Who are we?
(head office and principal place of business)
GB Foods Belgium NV
B - 2870 Puurs-Sint-Amands
GB Foods France SAS
63 bis, Rue de Sèvres
F-92514 Boulogne Billancourt
GB Foods Production France SAS
1420 Route de Carpentras
CS 80018 Le Pontet
F-84275 Vedène Cedex
ZI de l'Alouette - Rue Gutenberg
Destombes Production SAS
ZI de l'Alouette - Rue Gutenberg
GB Foods Germany GmbH
Geniner Strasse 88-100
D-23560 Lübeck GERMANY
GB Foods Production Germany
GmbH Geniner Strasse 88-100
D-23560 Lübeck GERMANY
GB Foods Suomi Oy
Tammiston kauppatie 7 B
GB Foods Sweden AB
SE-223 63 Lund
In the course of our business (production and sale of food products such as noodles, soups, juices, broths, vinegars, hot and cold sauces, dessert mixes, etc. through retail partners and other sales channels, as well as follow-up and provision of after-sales services), we collect, retain, disclose and/or process personal data. In accordance with applicable data protection and privacy legislation, the entities listed above are data controllers with respect to the personal data they collect in connection with their local activities. In some cases, they are joint controllers with another group entity. For certain group-wide functions such as purchasing and legal, GB Foods Belgium is the data controller.
We value your right to privacy and make every effort to protect your personal data in accordance with applicable data protection legislation and more specifically with the General Data Protection Regulation ("GDPR") and applicable national data protection legislation.
Whose personal data do we collect?
In the course of our business (as described above), we process personal data from professional customers, retailers or consumers who purchase or use our products, participants in our market research or surveys, participants in our competitions, visitors to our premises, visitors to our websites, journalists, contacts with administrative authorities and persons who otherwise come into contact with us (e.g. because we receive their names and contact details as employees or managers of our customers, suppliers and other commercial partners).
How do we collect personal data?
We collect personal data in several ways:
- directly from you when you provide us with your personal data in connection with our commercial activities,
- directly from you in the context of contractual negotiations or the conclusion of a contract,
- directly from you when you provide us with your personal data at the time you enter our premises,
- directly from you when you participate in a market research or survey we conduct,
- directly from you when you take part in a competition organised by us,
- directly from you when you register on our websites, when you navigate our website(s), when you fill in a contact form on our website(s), when you sign up for our electronic newsletter or when you purchase a product from our online store,
- directly from you when you provide us with your personal data in the context of investigations/claims related to food labelling, product recalls,
- via our external call centre when you provide your personal data to them in connection with a query or complaint,
- via third party and official sources (such as the Graydon credit check database, databases or mailing lists provided to us by retailers or other commercial partners, public databases of journalists or via our service providers),
- via your employer with whom we have a contract or partnership (e.g. when you act as a contact person for our customers, suppliers or commercial partners).
What personal data do we collect
Identification and contact details
Update or change your cookie consent.
Lifestyle and habits
Complaints, incidents or accidents
Marital status or living situation
Details of family members
Leisure activities and interests
Occupation and employment
Occupation and employment details (individual or company, VAT number if applicable)
Security camera footage
Video recordings via social media/in connection with competitions we organise
Telephone recordings by our external call centre
Audio recordings via social media/during competitions we organise
Other categories of data
Your purchase intentions and interests
For what purpose do we use your personal data?
We use personal data for the following purposes:
Here you will find the legal bases that apply to these processing activities:
- for supplier and customer management,
- for handling (invoice) disputes and claims,
- for handling customer enquiries and complaints,
- for promotional purposes,
- for the management of our website(s),
- to provide you with information requested by you, for example:
- to contact you regarding our product range
- to answer a question
- for market research and static purposes,
- to keep you informed of possible prizes after participation in a competition,
- for production planning or follow-up of orders/deliveries,
- to comply with legal obligations (e.g. with respect to legal or commercial product warranties or product recalls),
- for contact purposes in connection with our after-sales services,
- for security and access control of our premises,
- for marketing purposes, either for our paper newsletters or for our electronic mailings (if you have subscribed to them).
- for the processing of your personal data for the delivery of products and for the follow-up of sales and invoicing, to provide you with certain information in relation to products purchased, or in the context of handling customer complaints, we invoke the performance of a contract,
- for the processing of your personal data in connection with the follow-up of product guarantees and food and product safety, we invoke the fulfilment of our legal obligations as a food producer,
- in all other cases, the processing of your personal data is based on our legitimate business/commercial interests (i.e. the interest in contacting prospects and potential customers, informing consumers and partners about our product offerings and promoting our business in general, both online and offline, and the interest in obtaining information about the purchasing behaviour, preferences and purchase intentions of customers in order to establish marketing strategies),
- for the processing of your personal data for electronic direct marketing purposes (tracking and analysis of your interests, sending of our electronic newsletter), we may, if required by law, invoke your consent ("opt-in"). In such case, your personal data will be processed for this purpose only if you have unambiguously indicated that you wish to receive our electronic newsletter (you are entirely free to do so), we will register you for our electronic mailings.
- Please note that you have the right to withdraw your consent at any time, free of charge, and without any negative impact on you. You can do this by email, or via the deactivation link provided in all our marketing messages.
With whom do we share your personal data?
With our service providers ("data processors"):
In connection with our activities described above, we may share your personal data with third parties, in particular with service providers (IT/cloud service providers), PR/marketing agencies organising mailing campaigns for us, sales service providers or creative agencies) acting as our "data processors".
Within our group:
We may also share your personal data within our group. Please note that we have affiliates in the following countries: France, Germany, Finland and Sweden (all of which are within the European Economic Area and offer adequate protection of your personal data).
With our external law firms:
We may also share your personal data with law firms in the event of (threatened) litigation.
With government agencies:
Finally, we may share your personal data with public authorities, or courts if we have a legal obligation to do so (e.g. to give public authorities access to camera recordings and to the police upon request).
We will take appropriate safeguards when transferring personal data to third parties. For example, if necessary, we will implement a data transfer or processing agreement that sets out the restrictions on the use of your personal data and the obligations with respect to the security of your personal data.
Your personal data and your profile will not be lent or sold to third parties for marketing purposes without your prior explicit consent.
We also use Google Analytics to provide you with an optimised user experience. In this regard, your personal data may be transferred to countries outside the European Economic Area (EEA). You can find more information about this here: https://policies.google.com/privacy?hl=sde.
If any of our other partners transfer personal data to recipients in countries outside the EEA, we will ensure that appropriate measures are taken to protect your personal data in accordance with applicable data protection legislation. Therefore, we have signed standard contractual clauses with our software provider Wilke Global to legitimise the transfer of personal data to the US.
How long do we store your personal data?
Your personal data will not be stored longer than necessary in relation to the purposes for which we process it (as set out above). Afterwards, it is still possible that it may exist in our backups or archives, but it will no longer be actively processed in a file.
More specifically, the following retention policies are applied by us:
personal data contained in accounting, financial or other official documents will be retained for as long as such documents are legally required to be retained,
personal data required for the performance and monitoring of a contractual relationship will be retained for the duration of the relationship and for 10 years after its termination,
personal data obtained in connection with the handling of complaints will be deleted (or anonymised) as soon as the complaint is closed; and
all personal data used for marketing purposes will be retained for as long as we send relevant mailings and for a maximum of 1.5 years thereafter. As soon as we notice that your contact details are no longer accurate or active, or when you decide to exercise your right to unsubscribe, we will no longer retain your personal data for these purposes.
Only where we are legally obliged to, or where this is necessary to defend our interests in legal proceedings (for example, in the event of litigation), do we store personal data for longer periods.
More information about our retention periods is available upon your request.
How do we protect your personal data?
We will implement the necessary administrative, technical and organisational measures to ensure a level of security appropriate to the specific risks we have identified.
We protect your personal data against destruction, loss, alteration, unauthorised disclosure of or access to personal data that is transmitted, stored or otherwise processed.
Furthermore, we try to ensure that we have accurate and up-to-date personal data about you. We therefore ask that you inform us of any changes to your personal data (for example, a change to your contact details).
More information about our safeguards is available upon your request.
What are your rights and how can you exercise them?
Within the limits defined in Articles 15-22 of the GDPR, you have the legal right to:
Finally, you have the right to lodge a complaint regarding the processing of your personal data by us with the data protection authority in your country. In Sweden, you can turn to the Swedish Data Protection Authority.
You can also get more information and advice about your rights from the data protection authority in your country.
We aim to respond as quickly as possible to your requests or questions. We may request proof of identity in advance to double-check your request.
Annex - More information on your rights as a data subject (see Articles 15-22 GDPR)
Right to information and access to your personal data
You can request more information about our processing activities and the personal data we hold about you at any time.
Right to rectification of inaccurate or incomplete personal data
You have the right to request that we rectify or complete any of your personal data that is inaccurate or incomplete without undue delay.
Right to have your personal data erased ("right to be forgotten")
You can request that we erase (part of) your personal data in the following situations:
when the processing is no longer necessary for the purposes for which they were collected or otherwise processed; or
when the processing was based on your consent and you decide to withdraw your consent,
when you have other reasonable grounds to object to the processing of your personal data,
if we process your personal data unlawfully,
if your personal data must be erased in order to comply with a legal obligation addressed to us.
We note that in certain cases we may refuse to delete your personal data: (i) for the exercise of freedom of expression and information; (ii) to comply with a legal obligation; or (iii) for the establishment, exercise or defence of legal claims.
Right to restrict processing
You can request that we (temporarily) restrict the processing of your personal data in the following situations:
where you have disputed the accuracy of your personal data, for a period of time that allows us to verify the accuracy of the data,
when the processing appears unlawful and you ask us to restrict the use of your data instead of deleting it,
when we no longer need the personal data for processing purposes, but you need it for the establishment, exercise or defence of legal claims; or
pending verification of whether our legitimate grounds take precedence over yours in the context of an objection.
Right to object to the processing of your personal data (free of charge)
You may, in certain circumstances, object to the processing of your personal data where such processing is based on our "legitimate interests". If we consent, we will no longer process your personal data, unless we have compelling legitimate grounds to do so or because such processing is necessary.
When we process your personal data for direct marketing purposes (in particular to send our electronic newsletter or personalised advertising by ordinary mail), you may object to the processing thereof or withdraw your consent to the processing at any time. You also have the right not to be subject to profiling for direct marketing purposes.
Right to data portability
In certain cases, you have the right to receive all your personal data in a structured, commonly used and machine-readable format and the right to transfer these personal data to another controller. The right applies to:
if the processing is based on consent or necessity for the performance of a contract, and
if the processing is carried out by automatic means.
- obtain information about and access to your personal data,
- correct your personal data,
- erase your personal data ("right to be forgotten"),
- request restriction of the processing of your personal data,
- object to the processing of your personal data,
- receive your personal data in a structured, commonly used and machine-readable format and (have) transfer your personal data (transferred) to another organisation.