1. Name and contact details of the controller and the company data protection officer
111 Upper Richmond Road Putney SW15 2TJ
Telephone: 0080 0090 00100
The company data protection officer of Emmi UK is reachable at firstname.lastname@example.org
2. Collection and storage of personal data as well as the nature and purpose of their use
a) When visiting the website
When you visit our website www.onken.com, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information will be collected by us without your intervention and automatically deleted after two years:
- IP address of the requesting terminal,
- Date and Time of access,
- Name and URL of the retrieved file,
- Website from which access is made (so-called referrer URL),
- Device type and operating system of your device,
- Name of your access provider
- Browser type and version used, and other information provided by the browser (such as geographical origin, language setting, add-ons used, screen resolution, etc.).
The above data will be processed by us for the following purposes:
- Ensuring a smooth connection of the website,
- Ensuring the best possible use of our website,
- Evaluation of system security and stability as well
- For further administrative purposes.
The legal basis for data processing is Art. 6 para. 1 p. 1 lit. f of the EU General Data Protection Regulation (GDPR). Our legitimate interest follows from the data collection purposes listed above. In no case we use the data so collected for the purpose to draw conclusions on their person.
b) By using our contact form
For questions of any kind, we offer you the opportunity to contact us via a form provided on the website. It is necessary to provide a valid e-mail address, first and last name, postal code and telephone number to let us know who the request came from and to answer it. Further information can be provided voluntarily.
The data processing for the purpose of contacting us is in accordance with Art. 6 para. 1 p. 1 lit. a GDPR based on your voluntarily granted consent.
The personal data collected by us for the use of the contact form will be automatically deleted after completion, no later than 52 weeks after the request you have made.
c) Prize promotions
From time to time we may hold sweepstakes or similar promotions. For the purpose of conducting the lotteries or promotions we use the following information:
- Salutation, last name, first name
- Date of birth
- Photos and videos
- Social Media Handles
This information will be deleted after the competition, or action. Something different applies if, in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR have expressly and separately consented to the use of the aforementioned and possibly further personal data for marketing purposes (emails, newsletters, etc.) or other purposes. In the context of the raffle or the campaigns, we will only pass on your personal data to third parties for their own purposes if, in accordance with Art. 6 para. 1 sent. 1 lit. a GDPR have expressly consented or this for the performance of the competition according to Art. 6 para. 1 sentence 1 lit. b GDPR is required.
d) Further purposes
We reserve the right to process your personal data for further purposes. However, we will inform you accordingly and, if necessary, seek your consent.
3. Disclosure of data
a) SAP Hybris
We use the cloud-based licensed software Hybris Marketing of SAP America Inc. on our site (3999 West Chester Pike, Newtown Square, PA 19073 USA). The SAP Hybris Marketing Cloud System is located in St. Leon-Rot in Germany.
The use of the SAP Hybris Marketing Cloud System is based on Art. 6 para. 1 sentence 1 lit. f GDPR for the above purposes. These interests are to be regarded as justified within the meaning of the aforementioned provision.
b) For other purposes
In addition, we only pass on your personal data within the Emmi Group and / or to third parties if:
- You yours according to Art. 6 para. 1 sentence 1 lit. a GDPR have given express consent to this
- This according to Art. 6 para. 1 sentence 1 lit. b GDPR permitted by law and required for the execution of contractual relationships with you,
- In the event that disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR there is a legal obligation as well
- Disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is required to assert, exercise or defend legal claims and there is no reason to assume that you have a predominantly legitimate interest in not disclosing your data.
In the cookie information is stored, each resulting in connection with the specific terminal used. However, this does not mean that we are immediately aware of your identity.
In addition, to improve usability, we also use temporary cookies that are stored on your device for a specified period of time. If you visit our site again to take advantage of our services, it will automatically recognize that you have already been with us and what inputs and settings you have made, so you do not have to re-enter them.
Insofar as the aforementioned cookies are personal data, they are used on the basis of legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR. Our interest in the mentioned purposes, in particular in the optimization of our website, is considered as justified in the sense of the aforementioned provision.
Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or always a hint appears before a new cookie is created. However, disabling cookies completely may mean that you can not use all features of our website.
5. Monitoring Tools
We use the services of Brandwatch GmbH (Gutenbergstrasse 77A, 70197 Stuttgart). This is a social media monitoring tool that allows us to identify and monitor content on third party sites (e.g., posts, tweets, blogs, news, forum posts, and social media platforms). This gives us a detailed insight into customer opinions and any topics on the Internet that mention our company name (s) or talk about our brand (s). In doing so, so-called “crawlers” search online available sources to filter out the relevant hits. Brandwatch searches both publicly available data from the Internet and closed-loop third-party networks with which direct contracts are made to access their data.
The data Brandwatch collects varies depending on the source of the data. The following personal data may also be collected:
- Your name, username, nickname or other identifier
- The contents of the data you have posted about that name, username, nickname, or other identifier, including comments, phrases, opinions, posts, etc
- Your profile picture
- Your job title or industry
- Your interests
- Your location
- Your gender and
- Any other information that you post on any Internet site or on any third party platform that provides Brandwatch with data.
The use of Brandwatch serves the purpose of market and opinion research and is also used by us for marketing and PR purposes. Data processing is external and separate from our corporate web and social media site, so we can not comment on the legality of the processing by Brandwatch.
If you object to the use of your information by Brandwatch, or request information about the data stored, or if you wish to assert any other right you are entitled to, please contact Brandwatch at email@example.com. For more information on privacy at Brandwatch, please click here.
How to use the services of Falcon.io ApS (H.C. Andersens boulevard 27, 1st floor, 1553 Copenhagen V, Denmark). This is a social media management tool that allows us to consistently manage our social media profiles and activities. Each user interaction with us is automatically and individually tracked so we can respond to customer requests quickly and efficiently. In addition, we can filter out whether our company or our products, in the social media platforms we represent, are mentioned, and specifically contact these users or reach them with content. This gives us a detailed insight into customer opinions. Furthermore, the tool also allows us to create our own campaigns
Show personalized and interest-based advertising and measure results.
The use of Falcon.io serves the purpose mentioned above. Data processing is external and detached from our corporate web and social media pages, so we can not comment on the legality of processing by Falcon.io.
If you object to the use of your data by Falcon.io, request information about the stored data or assert any other right to which you are entitled, please contact Falcon.io at the firstname.lastname@example.org e-mail address. More information about privacy at Falcon.io can be found here.
6. Tracking Tools
The tracking measures listed below and used by us are based on Art. 6 para. 1 sentence 1 lit. f GDPR. With the tracking measures to be used, we want to ensure a needs-based design and the continuous optimization of our website. On the other hand, we use the tracking measures to statistically record the use of our website and evaluate it for the purpose of optimizing our offer for you. These interests are to be regarded as justified within the meaning of the aforementioned provision.
a) Google Analytics
For the purpose of customizing and continually optimizing our pages, we use Google Analytics, a web analytics service provided by Google Inc. (1600 Amphitheater Parkway, Mountain View, CA 94043, hereinafter “Google”). In this context, pseudonymised usage profiles are created and cookies (see under 4) are used. The information generated by the cookie about your use of this website such as
- Browser type / version,
- Used operating system,
- Referrer URL (the previously visited page),
- Host name of the accessing terminal (IP address),
- Time of server request
Are transmitted to a Google server in the US and stored there. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage for market research and needs-based design of these websites. This information may also be transferred to third parties if required by law or if third parties process this data in the order. Under no circumstances will your IP address be merged with any other data provided by Google. The IP addresses are anonymized, so that an assignment is not possible (IP masking). Google complies with the US-EU Privacy and US-Swiss Safe Harbor Agreements and is registered with the US Department of Commerce’s Safe Harbor Programs.
You can prevent the installation of cookies by setting the browser software accordingly; however, we point out that in this case not all features of this website may be fully exploited.
In addition, you may prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on.
As an alternative to the browser add-on, especially for browsers on mobile devices, you can prevent the collection by Google Analytics by clicking on this link. An opt-out cookie will be set that will prevent the future collection of your data when you visit this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.
For more information about privacy related to Google Analytics, see the Google Analytics Help Center.
b) Google Adwords Conversion Tracking
In order to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer, we also use Google conversion tracking. Google Adwords will set a cookie (see point 4) on your device if you have reached our website via a Google ad.
These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of the Adwords customer’s website and the cookie has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page.
Every Adwords customer receives a different cookie. Cookies cannot be tracked via the websites of Adwords customers. The information gathered using the conversion cookie is used to generate conversion statistics for Adwords customers who have opted for conversion tracking. Adwords customers hear the total number of users who clicked on their ad and were redirected to a conversion tracking tag page. However, they do not receive information that personally identifies users.
7. Targeting Tools
The targeting measures listed below and used by us are based on Art. 6 para. 1 sentence 1 lit. f GDPR. Through the targeting measures we use, we want to make sure that only your actual or alleged interests-oriented advertising is displayed on your devices. These interests are to be regarded as justified within the meaning of the aforementioned provision.
a) Google Adwords Remarketing
We point out, however, that you may not be able to use all the features of this website in this case. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above. For more information about Google’s terms, click here.
b) Double Click
On our website, information for the optimization of advertising impressions is collected and evaluated using cookies (see section 4). For this purpose, we use Google Inc. targeting technologies (Double Click, Double Click Exchange Buyer, Double Click Bid Manager). These technologies enable us to target you with individual interest-based advertising. The cookies used, for example, provide information about which of our products you are interested in. On the basis of the information, we can also display offers on the part of third parties that are specifically oriented towards your interests, as they result from your previous user behavior. The collection and evaluation of your user behavior is exclusively pseudonymous and does not enable us to identify you. In particular, the information is not merged with personally identifiable information about you.
The cookie will be automatically deleted after 30 days.
You can also set preferences for showing interest-based advertising through the Google Ads Settings Manager.
c) Facebook Retargeting / Remarketing
We point out that we as the provider of the pages are not aware of the content of the data transmitted and their use by Facebook.
For more information, see the Facebook privacy statement.
d) Facebook Custom Audiences and Lookalike Audiences
In addition, we also use Facebook Custom Audiences and Facebook Lookalike Audiences. These are marketing services from Facebook. These allow us to display personalized and interest-based advertising on Facebook for certain groups of visitors to our website who also use Facebook.
You may object to the use of the Custom Audiences and Lookalike Audiences services on the Facebook website. After logging in to your Facebook account, you will be taken to the settings for Facebook ads.
8. Your rights
You have the right:
- According to Art. 7 para. 3 GDPR, to revoke your once given consent to us at any time. As a result, we are not allowed to continue the data processing based on this consent for the future;
- In accordance with Art. 15 GDPR, to request information about your personal data processed by us. In particular, you can provide information on the processing purposes, the category of personal data, the categories of recipients to whom your data has been disclosed, the planned retention period, the right to rectification, deletion, limitation of processing or opposition, the existence of the right to complain, the source of their data, if not collected from us, and the existence of automated decision-making including profiling and, where appropriate, meaningful information about their details;
- Immediately request the correction of incorrect or completed personal data stored by us;
- Request the deletion of your personal data held by us, unless the processing is required to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
- To demand the restriction of the processing of your personal data, as far as the accuracy of the data is disputed by you, the processing is unlawful, but you reject its deletion and we no longer need the data, but you to enforce, exercise or defend legal claims require or you have objected to the processing;In accordance with Art. 20 GDPR, to receive your personal data provided to us in a structured, standard and machine-readable format or to request the transfer to another person in charge.
- To complain to a supervisory authority pursuant to Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or work or our company headquarters.
9. Right to
If your personal data are based on legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR are processed, you have the right to file an objection against the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct mail. In the latter case, you have a general right of objection, which is implemented by us without specifying any particular situation.
If you would like to exercise your right of objection, please send an e-mail to email@example.com
10. Data security
We use the widely used Transport Layer Security (TSL) technology on our website in conjunction with the highest level of encryption supported by your browser. In general, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we’ll use 128-bit v3 technology instead. Whether a single page of our website is transmitted in encrypted form is indicated by the closed representation of the key or lock symbol in the lower status bar of your browser.
We also take appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or total loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
This data protection information is currently valid and has the status of December 2017.