Privacy Policy

We care about your personal data and we want you to trust GB Foods to use your personal data carefully. This Privacy Policy will help you understand what personal data we collect, why we collect it and what we do with it.

When reading our Privacy Policy, please keep in mind that it applies to all GB Foods group companies, as defined below.

Who are we?

This Privacy Policy applies to personal data collected by GB Foods in connection with the services and goods we offer. References to "GB Foods", "we", "us" or "our" in this Privacy Policy include each of the following entities in our group, established in five jurisdictions across Europe:

Belgium

(head office and principal place of business)
GB Foods Belgium NV
BE 0458.358.850
Rijksweg 16
B - 2870 Puurs-Sint-Amands
BELGIUM

France

GB Foods France SAS
63 bis, Rue de Sèvres
F-92514 Boulogne Billancourt
FRANCE

GB Foods Production France SAS
1420 Route de Carpentras
CS 80018 Le Pontet
F-84275 Vedène Cedex
FRANCE

Destombes SAS
ZI de l'Alouette - Rue Gutenberg
F-62800 Liévin
FRANCE

Destombes Production SAS
ZI de l'Alouette - Rue Gutenberg
F-62800 Liévin
FRANKRIKE

Germany

GB Foods Germany GmbH
Geniner Strasse 88-100
D-23560 Lübeck GERMANY

GB Foods Production Germany
GmbH Geniner Strasse 88-100
D-23560 Lübeck GERMANY

Finland

GB Foods Suomi Oy
Tammiston kauppatie 7 B
FI-01510 Vantaa
FINLAND

Sweden

GB Foods Sweden AB
Scheelevägen 30
SE-223 63 Lund
SWEDEN

In the course of our business (production and sale of food products such as noodles, soups, juices, broths, vinegars, hot and cold sauces, dessert mixes, etc. through retail partners and other sales channels, as well as follow-up and provision of after-sales services), we collect, retain, disclose and/or process personal data. In accordance with applicable data protection and privacy legislation, the entities listed above are data controllers with respect to the personal data they collect in connection with their local activities. In some cases, they are joint controllers with another group entity. For certain group-wide functions such as purchasing and legal, GB Foods Belgium is the data controller.

What does this privacy policy mean?

We value your right to privacy and make every effort to protect your personal data in accordance with applicable data protection legislation and more specifically with the General Data Protection Regulation ("GDPR") and applicable national data protection legislation.

In this Privacy Policy we describe how we collect personal data, how and for what purposes we may use your personal data and to whom we may disclose your personal data.

This Privacy Policy also contains important information about your rights regarding the processing of your personal data. Therefore, we encourage you to read this Privacy Policy carefully.

From time to time, we may change this Privacy Policy. The latest version of this Privacy Policy is always available on our general websites and on our product websites.

Please note: When you share your personal data with us, we expect you to read this Privacy Policy carefully. We are committed to processing your personal data in full compliance with the requirements of the GDPR. We ensure optimal protection of our databases and will make sure that you have access to your data in an easy way and that you can correct or delete your data by a simple request. Please note that for certain processing of your personal data, we need to ask for your consent. For other types of processing, the law provides other legal grounds.

Whose personal data do we collect?

In the course of our business (as described above), we process personal data from professional customers, retailers or consumers who purchase or use our products, participants in our market research or surveys, participants in our competitions, visitors to our premises, visitors to our websites, journalists, contacts with administrative authorities and persons who otherwise come into contact with us (e.g. because we receive their names and contact details as employees or managers of our customers, suppliers and other commercial partners).

How do we collect personal data?

We collect personal data in several ways:

  • directly from you when you provide us with your personal data in connection with our commercial activities,
  • directly from you in the context of contractual negotiations or the conclusion of a contract,
  • directly from you when you provide us with your personal data at the time you enter our premises,
  • directly from you when you participate in a market research or survey we conduct,
  • directly from you when you take part in a competition organised by us,
  • directly from you when you register on our websites, when you navigate our website(s), when you fill in a contact form on our website(s), when you sign up for our electronic newsletter or when you purchase a product from our online store,
  • directly from you when you provide us with your personal data in the context of investigations/claims related to food labelling, product recalls,
  • via our external call centre when you provide your personal data to them in connection with a query or complaint,
  • via third party and official sources (such as the Graydon credit check database, databases or mailing lists provided to us by retailers or other commercial partners, public databases of journalists or via our service providers),
  • via your employer with whom we have a contract or partnership (e.g. when you act as a contact person for our customers, suppliers or commercial partners).

What personal data do we collect

We may collect the following personal data about you to the extent that the data is relevant for the purposes for which we need it, as described in section 6 below. Whenever certain information is mandatory and other information is optional, this should be clearly stated so that you can choose whether or not to provide such information.

Identification and contact details

Personal identification data: name, address, telephone/mobile phone number, e-mail address (and, if applicable, password and account details for people registering in our online stores)

Electronic identifiers: IP addresses, information collected via cookies (read our cookie policy)

Financial data

Identification details and bank account number Financial transactions: amounts you have to pay and have paid, overview of payments, etc. Contracts and agreements

Personal qualities

Personal characteristics: gender, date of birth, nationality, language preferences

Lifestyle and habits

Consumption behaviour, lifestyle, social contacts, possessions, use of social media

Complaints

Complaints, incidents or accidents

Family composition

Marital status or living situation
Details of family members

Family composition

Leisure activities and interests

Occupation and employment

Occupation and employment details (individual or company, VAT number if applicable)
Career

Image captures

Security camera footage
Video recordings via social media/in connection with competitions we organise

Audio recordings

Telephone recordings by our external call centre
Audio recordings via social media/during competitions we organise

Other categories of data

Your purchase intentions and interests

For what purpose do we use your personal data?

We use personal data for the following purposes:

Here you will find the legal bases that apply to these processing activities:

  • for supplier and customer management,
  • for handling (invoice) disputes and claims,
  • for handling customer enquiries and complaints,
  • for promotional purposes,
  • for the management of our website(s),
  • to provide you with information requested by you, for example:
  • to contact you regarding our product range
  • to answer a question
  • for market research and static purposes,
  • to keep you informed of possible prizes after participation in a competition,
  • for production planning or follow-up of orders/deliveries,
  • to comply with legal obligations (e.g. with respect to legal or commercial product warranties or product recalls),
  • for contact purposes in connection with our after-sales services,
  • for security and access control of our premises,
  • for marketing purposes, either for our paper newsletters or for our electronic mailings (if you have subscribed to them).
  • for the processing of your personal data for the delivery of products and for the follow-up of sales and invoicing, to provide you with certain information in relation to products purchased, or in the context of handling customer complaints, we invoke the performance of a contract,
  • for the processing of your personal data in connection with the follow-up of product guarantees and food and product safety, we invoke the fulfilment of our legal obligations as a food producer,
  • in all other cases, the processing of your personal data is based on our legitimate business/commercial interests (i.e. the interest in contacting prospects and potential customers, informing consumers and partners about our product offerings and promoting our business in general, both online and offline, and the interest in obtaining information about the purchasing behaviour, preferences and purchase intentions of customers in order to establish marketing strategies),
  • for the processing of your personal data for electronic direct marketing purposes (tracking and analysis of your interests, sending of our electronic newsletter), we may, if required by law, invoke your consent ("opt-in"). In such case, your personal data will be processed for this purpose only if you have unambiguously indicated that you wish to receive our electronic newsletter (you are entirely free to do so), we will register you for our electronic mailings.
  • Please note that you have the right to withdraw your consent at any time, free of charge, and without any negative impact on you. You can do this by email, or via the deactivation link provided in all our marketing messages.

With whom do we share your personal data?

With our service providers ("data processors"):

In connection with our activities described above, we may share your personal data with third parties, in particular with service providers (IT/cloud service providers), PR/marketing agencies organising mailing campaigns for us, sales service providers or creative agencies) acting as our "data processors".

Within our group:

We may also share your personal data within our group. Please note that we have affiliates in the following countries: France, Germany, Finland and Sweden (all of which are within the European Economic Area and offer adequate protection of your personal data).

With our external law firms:

We may also share your personal data with law firms in the event of (threatened) litigation.

With government agencies:

Finally, we may share your personal data with public authorities, or courts if we have a legal obligation to do so (e.g. to give public authorities access to camera recordings and to the police upon request).

We will take appropriate safeguards when transferring personal data to third parties. For example, if necessary, we will implement a data transfer or processing agreement that sets out the restrictions on the use of your personal data and the obligations with respect to the security of your personal data.

Your personal data and your profile will not be lent or sold to third parties for marketing purposes without your prior explicit consent.

We also use Google Analytics to provide you with an optimised user experience. In this regard, your personal data may be transferred to countries outside the European Economic Area (EEA). You can find more information about this here: https://policies.google.com/privacy?hl=sde.

If any of our other partners transfer personal data to recipients in countries outside the EEA, we will ensure that appropriate measures are taken to protect your personal data in accordance with applicable data protection legislation. Therefore, we have signed standard contractual clauses with our software provider Wilke Global to legitimise the transfer of personal data to the US.

How long do we store your personal data?

Your personal data will not be stored longer than necessary in relation to the purposes for which we process it (as set out above). Afterwards, it is still possible that it may exist in our backups or archives, but it will no longer be actively processed in a file.

More specifically, the following retention policies are applied by us:

personal data contained in accounting, financial or other official documents will be retained for as long as such documents are legally required to be retained,

personal data required for the performance and monitoring of a contractual relationship will be retained for the duration of the relationship and for 10 years after its termination,

personal data obtained in connection with the handling of complaints will be deleted (or anonymised) as soon as the complaint is closed; and

all personal data used for marketing purposes will be retained for as long as we send relevant mailings and for a maximum of 1.5 years thereafter. As soon as we notice that your contact details are no longer accurate or active, or when you decide to exercise your right to unsubscribe, we will no longer retain your personal data for these purposes.

Only where we are legally obliged to, or where this is necessary to defend our interests in legal proceedings (for example, in the event of litigation), do we store personal data for longer periods.

More information about our retention periods is available upon your request.

How do we protect your personal data?

We will implement the necessary administrative, technical and organisational measures to ensure a level of security appropriate to the specific risks we have identified.

We protect your personal data against destruction, loss, alteration, unauthorised disclosure of or access to personal data that is transmitted, stored or otherwise processed.

Furthermore, we try to ensure that we have accurate and up-to-date personal data about you. We therefore ask that you inform us of any changes to your personal data (for example, a change to your contact details).

More information about our safeguards is available upon your request.

What are your rights and how can you exercise them?

Within the limits defined in Articles 15-22 of the GDPR, you have the legal right to:

Finally, you have the right to lodge a complaint regarding the processing of your personal data by us with the data protection authority in your country. In Sweden, you can turn to the Swedish Data Protection Authority.

To learn more about these rights and the circumstances in which you may exercise them, in particular your right to object to further processing (e.g. your right to unsubscribe from our electronic newsletter), please read the Annex to this Privacy Policy. In general, you may exercise these rights free of charge. Only where requests are manifestly unfounded or excessive may we charge a reasonable fee.

You can also get more information and advice about your rights from the data protection authority in your country.

We aim to respond as quickly as possible to your requests or questions. We may request proof of identity in advance to double-check your request.

Contact

If you have any questions or concerns about GB Foods' privacy policy or our processing of your personal data, please feel free to contact us by sending an email, submitting a request via the contact form on our websites or by writing to the address listed in section 1 above.

Annex - More information on your rights as a data subject (see Articles 15-22 GDPR)

Right to information and access to your personal data
You can request more information about our processing activities and the personal data we hold about you at any time.

Right to rectification of inaccurate or incomplete personal data
You have the right to request that we rectify or complete any of your personal data that is inaccurate or incomplete without undue delay.

Right to have your personal data erased ("right to be forgotten")
You can request that we erase (part of) your personal data in the following situations:

when the processing is no longer necessary for the purposes for which they were collected or otherwise processed; or

when the processing was based on your consent and you decide to withdraw your consent,

when you have other reasonable grounds to object to the processing of your personal data,

if we process your personal data unlawfully,

if your personal data must be erased in order to comply with a legal obligation addressed to us.

We note that in certain cases we may refuse to delete your personal data: (i) for the exercise of freedom of expression and information; (ii) to comply with a legal obligation; or (iii) for the establishment, exercise or defence of legal claims.

Right to restrict processing
You can request that we (temporarily) restrict the processing of your personal data in the following situations:

where you have disputed the accuracy of your personal data, for a period of time that allows us to verify the accuracy of the data,

when the processing appears unlawful and you ask us to restrict the use of your data instead of deleting it,

when we no longer need the personal data for processing purposes, but you need it for the establishment, exercise or defence of legal claims; or

pending verification of whether our legitimate grounds take precedence over yours in the context of an objection.

Right to object to the processing of your personal data (free of charge)
You may, in certain circumstances, object to the processing of your personal data where such processing is based on our "legitimate interests". If we consent, we will no longer process your personal data, unless we have compelling legitimate grounds to do so or because such processing is necessary.

When we process your personal data for direct marketing purposes (in particular to send our electronic newsletter or personalised advertising by ordinary mail), you may object to the processing thereof or withdraw your consent to the processing at any time. You also have the right not to be subject to profiling for direct marketing purposes.

Right to data portability
In certain cases, you have the right to receive all your personal data in a structured, commonly used and machine-readable format and the right to transfer these personal data to another controller. The right applies to:

if the processing is based on consent or necessity for the performance of a contract, and

if the processing is carried out by automatic means.

  • obtain information about and access to your personal data,
  • correct your personal data,
  • erase your personal data ("right to be forgotten"),
  • request restriction of the processing of your personal data,
  • object to the processing of your personal data,
  • receive your personal data in a structured, commonly used and machine-readable format and (have) transfer your personal data (transferred) to another organisation.