PRIVACY POLICY

The protection of your personal data is important to us. We would therefore like to inform you below about the data that we use in relation to your visit and the purposes for which we use it.

Continuous technological development, changes to our services or to the legal situation and other factors can make adjustments to our data protection information necessary. We therefore reserve the right to modify this Privacy Policy at any time and request that you check the latest version at regular intervals.

The controller for the data processing on this website is:

Danone Waters (UK & Ireland) Limited
6th Floor, Building 7 Chiswick Park
566 Chiswick High Road
London
W4 5YG

GENERAL DATA PROTECTION INFORMATION

BASIC INFORMATION
The term personal data is defined in the German Federal Data Protection Act (BDSG). Personal data is individual pieces of information about the personal or material circumstances of an identified or identifiable natural person. This therefore includes, for example, your name, address, telephone number and date of birth.
Unless specified otherwise in the following sections, as a rule no personal data is collected, processed or used when you use our website. When you access our website certain information is transmitted, such as your IP address, the type and version of web browser used, the operating system used, the website from which you came and the time of the request.
This data cannot be used by us to identify the individual user. The information is analysed by us purely for statistical purposes and used exclusively to improve the appeal, content and functions of our website.

LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA
Your data is used on the following legal bases:
Insofar as processing of personal data is carried out to fulfil contracts concluded with us, on the basis of Art. 6(1) section (b) GDPR. This also applies to processing procedures that are necessary for taking steps prior to entering into a contact.
Insofar as we obtain the consent of the data subject for processing of personal data, on the basis of Art. 6(1) section (a) GDPR.
Insofar as processing of personal data is necessary to fulfil a legal obligation to which our company is subject, on the basis of Art. 6(1) section (c) GDPR.
If a vital interest of the data subject or another natural person makes processing of personal data necessary, on the basis of Art. 6(1) section (d) GDPR.
If processing is necessary to protect a legitimate interest of our company or a third party and the interests, basic rights and basic freedoms of the data subject do not override the aforementioned interest, Art. 6(1) section (f) GDPR serves as the legal basis for the processing.

ERASURE OF DATA AND DURATION OF STORAGE
The personal data collected by us is erased as soon as the purpose of storage no longer applies.
The data is stored if required by law, an EU directive or other regulations.
The data is also erased when a storage period prescribed by the above-mentioned legal regulations expires, unless there is a need for continued storage of the data to conclude or fulfil a contract or to protect our legitimate interests (e.g. to uphold our rights).

DATA TRANSMISSION
As a rule, your data will not be transferred to third parties unless we are obliged to do so by law or passing on data is necessary to execute the contractual relationship or you have previously expressly consented to the transfer of your data. External service providers and partner companies, such as shipping companies appointed to provide delivery, will receive your data only insofar as is necessary to process your order. In such cases, however, the extent of the data transfer is limited to the necessary minimum. Insofar as our service providers come into contact with your personal data, we ensure that they comply with the provisions of data protection laws in the same way as we do. Please also note the data protection information of the providers. The respective service provider is responsible for the content of external services, although we check the services for compliance with the statutory requirements insofar as it is reasonable for us to do so.

DATA SECURITY
We have implemented extensive technical and operational security measures to protect your data against accidental or intentional tampering, loss, destruction or access by unauthorised persons. Our security procedures are reviewed at regular intervals and adapted to take account of technological advances.

RIGHTS OF DATA SUBJECTS

Right to information Art. 15 GDPR
Any person whose data is processed may demand information from the controller about whether and which personal data of the data subject is processed.  You also have a right to further information, such as the purposes of the processing and the planned storage period. Please note that under certain circumstances your right to information may be restricted by law.

Right to rectification Art. 16 GDPR
Data subjects have a right to rectification and/or completion in respect of the controller insofar as the personal data concerning them that is processed is incorrect or incomplete. The controller must carry out the rectification promptly.

Right to restriction of processing Art. 18 GDPR
Under certain conditions the data subject has the right to restriction of the processing. This allows the data subject to temporarily prevent further processing of their personal data. A restriction of processing comes into consideration, in particular, when the assertion of other rights (e.g. to erasure) is being considered by the data subject.

Right to erasure Art. 17 GDPR
The data subject may demand of the controller that the personal data concerning them be erased. However, this is only possible if that data is no longer required, is being processed unlawfully or consent in this connection has been withdrawn. The statutory exceptions to the erasure obligation also apply (in particular, Section 35 BDSG).
If erasure in accordance with your request is not possible, we shall notify you of the reason.

Right to object Art. 21 GDPR
You have the right on grounds arising from your particular situation to object to processing of data concerning you at any time, if the basis of our data processing is legitimate interests.
However, it may not be possible to exercise the right to object in certain cases, for example if we are obliged to carry out processing by law or processing is required to assert legal claims.

Right to withdraw a declaration of consent under data protection laws
Data subjects have the right to withdraw their declaration of consent under data protection laws at any time. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of that consent up to that point.

Right to data portability
The data subject has the right to receive the personal data concerning them in a structured, standard, machine-readable format if the following conditions are met:
a) Data processing is carried out on the basis of consent
b) Data processing is carried out to fulfil a contract, or
c) Processing is carried out with the aid of automated procedures.

The data subject may also demand that the controller send the data directly to another controller.

Right to lodge a complaint with a supervisory authority
Notwithstanding any other administrative legal or judicial remedy, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their place of residence, their workplace or the location of the alleged breach, if they consider that processing of their personal data breaches the GDPR.
The supervisory authority with which the complaint is lodged will notify the complainant of the status and outcome of the complaint, including any judicial remedy in accordance with Art. 78 GDPR.

EXTERNAL DATA PROTECTION OFFICER

Data protection is extremely important to us. Certified experts from intersoft consulting services AG therefore help us to protect your data. If you have questions or suggestions about data protection, please contact our external data protection officer directly:

Personal / Confidential
Mr Matthias Lindner
intersoft consulting services AG
Beim Strohhause 17, 20097 Hamburg, Germany

 
Information about the services on our website.

Information about the services on our website

CONTACT
You have the option to contact us via our email address or the contact form. Of course, we will use the personal data provided to us in this way only for the purpose for which you provided it to us upon making contact.
If we request inputs via our contact form that are not necessary for making contact, we always mark them as optional. We use these details for additional information about your query and to process your issue more effectively. The details are provided expressly on a voluntary basis and with your consent. If this information relates to communication channels (for example email address, telephone number), you also give your consent to allow us to contact you via those channels to answer your query.
You can, of course, withdraw that consent at any time with effect from that point forward. To do so, please contact our data protection officer MLindner(at)intersoft-consulting.de.

Information on the use of cookies and analytical tools

TRACKING PIXELS
With the aid of markings on our pages – so-called tracking pixels – we also collect information each time the page is loaded, including, for example, how often it is accessed or clicked on. Again, we do so without interfering with or gaining information about your computer.

GROUPM
Data for marketing and optimisation purposes is collected and stored on our website with technologies from the agency group GroupM (GroupM Germany GmbH, Derendorfer Allee 10, 40476 Düsseldorf, Germany). Pseudonymised usage profiles can be created from this data by means of cookies. The data collected in this way is not used to make a connection to specific individuals. It is possible to object to the data collection and storage at any time with effect from that point forward. You can install an opt-out cookie for this purpose.

QUISMA
The services of Quisma GmbH, Rosenheimer Straße 145d, 81671 Munich, Germany are used on our website. The Quisma tracking pixel collects pseudonymised information about the course of the user’s visit in order to track user behaviour. The cookies generated in this process only store pseudonymised information under a user ID (pseudonym) which is generated at random. No connection can therefore be made with specific individuals by means of these cookies. The IP address of the user is also analysed briefly to determine a rough geo-position. This IP address is completely anonymised by truncation in accordance with data protection regulations once the analysis is complete. At no point is it possible to link the information to particular individuals, the precise address or other personal data. You may object to the installation of the cookie and thus to further tracking through the Quisma technology at any time by downloading and installing the opt-out cookie. Further information is provided in the privacy policy of Quisma.

TWITTER ADVERTISING
In the context of usage-based online advertising, a Twitter tracking code (pixel) (Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA) is also used on the website. Essentially, a non-reversible and non-personal checksum (hash value) is generated from your usage data, which can be sent to Twitter for analysis and marketing purposes. A Twitter cookie is installed for this purpose. Information about your activities on the website (e.g. surfing behaviour, sub-pages visited, etc.) is recorded in this context. Your IP address is stored and used for geographical placement of advertising.
Further information about the purpose and scope of data collection and subsequent processing and use of the data, together with the privacy settings, can be found in Twitter’s privacy policy.
We use the following service of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA:

FACEBOOK CUSTOM AUDIENCES
In the context of usage-based online advertising, the Custom Audiences product of Facebook (Facebook Custom Audiences, 1601 S. California Avenue, Palo Alto, CA, 94304) is used on the website. Essentially, a non-reversible and non-personal checksum (hash value) is generated from your usage data, which can be sent to Facebook for analysis and marketing purposes. A Facebook cookie is installed for this purpose. Information about your activities on the website (e.g. surfing behaviour, sub-pages visited etc.) is recorded in this context. Your IP address is stored and used for geographical placement of advertising.
Further information about the purpose and scope of data collection and subsequent processing and use of the data, together with the privacy settings, can be found in Facebook’s privacy policy.
We use the following service of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA:

FACEBOOK CONVERSION TRACKING PIXEL
This tool makes it possible for us to record the actions of users following redirection to a provider website after they have clicked on a Facebook advertisement. As a result, we can record the effectiveness of Facebook advertisements for statistical and market research purposes. The data collected remains anonymous. This means that we cannot see the personal data of an individual user. However, the collected data is stored and processed by Facebook. We inform you of this in accordance with the information we have. Facebook is able to link the data to your Facebook account and use the data for its own advertising purposes in accordance with Facebook’s privacy policy, available at: https://www.facebook.com/about/privacy.
Facebook Conversion Tracking also makes it possible for Facebook and its partners to display advertising to you on and outside Facebook. A cookie is also stored on your computer for these purposes. By using our website you agree to the data of the integration of Facebook pixels.
Please click here if you wish to withdraw your consent: https://www.facebook.com/ads/settings.
 
We use the following technology of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”):

GOOGLE ADWORDS AND CONVERSION TRACKING
In order to raise the profile of our products and services we place Google AdWords advertisements and use Google Conversion Tracking in that context for the purposes of personalised, interest and location-based online advertising. The option of anonymising IP addresses is controlled in Google Tag Manager via an internal setting which is not visible in the source of this site. The internal setting is configured in such a way that the anonymisation of IP addresses required by the Federal Data Protection Act is achieved.
The advertisements are displayed following searches on websites of the Google advertising network. We have the option of combining our advertisements with certain search terms. With the aid of cookies we can display advertisements based on the previous visits of a user to our website.
When you click on an advert, a cookie is installed on the user’s computer by Google. Further information about the cookie technology used can also be found in the Google information about website statistics and in its privacy policy.
With the aid of this technology both we as the customer and Google receive notification that a user has clicked on an advertisement and been forwarded to our website. The information obtained in this way is used exclusively for statistical analysis to optimise advertisements. We do not receive any information with which visitors can be personally identified. The statistics provided to us by Google include the total number of users that have clicked on our advertisements and possibly whether they have been forwarded to a page of our website containing a conversion tag. By means of these statistics we can track which search terms lead to the highest number of clicks on our advertisements and which advertisements lead to contact from the user via the contact form.
If you do not want this to be carried out, you can prevent storage of the cookie required for these technologies through, for example, your browser settings. In this case, your visit will not be included in the user statistics.
You also have the option of selecting the types of Google ads you see or disabling interest-related advertising on Google via the ad settings. Alternatively, you can disable the use of cookies by third-party providers by accessing the deactivation tool of the Network Advertising Initiative.
However, we and Google will continue to receive the statistical information about the number of users that visit this site and when. If you do not want to be included in these statistics either, you can prevent this with the aid of additional programmes for your browser (with the Ghostery add-on for example).
 
We use the following technology of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”):

GOOGLE ANALYTICS AND CONVERSION TRACKING
This website uses Google Analytics. On behalf of the operator of this website, Google will analyse your use of the website to compile reports on the website activities and to provide other services relating to the use of the website and the Internet for the website operator.
Since the agreement of the Hamburg Data Protection and Freedom of Information Commissioner with Google on the basis of the Düsseldorf Group Resolution on Data Protection Compliant Organisation of Analytical Procedures for the Measurement of the Reach of Internet Services, use of Google Analytics in compliance with data protection and without objection is possible under certain conditions. Of course, we observe these requirements. In particular, we wish to point out that on this website Google Analytics is extended to include the code “gat._anonymizeIp();” to ensure anonymised recording of IP addresses (so-called IP masking). Your IP address will first be truncated by Google within Member States of the European Union or in other states that are signatories to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and truncated there. The IP address sent by your browser in connection with Google Analytics will not be combined with other Google data. Further information on the terms of use and privacy policy can be found at https://marketingplatform.google.com/about/analytics/terms/gb/ and at https://policies.google.com/privacy?hl=en-gb.
Google Analytics uses so-called “cookies”, i.e. text files which are stored on your computer. As a rule, the information generated by the cookie about your use of this website is sent to a Google server in the USA and stored there. You can prevent the storage of cookies by configuring the corresponding setting in your browser software; please note, however, that in this case you might not be able to use all the functions of this website to their full extent. Moreover, you can prevent collection of the data generated by the cookie and relating to your use of the website (including your IP address) by Google and processing of that data by Google by downloading and installing the browser add-on. If you click here, an opt-out cookie will be installed that prevents future collection of your data when you visit this website: Disable Google Analytics.
We also use Google Conversion Tracking in connection with Google Analytics. This allows us to record the behaviour of our website visitors. For example, we can see how many PDFs are downloaded from our website or how often the contact form is filled in. We can also see how many clicks on advertisements in external sources (AdWords, LinkedIn, Xing, Bing) have led to our website.