In addition, your personal data may be shared with the following third parties for the purposes described below:
a) Other Danone companies/entities: Where it is in our legitimate interests to do so for internal administrative purposes (for example, ensuring consistent and coherent delivery of products to our customers, corporate strategy, merger and acquisition operations, compliance, auditing and monitoring, research and development and quality assurance).
b) Third party service providers and subcontractors: Including those which:
i) assist us to carry out your requests, respond to your inquiries, provide you with samples, enable you to participate in a competition, such as logistics providers, sponsors and customer support providers;
ii) perform core information technology and other business-related services, such as website/app development providers, cloud hosting providers, management and evaluation service providers, data analysts, utility providers, insurers;
iii) assist in the organization of our events, marketing, advertising and promotional activities; or
iv) provide analytics and optimization services relating to our websites and apps.
c) Business transfer recipients: Where we sell or buy any business or assets, (such as a merger/absorption), to the prospective seller or buyer of such business or assets, or where substantially all of our or any of our affiliates' assets are acquired by a third party, in which case personal data held by us will be one of the transferred assets. Where appropriate, in such case, the buyer acting as the new data controller processes your data and its privacy statement governs the processing of your personal data.
d) Legal disclosure recipients: Where we are obliged by law to disclose your personal data (e.g. to government or law enforcement bodies) or where disclosure is required to protect our rights or those of our staff, customers or other third parties.
Save as expressly detailed above, we will never share, sell or rent any of your personal data to any third party without notifying you and, where necessary, obtaining your consent.
9. Sharing Personal Data Internationally
Your personal data may be used, stored and/or accessed by staff operating outside the EEA or the UK working for us, other members of our group or our trusted third parties.
If we provide any personal data about you to any such non-EEA and non-UK members of our group or trusted third-parties, we will take appropriate measures to ensure that the recipient protects your personal data adequately, such as:
a) ensuring that there is an adequacy decision by the European Commission in the case of transfers out of the EEA or by the UK Government in the case of transfers out of the UK;
b) having in place standard model contractual arrangements with the recipient which have been approved by the European Commission (or the UK Government for transfers out of the UK);
c) any other safeguarding mechanism permitted by law.
10. How We Protect Your Personal Data
We understand that the security of your personal data is important. We make our best efforts to protect your personal data from misuse, interference, loss, unauthorized access, modification or disclosure. We have implemented a number of security measures to help protect your personal data, and we require that trusted third parties who handle your personal data for us do the same. For example, we implement access controls, use firewalls and secure servers, and we encrypt personal data.
In the course of provision of your personal data to us, your personal data may be transferred over the internet. Although we make every effort to protect the personal data which you provide to us, the transmission of information over the internet is not completely secure. As such, you acknowledge and accept that we cannot guarantee the security of your personal data transmitted to our website and that any such transmission is at your own risk. Then, once we have received your personal data, we will use strict procedures and security features to prevent unauthorized access to it.
Where you have chosen a password which enables you to access your online account, you are responsible for keeping this password confidential.
11. How long we store your personal data
We keep your personal data for no longer than necessary for the purposes for which the personal data is processed. The length of time for which we retain personal data depends on the purposes for which we collect and use it, for the duration of your contractual relation with us and/or as required to comply with applicable laws and regulations as well as to establish, exercise or defend our legal rights.
For example, where you register for an event, we will keep the personal data related to your registration, so we can perform the specific contract you have entered. After that, we will keep the personal data for a period which enables us to handle or respond to any complaints, queries or concerns relating to the purchase or registration.
After the established deadlines, the data is either deleted or retained after being anonymized, especially for statistical purposes. It should be noted that deletion or anonymization are irreversible operations, and that Danone is no longer able, thereafter, to restore this data.
12. Your rights
Where we process your personal data, you are entitled to a number of rights established in the relevant applicable laws and can exercise these rights at any point. We have provided an overview of these rights below together with what this entails for you. You can exercise your rights by contacting us here [Link].
We will consider all such requests and, in accordance with the applicable laws, will provide our response within a reasonable period, or within the period prescribed by law. Please note, however, that we may rely on certain exemptions to complying with your requests in certain circumstances, for example if we need to keep using the information to comply with our own legal obligations or to establish, exercise or defend legal claims. If an exemption applies, we will tell you this when responding to your request.
We may request you provide us with information necessary to confirm your identity before responding to any request you make.
The right to be informed
You have the right to obtain clear, transparent and easily understandable information about how we use your personal data, and your rights. This is why we are providing you with the information in this Privacy Statemen.
The right to access your personal data and correction
You have the right to access the personal data we hold about you, as well as correct, update or complete it at any time.
The right to deletion of your personal data
You have right to request that we delete your personal data. However, this is not an absolute right and we may have legitimate, legal and regulatory reasons to retain your personal data.
The right to object
Under certain circumstances, you have the right to object to certain types of processing based on grounds relating to your particular situation when such processing is based on our or another's legitimate interest. If you exercise this right, we will stop using your personal data for this purpose, unless we can demonstrate compelling legitimate grounds to continue processing your personal data that would outweigh your interests, rights and freedoms. You have the right to object to the processing of your personal data for direct marketing activities (for example, by clicking on the unsubscribe link in our emails).
The right to withdraw consent
Where we rely on your consent to process personal data, you have the right to withdraw consent at any time, without affecting our processing of your personal data before you withdrew consent.
The right to restriction of processing
Under certain circumstances you have the right to restrict the processing of your personal data if:
1. you do not believe the personal data we have about you is accurate; or
2. you consider that the personal data is not being processed lawfully, but instead of deleting the personal data, you would prefer us to restrict processing instead; or
3. we no longer need your personal data for the purposes we collected it, but you require the data in order to establish, exercise or defend legal claims; or
4. you have objected to the processing of your personal data and are awaiting verification on whether your interests related to that objection outweigh the legitimate grounds for processing your data.
The right to data portability
Your personal data is portable. This means it can be moved, copied or transmitted electronically. However, this right only applies to personal data you have provided to us and where the processing: (i) is based on your consent or takes place for the performance of a contract; and (ii) it takes place by automated means.
The right to lodge a complaint with a supervisory authority
If you think that we have not met the data protection or privacy requirements, you have the right to make a complaint to the data protection authority in the country where you usually live or work, or where an alleged infringement of applicable data protection laws has taken place.
If you want to bring a specific complaint against Danone for the way your personal data has been processed or if you are not able to resolve a problem directly with us, you can raise a complaint directly with the UK Information Commissioner’s Office https://ico.org.uk/for-the-public.
UK Information Commissioner’s Office
Mailing Address: Wycliffe House Water Lane, Wilmslow, Cheshire SK9 5AF
Phone Numbers: +44 303 123 1113
Email Address: casework@ico.org.uk
You can also contact our Data Protection Officer directly at DPO.UKIE@danone.com.
13. How to contact us
If you have any questions, comments or complaints regarding this Privacy Statement or the processing of your personal data, please contact us via our contact page or write to us at Data Protection Office, Nutricia Limited, Newmarket House, Newmarket Avenue, White Horse Business Park, Trowbridge, Wiltshire, BA14 0XQ.
You can also contact us via DPO.UKIE@danone.com .
Finally, you can contact our Group Data Protection Office via email at dpo.group@danone.com or write to us at Data Protection Office, Danone SA, 17 Boulevard Haussmann, 75009, Paris, France.
14. Changes to our Privacy Statement
We may update our Privacy Statement from time to time (for example, to comply with changes in laws or regulations, our practices, procedures and organizational structures, requirements imposed or recommended by supervisory authorities or otherwise). Any changes we make to our Privacy Statement in the future will be posted on this page and will be applicable on the effective date of implementation. Where we are legally required to do so, we will notify you of any changes. Please check back frequently to see any updates or changes to our Privacy Statement.
This Privacy Statement was last updated 25 September 2023.