Vater mit Kind

-

-

Data Privacy Statement

 

We, The Lorenz Bahlsen Snack-World sp. z o.o. (hereinafter also referred to as „Administrator“), take the protection of personal data very seriously and adhere to the pertinent data protection law provisions, in particular the provisions of the EU General Data Protection Regulation (GDPR). Below, we should like to inform you, in particular, what data we collect when in the context of using our website, and how we use it.

 

I. General remarks

1. Extent of data processing

It is, principally, only to the extent necessary for the provision of a functioning website and of our contents and services that we collect and use personal data of our users. The collection and use of the personal data of our users takes place only where the processing of data is permitted by statutory provisions or after consent has been granted by the user.

2. Legal bases for the processing of data

Where the consent of the user for processes in relation to the processing of personal data is obtained by us on our website, Art. 6 (1) lit. a GDPR serves as a legal basis for the processing of personal data.

Art. 6 (1) lit. b. GDPR serves as a legal basis for the processing of personal data required for performance of a contract of which the user is a contractual party. This applies also to processing processes necessary for the performance of a quasi contract obligation or for precontractual measures.

If and when the processing of personal data is required for the fulfilment of a legal obligation to which our company is subject, Art. 6 (1) lit. c GDPR serves as a legal basis.

Where processing is necessary for the protection of a legitimate interest of our company or a third party and the first-mentioned interest is not overridden by the interests, basic rights and the fundamental freedoms of the user concerned, Art. 6 (1) lit. f GDPR serves as a legal basis for processing of the data (so-called weighing of interests).  

Apart from that, there are other statutory provisions for the processing of personal data, which – to the extent pertinent - are concretely specified by us below.

3. Duration of storage

The users’ personal data will be deleted as soon as the purpose of storage has ceased to exist. Apart from that, storage may be made where this has been provided for in regulations, laws or other provisions of the European Union to which our company is subject. Blocking or deletion of the data will also take place when a period for storing of the data prescribed by the above-mentioned norms has expired, unless there is a necessity for the continued storage of the data for the conclusion or fulfilment of a contract.

4. The passing on of personal data

If we pass on personal data, sourced through the websites, we do so exclusively to service providers supporting us with fulfilling the above-mentioned purposes. These companies, as so-called data processing companies, are not allowed to use your personal data except for fulfilling their tasks on our behalf and they are obligated to adhere to the pertinent data protection rules. The data processing companies employed by us are:

The Lorenz Bahlsen Snack-World GmbH & Co KG Germany
Rathenaustr. 54
63263 Neu-Isenburg, Germany

Cocomore AG
Gutleutstr. 30
60329 Frankfurt am Main, Germany

Apart from that, there is no passing on of personal data.

5. Place where the data is processed

Processing of your personal data takes place in countries of the European Economic Area, exclusively.

 

II. Processing of personal data on the website

1. Provision of the website and creation of logfiles

a) Description of the data processing operation

Whenever our website is called up, our system automatically collects data and information from the system of the computer calling up the website.

At this, the following data are collected:

  • Information on the type of browser and version used
  • The user’s operating system
  • The user’s IP address
  • Date and time of access
  • Websites from which the user’s system accesses our website
  • Websites called up by the user’s system via our website

The data are also stored in the logfiles of our system. There is no storing of these data together with other personal data of the user.

b) Legal basis for the processing of data

Art. 6 (1) lit. f GDPR is the legal basis for the temporary storage of data and logfiles.

c) Purpose of the processing of data

The storage in logfiles is done to ensure the functionality of the website. In addition, the data is used to optimise the website and to ensure the security of our information technology systems. An evaluation of data for marketing purposes does not take place in this context. These are the purposes wherein our legitimate interest in the processing of data in accordance with Art. 6 (1) lit f GDPR lies.

d) Duration of storage

The data will be deleted as soon as it is no longer required for achieving the purpose for which it was collected. Where the data is stored in logfiles, deletion will take place after two days at the latest. Storage beyond this point is possible. In such case, the IP addresses of the user will be deleted or anonymised so that it is no longer possible to attribute the client calling up the website.

e) Possibility of objection and removal

The collection of data for the provision of the website and the storage of data in logfiles is absolutely necessary for operating of the website. Consequently, there is no possibility of objection on the part of the user.  

2. Contact form and e-mail contact

a) Description of the data processing operation

There are contact forms on our website which can be used for making contact electronically. Where a user makes use of this possibility, the data entered in the form and enclosed in the attachments are transmitted to us and stored. These data are: 

  • First name and surname
  • E-mail address
  • Further optional information given by the user

Alternatively, contact may be made via the e-mail address made available by us. In this case, the user’s personal data transmitted together with the e-mail will be stored. Providing the data is voluntary, but necessary to investigate the notification.

No passing on of data to third parties takes place in this context. The data is used for processing the conversation, exclusively.

b) Legal basis for processing of the data

Personal data will be processed based on the premise indicated in art. 6 par. 1 letter f of GDPR i.e. within the legitimate interest of the administrator to respond to the notification, consider the complaint, prepare the offer or send commercial information, claim redress. If, in connection with the submitted complaint, information about the health condition is provided, they will be processed on the basis of the premise indicated in art. 9 par. 2 letter f of GDPR, due to the fact that it is necessary to establish, assert or defend claims.

c) Purpose of the processing of data

The personal data are processed in order to contact, provide information about the company, about the product or to solve another problem described in the contact form or e-mail correspondence (e.g. regarding the submission of a complaint, cooperation or performance of the contract), in order to prepare the offer or send commercial information. The data can also be used in connection with the pursuit of claims.

d) Duration of storage

Personal data concerning complaints are stored for a period of 2 years counting from the end of the calendar year, in which the product was purchased. Data provided as part of providing information and responses to inquiries will be kept until information is provided.  

e) 

Access to the data may belong to authorized employees of the Administrator as well as to service providers who have been entrusted with the processing of personal data for the purposes of providing services provided to the Administrator (including entities providing IT support) and to their authorized employees - to the extent necessary to properly perform these services.

f) 

Every data subject may take advantage of the following rights towards the Administrator:

  • the right to request access to and rectification of his/her data,
  • the right to limit the processing of his/her data in situations and on the terms specified in art. 18 of the Ordinance or to remove them pursuant to art. 17 of the Regulation ("the right to be forgotten"),
  • the right to object at any time to the processing of his/her data for reasons related to his/her specific situation, as referred to in art. 21 par. 1 of the Regulation,
  • the right to file a complaint about the processing of his/her personal data by the Administrator to the President of the Office for Personal Data Protection

3. Online applications

We want to facilitate your search for an employment. For this reason, we provide you with a possibility for online applications. For further information and a separate data privacy statement please go to our Online Job Board.

 

III. Use of cookies

1. Description of the data processing operation

We use “cookies” to make your visit to our website more attractive and to enable the use of certain functions. Cookies are small text files stored in the browser or from the browser to the user’s terminal. When a website is called up by a user, a cookie may be stored on the user’s operating system. This cookie contains a characteristic character string which allows the browser to be identified unambiguously when the website is called up again.

a) Technically necessary cookies

We use cookies to make our website more user-friendly. Some elements of our website require that the browser accessing it can be identified even after a page change. The following data is stored in the cookies and transmitted:

  • Language settings
  • Log in information

b) Technically unnecessary cookies

Apart from that, we use technically unnecessary cookies on our website in order to improve the quality of our website and its contents. Thus, the following data may be transmitted:

  • Frequency of site views
  • Use of website functions
  • Search keywords entered

When calling up our website, the user is informed about the use of cookies and his/her consent to install them. In this context, reference is also made to the Data Privacy Statement.

c) Information on a change of the browser settings

Most browsers are set in a way that they automatically accept cookies. The user may, however, prevent the storing of cookies on his/her computer by adjusting the browser settings accordingly. This may, however, restrict the function scope of our website.   

How to disable the cookies:

  • in Opera browser
  • in Firefox browser
  • in Chrome browser
  • in Internet Explorer browser
  • in Safarii browser
  • 2. 

    As part of the use of cookies files, there is an automatic collection of information (so-called passive data collection), which in some cases may be assigned by the Administrator to an identified or potentially identifiable user of the site. In any case, if there is a possibility (even potential) of user identification, related information collected as part of passive data collection will be treated as his/her personal data, which can be processed by the Administrator in accordance with the GDPR. The legal basis for the processing of personal data collected in relation to the use of cookies files is the legitimate interest of the data administrator manifesting itself in the need to ensure the proper functioning of the website (Article 6 par.1 letter f of the GDPR).

    The information collected in a passive way may include in particular: the IP address (the number assigned to the user's computer by the internet service provider), the browser version used by the user's computer and the type of device he/she uses, information about preferred settings, user credentials, information about his on-line activities.

    Access to personal data collected as part of passive data collection may belong to authorized employees of the Administrator and to service providers, to whom the Administrator entrusted the processing of personal data for the purposes of these services (e.g. IT services).

    The user to whom this data applies may take advantage of the following rights towards the Administrator:

    a)       the right to request access to and rectification of his/her data,

    b)       the right to limit the processing of his/her data in situations and on the terms specified in art. 18 of the Ordinance or to remove them pursuant to art. 17 of the Regulation ("the right to be forgotten"),

    c)       the right to object at any time to the processing of his/her data for reasons related to his/her specific situation, as referred to in art. 21 par. 1 of the Regulation,

    d)       the right to file a complaint about the processing of his/her personal data by the Administrator to the President of the Office for Personal Data Protection

    3. Purpose of the processing of data

    The purpose of the use of technically necessary cookies is to make it easier for the user to use the website. Some of the functions of our website cannot be offered without using cookies. For these functions it is necessary that the browser can be recognised again after a page change.

    The purpose of the use of the technically unnecessary cookies is to improve the quality of our website and its contents.

    The user data collected on our website using cookies are not used for the creation of user profiles.

    The above-mentioned purposes are also the ones wherein our legitimate interest in the processing of data in accordance with Art. 6 (1) lit f GDPR lies.

    4. Duration of storage, possibility of objection and removal

    Cookies are stored on the user’s computer and transmitted from there to our website. Thus, you as the user have full control of the use of cookies. By changing the settings of your browser you may deactivate or restrict the transmission of cookies. Cookies which have already been stored can be deleted any time. This can also be done automatically. The full use of all the functions of our website may no longer be possible where cookies have been deactivated for the website.

     

    IV. References to social networks, links to Google Maps

    1. Social media

    Our website is supplemented through our official presences in the following social networks:

    • Facebook
    • Twitter
    • Pinterest
    • Instagram
    • YouTube

    The references (links) are marked by the respective logo of the social network; no use is made of the social plugins of the above-mentioned social networks.

    If following the links to the social networks, please be aware that the respective social network is responsible for the processing and use of personal data and that we have or get no knowledge whatsoever of the actual extent of use of your data by the respective provider.  For information on the extent of processing of your personal data by the providers of the social networks and the possibilities of adjusting settings for the protection of your privacy, please see the data protection guidelines of the respective provider.

    2. Links to Google Maps

    By a link on our website, we offer you the possibility to plan your journey to our sites on a map to Google Maps, a service of Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA. For data protection reasons, a Google Maps plugin has, however, not been implemented on our website. When following the link to Google Maps, please be aware that the provider Google is responsible for the processing and use of personal data and that we have or get no knowledge whatsoever of the actual extent of use of your data by the provider. For further information on the extent of processing of your personal data by Google and the possibilities of adjusting settings to protect your privacy, please see the data privacy statement and the terms of use of Google Maps.

     

    V. The execution of the rights of people whose data is processed

    The demands of the data subject in the scope of implementation of its rights resulting from GDPR should be directly reported to the Internal Coordinator for Personal Data Protection at The Lorenz Bahlsen Snack-World Sp. z o.o.

    Coordinator for Personal Data Protection

    The Lorenz Bahlsen Snack-World Ltd.

    Rolna street no. 6, 62-080 Sady, Tarnowo Podgórne

    e-mail address: daneosobowe.lorenz@lbsnacks.pl

     

    VI. Reports of personal data breaches

    Reports of personal data breaches should be reported directly to the Internal Coordinator for Personal Data Protection at The Lorenz Bahlsen Snack-World Sp. z o.o.

    Coordinator for Personal Data Protection

    The Lorenz Bahlsen Snack-World Ltd.

    Rolna street no. 6, 62-080 Sady, Tarnowo Podgórne

    e-mail address: daneosobowe.lorenz@lbsnacks.pl

     

    VII. External links

    Our website may contain links referring to the pages of third parties. Where this is not obvious we point out that these are external links. We have no influence on the contents and design of the pages of external providers. Insofar, this data protection statement does not apply there.

     

    VIII. Amendment of this data privacy statement

    The continuous development of the internet and the related frequent amendments to the applicable legal norms require our Data Privacy Statement to be adjusted from time to time. We will keep you informed here about any corresponding alterations. 

     

    IX. Administrator

    Administrator in the meaning of the personal data protection regulations is:   

    The Lorenz Bahlsen Snack-World sp. z o.o.

    ul. Rolna 6
    62-080 Sady, Tarnowo Podgórne

     

    Telephone: +48 (0) 61 864 97 00
    Website: www.lorenz-snackworld.pl

    For the full imprint see here.

     

    X. Contact details of the data protection officer

    In cases connected with data processing and realisation of rights of the data subject you can contact the Administrator at the address of the registered office: ul. Rolna 6, 62-080 Sady, poczta Tarnowo Podgórne and at the e-mail address daneosobowe.lorenz@lbsnacks.pl or with the Data Protection Officer. Contact details: iod@lbsnacks.pl. The Administrator appointed Paweł Romaniuk as the Data Protection Officer.

    A person placing a request concerning processing of his personal data may be requested by the Administrator to answer a few questions connected with his personal data in order to enable verification of his identity.