“Personal Data” means any information that relates to an identified or identifiable individual. This definition includes data collected offline, when you meet us in person, online through our Sites or via our authorised parties such as our consumer “Careline” which is our support helpline where you can raise questions, queries and concerns directly to us. 

Therefore, we may collect your Personal Data from a variety of sources. This includes:

1. Personal Data you provide to us directly.

We collect Personal Data you provide us with when you sign up for a marketing newsletter, complete a survey, enter a competition or communicate with us through our Sites. In so doing, you may provide Personal Data, for example:

As part of our recruitment activities, we collect Personal Data that you provide to us in the course of applying for a role with us. For example:

During certain sections of our recruitment activities we may collect "Special Categories of Personal Data" about you (with your explicit consent) such as health status (for example, if you have a disability, we need to be aware of). 

For more information on the Special Categories of Personal Data we collect and how we use it, please refer to the relevant section below.

2. Personal Data we collect automatically

Some automatically collected information may not directly identify you by name, however it may do so indirectly (for example your internet protocol (IP) address may point uniquely to you). For this reason, some automatically collected information is Personal Data under Data Protection Laws.  This information is automatically collected using cookies, pixel, web beacons and similar data collection technology (collectively known as “Data Collection Technology”) when your web browser accesses our Sites or advertisements and other content served by or on behalf of us on other websites.

To find out more about what Data Collection Technology we use, see our Cookie Notice.

We may automatically collect certain information from your computers and mobile devices or via other means where required. For example:

We also collect, use and share aggregated data such as statistical or demographic data which is not Personal Data as it does not directly (or indirectly) reveal your identity. For example, we may aggregate individuals' usage data to calculate the percentage of users accessing a specific Site in order to analyse general trends in how users are interacting with our Site to help improve the Site and our product offerings. 

If we meet you in person, we may also collect your Personal Data:

• To handle camera surveillance at targeted areas of our business premises, such as entrances to office space, plants and the warehouses to prevent accidents, and to prevent, investigate and expose possible intrusion and criminal activity.
  
  
• To handle photography or filming in connection with our participation in events, festivals, trade fairs, marketing promotions etc.
  
  
• To manage visits to our production facilities or offices correctly, efficiently and safely (e.g. fire protection, maintenance and repair issues etc.)

3. Personal Data we collect from other sources

We may collect Personal Data from other sources including:

• our trusted partners (such as grocery retailers and retail insight providers)
  
• third-party platforms where we operate Sites (for example, when you use the "like" functionality on Facebook or the +1 functionality on Google+)
  
• advertising partners (for example we receive information about you and other visitors' interactions with our advertising to measure whether our advertising is relevant and successful)
  
• third parties with whom we jointly offer products with other providers (for example, we may offer free product with a qualifying purchase)
  
• from social media (such as Twitter or Instagram)
  
• As part of our recruitment activities, we may also collect Personal Data about you from social media sites such as LinkedIn (e.g. where you engage with us or our content or apply for a role via LinkedIn).

Certain categories of Personal Data, such as race, ethnicity, religion, health, sexuality or biometric data are classified as "Special Categories of Personal Data" and benefit from additional protection under Data Protection Laws. 

We limit the circumstances where we collect and process these Special Categories of Personal Data. However, we may collect such data in the following circumstances:

• if you contact us or our consumer Careline to discuss an experience with a product, you may provide certain health information relating to your dietary requirements (for example, that you are lactose intolerant) 
  
  
• if you contact us or our consumer Careline specifically regarding our products which may have a nutrition or health benefit (e.g. ProActiv), we may ask you to provide us with limited health related information (e.g. your cholesterol levels and any variances) 
  
  
• if you apply for a job with us, we may collect information about you relating to pre-existing health conditions (for example if you have a disability that we need to be aware of), or information about your religion.  

We only collect and use this Personal Data where you have provided us with your explicit consent for us to do so or where we are legally required to process such data.  

In some instances, you may voluntarily provide us with information which does not directly involve the collection of any Special Categories of Personal Data but may imply or suggest your religion, health or other Special Categories of Personal Data.  

Data Protection Laws require us to have a legal basis for collecting and using your Personal Data. 

We rely on one or more of the following legal bases: 

You can object to processing that we carry out on the grounds of legitimate interests.  See the section headed "Your Rights" to find out how.

How we use your Personal Data and the lawful basis for processing it

For any direct marketing from us, during the registration process on our Sites when your Personal Data is collected, you will be asked to indicate your preferences for receiving direct marketing communications and we will request your explicit consent to send them. You can ask us to stop sending you marketing communications at any time by following the opt-out links within any marketing communication sent to you or by contacting us at privacy@florafg.com. If you opt out of receiving marketing communications, you will still receive service-related communications that are essential for administrative or customer service purposes, for example relating to order confirmations after your participation in competitions.

When we collect and use your Personal Data for any other purposes, we will inform you before or at the time of collection.

We also create profiles by analysing the information about your online surfing, searching behaviour and your interactions with our brand communications by building segments (creating groups that have certain common characteristics) and by placing your Personal Data in one or more segments. For more information on this, see "Profiling" below.

Like most organisations with an online presence, we use your Personal Data to build profiles. We create profiles by analysing information about your online surfing, searching behaviour and your interactions with our brand communications by building segments (creating groups that have certain common characteristics) and by placing your Personal Data in one or more segments. These segments are used by us to personalise the website and our communications to you (such as showing relevant content to you when you visit our site or in a newsletter to you) and to display relevant offers and advertisements from our Brands on our Sites, and via third-party websites. The segments can also be used for third-party campaigns on our Sites or third-party websites.  

We profile your Personal Data using cookies where you have provided consent for us to do so; for example, accepting the setting of cookies on your browser online. For more information, see our Cookie Notice.

If you have asked to receive emails or SMS communications from us, we track whether you open, read or click on the content to see what you are interested in so that we can give you more content that we think you are more likely to enjoy. 

We use this data to profile your likes and dislikes. For instance, if we see that you are regularly viewing recipes on our website, and you have opted in to receiving emails from us, we might give you an update on the new recipes that have just hit the site for your interest, or we may tailor our web content when you visit towards things we think you'll be most interested in. 

Based on this profile information, we may also give you advertising that we think you will like and want to see as you view content from us or from our network of publishers that we advertise with. Sometimes we may use your current location to serve advertising to you that is to do with promotions or events that are happening nearby that we think you might be interested in. 

We may also use information you have provided to selected third parties and consented to be shared, like your age, gender, life stage, lifestyle and wider interests to identify people who we think will have similar interests to you and who we believe will be interested in similar advertising.

We will not process your Personal Data and make decisions based solely on automated decision making that has a significant impact on you.  

If we do so, we will notify you in advance and provide you with clear information about our decision to rely on automated processing and to request your explicit consent. 

We do not sell or trade your Personal Data to third parties, but we may disclose your Personal Data to other companies or third parties (who process the Personal Data on our behalf and in accordance with our strict instructions, known as “Data Processors”) when it is necessary for us to conduct our business or fulfil our commitments to you. When we engage with a Data Processor, we will ensure there is a written agreement that guarantees the security and privacy of your Personal Data. 

We share your Personal Data internally and with selected third parties in the following circumstances:

Your Personal Data is transferred and processed outside of the UK and EEA.   

Any transfer of your Personal Data outside the UK and the EEA will be carried out in accordance with the Data Protection Laws to safeguard your privacy rights and to provide you with remedies in the unlikely event of a security breach. This level of protection to your Personal Data is guaranteed either by a decision of the EU Commission that the country concerned ensures an adequate level of protection or through the use of so-called appropriate safeguards. Examples of appropriate safeguards are: approved code of conduct in the destination country, Standard Contractual Clauses (“SCCs”) or Binding Corporate Rules (“BCRs”). 

You can contact us if you want more information about the appropriate safeguards that we use and countries where your Personal Data is processed.

We take the security of your Personal Data very seriously. We take every effort to protect your Personal Data from misuse, interference, loss, unauthorised access, modification or disclosure. Our measures include implementing appropriate access controls, investing in the latest information security capabilities to protect the IT environments we leverage, and ensuring we encrypt, pseudonymise or anonymise Personal Data wherever possible. 

Access to your Personal Data is only permitted among our employees, partners and agents on a need-to-know basis and subject to strict contractual obligations regarding both confidentiality and data privacy when processed by Data Processors. 

We only retain your Personal Data for as long as we need it for the purpose for which it was collected or as otherwise required by Data Protection Laws. Your Personal Data will be securely destroyed after the expiry of the applicable retention period. To determine the appropriate retention period for your Personal Data, we consider the amount, nature and sensitivity of the Personal Data, the potential risk of harm from unauthorised use or disclosure of your Personal Data, the purposes for which we process your Personal Data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements. Furthermore, we may retain your Personal Data for a longer period than indicated below in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

Please refer to the specific retention period for each category of Personal Data:

You can exercise these rights at any point. We have provided an overview of these rights below together with what this entails for you.  

You can exercise your rights by sending an email or submitting a request through the “Contact Us” form on our websites. 

• To access your Personal Data, click here - Personal Data
  

• To delete your Personal Data, click here - Delete Data

You have the following rights in relation to your Personal Data: 

• Information, Rectification and Access: You have the right to access, correct or update your Personal Data at any time. For rectification, this enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us. If you request access, where feasible and permitted by Data Protection Laws, we will provide a copy of the Personal Data we are processing. The Personal Data shall be provided in electronic form. 
  
  
• Deletion: The right to request deletion of your Personal Data, however this right may not apply if we are permitted to retain your Personal Data in accordance with Data Protection Laws for the purposes of i) exercising the right of freedom of expression and information ii) compliance with a legal obligation which requires processing by a law to which we are subject iii) the performance of a task carried out in the public interest iv) reasons of public interest in the area of public health v) archiving purposes in the public interest, scientific or historical research purposes or statistical purposes and vi) the establishment, exercise or defence of our legal rights. 
  
  
• Portability: The right to data portability. The Personal Data you have provided us with is portable. This means it can be moved, copied or transmitted electronically under certain circumstances. However, if the lawful basis that we rely upon for the processing of your Personal Data is to pursue our legitimate interests or if your Personal Data has been anonymised or pseudonymised then the right to data portability does not apply. 
  
  
• Restriction & Objection: Under certain circumstances, you have the right to restrict or object to certain types of processing, including processing for direct marketing (i.e., receiving marketing emails from us or being contacted about potential opportunities, events and promotions). If you have given your consent to anything we do with your Personal Data (i.e., we rely on consent as a legal basis for processing your Special Category Personal Data) you have the right to withdraw your consent at any time (although if you do so, it does not mean that anything we have done with your Personal Data with your consent up to that point is unlawful). You can withdraw your consent to the processing of your Personal Data at any time by contacting us with the details provided below. 
  
  
• Automated Decision Making and Profiling: The right not to be subject to a decision which is based solely on automated processing or profiling, and which produces legal or other significant effects on you.  
  
  
• Complain: You have the right to lodge a complaint directly with any local Supervisory Authority about how we process your Personal Data. 

We may need to request specific information from you to help us confirm your identity and ensure your right to access your Personal Data (or to exercise any of your other rights). This is a security measure to ensure that Personal Data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response. 

Please be aware that there are exceptions and exemptions that apply to some of these rights, which we will apply in accordance with the Data Protection Laws. 

We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated. 

You will not have to pay a fee to access your Personal Data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances. 

Ако имате въпроси или притеснения относно използването на вашите лични данни, моля, свържете се с нас, като изпратите имейл на privacy@florafg.com или като изпратите заявка чрез формата „ Свържете се с нас “ на нашите уебсайтове.

We will update this Privacy Notice when necessary to reflect feedback, changes in our products or changes in Data Protection Laws. When we post changes to this Privacy Notice, we will revise the "last updated" date.  

If the changes are significant, we will provide a more prominent notice (including, potentially email notification of Privacy Notice changes). 

It is important that you ensure you have read this Privacy Notice. If you do not think that we have processed your Personal Data in accordance with this Privacy Notice, you should let us know as soon as possible. 

You also have the right to complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or any other relevant Supervisory Authority. Further information about how to complain to the Dutch Data Protection Authority is available on its website at https://www.autoriteitpersoonsgegevens.nl/en/contact. 

In addition to this Privacy Notice, there may be specific campaigns or promotions which will be governed by additional terms or notices. We encourage you to read these before participating in any such campaigns or promotions.