PRIVACY POLICY Effective
Date 01-08- 2022
Thank you for visiting our website. Jacobs Douwe Egberts (“JDE”) is committed to protecting the privacy of those who visit our website. Please read the following policy carefully.
JDE (Jacobs Douwe Egberts Coffee Trade GR EPE, Kymis Ave. & Seneka 10 Str., 145 64, Kifisia, Athens, Greece ) (“We”), with the brands (Jacobs, Douwe Egberts, LOR, Maxwell House, Bravo , La Meloise, Tassimo, Illy, Natreen) is the Controller of your personal data, which means that we are responsible for how your personal data is processed. "We", "Us", "Our" and "JDE", whether capitalized or not, means JDE on its own behalf and its subsidiaries and affiliates operating as a brand of JDE and the each of their respective officers, directors, members, employees, agents, representatives, successors and assigns.
This Privacy Policy explains how and why we collect, store, process and share your personal data. It applies to all your personal data that we collect on our website, when you visit our company offices, when you contact us (including through customer service, a social media platform and other means) or interact with us in other ways .
This Privacy Policy includes references to the European Union's General Data Protection Regulation (GDPR) and may therefore contain references that do not apply in your particular country or jurisdiction. Where corresponding provisions apply under your national law, you may assume them for the purposes of this Policy.
In addition, some jurisdictions may prohibit or restrict the collection, use or disclosure of certain categories of personal data: accordingly, this Privacy Policy describing our practices may be limited by those laws and/or further clarified in any country-specific chapters that will apply to you under this Policy.
We may amend this Policy from time to time. Please refer to this Policy regularly to be informed of our processing activities.
Table of Contents
- Collection and Use of Your Personal Data
- How We Share and Disclose Personal Data
- Advertising and Marketing
- Retention Periods
- Cookies
- Embedded Videos
- Captcha
- Processing of Data in Social Media
- Data Security
- Your Rights as a Data Subject
- Contact Details of our Data Controller
1. Collection and Use of Your Personal Data
In the following section you will find information on how we collect your personal data, for what purposes we process your data, on what legal basis this is done and for how long we keep your data.
A legal basis for processing your data will arise when one or more of the following conditions apply:
- Consent: You have given us your consent to use your data, which you can withdraw at any time, Article 6 (1) (a) GDPR.
- Contract: You have entered into or are about to enter into an agreement with us and your data is needed to provide you with the products or services you request, Article 6 (1) (b) GDPR.
- Legal obligation: We may be obliged to process your data to fulfill certain legal obligations such as reporting under tax or employment law, Article 6 (1) (c) GDPR.
- Legitimate interest: We may use your data because we have – or a third party has – a legitimate interest in taking this action. This only happens in cases where we consider that the way we use your data does not significantly affect your privacy, that you could consider this processing to be expected or there is a significant reason to do it, Article 6 (1) (F) of the GDPR .
For JDE Business Customers, see the table below "JDE's Processing of Business Data" for more information on how we process your data.
|
How we collect data |
What data is collected |
Use and legal basis |
Clear data |
|
When you visit our website |
We collect your browser type, operating system, error history and other similar information about your visit to our website such as: - the date and time of a request, - the amount of data transferred, - the access status (content transferred or not found), - the referral link from which website you came to ours, - the IP address in short form (to avoid personal reference)
The aforementioned historical data will only be evaluated in an anonymous manner.
We may also collect additional information (including which links you click, which pages or content you view and for how long, and other similar statistics about your actions) from cookies, trackers, web beacons, and other means of individual identification.
Our cookie banner allows you to decide whether we can collect this data. Please see our cookies section for more information on how we use cookies, trackers and other similar technologies. |
The data is used to remember your preferences regarding the website, language and options regarding cookies. They also make the website easier to use and may help us deliver personalized advertising based on your preferences.
The legal basis is our legitimate interest in improving our services or your consent where required. |
The duration of data storage from your cookies may vary depending on the type of cookie used. See our section on cookies in Chapter 5 below for more information. |
|
When you register / create an account in our online store |
If you register for an online store account, we process your registration information as set out in the registration process.
If we collect additional data during this process, it will be referred to as optional and the processing is based on your consent in accordance with Article 6 (1) (a) of the GDPR. |
This data is used to perform the contract as requested, based on Article 6 (1) (b) GDPR. You can delete your account at any time through the "My Account" function in the relevant online store or by contacting Customer Service through the details on any JDE website.
The legal basis is your consent, which you can withdraw at any time. |
Your account data is stored until you delete your account through My Account or Customer Service. accounts in the online store are automatically deleted if 5 years pass without any visit or order. |
|
When you make a purchase in our online store |
We collect your purchase details, e.g. name, email address, billing and shipping address, and payment method.
When we receive your email address in the context of selling or negotiating the sale of a product or service, we may use it for direct marketing of our own similar items or services, unless you have objected to the processing. You can object to this processing easily at the point of data collection using the unsubscribe link provided in each promotional email. |
This data is used to process your order in accordance with the purchase contract.
The legal basis is the contract with us and the fact that your data is needed to provide you with the required products or services as requested under Article 6 (1) (b) GDPR.
The legal basis for data processing is our legitimate interest in being able to promote the sale of our goods and services under Article 6 (1) (F) of the GDPR. |
Deletion of data: collected data will be kept for up to 10 years after the last purchase OR according to local storage obligations. |
|
When you subscribe to our newsletter or other promotional communications |
We collect your name, email address and advertising preferences (where applicable).
We may ask you to agree to further tracking of newsletters, which allows us to recognize when you open the newsletter and to ascertain when you clicked on a specific link within the newsletter. Along with the above data, we also collect your full IP address at the time of registration or confirmation for the newsletter, as well as a copy of the confirmation message sent by us. |
These are used to send JDE newsletters and contact you about offers, products, events and surveys via email and social media. The legal basis is your consent, which you can withdraw at any time via the Preferences Center or the unsubscribe link in each email.
When necessary, we use this data as proof of your registration for the newsletter.
The legal basis for data processing is our legitimate interest in being able to document the legality of sending the newsletter, in accordance with Article 6 (1) (F) of the GDPR.
For more information on our processing of Marketing and Advertising see Chapter 3 below. |
Your data and preferences are stored until you withdraw your consent. Your details will be automatically deleted if there has been no response from the customer for 24 months. *Customer response includes placing an order, clicking on an email from JDE and opening it . |
|
When you visit our offices |
We collect your full name, business details and other details about your visit. |
We use these to keep track of visits and support the security of our partners and sites.
The legal basis is our legitimate interest in the safety of our partners and premises. |
Your data will be held in accordance with local obligations. Please contact your local JDE subsidiary or our Data Protection Officer for more information. |
|
When you contact us (via Customer Service, email, social media or other means) |
We collect your name, email address, account information and other information necessary to process your request.
If you contact us by telephone, we may also collect recordings of your call, which you will be informed about, with the possibility to object. |
The data is used to respond to customer service requests. When calls are recorded, the data is used for training and customer service purposes.
The legal basis is our legitimate interest to improve customer service and train staff or your consent where required.
When you contact us about a service or a query about or before a contract, your data will also be stored in our Customer Relationship Management System. The legal basis is the necessity of processing your data in order to provide you with the required information, services or products as requested, based on Article 6 (1) (b) GDPR. |
Personal data processed by Customer Service is deleted 6 months after the resolution of the issue for which it was collected.
We delete your data as soon as it is no longer required for further communication or the contractual relationship with you and there are no further legal data retention obligations outstanding. |
|
When you sign up for our Loyalty Program |
We collect your username, registration information and any other information you decide to optionally share on the program pages. |
This data is used to provide you with the required loyalty program services.
The legal basis is your consent, which you can withdraw at any time. |
Loyalty program data is retained until your account is deleted. To remove your account, please contact Customer Service. Your DE frequent customer account will be deleted if you no longer have points in your account and also you have not logged into your account in the last 5 years. Your Maison du Café account will be deleted if you have not logged in for 1 year. |
|
When you participate in our polls, surveys, contests and sweepstakes or rate our products or services. |
We collect your name, your company name (where applicable), your email address, your opinions and other information that you voluntarily provide. |
Where we use this data to promote our services or products, the legal basis of the processing will be your consent, which you can withdraw at any time. |
The retention period may vary depending on the activity you engage in. Please read official announcements or details of relevant contests or promotions for more information. |
ADDITIONAL INFORMATION ON THE PROCESSING OF PERSONAL DATA BY JDE
|
How we collect data |
What data is collected |
Use and legal basis |
Clear data |
|
When you register / create an account in our online store |
We collect your account registration information as provided in the registration process.
If we collect additional data during this process, it will be referred to as optional and the processing is based on your consent in accordance with Article 6 (1) (a) of the GDPR. |
This data is used to perform the contract as requested, based on Article 6 (1) (b) GDPR. |
Your account data is stored until you cancel your account through Customer Service. Account data in the online store is retained in accordance with local data retention regulations. |
|
When you make a purchase in our online store |
We collect your purchase details, e.g. name, email address, billing and shipping address, and payment method.
When we receive your email address in the context of selling or negotiating the sale of a product or service, we may use it for direct marketing of our own similar items or services, unless you have objected to the processing. You can object to this processing easily at the point of data collection using the unsubscribe link provided in each promotional email. |
This data is used to process your order in accordance with the purchase contract.
The legal basis is the contract with us and the fact that your data is needed to provide you with the required products or services as requested under Article 6 (1) (b) GDPR.
The legal basis for data processing is our legitimate interest in being able to promote the sale of our goods and services under Article 6 (1) (F) of the GDPR. |
Account data in the online store is maintained in accordance with local data retention regulations. |
|
When you enter into a contract with us (online or offline) |
We collect your purchase details, e.g. name, email address, billing and shipping address, and payment method.
When we receive your email address in the context of selling or negotiating the sale of a product or service, we may use it for direct marketing of our own similar items or services, unless you have objected to the processing. You can object to this processing easily at the point of data collection using the unsubscribe link provided in each promotional email. |
This data is used to process your order in accordance with the purchase contract. The legal basis is the contract with us and the fact that your data is needed to provide you with the required products or services as requested under Article 6 (1) (b) GDPR.
The legal basis for data processing is our legitimate interest in being able to promote the sale of our goods and services under Article 6 (1) (F) of the GDPR. |
Contract data will be retained for the duration of our contractual relationship taking into account customer categories and local legal data retention requirements. |
|
When you subscribe to our newsletter or other promotional communications |
We collect your name, email address and advertising preferences (where applicable).
We may ask you to agree to further tracking of newsletters, which allows us to recognize when you open the newsletter and to ascertain when you clicked on a specific link within the newsletter. Along with the above data, we also collect your full IP address at the time of registration or confirmation for the newsletter, as well as a copy of the confirmation message sent by us. |
These are used to send JDE newsletters and contact you about offers, products, events and surveys via email and social media. The legal basis is your consent, which you can withdraw at any time OR our legitimate interest (where applicable).
You can object to this processing via Customer Service or via the unsubscribe link in each email.
When necessary, we use this data as proof of your registration for the newsletter.
The legal basis for data processing is our legitimate interest in being able to document the legality of sending the newsletter, in accordance with Article 6 (1) (F) of the GDPR. |
Your data and preferences are stored until you withdraw consent and in accordance with JDE's data retention schedules. |
|
When you contact us through Customer Service |
We collect your name, email address, account information and other information necessary to process your request.
If you contact us by telephone, we may also collect recordings of your call, which you will be informed about, with the possibility to object. |
When you contact us about a service or a query about a contract or before it, your data will also be stored in our Customer Relationship Management System. The legal basis is the necessity of processing your data in order to provide you with the required information, services or products as requested, based on Article 6 (1) (b) GDPR. |
We delete your data as soon as it is no longer required for further communication or the contractual relationship with you and there are no outstanding local legal data retention obligations. |
To object to the processing of your data in case of legitimate interest processing OR to withdraw your consent to the processing of your data, please visit the JDE Preferences Center, click on the "unsubscribe" link in any promotional email or contact us at the email address listed at the end of the message.
2. How We Share and Disclose Personal Data
We will not sell, share, transfer or otherwise disseminate your Personal Data to third parties unless:
- Required by law pursuant to Article 6 (1) (c) GDPR,
- Required for the purposes of your contract in accordance with Article 6 (1) (b) GDPR,
- The third party acts as a data controller on our behalf, in accordance with Article 28 of the GDPR, as a Joint Controller in accordance with Article 26 of the GDPR or you have given us your explicit consent in accordance with Article 6 (1) (a) of the GDPR or Article 49 (1) (a) of the GDPR, where applicable.
2.1. Data Transfers
We may transfer your data for legal reasons or in the event of a merger or acquisition. In the event that a JDE entity or its assets are acquired by or merged with another company, including through bankruptcy, we will share your personal data with any of our legal successors.
We will also disclose your personal data to third parties (i) when required by applicable law, (ii) in the context of legal proceedings, (iii) in response to a request from a competent security body, (iv) to protect rights, our privacy, safety or property, or that of the public, or (v) to enforce the terms of any agreement or the terms of our website.
2.1.1. All transfers of personal data will be made in accordance with applicable privacy regulations and in compliance with JDE's internal policies.
Transfers to service providers:
We use third-party service providers to provide or facilitate services on our behalf, and we share your Personal Data with those providers to the extent necessary for them to provide their services on our behalf.
- Payment processing: we use payment processing services to bill you for goods and services and to process credit card payments;
- Fulfillment of orders: we use different shipping and delivery companies to fulfill orders, depending on the product and location,
- Customer Service: we use multiple customer service providers to facilitate customer service,
- Online Service Providers: for our CRM system and an external provider for hosting our websites,
- Marketing and Advertising: we work with advertising companies such as Havas Media to implement our social media and other advertising campaigns.
We work with companies for interest-based advertising and also use identifiers to help us recognize our customers on our various websites, on our partners' websites and in their stores. We also work with ad networks and other advertising service providers (“Ad Service Providers”) who serve advertisements on behalf of us and other unaffiliated companies online. Some of those advertisements may be tailored to your interests based on information collected on JDE websites or on non-affiliated websites over time.
Privacy policies for all of the above can be found on the companies' websites. JDE is not responsible for the policies of third party service providers.
2.2. Transportation outside the EU and of E.O.H.
Please note that in relation to the transfer of personal data outside the EU or the European Economic Area (EEA), there is a risk that local authorities may gain access to the data for security and surveillance purposes without notifying you or allowing you to take legal action .
In order to grant adequate protection of your personal data in this context, all the above data transfers are covered under an appropriate legal transfer mechanism such as an eligibility decision pursuant to Article 45 of the GDPR or standard data protection terms adopted by the European Commission in accordance with Article 46 (2) (c) of the GDPR.
When you consent to the transfer of your data in accordance with Article 49 of the GDPR to our suppliers or partners (such as Google, Facebook, YouTube) in the United States, please note that there is a risk of unauthorized processing or access by local authorities to your data and that you may not be able to effectively protect your rights in the US. You can withdraw your consent to this transfer and processing of data at any time by changing your cookie preferences through the cookie banner or through the JDE Preference Center .
3. Advertising and Marketing
If we have your consent, where required, we use your personal data for advertising, marketing customization and targeting. We may serve ads to target partner websites and their stores, and use digital services to manage our social media and other advertising campaigns.
We may use your e-mail address with some hidden characters and other identifying information such as name, location, phone number, and web browsing behavior with our promotional partners, publishers, and other third-party service providers to help target our ads on their websites, apps or social networks. We may also use this service to reach new target audience segments that are similar to our existing customers based on their characteristics and other identifying information.
Personalized Audience Segments: We and our partners may also compare demographic information such as interests and social connections to identify groups based on an advanced automated technique of determining similarities in their profiles. This process can be done in real-time and matching can be done regardless of the device you are using.
This is done by uploading an encrypted customer directory to a third party website or by incorporating a third party's tracking technology into our website. The third then matches people who appear in both our data and theirs. Because of the way this authentication process works, the third party cannot read our encrypted customer directory if they do not already have it.
We use the personalized audience identification functions of Facebook, Google, LinkedIn and other social networks to identify personal data with the data of the users of the platform, which the social network already controls in order to offer targeted advertising to relevant audiences.
JDE has no influence on the advanced identification processes or on which data is evaluated by the third party for the purpose of creating these reference groups.
You can choose to opt out of the use of these personalized cookies, pixels and similar technologies through the cookie banner on our website, by using ad blockers in your browser, or by managing your privacy settings on social networking platforms. .
If you decide that you no longer wish to receive such communication based on personalized audience segments, you may unsubscribe by following the instructions provided in each such communication or by adjusting the privacy settings on the relevant social media platform.
Personalization (offline and online). With your consent (where required), we may use your personal data ( including your JDE transactions and your online interests ) to analyze your preferences and habits, predict your needs based on your profile analysis on our behalf, to improve and personalize your experience on our website and to provide you with targeted advertising and content.
You may choose to opt out of processing your personal data for this purpose by changing your cookie preferences through our cookie banner or by following the instructions provided in any such promotional communication.
3.1. Affiliate and Affiliate Ads
We use personal data to send you information (eg promotional communications and advertisements) about our products and services and those of our partners. Some of these communications or advertisements operate on third-party websites and/or social networks. Where required, we will obtain your consent before sending or displaying such information, emails or advertisements to you.
You can withdraw your consent or object to the processing of your personal data for these purposes by changing your cookie preferences through our cookie banner or by following the instructions provided in any such promotional communication.
Processing for advertising and promotion as mentioned above may be done by affiliates, advertising partners or other third parties. Some of these companies and the third parties may be located in the US and other countries outside the European Union (EU) or the European Economic Area (EEA). To provide adequate protection of your personal data in this context, all the above data transfers are covered by the appropriate legal transfer mechanisms such as the Standard Data Protection Terms adopted by the European Commission under Article 46 (2) (c) of the GDPR , an Eligibility Decision of the European Commission or your consent under Article 49 of the GDPR.
Where the data is processed outside the E.U. or the EEA based on your consent (based on Article 49 (1) (a) of the GDPR), please note that there is a risk of unauthorized processing of your data or access to it by local authorities and that you may not be able to effectively exercise your rights. You can withdraw your consent to this data transfer and processing at any time by changing your cookie preferences through our consent banner, which you can access via, or through the JDE Preferences Center .
More information about advertising and targeting cookies and tracking processing can be found below in the section on cookies or in the respective provider's Privacy Policy.
4. Retention Periods
Unless otherwise stated in this policy text, we will delete your personal data if it is no longer needed for the respective processing purposes and there are no legal retention obligations that prevent deletion.
5. Cookies
How to manage your cookie preferences OR withdraw your consent
You may withdraw your consent or object (“opt-out”) to the placement of any cookies by adjusting your cookie settings at any time through our consent banner, accessible through.
5.1. Cookies and Tracking Technologies
JDE and our third party partners use cookies and similar technologies such as pixels, tags, web beacons and similar technologies (“cookies”) and other means of identification to provide you with the best possible service and to optimize the performance of our website. These cookies can also help us remember our preferences, understand user interactions, and personalize our website and advertising communications.
Please note that using third-party content and features may result in your data being processed outside the EU or EEA. In some countries, such as the US, there is a risk that authorities may gain access to your data for security and surveillance purposes without notifying you or allowing you to take legal action.
Where we use service providers or work with third parties in countries outside the EU or EEA, without an adequate level of protection and you provide your consent to the processing, the transfer to that country outside the EU or EEA is based on Article 49 (1) (a ) of the GDPR.
More information on our use of cookies and that of third party partners and/or suppliers with whom we work is available below in the "Cookie Information" section.
5.2. Information about Cookies
Updated information about cookies and the respective suppliers is available on the cookie banner.
5.2.1. Strictly Necessary Cookies
These cookies are necessary for the website to function and cannot be disabled in our systems. They are typically placed only in response to actions of yours that constitute a service request, such as setting your privacy preferences, logging in, or filling out forms. You can set your browser to block these cookies or notify you about them, but some parts of the website will no longer work.
These cookies usually do not store any personal data. In the exceptional case that these cookies enable a personal reference, the processing is based on a legitimate interest.
|
Cookie/ Provider |
Purpose |
Storage Period |
Data Protection Level |
|
One Trust |
Consent Management Platform |
Data is retained for 1 year or sooner if cookies are deleted from the device or consent is withdrawn. |
Processing within the EU/EEA |
|
Google USA |
Provision of Google Tag Manager that facilitates tag management for tracking, website statistics, promotions, etc. |
Google Tag Manager does not collect, maintain or share any information about visitors. |
No adequate level of data protection. The data is transferred on the basis of Article 49 (1) of the GDPR. |
5.3. Functional Cookies
Functional cookies allow our website to remember the choices you made, improve your experience and improve the speed and efficiency of response by storing certain frequently accessed information. For example, they help us remember your display preferences (e.g. language, font size), the contents of your shopping cart, store your login information, make the website a perfect fit for your device, or we remember a search term or filter you used. You can choose not to allow some of these cookies, however this may affect your experience on the website and the services we can provide.
The legal basis is your consent under Article 6 (1) (a) GDPR or our legitimate interest where appropriate.
|
Cookie/ Provider |
Purpose |
Storage Period |
Data Protection Level |
|
Amazon AWSALBCORS |
This cookie is managed by AWS and is used for load balancing. |
7 days |
AWSALB cookies are encrypted and do not contain any personally identifiable information. |
|
Amazon AWSALB |
AWS ELB load balancing application |
7 days |
AWSALB cookies are encrypted and do not contain any personally identifiable information. |
5.4. Analysis Cookies
These cookies collect aggregate information about how you use our website. We use them for website statistics, to identify and count regular visitors, to help our online offer, and to test different design ideas for specific pages. These cookies help us see how effective our ads are and make our promotions more relevant, as well as improve your experience.
This works by allowing us to temporarily store cookies and/or session cookies on your end device, which we can access to identify your browser or device (eg, your browser fingerprint or unaltered IP address). .
The legal basis for this data processing is your consent in accordance with Art. 6 (1) (a) of the GDPR if you have given your consent via our consent banner, which is accessible via.
Where permitted by national law, this data processing is based on our legitimate interests under Article 6 (1) (F) of the GDPR or other relevant local regulations. You can opt out of this processing at any time via our cookies banner.
Some of these analytics cookies may be placed by third-party companies located in the US, as indicated in the table below. So you consent to the transfer of your data (in accordance with Article 49 GDPR) to our suppliers or partners (such as Google) in the USA, please be aware that there is a risk of unauthorized processing of your data or access to it by local authorities and that you may not be able to effectively assert your rights in the US. You can withdraw your consent to this data transfer and processing at any time by changing your cookie preferences through our cookie banner or through the JDE Preference Center (retail only).
|
Third Party Provider |
Tools |
Maximum Storage Period |
Data Protection Level |
|
Google Ireland Limited/ Google LLC (USA) |
Google Analytics |
26 months |
No adequate level of data protection. The data is transferred on the basis of Article 49 (1) (a) of the GDPR. |
|
Hotjar Ltd. |
Hotjar |
12 months |
No adequate level of data protection. The data is transferred on the basis of Article 49 (1) (a) of the GDPR. |
5.5. Advertising Cookies and Tracking Technologies
We use these cookies to show you relevant ads based on a profile of your interests. These may be placed through our website by our advertising partners. Advertising cookies do not directly store personal information but are based on the unique identification of your browser and the device with which you connect to the internet. If you do not allow these cookies, you will see less targeted ads.
The legal basis for this data processing is your consent, which you can withdraw at any time in accordance with Article 6 (1) (a) of the GDPR.
We also use cross-device tracking technologies to help us analyze our marketing, create personalized audience segments, and show you targeted ads on other websites based on your visits to our websites.
We are not responsible for any third party's failure to comply with withdrawals of consent.
What does multi-device tracking mean?
If you log in to the third-party provider with your user data, the corresponding identification features from different browsers and different end devices can be connected to each other. For example, if the third party provider has created a unique identifier for each laptop, desktop computer, mobile smartphone or tablet you use, these unique identifiers can be linked to each other once you log into a third party service using your login details your. This allows the third party to target our advertising campaigns across multiple devices.
Behavioral Advertising
We also use technology to understand and map your interest in our products or to track it . We may use it to understand what you like best so that we can make our offers as relevant as possible. This may include your browsing behavior to create advertisements that recommend products that we think are best related to items you may have seen on our website. These ads are then served / displayed on other websites you may visit, usually news and video websites and blogs. This process is called behavioral advertising, and although the ads appear to be individually tailored to you, the data is based on anonymous analyzes and inferences that are cached.
Some of these cookies and technologies may be placed by third-party companies located in the US, as listed in the table below. When you consent to the transfer of your data (in accordance with Article 49 GDPR) to our suppliers or partners (such as Google, Facebook and YouTube) in the USA, please be aware that there is a risk of unauthorized processing or access to your data by local authorities and that you may not be able to effectively protect your rights in the US. You can withdraw your consent to this data transfer and processing at any time by changing your cookie preferences via the relevant banner or via the JDE Preference Center.
|
Third Party Provider |
Tools |
Purpose |
Maximum Storage Period |
Data Protection Level |
|
Facebook (US and/or Ireland) |
Facebook Custom Audience |
It allows us to track people's actions on our websites to create Facebook audience segments to create target groups and find new potential customers or look-alikes. |
The maximum amount of time data owners will stay in a Personalized Audience from our website or mobile app is 180 days. After 180 days, owners who were in the site's Personalized Audience will be removed from it unless they visit the site or app again. |
No adequate level of data protection. The data is transferred on the basis of Article 49 (1) (a) of the GDPR. |
|
Google LLC (USA) |
DoubleClick Floodlight/ DoubleClick/ GA Audiences |
DoubleClick Floodlight allows us to track and report on the actions of users who visit our website after viewing or clicking on advertisements and to report on the effectiveness of a campaign.
DoubleClick allows us to optimize ads based on website behavior, user characteristics and interest in digital ads. It helps manage digital campaigns across multiple websites and mobile devices.
GA Audiences allows us to create audience segments in Google Analytics for new promotions and to reach people who were previously associated with our products or services. |
IP addresses are anonymized after 9 months and data in cookies is anonymized after 18 months. |
No adequate level of data protection. The data is transferred on the basis of Article 49 (1) (a) of the GDPR. |
|
Provision of Content |
YouTube is a Google-owned video hosting and sharing platform. YouTube collects user data through videos embedded on websites, which is then combined with profile data from other Google services to show targeted ads to website visitors on a wide range of their websites and other websites. |
IP addresses are anonymized after 9 months and data in cookies is anonymized after 18 months. |
No adequate level of data protection. The data is transferred on the basis of Article 49 (1) (a) of the GDPR. |
|
|
VISITOR_INFO1_LIVE |
This cookie is used as a unique means of identification to detect watching videos. |
180 days |
No adequate level of data protection. The data is transferred on the basis of Article 49 (1) (a) of the GDPR. |
|
|
YSC |
YouTube is a Google-owned video hosting and sharing platform. YouTube collects user data through videos embedded on websites, which is then combined with profile data from other Google services to show targeted ads to website visitors on a wide range of their websites and other websites. |
One session |
No adequate level of data protection. The data is transferred on the basis of Article 49 (1) (a) of the GDPR. |
|
|
Teads Altice International Sarl |
Advertising |
Teads is the platform used to filter the delivery of ads based on the user's profile, such as their interests, their location, the device they use or the content of the page, and avoid showing the same ad to the same visitor website multiple times. |
12 months |
Sufficient – supplier within the EU |
|
Yotpo Ltd. USA |
Yotpo |
Ratings and Reviews |
Unlimited |
None sufficient level of data protection. The data is transferred on the basis of Article 49 (1) (a) of the GDPR. |
6. Embedded Videos
On our websites, we embed videos that are not hosted on our servers. To ensure that accessing our web pages containing embedded videos does not automatically lead to the download of third-party content, we only display the locally hosted images from the video ad views as a first step. Therefore, the third party provider does not receive any information.
Content is downloaded from the third party provider only after you click on the ad display image. This provides the third party with the information that you have accessed our website and the usage data that is technically required for this purpose. In addition, the third party provider may then use tracking technologies. We have no influence on further data processing by the third party provider. By clicking on the ad display image, you consent to us downloading content from the third party provider.
The integration is based on your consent in accordance with Article 6 (1) (a) of the GDPR, if you have given your consent by clicking on the image of the advertising display. Please note that embedding multiple videos leads to the processing of your data outside the EU. or the EEA. In some countries, such as the US, there is a risk that authorities may gain access to your data for security and surveillance purposes without notifying you or allowing you to take legal action. Where we use providers in third countries without an adequate level of protection and you provide your consent, the transfer to that third country is based on Article 49 (1) (a) GDPR.
|
Third Party Provider |
Data Protection Level |
Withdrawal of Consent |
|
No adequate level of data protection. The data is transferred on the basis of Article 49 (1) (a) of the GDPR. |
If you tap on a display image, the third-party content is downloaded immediately. To withdraw your consent, please change your settings via our banner in accordance with Chapter 3 above. |
|
|
No adequate level of data protection. The data is transferred on the basis of Article 49 (1) (a) of the GDPR. |
If you tap on a display image, the third-party content is downloaded immediately. To withdraw your consent, please change your settings in accordance with Chapter 3 above. |
7. Captcha
To protect the forms on our website from automated requests, we use the Google reCAPTCHA system from Google LLC. With captcha functionality, you may be asked to take a specific action or click on certain squares. User input in this context and, if necessary, mouse movements are used to determine whether the actions are performed by a human or an automated program.
Because the Captcha function is provided by a third party, displaying the captcha will result in the download of third party content. This provides the third party with the information that you have accessed our website and the usage data that is technically required for this purpose. We have no influence on further data processing by the third party provider.
The legal basis for this data processing is your consent in accordance with Article 6 (1) (a) of the GDPR. You give your consent by using the forms on our website protected by reCAPTCHA. A corresponding indicator appears on these pages.
Please note that the use of the Captcha function may lead to the processing of your data outside the EU. or the EEA. In some countries, there is a risk that the authorities may access the data for security and surveillance purposes without notifying you or allowing you to take legal action. Where we use providers in third countries without an adequate level of protection and you provide your consent, the transfer to that third country is based on Article 49 (1) (a) GDPR.
8. Processing of Data from Social Networks
8.1. Extras
On our website, we may allow the use of plugins from social media such as Facebook, Twitter, Instagram and YouTube. However, for data protection reasons, we integrate these social network plugins only in a disabled form. Therefore, when you visit our websites, no data is transmitted to the social networking services unless you activate the respective social networking plugin by clicking on the display image or the image linked to the specific social networking platform.
If you click on an add-on, the social networking platform receives information about your visit to our websites. This happens regardless of whether you have a registered account with the respective social network service. If you are logged in, the data can be integrated directly into your social network profile. They may also use this information to create usage profiles based on your data and use it for personalized advertising.
JDE is not responsible for the privacy policies or practices of third parties. When you activate or connect to another website or platform, you should read that website or platform's privacy policy.
The legal basis for this integration is your consent under Article 6 (1) (a) GDPR if you have given your consent by clicking on the display image. Please note that the integration of many social networking plugins means that your data is processed outside the EU. or the EEA. In some countries, there is a risk that authorities may access the data for security and surveillance purposes without you being informed or having the right to appeal.
If we use providers in third countries without an adequate level of protection and you provide your consent, the transfer to this third country is based on Article 49 (1) (a) GDPR.
If you no longer wish to have your data processed by activated social network plugins, you can prevent future processing by not clicking on the display image or the corresponding plugin image.
8.2. Social media
JDE, together with the provider of the social networking platform (the Platform Provider), is jointly responsible, as data controller, for the processing actions concerning your data. In this context, the platform provider mainly determines the purposes and means of the processing actions, which we can only influence to a limited extent. To the extent that we can influence or regulate the processing of your data, we will take steps, to the best of our ability, to ensure that the platform provider processes your data in compliance with applicable data protection regulations.
We are present on the following social networking sites:
- Twitter: [https://twitter.com/
- Facebook: [https://www.facebook.com/
- YouTube: [https://www.youtube.com/user/
- Pinterest: [https:// www.pinterest.com/
- Instagram: [https://www.instagram.com
- Snapchat: https://www.snap.com
- LinkedIn: https://www.linkedin.com
- TikTok: https:// www.tiktok.com
Some of these social networking platforms are located outside the EU. or the EEA and therefore there is a risk that non-EU authorities or EEA access your data for security and monitoring purposes without you being informed or having the right to appeal. Whenever these platforms are located in third countries without an adequate level of protection and you provide your consent, the transfer to this third country is based on Article 49 (1) (a) GDPR.
8.2.1. Processing of Data from Social Networking Media
The data you provide directly to our social media pages, such as comments, videos, images, likes, tweets, etc. are published by the social media platform. The processing on our part is based on Article 6 (1) (F) of the GDPR, which refers to processing carried out for our legitimate interest.
As part of this processing, we may:
- To communicate with you via the social networking platform,
- Share your content on any of our social media pages, as well as on our website;
- To allow you to participate in contests and/or sweepstakes.
8.2.2. Processing of Data by the Social Networking Platform Provider
We use many social networking platforms and features on our websites. In particular, we use Facebook Connect, a single sign-on application that allows users to interact on other websites through their Facebook accounts.
The provider of the social networking platform uses online tracking methods. Tracking may occur regardless of whether you are logged in or registered with the social networking platform. Unfortunately, we cannot influence or limit the online tracking methods of the social networking platform.
Please be aware that the platform provider may use your profile and behavioral data to evaluate, among other things, your habits, personal relationships and preferences. We have no influence on the processing of your data by the platform provider.
Please refer to the platform provider's privacy policies for more information on the purposes and extent of data collection and analysis undertaken by the social network, as well as your options to change settings and how to protect your privacy.
- Twitter: https://twitter.com/en/privacy
- Facebook: https://www.facebook.com/privacy/explanation
- YouTube: https://www.youtube.com/intl/en-GB/about/policies/#community-guidelines
- Pinterest: https://policy.pinterest.com/en
- Instagram: https://help.instagram.com/519522125107875
- TikTok: https://www.tiktok.com/legal/privacy-policy
9. Data Security
We take measures at a technical and organizational level to protect your personal data as much as possible from unauthorized access. These measures include encryption procedures on our websites. your data is transmitted from your computer to our server and vice versa over the internet using TLS encryption.
You can recognize this by the lock icon in your browser's status bar and the address bar starting with https://.
10. Your Rights as a Data Subject
The GDPR gives you certain rights as a data subject, including:
|
Rights |
Explanation |
|
Right of access (Article 15 GDPR) |
You have the right to receive confirmation as to whether personal data concerning you is being processed. if this is the case, you have the right to be informed about this personal data and to receive the information defined in Article 15 of the GDPR. |
|
Right to rectification (Article 16 GDPR) |
You have the right to have inaccurate personal data concerning you corrected and taking into account the purposes of the processing, the right to complete incomplete personal data, and by providing a supplementary statement without delay. |
|
Right to erasure (Article 17 GDPR) |
You have the right to have your personal data deleted without undue delay if one of the reasons listed in Article 17 of the GDPR applies. |
|
Right to restriction of processing (Article 18 GDPR) |
You have the right to request the restriction of processing if one of the conditions referred to in Article 18 of the GDPR is met, e.g. if you have objected to the processing. |
|
Right to data portability (Article 20 GDPR) |
In certain cases, which are detailed in Article 20 of the GDPR, you have the right to receive your personal data in a structured, commonly used and machine-readable format, or to request that this data be transferred to a third party. |
|
Right to withdraw consent (Article 7 GDPR) |
If data processing is based on your consent, you have the right to withdraw your consent to the use of your personal data at any time in accordance with Article 7 (3) GDPR. Please note that the revocation is only valid for the future. Any processing done before the revocation is not affected. |
|
Right to object (Article 21 GDPR) |
If the data is collected on the basis of Article 6 (1) (F) of the GDPR (data processing for our legitimate interests) or on the basis of Article 6 (1) (e) of the GDPR (data processing for the purpose of protecting the public interest or against the exercise of official authority), you have the right to object at any time to the processing for reasons relating to your particular situation. We will then no longer process the personal data unless there are compelling legitimate reasons for the processing that prevail in relation to your interests, rights and freedoms or if the data is still needed to establish, exercise or defend legal claims. |
|
Right to appeal to a supervisory authority (Article 77 GDPR) |
According to Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your data violates data protection regulations. This right can be exercised in particular before a supervisory authority in the Member State of your habitual residence, your place of work or the place of the alleged infringement. |
Exercising Your Rights
You can exercise the rights mentioned above by contacting us at the contact information provided on the website along with our company information or at privacy@JDEcoffee.com .
You can also contact our Customer or Consumer Services via the local phone number and local email address provided on the website .
11. Contact Details of our Data Controller
Our Global Compliance Officer and our external data protection officer are available to provide further information on data protection.
JDE Global Compliance Officer
privacy@JDEcoffee.com
FIRST PRIVACY GmbH,
Konsul-Smidt-Str. 88,
28217 Bremen, Germany
www.first-privacy.com
office@first-privacy.com