Consumer's Privacy Notice
1.1. For the purposes of managing consumers’ complaints, the company “Chipita Societe Anonyme Industrial And Commercial Company” with the distinctive title "CHIPITA S.A.", located in Metamorphosi, Attica, 12th km of Athens-Lamia National Road, will collect and process your personal data in electronic form or/and in hard copy.
1.2. This Privacy Notice aims to provide you with information on how the Company manages your personal data and on the rights you have as data subjects.
2.1. The legal basis for the processing of your personal data is in this case your consent as well as the fulfillment of the Company’s legitimate interests, i.e. the investigation of complaints in an effective and meaningful way.
3. DATA CONTROLLER
3.1. In this Notice, the "Company" or/and "Chipita" or/and “We” shall be deemed to refer to "CHIPITA Societe Anonyme Industrial and Commercial Company". The Company is the data controller within the meaning of the legislation and the purposes and the way in which your personal data are collected, used and/or potentially shared with third parties by the Company is explained in this Privacy Notice.
4. CATEGORIES OF PERSONAL DATA AND WAY OF PROCESSING
4.1. For the purposes of recording and investigating your complaints, we may collect the following data:
4.1.1. Name and surname,
4.1.2. Home address, city, postal code, district,
4.1.3. Email address,
4.1.4. Cell phone and home telephone number,
4.1.5. Any other information you disclose on your own initiative to the Company when you communicate with us by phone.
4.2. Personal data provided by you to the Company regarding other persons (ex. relatives, partners, dependents etc.) will be processed by us in accordance with the terms of this Privacy Notice. You are responsible for the accuracy of those data and information and you should ensure that the aforementioned data subjects are aware of the personal data provided by you and of how they will be processed by the Company.
5.1. Your personal data will be used by the Company for the purposes of managing and investigating your complaints regarding Company’s products.
5.2. Only those personal data that are relevant and related to a particular processing purpose will be processed and we will always try to limit the use of your personal data to what is strictly necessary.
5.3. Your personal data may be used for the following purposes:
5.3.1. In order to come to contact with you.
5.3.2. For statistics.
5.3.3. In the context of any judicial and/or extrajudicial actions directly related to the complaint you have submitted for the purposes of safeguarding the Company's legitimate interests.
6. RECIPIENTS OF YOUR PERSONAL DATA
6.1. Your personal data will only be available to authorized employees of the Company that are responsible for the management of consumers’ complaints.
6.2. Furthermore, in the context of this processing and for the fulfillment of the aforementioned purposes, the Company may use third party services, to whom the Company may disclose your personal data, such as suppliers who provide services to us (ex. information technology companies and other technology services) and legal advisors as well as any other natural or legal persons with whom we collaborate or may directly or indirectly collaborate for those purposes, including the companies of the Chipita Group.
6.3. We forbid such third parties to use the abovementioned information or to disclose it for any purpose other than for the provision of services on our behalf.
6.4. We may decide for strategic or other business purposes, to sell or transfer our business in whole or in part. In the context of such sale or transfer, we may transfer information that we have collected and stored, including your personal data collected according to this Notice, to any party involved in the sale or transfer.
6.5. Your personal data will be disclosed only to those third parties who have a legitimate need to access them and have a contractual obligation to ensure their protection. We will ensure that your personal data are adequately and properly protected when disclosed to authorized third parties.
6.6. In exceptional cases, we may disclose your personal data to third parties, including the competent police and prosecuting authorities, only if there is a statutory obligation to do so, or we are obliged by decision/order of a judicial, regulatory or other public competent authority.
7.1. The personal data we collect are stored on secure servers located in EU.
7.2. In the context of the processing described in this Privacy Notice, we may assign the processing of your personal data or disclose your personal data to third parties located in countries outside the EEA. Therefore, your personal information may be processed by personnel doing business outside the EEA and works for us or for one of our suppliers. Such personnel may be employed, inter alia, in the provision of support services. Your personal data may be also processed by other companies of the Chipita Group located outside the EEA.
7.3. Irrespective of which country your personal data are transferred, the Company will only share your Personal Data under a strict ‘need to know’ basis and always under appropriate safeguard measures (such as EU Standard Contractual Clauses).
7.4. You are entitled to request a copy of the aforementioned guarantees by contacting us at firstname.lastname@example.org.
8.1. We will retain your personal data for as long as it is strictly necessary for the purpose for which they are collected and according to the relevant legislation. Your personal data that we collect pursuant to this Notice will be retained until the final investigation and resolution of the complaint, including the necessary time period in order to comply with any statutory obligations or/and bring any judicial or extrajudicial actions in order to fulfill the Company’s legitimate interests.
8.2. Where your personal data are not necessary for the abovementioned purposes, they will be safely deleted.
9.1. Subject to the applicable legislation, you have the right to access, i.e. to be informed, upon your request, whether or not your personal data are subject to processing and to receive further information on such processing. In addition, you have the right to request the rectification of any inaccurate personal data. Also, as long as the requirements under the applicable legislation are met, you have the right to erasure, the right to restriction of processing, the right to data portability and the right to object to the processing.
9.2. To the extent that processing requires your consent, you may withdraw your consent at any time. However, the withdrawal of your consent will not affect the lawfulness of processing based on consent before its withdrawal.
9.3. Finally, you may lodge a complaint with the competent supervisory authority of data protection.
9.4. You may exercise your abovementioned rights by contacting us at email@example.com.
9.5. If such a request places us in breach of our obligations under applicable laws, regulations or codes of practice of the Company or other Chipita Group companies or in case the provision of information would result in disclosing personal information of other individuals, then we may not be able to comply with your request, but you always have the right to ask the restriction of the processing of your personal data.
10. PERSONAL DATA SECURITY
10.1. We are committed to ensure the implementation of a number of technical measures and security procedures to protect the integrity and security of all our information, including the personal data we retain.
11. CONTACT US
11.1. In case you have any concerns about this Notice or if you wish to exercise one of the rights you have as a data subject, you can contact us at firstname.lastname@example.org.