Data Protection Declaration
Südzucker AG attaches great importance to protecting your privacy and your personal data as well as the requisite data security and therefore collects, processes and uses your personal data exclusively in accordance with the principles described below and the provisions of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG) applicable to Südzucker AG.
Table of contents
I. Name and address of the controller
II. Name and address of the data protection officer
IV. General information on data processing
V. Provision of the website and creation of log files/journal files
VII.1 General contact enquiries and use of the contact form
VIII. Website analysis services
IX. Ads and marketing services for advertising and retargeting
IX.1 Use of Google Ads and Google DoubleClick
X.2 Privacy settings with Cookiebot
X.3 Use of marketing automation system Net-Results
XI. Rights of the data subject
I. Name and address of the controller
The controller within the meaning of the EU General Data Protection Regulation (“GDPR”) and other national data protection laws of the EU Member States as well as other applicable data protection provisions for the operation of the website www.beefeed.com (hereinafter referred to as the “website”) is:
Südzucker AG
Maximilianstraße 10
68165 Mannheim, Germany
Tel.: +49 (0) 621 421-0
Fax: +49 (0) 621 421-234
E-Mail: info@suedzuckergroup.com
Website: https://www.suedzucker.com
represented by the
chairman of the Supervisory Board: Dr. Stefan Streng
Executive Board: Dr. Niels Pörksen (CEO), Ingrid-Helen Arnold, Stephan Büttner, Hans-Peter Gai, Thomas Kölbl, Dr. Stephan Meeder
(hereinafter referred to as “Südzucker” or “We”).
If you would like to object to the collection, processing or use of your data by us according to this Data Protection Declaration as a whole or for individual measures, you can send your objection to the aforementioned contact details or to our data protection officer by email, fax or letter. Under the specified contact details you can also obtain information about your personal data at any time free of charge.
II. Name and address of the data protection officer
The data protection officer of the controller can be contacted at:
Südzucker AG
Data Protection Officer
Maximilianstraße 10
68165 Mannheim
Email: datenschutz@suedzucker.de.
III. Your personal data
Personal data is any information relating to an identified or identifiable natural person (hereinafter referred to as the “Data Subject”). Südzucker processes your personal data exclusively to provide the Website to you. Only personal data such as your name and your email address will be recorded if you have provided this information voluntarily or have agreed to it being recorded. For technically-required data, we refer to the explanations under “V. Provision of the Website and creation of log files/protocol files” as well as “VI. Use of cookies”.
IV. General information on data processing
- Scope of the processing of personal data
We process the personal data (hereinafter also referred to as “Data”) of Data Subjects, i.e. of visitors to the Website, via our Website to the extent necessary to provide a functioning Website as well as our contents and services. The processing of personal Data generally only takes place with the consent of the user. Exceptions include cases where the processing of Data is permitted by law, is required to fulfil a contract or is technically necessary.
- Legal basis for the processing of personal data
If we have obtained the consent of the Data Subject for processing operations involving personal data, Art. 6 (1) (a) GDPR serves as the legal basis.
As for the processing of personal data which is necessary for the performance of a contract to which the Data Subject is party, Art. 6 (1) (b) GDPR serves as the legal basis. This also applies to processing operations which are necessary to carry out pre-contractual measures.
When the processing of personal data is necessary in order to achieve compliance with a legal obligation to which our company is subject, Art. 6 (1) (c) GDPR serves as the legal basis.
If the processing of personal data is necessary in order to protect the vital interests of the Data Subject or of another natural person, Art. 6 (1) (d) GDPR serves as the legal basis.
If processing is necessary to safeguard the legitimate interests of our company or of a third party, and such interests are not outweighed by the interests or fundamental rights and freedoms of the Data Subject, Art. 6 (1) (f) GDPR serves as the legal basis for processing.
- Erasure of Data and storage duration
The personal data of the Data Subject shall be erased or blocked as soon as the purpose of storage ceases to be applicable. Storage may also take place if this is provided for by European or national legislators in EU directives, laws or other regulations to which the controller is subject. Blocking of further Data processing or erasure of Data shall also take place if a legally prescribed storage period has expired, unless there is a need for further Data storage for fulfilment of the contract.
V. Provision of the Website and creation of log files / protocol files
- Description and scope of Data processing
When the Website is used merely for information purposes, we only collect the personal data which your browser transmits to our server or provider and which are technically necessary for us to show you our Website and to ensure its stability and security.
We have engaged Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4-6, 32339 Espelkamp, Germany (hereinafter referred to as “Mittwald”) for the hosting and technical provision of our Website. We have concluded with Mittwald the agreement on commissioned processing of personal data required under data protection law in accordance with Art. 28 GDPR. According to this agreement, Mittwald undertakes to guarantee the necessary protection of your Data and to process them exclusively on our behalf and as instructed by us in accordance with the applicable data protection provisions. Further information on Mittwald is available on their website at: https://www.mittwald.de/.
The following Data are in log files or protocol files provided by Mittwald within the framework of hosting:
(1) browser type and version used, if you have consented to transmission within your browser settings;
(2) operating system and user’s Internet service provider;
(3) date and time of server query;
(4) number of visits;
(5) length of stay on the Website;
(6) previously visited website, only if this linked to our Website and the visitor clicked on this link;
(7) user’s IP address, anonymised by Mittwald in the system before it is stored;
(8) volume of sent/transferred Data;
(9) geographical origin of access.
The Data are stored by Mittwald on servers hosted in Germany. Mittwald uses this information for the purpose specified in our order. There is no independent use of Data by Mittwald or unauthorised disclosure to third parties. Storage of this Data together with the user’s other personal data does not take place.
- Legal basis for Data processing
The legal basis for the temporary storage of Data and log files is Art. 6 (1) sentence 1 (f) GDPR.
- Purpose of the Data processing
Temporary storage of the IP address by the system is necessary to deliver the Website or the contents to the user’s computer. To do this, the user’s IP address must be stored for the duration of the session.
Storage of all the above information ((1) – (9)) in log files or protocol files is done to ensure the functionality of the Website. In addition, the Data is used to optimise the Website and to ensure the necessary security of our IT systems. An evaluation of the Data for marketing purposes does not take place in this context. We also have a legitimate interest in processing Data for these purposes in accordance with Art. 6 (1) (f) GDPR.
- Duration of storage
User’s IP addresses are made anonymous as soon as they are no longer required to achieve the purpose of their collection. This is the case at the end of the user’s respective session. It is then no longer possible to assign the accessing client.
The storage duration of the log files for the above-mentioned purposes is at the most 60 days.
- Objection and removal option
The recording of Data to provide the Website and the storage of Data in log files is essential to operate a website. The user has no possibility to object.
VI. Use of cookies
- Description and scope of Data processing
Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. Cookies cannot execute programmes or transfer viruses to your computer. If a user accesses a website, a cookie may be stored on the users’ operating system. This cookie contains a characteristic string that allows the browser to be clearly identified when accessing the website again. Some of the cookies we use are erased again after the browser session has ended, i.e. after closing your browser (known as “session cookies”). Other cookies remain on your computer and enable us to recognise your computer on your next visit, should you have consented to this.
When accessing our Website, we inform users by means of a cookie banner (see section “X.3 Privacy settings with Cookiebot”) about the use of cookies (technically necessary cookies, preference cookies, statistics cookies and marketing cookies) and have technically set up the consent required under data protection law to place the cookies for which consent is necessary. Apart from the technically necessary cookies, consent always has to be given in advance to the placement of cookies on your computer. The same applies to other technical measures, such as the use of pixels on our website. Users are also referred to this Data Protection Declaration via the info banner.
Below we provide you with an overview of the purpose of the cookies used and the respective opt-out options. In addition, please note that you can adjust your cookie settings (can be called up at any time via the slider icon at the bottom left of the screen) at any time and revoke your consent at any time for the future. You will also find a detailed list of all cookies, including the purpose, provider and validity period, in our cookie banner.
(a) Technically necessary cookies:
We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can also be identified after the user moves to another page. Technically necessary (essential) cookies are used to ensure that your visit to our website goes smoothly. This includes, for example, the storage of your individual cookie settings for our website. These cookies are necessary so that you can safely visit our website and cannot be switched off.
The following technically necessary cookies are stored on your computer and transmitted to us every time you access a webpage:
(1) CookieConsent: stores user’s consent status for cookies on the current domains (validity: 1 year).
(2) wordpress_test_cookie: check if cookies can be set in the browser (validity: session).
These cookies do not contain any personal data and are therefore not used for personal identification.
For more information on the technical cookies required to secure our website, please refer to section “X.2 Use of Google ReCAPTCHA”.
(b) Preference cookies:
We use cookies to personalise our website by storing your language settings and the decisions you make when using our website on your computer for your future visits. These preference cookies do not contain any personal data and are therefore not used for personal identification.
We are currently not using any preference cookies on our website.
(c) Statistics cookies:
We also use cookies on our website that enable us to analyse our users’ surfing behaviour.
In this way, the following Data can be transmitted:
(1) entered search terms;
(2) frequency of webpage access;
(3) use of Website function;
(4) visit duration;
User Data collected in this way are anonymised by means of technical precautions. Therefore, assignment of the Data to the accessing user is no longer possible. The Data are not stored with users’ other personal data.
Statistics cookies are used for the purpose of improving the quality of our website and its contents. By using statistics cookies, we can find out how our website is used and constantly optimise our services. For further information on technical measures and third-party providers, we refer to “VIII. Website analysis services”.
(d) Marketing cookies:
In addition, third-party cookies are set through the use of advertising and marketing services. These cookies are used to display advertisements on third-party sites as well as social media platforms that may be of interest to you based on your browsing behaviour. The third parties may combine information collected on our site with existing information to serve you personalised and interest-based ads.
We use the following technical measures for conversion tracking and remarketing for our advertising and marketing services: Google Ads and Google Doubleclick. We use the technical measures to track cost-benefit analyses of the ads we serve and to optimise our ad serving. They are also used for interactions with other websites. For a description of the cookies, how they work, their purpose and the options for objecting to them, please refer to the information provided under “IX. Ads and marketing services for advertising and retargeting”.
To display social media content within an embedded widget, cookies and scripts are set by our embedded service provider Flowbox. For a description of the cookies, how they work, their purpose and the options for objecting to them, please see “X.2 Use of Flowbox to display social media content”.
In addition, cookies and scripts are placed using our marketing automation system, Net-Results. The cookies are used to make our newsletter and Website interesting for our users and to increase interaction with visitors and registered email subscribers with the aid of the marketing automation system. For a description of cookies, how they work, their purpose and objection options, please refer to the explanations under “X.4 Use of marketing automation system Net-Results”).
- Legal basis for Data processing
The legal basis for the processing of personal data using technically necessary cookies (see (a)) is Art. 6 (1) (f) GDPR.
The legal basis for the processing of personal data using cookies for statistical or marketing purposes or for storing preferences (see (b) – (d)) is your consent granted via the cookie banner in accordance with Art. 6 (1) (a) GDPR.
- Purpose of the Data processing
The purpose of technically necessary cookies is to enable you to use our website. Some functions on our website cannot be provided without using cookies. For these, it is necessary that the browser can be re-identified following a change of page. User Data gathered by technically necessary cookies are not used to prepare user profiles.
For information on the purpose and objection options for cookies used for statistical and marketing purposes and for storing your preferences (see (b) – (d)), please refer to the explanations under “VIII. Website analysis services”, “IX. Advertising and marketing services for advertising and retargeting” and “X. Plugins and tools”.
- Duration of storage, objection and removal option
Cookies are stored on the user’s computer, which transmits them to our site. For this reason, you, as the user, also have full control over the utilisation of cookies. You can deactivate or restrict the transmission of cookies by changing your Internet browser settings. Cookies that have already been saved can be erased at any time. This can also be done automatically. If cookies for our website are deactivated, you may find that not all of the Website’s functions can continue to be utilised in full.
You can change your settings for cookie use made via our info banner at any time for the future via the cookie settings at the bottom left of the screen. By changing the sliders for the desired clusters, you prevent technical measures from being carried out and cookies from being set.
VII. Communication
VII.1 General contact enquiries and use of the contact form
- Description and scope of Data processing
On our website, it is possible to contact us via a provided email address or a contact form. In all cases, the user’s transmitted personal data are stored. The scope of the processed personal data and the personal data processed in each individual case may vary depending on the form or contact. This includes, in particular, the following data:
(1) your first name and surname;
(2) your communication details (email address, telephone number);
(3) resulting correspondence (product information, purpose of the enquiry and message).
Your Data and the resultant correspondence are only processed by us. There is no forwarding of Data to third parties. The Data are only used for the conversation started by the user, in order to contact you by phone, post, fax or email about your enquiry. Mandatory information and voluntary information are indicated in the contact forms.
To secure your entries and to check and avoid interactions on our website by automated access, e.g. by so-called bots, we use Google reCAPTCHA for our contact form. For further information on Google reCAPTCHA, we refer to our explanations under “X.2 Use of Google ReCAPTCHA”.
- Legal basis for Data processing
The legal basis for processing Data transmitted in the course of sending an email or via the contact form is Art. 6 (1) (a) GDPR. If the user’s aim when making contact is to conclude a contract, the legal basis for processing is Art. 6 (1) (b) GDPR.
- Purpose of the Data processing
We process the personal data that you have sent us voluntarily by email or by completing the contact form purely to make contact or to answer your questions about our products.
- Duration of storage
No contact requests are stored on our web server. All contact requests are forwarded to the responsible contact person within Südzucker AG.
The Data are erased as soon as they are no longer required to achieve the purpose of their collection. For personal data sent by email or via our contact form, this is then the case when the respective conversation with the user has ended. The conversation has ended when the circumstances indicate that the matter concerned has been finally resolved.
- Revocation and removal option
Users can revoke their consent to the processing of personal data at any time. If users contact us by email or via the contact form, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued. Revocation can be made at any time using the contact details under I. and II. and the following email address info@suedzuckergroup.com. See also XI. All personal data stored in the course of making contact will be erased in this case.
VII.2 Newsletter
- Description and scope of Data processing
It is possible to apply for our email newsletter on our website. When you apply to receive our newsletter, we use the necessary Data disclosed by you to send you our email newsletter in accordance with the consent you have granted. We send you a newsletter at regular intervals in order to provide you with news, offers and information about Südzucker AG or our products.
When you apply for an electronic newsletter, we process the following Data in particular:
(1) your first* and last names*;
(2) your email address*;
(3) whether you have consented or objected to receiving such communications, including the date and time*.
If you have registered for a newsletter, we only collect and process the Data you have provided to send the newsletter. Mandatory information (*) and voluntary information are indicated when the Data is collected.
For the technical implementation of dispatch and the provision and supervision of our marketing automation system (see Section “X.4 Use of marketing automation system Net-Results”) we have engaged the agency Interface Marketing BV, Waterstraat 67, 2970 Schilde, Belgium (hereinafter referred to as “Interface Marketing”), which processes the provided Data on our behalf in accordance with the necessary Data security measures as a processor within the meaning of Art. 28 GDPR. The contractual basis has been agreed. The Data are used by Interface Marketing solely for the dispatch of our newsletter via our marketing automation system and for evaluating the performance of our newsletter.
Further information on Interface Marketing is available on the Website at: www.interface-marketing.com.
After registering for the e-mail newsletter, we will inform you about your registration via a system-side information e-mail. In this email, you have the option to unsubscribe from the newsletter. The date and time as well as the source of the consent given to receive a newsletter are also stored in our marketing automation system.
To further improve our newsletter services, Data on the use of our newsletter and your reaction to it are collected in order to create non-personal statistics. To this end, the distributed newsletters contain web beacons or tracking pixels (hereinafter referred to as “Tracking Measures”). The tracking measures are used to collect information on access status, amount of transferred Data, number of openings and clicks, mailshots received, browser, operating system and its interface. This information is assigned to your email address and linked to a unique ID. Conversion tracking can also be used to analyse whether a previously defined action (e.g. linking to an event) has taken place after clicking on the link in the newsletter. The collected Data are merged in our marketing automation system with the information collected on our Website (see “X.4 Use of marketing automation system Net-Results”).
- Legal basis for Data processing
The legal basis for processing Data transmitted in the course of giving consent for the sending of our newsletter and for the temporary storage of Data for the evaluation of performance is Art. 6 (1) (a) GDPR. We have an interest in direct advertising and evaluating your reaction to the content of the newsletter in order to be able to compete successfully in the marketplace.
- Purpose of the Data processing
Personal data is processed by us and our service provider Interface Marketing solely for the purpose of processing and sending our newsletter and evaluating the success of a particular newsletter. Anonymised statistics on your use of and reaction to our newsletter help us to tailor our services to the interests of our subscribers more effectively. This also constitutes the necessary legitimate interest in the processing of Data.
- Duration of storage
Your Data are stored on hosted servers of Interface Marketing at Net-Results. Interface Marketing uses this information solely to send the newsletter and evaluate newsletter use on our behalf. There is no independent use of the Data by Interface Marketing, e.g. for making contact or forwarding to third parties.
The Data are erased as soon as they are no longer required to achieve the purpose of their collection. For personal data that you have provided us with for the purpose of applying for and sending the newsletter, this is then the case if your consent to processing has been revoked. After cancellation of the newsletter, all stored Data are erased.
- Objection and removal option
You can revoke your consent to the processing of personal data for subscription to the newsletter at any time.
You may cancel your subscription to the newsletter at any time by sending a message by email (info@suedzuckergroup.com) to us or via an unsubscribe link provided in the newsletter.
VIII. Website analysis services
VIII.1 Use of Matomo / Piwik
- Description and scope of data processing
We have integrated the open source web analysis service Matomo (formerly Piwik) on our website.
We use cookies on our website that allow us to analyze the browsing behavior of our users. This enables us to analyze how frequently webpages are viewed or website functions are used. The user data collected in this way is anonymized during collection by a technical precaution that has been set up. As a result, it is no longer possible to associate this data with the user who viewed the page. This anonymized data is not stored together with any of the user’s personal data.
If individual pages of our website are accessed, the following data is automatically transmitted to our web server by means of the integrated script via the Internet browser used on your end device:
– IP address of the user’s accessing system
– The website accessed and the time of the call
– The website from which the user came to the website accessed (referrer)
– The subpages viewed from the website accessed
– The length of time spent on the website
– The frequency of access to the website
Country of origin – the device, operating system and browser used.
Following analysis – Cookies are set on your device:
(1) _pk_id: Differentiation between users and sessions. Validity 13 months,
(2) _pk_ref: Determination of traffic source. Validity 6 months,
(3) _pk_ses: Identification of visitors. Validity 30 minutes.
For more information about Matomo’s open source project and the software’s privacy settings, visit https://matomo.org/privacy/.
- Purpose and legal basis for data processing
Statistics cookies are used for the purpose of improving the quality of our website and its contents. By using statistics cookies, we can find out how our website is used and continually optimize our services.
The legal basis for the processing of personal data using cookies for statistical purposes (tracking cookies) is, based on the consent you have granted, Art. 6 (1) (1) (a) GDPR in conjunction with Section 25 (1) TTDSG.
- revocation, objection and removal options
You can object to the collection, storage and use of information by Matomo at any time with future effect using the following methods:
- a) You can prevent the storage of cookies set by Matomo by setting your browser software accordingly.
- b) You can revoke your consent to the collection of your data by Matomo at any time by deactivating it in our cookie settings using the slider under the “Statistics” cluster.
However, please note that if you deactivate or opt-out, you may not be able to use all the functions of the website to their full extent.
IX. Ads and marketing services for advertising and retargeting
We use third-party advertising and retargeting services and offers on our website. In the process, personal data is often submitted to third-party providers or transmitted automatically. The type, scope and purpose of this processing of personal data are listed and explained below.
IX.1 Use of Google Ads and Google DoubleClick
- Description and scope of data processing
We use the online advertising programme “Google Ads” and “Google DoubleClick” from the provider Google to draw attention to our offers in the shop on third-party websites with the help of advertising media (so-called “ads”). We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. In this way, we pursue the interest of showing you advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of advertising costs.
These advertisements are delivered by Google via so-called “ad servers”. For this purpose, we use ad server cookies, which can be used to measure certain parameters for measuring success, such as the display of ads or clicks by users. If you access our shop via a Google ad, Google will store cookies on your device. These cookies are not intended to identify you personally and lose their validity after 30 days. Usually, the unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are stored as values in the cookies.
The marketing cookies used by Google change from time to time and are therefore always currently displayed in our cookie banner incl. purpose and validity period.
These cookies enable Google to recognise your internet browser. If a user visits certain pages of an Ads-customer’s website and the cookie stored on their computer has not yet expired, Google and the customer can recognise that the user has clicked on the ad and has been redirected to that page. A different cookie is assigned to each Google Ads customer. Cookies can therefore not be tracked across Google Ads customers’ websites.
We ourselves do not collect and process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. These evaluations enable us to identify which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising media; in particular, we cannot identify the users based on this information.
Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of Ads Conversion, Google receives the information that you have visited the corresponding part of our website or clicked on an advertisement from us. If you are registered for a Google service, Google can assign the visit to your account. Even if you are not registered at Google or have not logged in to Google services, it is possible that the provider may obtain and store your IP address.
For information from Google on GoogleAds Conversion:
https://ads.google.com/intl/en_uk/home/faq/gdpr/
In addition to GoogleAds Conversion, we also use Ads Remarketing. This is a procedure with which we would like to re-address you. Through this application, our advertisements can be displayed to you when you continue internet surfing after visiting our website. This is done by means of cookies stored in your browser, which Google uses to record and analyse your usage behaviour when you visit various websites. In this way, Google can determine your previous visit to our website. According to its own statements, Google does not combine the data collected in the context of remarketing with your personal data, which may be stored by Google. In particular, according to Google, pseudonymisation is used in remarketing.
For Google’s information on Google Ads Remarketing: https://support.google.com/google-ads/answer/9028179?hl=en.
The data collected by Google is made available to us in aggregated statistics. Here, we learn the total number of users who clicked on an ad and were redirected to a page marked with the Google Ads. This information is used by us to create conversion statistics as well as Custom Audiences and to evaluate these as well. We would like to point out that we do not provide Google with any data for the purpose of carrying out a Custom Audiences process.
- Purpose and legal basis for data processing
It is important for us to make our website or shop attractive and to increase the interaction with our visitors with the help of this service. We use the advertising and marketing services, in particular the use of Google Ads or Google DoubleClick, for our conversion tracking and remarketing. We use the statistics provided by Google via the GoogleAds / Google DoubleClick service exclusively for the performance measurement of our advertisements in order to measure the success of specific marketing measures.
The legal basis for the processing of personal data using marketing cookies as well as functions of GoogleAds and Google DoubleClick is based on your consent via the respective cookie settings or our cookie banner (Art. 6 (1) (a) GDPR).
- Duration of storage
We will delete the information provided to us by Google after six months at the latest.
- Possibility of revocation, objection and removal
You can revoke your consent via the cookie banner or object to the collection, storage and use of information by Google at any time with effect for the future via the following channels /:
a) You can deactivate the storage of cookies through corresponding settings or configure your browser so that you are notified as soon as cookies are set. To do this, you must change the necessary settings in the browser menus Preferences or Options. We would like to point out that some areas of our website may then no longer function properly, i.e. only to a limited extent.
b) You can object by installing the deactivation add-on provided by Google. You can find more information on this at https://tools.google.com/dlpage/gaoptout?hl=en.
c) You can change your settings for cookie use made via our cookie banner at any time via the cookie settings (accessible via the slider icon). Under Marketing, you can switch off the relevant cookies or the use of Google Ads and Google DoubleClick by changing the slider.
However, we would like to point out that in the event of deactivation or opt-out, you may not be able to use all the functions of the website to their full extent.
X. Plugins & Tools
We use extensions, plugins and offers from third-party providers on our website for its uniform presentation and to provide our cookie banner. In doing so, personal data are frequently forwarded or automatically transmitted to third-party providers. The following lists and explains the nature, scope and purpose of this processing of personal data:
X.1 Use of Google reCAPTCHA
- Description and scope of Data processing
On our website and with our contact form, we use Google reCAPTCHA to check and avoid interactions on our website through automated access, e.g. through so-called bots. This is a service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter only referred to as “Google”.
This service enables Google to determine from which Website a request is sent and from which IP address you are using the so-called reCAPTCHA input box. In addition to your IP address, Google may also collect other information that is necessary for the offer and guarantee of this service. Google uses “cookies” or “third-party cookies”. These are text files stored on your computer or the end device you use (tablet, smart phone, etc.) (see VI. Use of cookies).
The following cookies are placed by reCAPTCHA:
(1) _rc::a (Validity: persistent),
(2) _rc::b (Validity: session),
(3) _rc::c (Validity: session),
(4) _rc::d (Validity: persistent).
Google is responsible for Data processing. Google offers further information on the general handling of your user Data at https://policies.google.com/privacy.
- Purpose and legal basis for Data processing
The legal basis for the processing of personal data through the use of Google reCAPTCHA is based on your consent in this regard via the cookie settings or our cookie banner Art. 6 (1) (a) GDPR. The purpose is to improve the security of our website and the prevention of unwanted, automated access in the form of spam or similar and thus also the security of a visitor to our website.
- Revocation, objection and removal option
You can object to the collection, storage and use of information by Google at any time with effect for the future using the following methods:
a) You can object to the collection, storage and use of information by Google at any time with effect for the future via the opt-out link https://adssettings.google.com/authenticated or you can opt out of the Google service.
b) Alternatively, you can prevent the storage of cookies placed by Google by setting your browser software accordingly.
c) You can revoke your consent to the recording of your Data by Google reCAPTCHA at any time by deactivating the slider under the cluster “Functional” in our cookie settings.
However, we would like to point out that if you deactivate or opt-out, you may not be able to use all the functions of the Website to their full extent.
X.2 Privacy settings with Cookiebot
- Description and scope of Data processing
We use the cookiebot.com services of the provider Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter referred to as “Cookiebot”) on our website for the provision of our cookie banner. The system manages the use of third-party providers, technical measures and cookies by means of granted or refused consent.
Cookiebot processes the following Data for the provision:
(1) your IP address, anonymised by Cookiebot during collection (the last three digits are set to “0”);
(2) other information on the browser and version used;
(3) date and time of your visit to our Website and the settings you have made via our cookie banner;
(4) the URL of the accessed website;
(5) an anonymous, random and encrypted key (ID);
(6) your given consent or individual privacy settings;
and uses the local storage on your end device and the placement of cookies (see section “VI. Use of cookies”) to store this information locally in your browser. For this purpose, your individual settings as well as your ID are stored in a cookie so that the settings made are taken into account the next time you visit our website.
The retention period is the period of time during which the Data processed by the cookie banner is stored for the purpose of consent management. Consent Data (consent granted and withdrawal of consent) are kept for one year. No new consent is required within this period, unless new systems are introduced or a new legal or regulatory framework makes it necessary to obtain new consent.
You can find further information on Data processing by Cookiebot in the data protection declaration of Cookiebot at https://www.cookiebot.com/de/privacy-policy/.
- Legal basis and purpose of the Data processing
The purpose of the Data processing by Cookiebot is to provide and manage the consents granted by our website visitors in such a way that the management of consent is data protection-compliant. Cookiebot is used for verifying granted and non-granted consent and managing the individual privacy settings of our users. Processing is carried out for the purpose of obtaining the Website visitor’s consent, providing revocation and objection options, providing evidence that the consent has been obtained (time of consent, end device used) and identifying the user in order to manage their individual privacy settings.
The use of a cookie banner and the management and storage of your consent to the processing of your personal data is based on our legal obligation to provide a data protection-compliant Website (Art. 6 (1) (c) GDPR). The legal basis for the use of the Cookiebot service provider is also Art. 6 (1) (f) GDPR. We have a legitimate interest in legally compliant documentation and verifiability of consent as well as the control of our analysis campaigns based on your consent through the use of specialised contract processors and the associated technical implementation.
- Objection and removal option
The processing of Data to provide a cookie banner is essential for operating the Website. The user has no possibility to object as long as Südzucker is legally obligated to obtain the user’s consent to certain Data processing operations.
X.3 Use of marketing automation system Net-Results
- Description and scope of Data processing
On our Website we have incorporated functions of our marketing automation system “Net-Results”, a service offered by Forward I.T. Solutions LLC. dba Net-Results, 1738 Wynkoop Street, Suite 201, Denver, CO 80202, USA (hereinafter referred to as “Net-Results”).
For the technical provision and supervision of our marketing automation system, we have engaged the agency Interface Marketing BV, Waterstraat 67, 2970 Schilde, Belgium (hereinafter referred to as “Interface Marketing”), which processes the provided Data in accordance with the necessary Data security measures as a contract processor within the meaning of Art. 28 GDPR. The contractual basis has been agreed.
Net-Results uses “cookies” or “third-party cookies”. These are text files stored on your computer or the end device you use (tablet, smart phone, etc.) which enable your use of our Website to be analysed (see VI. Use of cookies).
The following cookies are placed by our marketing automation system:
(1) _acuuid (Validity: 1 day),
(2) _mauuid Validity: 2 years).
The features provided in our marketing automation system enable us or our contractor, Interface Marketing, to identify which email channels our Website visitors and newsletter subscribers use to access our Website. In this way, we can improve our newsletter and the range of information on our Website and tailor them to the needs of our newsletter subscribers and Website visitors.
The information generated by the cookie about your use of this Website (including your IP address) are also transferred to and stored on the Net-Results server in the USA. Net-Results will use this information to evaluate reports on Website activities.
Net-Results also uses services of the provider Amazon Web Services, Inc., 410 Terry Avenue North, Seattle WA 98109, USA as well as a Content Delivery Network (short “CDN”) of the provider cdnma.com.
You can find more information on the Net-Results marketing automation system at https://www.net-results.com/.
- Purpose and legal basis for Data processing
The legal basis for the processing of personal data using cookies for marketing purposes by applying our marketing automation system is the consent you have provided via the cookie settings or our cookie banner in accordance with Art. 6 (1) (a) GDPR.
Furthermore, we have a legitimate interest in the aforementioned processing purposes (Art. 6 (1) (f) GDPR). It is important for the controller to make our Website and newsletter attractive and increase interaction with visitors and registered email subscribers with the aid of our marketing automation system.
- Duration of storage
Your Data are stored on Net-Results servers in the USA. Interface Marketing uses this information solely to send the newsletter and evaluate newsletter use on our behalf and to improve our newsletter and the range of information on our website and tailor them to the needs of our newsletter subscribers and Website visitors. There is no independent use of the Data by Interface Marketing or Net-Results or forwarding to third parties.
The Data are erased as soon as they are no longer required to achieve the purpose of their collection. For personal data that you have provided us with for the purpose of applying for and sending the newsletter, this is then the case if your consent to processing has been revoked. After cancellation of the newsletter subscription, all stored Data are erased in our marketing automation system.
The information collected via cookies is erased on the servers of Net-Results at the latest after two years.
- Revocation, objection and removal option
You can revoke your consent to the processing of personal data for our marketing automation system at any time.
- a) You can prevent the storage of cookies used by Net-Results by setting your browser software accordingly.
b) You can revoke your consent to the recording of your Data by Net-Results at any time by deactivating the slider under the cluster “Marketing” in our cookie settings.
c) Revocation can be made at any time using the contact details under I. and II. and the following email address info@suedzuckergroup.com. See also XI. All personal data stored in our marketing automation system will be erased in this case.
However, please note that if you deactivate or opt-out, you may not be able to use all the functions of the Website (e.g. to apply for our newsletter) to their full extent.
XI. Rights of the Data Subject
When your personal data is processed you are a Data Subject within the meaning of the GDPR and have the following rights with respect to the controller:
- Right to information
You may request the controller to confirm whether your personal data is processed by them. If such processing occurs, you can request the following information from the controller:
(1) the purpose for which the personal data are processed;
(2) the categories of personal data being processed;
(3) the recipients or categories of recipients to whom the personal data have been or will be disclosed;
(4) the planned duration of the storage of your personal data or, if specific information is not available, criteria for determining the duration of storage;
(5) the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning you or to object to such processing;
(6) the existence of the right to lodge a complaint with a supervisory authority;
You have the right to request information about whether your personal data will be transferred to a third country or international organisation. In this context, you can request information about the appropriate safeguards relating to the transfer pursuant to Art. 46 GDPR.
To exercise your right to free information, please contact us directly using the contact details in our Imprint or contact our data protection officer (see Section I and II).
- Right to rectification
You have a right to rectification and/or completion with respect to the controller if your processed personal data is incorrect or incomplete. The controller must rectify the Data without undue delay.
- Right to restriction of processing
You may request the restriction of processing of your personal data under the following conditions:
(1) if you contest the accuracy of your personal data for a period enabling the controller to verify the accuracy of your personal data;
(2) the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
(3) the controller no longer needs the personal data for the purposes of the processing, but you require them for the assertion, exercise or defence of legal claims;
(4) if you have objected to the processing pursuant to Article 21 (1) GDPR and it is not yet certain whether the legitimate interests of the controller outweigh your interests.
If processing of your personal data has been restricted, this Data may – with the exception of Data storage – only be used with your consent or for the purpose of assertion, exercise or defence of legal claims or protecting the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
If the processing has been restricted according to the aforementioned conditions, you shall be informed by the controller before the restriction of processing is lifted.
- Right to erasure
a) Obligation to erase
You may request that the controller erase your personal data without undue delay, and the controller is obligated to do so immediately if one of the following applies:
(1) your personal data are no longer required for the purposes for which they were collected or otherwise processed;.
(2) you revoke your consent on which the processing is based pursuant to Art. 6 (1) (a) and there is no other legal basis for processing the Data.
(3) according to Art. 21 (1) GDPR, you object to the processing of the Data and there are no overriding legitimate grounds for processing, or you object to the processing pursuant to Art. 21 (2) GDPR.
(4) your personal data have been unlawfully processed;
(5) your personal data have to be erased for compliance with a legal obligation in Union or Member State law, to which the controller is subject;
(6) your personal data was collected in relation to information society services offered pursuant to Article 8 (1) GDPR.
b) Information to third parties
Where the controller has made your personal data public and is obligated to erase the personal data pursuant to Art. 17 (1) GDPR, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers who are processing the personal data that you, as the Data Subject, have requested the erasure by such controllers of any links to, or copy or replication of, such personal data.
c) Exceptions
The right to erasure does not exist if the processing is necessary;
(1) for exercising the right of freedom of expression and information;
(2) for compliance with a legal obligation which requires processing by Union or Member State law, to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
(3) for the assertion, exercise or defence of legal claims.
- Right to information
If you have asserted the right of rectification, erasure or restriction of processing over the controller, the controller is obligated to notify all recipients to whom your personal data have been disclosed of the rectification or erasure of the Data or restriction of processing, unless this proves to be impossible or involves a disproportionate effort.
You reserve the right to be informed about the recipients of your Data by the controller.
- Right to Data portability
You have the right to receive your personal data provided to the controller in a structured, commonly used and machine-readable format and have the right to transmit such Data to another controller without hindrance from the controller, provided;
(1) the processing is based on consent in accordance with Art. 6 (1) (a) GDPR; and
(2) the processing is carried out by automated means.
In exercising this right, you shall also have the right to have your personal data transmitted directly from one controller to another, where technically feasible. Freedoms and rights of other persons may not be affected hereby.
The right to Data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority vested in the controller.
- Right to object
You have the right to object, at any time, to the processing of your personal data for reasons that arise from your particular situation pursuant to Art. 6 (1) (e) or (f) GDPR, including profiling based on those provisions.
In addition, you have the right to object at any time to the processing of your personal data for direct marketing purposes; this also includes profiling to the extent that it is related to such direct marketing.
The controller shall no longer process your personal data unless it can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of assertion, exercise or defence of legal claims.
- Right to withdraw the data protection consent declaration
You have the right to withdraw your data protection consent declaration at any time. The withdrawal of consent does not affect the legality of the processing carried out on the basis of the consent until withdrawal.
- Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, workplace or place of the alleged infringement, if you consider that the processing of your personal data infringes the GDPR.
The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78 GDPR.
The data protection authority responsible for us is Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit [Baden-Wuerttemberg State Commissioner for Data Protection and Freedom of Information], residential address: Lautenschlagerstraße 20, 70173 Stuttgart, Germany, postal address: PO Box 10 29 32, 70025 Stuttgart, Germany, further information is available online at www.baden-wuerttemberg.datenschutz.de.
XII. Automated decision-making and profiling
As a responsible company, we do not use your Data for profiling or automated decision-making.
XIII. Links to other websites
This Data Protection Declaration applies exclusively to the Internet presence of Südzucker AG. The webpages in this Internet presence may contain links to third-party websites or social media platforms. Our Data Protection Declaration does not cover these websites or providers. When you leave our website, it is recommended that you carefully read the data protection provisions of each website that collects personal data.
XIV. Security
We take the necessary security measures to protect your personal data from unlawful or unintended access or erasure, modification or loss or unauthorised disclosure. We encrypt your Data during transmission via our website and use SSL (Secure Socket Layer) and TLS (Transport Layer Security) connections. We protect our website and our other systems and personal data by means of appropriate technical and organisational measures against, in particular, loss, destruction, unauthorised access, modification or disclosure to third parties.
XV. Availability and changes
You can view this Data Protection Declaration at https://beefeed.com/privacy/. In addition, you can store or print out this Data Protection Declaration by using the corresponding functions of your Internet browser.
We reserve the right to amend this Data Protection Declaration from time to time or to adapt it to legal requirements and therefore request that you check the current status of our Data Protection Declaration each time you visit our website.
Version: February 2024
