we may use your personal data and to whom we may disclose your personal data.
This Privacy Policy also contains important information about your rights regarding the processing of your personal data. Therefore, we encourage you to read this Privacy Policy carefully.
From time to time, we may change this Privacy Policy. The latest version of this Privacy Policy is always available on our general websites and on our product websites.
Please note: When you share your personal data with us, we expect you to read this Privacy Policy carefully. We are committed to processing your personal data in full compliance with the requirements of the GDPR. We ensure optimal protection of our databases and will make sure that you have access to your data in an easy way and that you can correct or delete your data by a simple request. Please note that for certain processing of your personal data, we need to ask for your consent. For other types of processing, the law provides other legal grounds.
Whose personal data do we collect?
In the course of our business (as described above), we process personal data from professional customers, retailers or consumers who purchase or use our products, participants in our market research or surveys, participants in our competitions, visitors to our premises, visitors to our websites, journalists, contacts with administrative authorities and persons who otherwise come into contact with us (e.g. because we receive their names and contact details as employees or managers of our customers, suppliers and other commercial partners).
How do we collect personal data?
We collect personal data in several ways:
- directly from you when you provide us with your personal data in connection with our commercial activities,
- directly from you in the context of contractual negotiations or the conclusion of a contract,
- directly from you when you provide us with your personal data at the time you enter our premises,
- directly from you when you participate in a market research or survey we conduct,
- directly from you when you take part in a competition organised by us,
- directly from you when you register on our websites, when you navigate our website(s), when you fill in a contact form on our website(s), when you sign up for our electronic newsletter or when you purchase a product from our online store,
- directly from you when you provide us with your personal data in the context of investigations/claims related to food labelling, product recalls,
- via our external call centre when you provide your personal data to them in connection with a query or complaint,
- via third party and official sources (such as the Graydon credit check database, databases or mailing lists provided to us by retailers or other commercial partners, public databases of journalists or via our service providers),
- via your employer with whom we have a contract or partnership (e.g. when you act as a contact person for our customers, suppliers or commercial partners).
What personal data do we collect
Identification and contact details
Update or change your cookie consent.
Financial data
Personal qualities
Lifestyle and habits
Complaints
Complaints, incidents or accidents
Family composition
Marital status or living situation
Details of family members
Family composition
Leisure activities and interests
Occupation and employment
Occupation and employment details (individual or company, VAT number if applicable)
Career
Image captures
Security camera footage
Video recordings via social media/in connection with competitions we organise
Audio recordings
Telephone recordings by our external call centre
Audio recordings via social media/during competitions we organise
Other categories of data
Your purchase intentions and interests
For what purpose do we use your personal data?
We use personal data for the following purposes:
Here you will find the legal bases that apply to these processing activities:
- for supplier and customer management,
- for handling (invoice) disputes and claims,
- for handling customer enquiries and complaints,
- for promotional purposes,
- for the management of our website(s),
- to provide you with information requested by you, for example:
- to contact you regarding our product range
- to answer a question
- for market research and static purposes,
- to keep you informed of possible prizes after participation in a competition,
- for production planning or follow-up of orders/deliveries,
- to comply with legal obligations (e.g. with respect to legal or commercial product warranties or product recalls),
- for contact purposes in connection with our after-sales services,
- for security and access control of our premises,
- for marketing purposes, either for our paper newsletters or for our electronic mailings (if you have subscribed to them).
- for the processing of your personal data for the delivery of products and for the follow-up of sales and invoicing, to provide you with certain information in relation to products purchased, or in the context of handling customer complaints, we invoke the performance of a contract,
- for the processing of your personal data in connection with the follow-up of product guarantees and food and product safety, we invoke the fulfilment of our legal obligations as a food producer,
- in all other cases, the processing of your personal data is based on our legitimate business/commercial interests (i.e. the interest in contacting prospects and potential customers, informing consumers and partners about our product offerings and promoting our business in general, both online and offline, and the interest in obtaining information about the purchasing behaviour, preferences and purchase intentions of customers in order to establish marketing strategies),
- for the processing of your personal data for electronic direct marketing purposes (tracking and analysis of your interests, sending of our electronic newsletter), we may, if required by law, invoke your consent ("opt-in"). In such case, your personal data will be processed for this purpose only if you have unambiguously indicated that you wish to receive our electronic newsletter (you are entirely free to do so), we will register you for our electronic mailings.
- Please note that you have the right to withdraw your consent at any time, free of charge, and without any negative impact on you. You can do this by email, or via the deactivation link provided in all our marketing messages.
With whom do we share your personal data?
With our service providers ("data processors"):
In connection with our activities described above, we may share your personal data with third parties, in particular with service providers (IT/cloud service providers), PR/marketing agencies organising mailing campaigns for us, sales service providers or creative agencies) acting as our "data processors".
Within our group:
We may also share your personal data within our group. Please note that we have affiliates in the following countries: France, Germany, Finland and Sweden (all of which are within the European Economic Area and offer adequate protection of your personal data).
With our external law firms:
We may also share your personal data with law firms in the event of (threatened) litigation.
With government agencies:
Finally, we may share your personal data with public authorities, or courts if we have a legal obligation to do so (e.g. to give public authorities access to camera recordings and to the police upon request).
We will take appropriate safeguards when transferring personal data to third parties. For example, if necessary, we will implement a data transfer or processing agreement that sets out the restrictions on the use of your personal data and the obligations with respect to the security of your personal data.
Your personal data and your profile will not be lent or sold to third parties for marketing purposes without your prior explicit consent.
We also use Google Analytics to provide you with an optimised user experience. In this regard, your personal data may be transferred to countries outside the European Economic Area (EEA). You can find more information about this here: https://policies.google.com/privacy?hl=sde.
If any of our other partners transfer personal data to recipients in countries outside the EEA, we will ensure that appropriate measures are taken to protect your personal data in accordance with applicable data protection legislation. Therefore, we have signed standard contractual clauses with our software provider Wilke Global to legitimise the transfer of personal data to the US.
How long do we store your personal data?
Your personal data will not be stored longer than necessary in relation to the purposes for which we process it (as set out above). Afterwards, it is still possible that it may exist in our backups or archives, but it will no longer be actively processed in a file.
More specifically, the following retention policies are applied by us:
personal data contained in accounting, financial or other official documents will be retained for as long as such documents are legally required to be retained,
personal data required for the performance and monitoring of a contractual relationship will be retained for the duration of the relationship and for 10 years after its termination,
personal data obtained in connection with the handling of complaints will be deleted (or anonymised) as soon as the complaint is closed; and
all personal data used for marketing purposes will be retained for as long as we send relevant mailings and for a maximum of 1.5 years thereafter. As soon as we notice that your contact details are no longer accurate or active, or when you decide to exercise your right to unsubscribe, we will no longer retain your personal data for these purposes.
Only where we are legally obliged to, or where this is necessary to defend our interests in legal proceedings (for example, in the event of litigation), do we store personal data for longer periods.
More information about our retention periods is available upon your request.
How do we protect your personal data?
We will implement the necessary administrative, technical and organisational measures to ensure a level of security appropriate to the specific risks we have identified.
We protect your personal data against destruction, loss, alteration, unauthorised disclosure of or access to personal data that is transmitted, stored or otherwise processed.
Furthermore, we try to ensure that we have accurate and up-to-date personal data about you. We therefore ask that you inform us of any changes to your personal data (for example, a change to your contact details).
More information about our safeguards is available upon your request.
What are your rights and how can you exercise them?
Within the limits defined in Articles 15-22 of the GDPR, you have the legal right to:
Finally, you have the right to lodge a complaint regarding the processing of your personal data by us with the data protection authority in your country. In Sweden, you can turn to the Swedish Data Protection Authority.
To learn more about these rights and the circumstances in which you may exercise them, in particular your right to object to further processing (e.g. your right to unsubscribe from our electronic newsletter), please read the Annex to this Privacy Policy. In general, you may exercise these rights free of charge. Only where requests are manifestly unfounded or excessive may we charge a reasonable fee.
You can also get more information and advice about your rights from the data protection authority in your country.
We aim to respond as quickly as possible to your requests or questions. We may request proof of identity in advance to double-check your request.
Contact
- obtain information about and access to your personal data,
- correct your personal data,
- erase your personal data ("right to be forgotten"),
- request restriction of the processing of your personal data,
- object to the processing of your personal data,
- receive your personal data in a structured, commonly used and machine-readable format and (have) transfer your personal data (transferred) to another organisation.