Privacy

Food affairs GmbH (“Food affairs” or “we”) respects your privacy and is committed to processing your personal data responsibly. This Privacy Notice applies to personal data that you provide to us when using this website, or that we collect from you in connection with your use of this website. This Privacy Notice explains how we may use your personal data, which rights you have, and whom you may contact for further information.

Controller Responsible for the Processing of Your Personal Data and Data Protection Officer

Food affairs GmbH, together with its affiliated companies (within the meaning of Secs. 15 et seq. of the German Stock Corporation Act (AktG)), is responsible for the processing of your personal data as controller within the meaning of Art. 4 no. 7 GDPR (DSGVO). You can contact us using the following details:

Food affairs GmbH
Helfmann-Park 2
65760 Eschborn

Telephone: +49 6196 478-500
Fax: +49 6196 478-569
Email: info@food-affairs.de

Questions about our processing of your personal data or about data protection in general may also be addressed to our Data Protection Officer, who can be reached at: datenschutzbeauftragter@compass-group.de

To Whom Does This Privacy Notice Apply?

This Privacy Notice applies to all visitors to this website.

Which Personal Data / Categories of Data Do We Process?

When you visit our website, we automatically collect and process the following personal data:

  • Name of the website accessed,

  • Date and time of access,

  • Volume of data transmitted,

  • Message regarding successful retrieval,

  • Browser type/version,

  • Operating system of your device,

  • Referrer URL,

  • IP address,

  • The requesting provider.

You may also provide personal data to us voluntarily, for example by completing our contact form. In that case, we collect and process the following personal data about you:

  • First name and last name,

  • Email address,

  • Postal address,

  • Telephone number, if provided by you,

  • Name of the company on whose behalf you contact us, if provided by you,

  • Content of the enquiry you submit to us,

  • Username or profile name of your social media account.

Purposes of Processing Personal Data

Your personal data will only be processed for specified purposes and in an appropriate manner. We only collect personal data that is adequate, relevant and proportionate for the respective purpose.

We use your personal data for the following purposes:

  • Provision of our website for (potential) business customers,

  • Obtaining your consent (where required),

  • Providing you with information about our company,

  • Handling and responding to any contacts, requests, enquiries and complaints from you,

  • Ensuring the security of this website,

  • Online marketing,

  • Marketing analytics,

  • Enforcement of any claims to which we may be entitled,

  • Sending our newsletter,

  • Conducting prize draws/competitions.

Recipients to Whom We Disclose Your Personal Data

We share your personal data with selected recipients (typically so-called processors). The following categories of recipients may include:

Service providers whose services we use to operate this website and as part of our online marketing strategy
Our group companies

We may be obliged to disclose your personal data to supervisory authorities, courts, the police or tax authorities, or in the context of legal proceedings. In such cases, it may not be possible for us to inform you in advance about the details of any such disclosure of personal data. Where this occurs, we will take all reasonable steps to disclose as little personal data as possible. In addition, we may disclose your personal data—within the limits of applicable law—in connection with a reorganisation or a merger with another company.

Cookies

Our website uses cookies.

Cookies are text files that are stored on the user’s device. When a user accesses a website, a cookie may be stored on the user’s device. Certain functions of our website cannot be provided without the use of cookies (so-called “technically necessary cookies”). For this purpose, it is necessary that your browser can be recognised even after you move to another page. The usage data collected via technically necessary cookies is not used to create user profiles. The legal basis for the processing of your personal data through the use of technically necessary cookies is Art. 6(1)(f) GDPR (DSGVO) in conjunction with Sec.  25(2) no. 2 TDDDG.

In addition, our website may use cookies that enable an analysis of users’ browsing behaviour (so-called “third-party cookies”). Third-party cookies may only be stored on your device with your express consent. The legal basis for this is Sec.  25(1) sentence 1 TDDDG. Further information on scope and purpose can be found in the sections on the respective providers in this Privacy Notice.

As a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate, restrict or delete the transmission of cookies. If you disable cookies for our website, you may no longer be able to use all functions of the website to their full extent. You can prevent the transmission of Flash cookies by changing the settings of the Flash Player.

You can find assistance regarding the settings in the help menu of your browser under the following links:

Microsoft Edge
Firefox
Chrome
Safari
Opera

Some of the cookies used here are deleted once you close your browser (so-called session cookies). Other cookies remain stored on your device and enable us or our partner companies (third-party cookies) to recognise your browser on your next visit (persistent cookies). Persistent cookies are deleted automatically after a predefined period, which may vary depending on the cookie.

Transfer of Your Personal Data to Countries Outside the EU/EEA

Food affairs is part of the Compass Group and therefore an internationally operating company and part of a global group. Like many companies, we maintain worldwide systems for recruitment purposes and have centralised aspects of data processing and personnel administration in order to enable better corporate governance. This centralisation may result in personal data being transferred from one country to another country outside the EU or the EEA where data protection laws may not provide the same level of protection. For this purpose, Compass Group has implemented an “Intercompany Data Sharing Agreement”, which enables global transfers of personal data from the EU/EEA within the group.

In the course of processing your personal data, we may disclose personal data to service providers that are located outside the European Union (EU)/the European Economic Area (EEA) and/or that process your data outside the EU/EEA. In such case, this is referred to as a “third-country transfer”.

Where personal data is processed in the USA, our service providers are generally certified under the so-called “EU–US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards for processing operations in the USA. Each company certified under the DPF undertakes to comply with these data protection standards.

If personal data is processed by service providers in a third country other than the USA, we ensure that an “adequacy decision” of the European Commission exists for that third country, which is intended to ensure compliance with European data protection standards for processing operations in third countries.

Where personal data is processed by a service provider in the USA that is not certified under the DPF, or in a third country for which no adequacy decision exists, we have entered into the EU “Standard Contractual Clauses for the transfer of personal data to third countries” (SCCs) with the relevant service provider. By concluding the SCCs, the relevant service providers are obliged to comply with European data protection standards for processing operations in third countries.

Please note that, in the context of third-country transfers, there may be risks that are unknown in detail (e.g. processing of data by security authorities in the third country, the precise scope and consequences of which are not known to us, over which we have no influence, and of which you may not become aware).

Legal Bases for the Processing of Your Personal Data

The legal basis for processing your personal data for the purpose of providing our website for private customers is our legitimate interest pursuant to Art. 6(1)(f) GDPR (DSGVO).

The legal basis for processing your personal data for the purpose of obtaining your consent is the performance of a legal obligation to which we, as controller, are subject; Art. 6(1)(c) GDPR (DSGVO). Our legal obligation to obtain your consent arises from Sec.  25(1) sentence 1 TDDDG where we set so-called “third-party cookies”, as well as from Art. 7(2) no. 2 UWG if we wish to send you our newsletter.

The legal basis for processing your personal data for the purpose of processing your order is the performance of a contract to which you are a party; Art. 6(1)(b) GDPR (DSGVO), or your consent pursuant to Art. 6(1)(a) GDPR (DSGVO) if you wish to be informed about the further shipping/delivery status of your order.

The legal basis for processing your personal data for the purpose of displaying your review on our website is your consent pursuant to Art. 6(1)(a) GDPR (DSGVO).

The legal basis for processing your personal data for the purpose of providing you with publications, products and services in which you may be interested, or which you have requested from us, is your consent pursuant to Art. 6(1)(a) GDPR (DSGVO) or—where applicable—the performance of a contract pursuant to Art. 6(1)(b) GDPR (DSGVO).

The legal basis for processing your personal data for the purpose of responding to contact requests, enquiries and complaints that you have submitted to us is your consent pursuant to Art. 6(1)(a) GDPR (DSGVO).

The legal basis for processing your personal data for the purpose of ensuring the security of this website is our legitimate interest pursuant to Art. 6(1)(f) GDPR (DSGVO).

The legal basis for processing your personal data for the purpose of online marketing is your consent pursuant to Art. 6(1)(a) GDPR (DSGVO), or—where cookies are stored on your device for online marketing purposes—Sec.  25(1) sentence 1 TDDDG.

The legal basis for processing your personal data for the purpose of carrying out marketing analytics is our legitimate interest pursuant to Art. 6(1)(f) GDPR (DSGVO), which consists in being able to use user data to improve our offering and to continuously enhance our customers’ purchasing experience.

The legal basis for processing your personal data for the purpose of enforcing any claims to which we may be entitled is Art. 6(1)(f) GDPR (DSGVO).

The legal basis for processing your personal data for the purpose of sending our newsletter is your consent pursuant to Art. 6(1)(a) GDPR (DSGVO).

The legal basis for processing your personal data for the purpose of conducting prize draws/competitions is your consent pursuant to Art. 6(1)(a) GDPR (DSGVO).

Security of Your Personal Data

We protect the personal data that you provide to us. We maintain appropriate security safeguards to prevent your personal data from being accessed accidentally or unlawfully, or from being used, disclosed, altered, lost or destroyed accidentally or unlawfully.

However, the transmission of data and information over the internet is not completely secure. Despite our efforts to protect your personal data, we cannot guarantee the security of data transmitted by you to us via our website. Any such transmission is at your own risk. Once we have received your personal data, we will implement appropriate technical and organisational measures to protect your personal data against loss, theft and unauthorised use, access or modification.

Retention Period for Your Personal Data

We will delete your personal data in accordance with the relevant statutory and internal deletion requirements, in particular Art. 17 GDPR (DSGVO). We will delete your personal data accordingly once the purposes described in section 4 of this Privacy Notice have been fulfilled.

As a rule, we store your personal data for as long as this is necessary for the respective purpose of processing.

In addition, statutory retention obligations or the legitimate interests of Food affairs or third parties may justify longer storage of your personal data in individual cases.

Analysis tools and advertising
Matomo

This website uses the open-source web analysis service Matomo.

Through Matomo, we are able to collect and analyze data on the use of our website-by-website visitors. This enables us to find out, for instance, when which page views occurred and from which region they came. In addition, we collect various log files (e.g. IP address, referrer, browser, and operating system used) and can measure whether our website visitors perform certain actions (e.g. clicks, purchases, etc.).

The use of this analysis tool is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the analysis of user patterns, in order to optimize the operator’s web offerings and advertising. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TDDDG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TDDDG. This consent can be revoked at any time.

IP anonymization

For analysis with Matomo we use IP anonymization. Your IP address is shortened before the analysis, so that it is no longer clearly assignable to you.

Hosting

We host Matomo exclusively on our own servers so that all analysis data remains with us and is not passed on.

[consent-popup]

 

Your Rights as a Data Subject

Subject to the statutory requirements, you may exercise the following rights as a data subject against us:

  • Right of access: At any time, you are entitled, within the scope of Art. 15 GDPR (DSGVO), to request confirmation as to whether we process personal data relating to you; where this is the case, you are also entitled, within the scope of Art. 15 GDPR (DSGVO), to obtain access to such personal data and certain additional information (including purposes of processing, categories of personal data, categories of recipients, planned retention period, source of the data, the use of automated decision-making and, in the case of transfers to third countries, the appropriate safeguards) as well as a copy of your data.

  • Right to rectification: You are entitled, pursuant to Art. 16 GDPR (DSGVO), to request that we rectify personal data stored about you if it is inaccurate or incorrect.

  • Right to erasure: You are entitled, subject to the requirements of Art. 17 GDPR (DSGVO), to request that we delete personal data relating to you without undue delay. The right to erasure does not apply, inter alia, where the processing of personal data is necessary (i) for exercising the right of freedom of expression and information, (ii) for compliance with a legal obligation to which we are subject (e.g. statutory retention obligations), or (iii) for the establishment, exercise or defence of legal claims.

  • Right to restriction of processing: You are entitled, subject to the requirements of Art. 18 GDPR (DSGVO), to request that we restrict the processing of your personal data.

  • Right to data portability: You are entitled, subject to the requirements of Art. 20 GDPR (DSGVO), to request that we provide you with the personal data relating to you that you have provided to us, in a structured, commonly used and machine-readable format.

  • Right to withdraw consent: You have the right to withdraw any consent you have given to the processing of personal data at any time with effect for the future.

  • Right to object: You are entitled, subject to the requirements of Art. 21 GDPR (DSGVO), to object to the processing of your personal data, with the consequence that we must cease processing your personal data. The right to object applies only within the limits provided for in Art. 21 GDPR (DSGVO). In addition, our interests may override a cessation of processing, so that we may be entitled to continue processing your personal data despite your objection.

  • Right to lodge a complaint with a supervisory authority: You are entitled, subject to the requirements of Art. 77 GDPR (DSGVO), to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work, or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR (DSGVO). This right to lodge a complaint is without prejudice to any other administrative or judicial remedy.

The supervisory authority competent for us is:

The Hessian Commissioner for Data Protection and Freedom of Information (Der Hessische Beauftragte für Datenschutz und Informationsfreiheit)
Postfach 3163
65021 Wiesbaden
Email: poststelle@datenschutz-hessen.de-mail.de