This privacy policy provides information about processing of your personal data on our website www.oetker.ca

It also covers the following social media profiles:

Facebook Page Dr. Oetker Canada - https://www.facebook.com/droetkercanada/

1. Controller

The following company is the controller for all data processing activities described below:

Dr. Oetker Canada Ltd.
2229 Drew Road
Mississauga, ON, L5S 1E5, Canada
Phone: (905) 678-1311

2. Details about specific processing activities

●      Events & tours

You may sign up for events or tours through our website. We use the data provided by you through registration forms to fulfill our contract, for example, to reserve a tour for you.

Legal basis for this processing activity is the fact that data processing is necessary for performance of a contract or entering into such a contract (Art. 6 para. 1 b) GDPR). Information that is entered through mandatory fields in registration forms is necessary for participation in an event or tour (i.e. necessary to form a contract). If you do not provide this information you cannot participate in an event or tour.

● Customer retention / Advertising similar goods and services

We also use your contact data for advertising purposes in cases in which we do not need your consent to do so (for example, for advertising through mail or direct marketing for our own similar goods and services based on an existing customer relationship).

Legal basis for this processing activity is our legitimate interest (Art. 6 para. 1 f) GDPR). Our legitimate interest lies in customer care and in providing information about our products.

Please refer to section “Right to object (Art. 21 GDPR)” in particular. You may object to these processing activities at any time and free of charge, for example by contacting us via the contact details provided in the section “Controller”.

● Promotions: Raffles / loyalty programmes / other promotions

If you participate in a raffle, loyalty programme or other promotion (for example, by claiming a cashback for a product that you have bought in a shop) we will only use the data provided by you to organise the promotion as long as you did not provide further consent for other processing activities (for example, for receiving our newsletter).

Legal basis for this processing activity is the fact that data processing is necessary for performance of a contract or entering into such a contract (Art. 6 para. 1 b) GDPR). Information that is entered through mandatory fields in registration forms is necessary for participation in a promotion (i.e. necessary to form a contract). If you do not provide this information you cannot participate in a promotion.

● Contacting us / feedback

You may contact us through forms or via email. We will process your data in order to reply to you. Legal basis for this processing activity is your consent (Art. 6 para. 1 a) GDPR).

● Newsletter

You may sign up for our email newsletter. We will process your data in order to send you email and to evaluate which emails you open. Legal basis for this processing activity is your consent (Art. 6 para. 1 a) GDPR). You may withdraw your consent for future processing at any time, for example, by clicking the “unsubscribe” link in one of our newsletters.

We send emails through the SC-Networks GmbH, Würmstraße 4, 82319 Starnberg, Germany (“Evalanche”). Evalanche processes your data on our behalf (data processor).

● Server logs

When accessing our website, we will process data in server log files. This data derives from your terminal equipment and may include personal data. In particular, we process the following data:

- The operating system of your terminal equipment

- The browser used by you

- The name of your provider

- Your IP address

- Data and time of access

- Accesses pages and search terms (if applicable)

- The website that referred you to our website (referrer)

This processing activity is necessary to ensure the operation of our website, to optimise the content and deliverability of our website, and to provide the necessary information to public bodies in case of a cyber attack. Therein also lies our legitimate interest for data processing. Legal basis for this processing activity is our legitimate interest (Art. 6 para. 1 f) GDPR).

We regularly delete this data after 14 days, in case of misuse after administrative or legal proceedings are finished.

● Tracking and cookies

Our website / app uses cookies and similar technologies that store information on your terminal equipment or accesses such information for the following purposes:

● Providing our website / app

● Analytics and personalisation - Tracking

● (Re-)Marketing / data sharing with third parties

Note on data processing in the United States

For the purpose of "analytics and personalisation - tracking", we work with technology providers (as data processors) with whom a transfer of your personal data to the United States cannot be ruled out.

Likewise, for the purpose of "(Re-)Marketing / data sharing with third parties", we work with partners with whom a transfer of your personal data to the United States cannot be ruled out.

Where possible, we instruct our technology providers to process your personal data in data centres within the European Union.

However, in the case of technology providers or partners who also have an establishment in the United States or are located there with other companies of their group of companies, we cannot rule out the possibility of US security services gaining access to your personal data. This may occur, for example, via remote access or a legally binding instruction to our technology provider or partner. In particular, this may expose you to the risk that US security services may access your personal data without specific cause and on a large scale basis, and that you may not be able to take effective legal action against that in the United States.

Providing our website / app

We use cookies and similar technologies to ensure certain features of our website. This is strictly necessary to provide our website. By doing this, we can, for example,

●       Save your preferred language version of our website or similar settings for your next visit.

●       Distribute requests to our website across multiple web servers (load balancing).

●       Provide a uniform context (session) to multiple requests to our website, in order to facilitate login-secured parts of our website or checkout / payment processes.

●       Save your consent regarding tracking tools and active / deactivate tracking tools according to your choice.

Our legitimate interest for these processing activities lies in the uninterrupted usability of our website and in ensuring that user interactions are actually linked to an authenticated user.

Legal basis for this processing activity is our legitimate interest (Art. 6 para. 1 f) GDPR

Analytics and personalisation - Tracking

We use cookies and similar technologies to evaluate user behaviour on our website and to adapt it according to this.

Provided you have given your consent, we process information on your terminal equipment and the browser you are using (in the case of the website) every time you interact with our website. For example, we can find out with which language settings you use our website, whether you use a smartphone or a desktop computer or from which country you access our website.

In addition, we process information about how you interact with our website, e.g. from where you are referred to our website, how long you use our website and the path you take through individual sub-pages. For example, we can record whether you found us via a search engine (and if so, under which search term) or an advertisement, how long you spent browsing the content of a particular page and how many pages you visited in total.

We use this information to create analyses of user behaviour on our website and to optimise the website / accordingly. In some cases, we create several different versions of our website, which we present to individual users or user groups, and use cookies or similar technologies to evaluate which version is used by you in which way.

Legal basis for this processing activity is your consent (Art. 6 para. 1 a) GDPR . You may withdraw or change your consent for future processing at any time by changing your tracking settings[5] . Additionally, you may change your browser settings regarding cookies and similar technologies.

We use the following products for analytics and personalisation:

Google Analytics / Google Optimize (Website)

Google Analytics and Google Optimize are provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google processes your data on our behalf (data processor). Our configuration of Google Analytics and Google Optimize does not allow Google to use data that is gathered through Google Analytics or Google Optimize to improve Google products and services.

Please find more information about the cookies that are used by Google Analytics and their respective storage periods here. Google Optimize also uses the cookies that are set by Google Analytics (please refer to the documentation here).

Google is established in the United States through other companies of the same group of companies (in particular, through Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043. USA) and uses them as data processors, so that we cannot exclude a transfer of your personal data to the United States.

Google Firebase Analytics (App)

Google Firebase Analytics is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google processes your data on our behalf (data processor). Our configuration of Google Firebase Analytics does not allow Google to use data that is gathered through Google Firebase Analytics to improve Google products and services.

Google is established in the United States through other companies of the same group of companies (in particular, through Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043. USA) and uses them as data processors, so that we cannot exclude a transfer of your personal data to the United States.

(Re-)Marketing / data sharing with third parties

We use cookies and similar technologies to evaluate the reach of our advertising campaigns and how users who have become aware of our website through our advertising campaigns use our services. We also use cookies and similar technologies to record which users use our website in order to form groups (so-called audiences) and to address these audiences on other online platforms with personalised advertising.

We also transfer this information to third parties who may also process it for their own purposes.

If you have consented to this, we will record whether you have reached us via one of our advertising campaigns and how you then interact with our website. For example, we can record which share of users who have seen an ad actually use content from our website. This enables us to better plan and control our advertising budget.

In addition, we group the users of our website in so-called audiences. Audiences are user groups that are put together by us according to certain criteria (e.g. all users who have accessed a category of recipes). If the users of an audience are also users of our marketing partners, we can individually address these users  with advertisements (re-marketing) through our marketing partner’s platform.. Information that our marketing partner has about his users in one of our audiences can also be used by him to suggest similar user groups to us for advertising.

To this end, we inform our marketing partners that you have visited our website and whether you have visited pages defined by us or have carried out other actions (e.g. registered an account). Our marketing partners may also use this information for their own purposes, for example to further personalise your profile on their own platform.

Legal basis for this processing activity is your consent (Art. 6 para. 1 a) GDPR. You may withdraw or change your consent for future processing at any time by changing your tracking settings[8] . Additionally, you may change your browser settings regarding cookies and similar technologies.

Our marketing partners are separate controllers for the data processing that they carry out for their own purposes. The marketing partner also provides you with data protection information.

We use the following products for (re-)marketing and share data with the following third parties

Facebook Pixel (Website)

Facebook Pixel is provided by Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour Dublin 2, Ireland (“Facebook”). More information about Facebook Pixel can be found here. Please also refer to the Facebook Data Policy.

Facebook is established in the United States through other companies of the same group of companies (in particular, through Meta Platforms Inc., 1 Hacker Way Menlo Park, CA 94025, USA) and uses them as data processors, so that we cannot exclude a transfer of your personal data to the United States.

Google Ads / Doubleclick (Website)

Google Ads / Doubleclick is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).  More information about cookies set by Google can be found here. Please also refer to the Google Privacy Policy.

Google is established in the United States through other companies of the same group of companies (in particular, through Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043. USA) and uses them as data processors, so that we cannot exclude a transfer of your personal data to the United States.

Google Floodlight (Website)

Google Floodlight is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).  More information about cookies set by Google can be found here. Please also refer to the Google Privacy Policy.

Google is established in the United States through other companies of the same group of companies (in particular, through Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043. USA) and uses them as data processors, so that we cannot exclude a transfer of your personal data to the United States.

The Trade Desk Pixel (Website)

The Trade Desk Pixel is provided by The UK Trade Desk Ltd.10th Floor, 1 Bartholomew Close, London EC1A 7BL, Great Britain (“The Trade Desk”). Please also refer to the The Trade Desk Privacy Policy (among other things for information about cookies storage periods) and the possibility to opt-out from data processing by The Trade Desk.

For the United Kingdom, the European Commission has issued an adequacy decision pursuant to Art. 45 GDPR. The United Kingdom thus offers an adequate level of protection for the processing of personal data.

The Trade Desk is established in the United States through other companies of the same group of companies (in particular, through The Trade Desk Inc., 42 N. Chestnut St., Ventura, CA 93001, USA) and uses them as data processors, so that we cannot exclude a transfer of your personal data to the United States.

Facebook App Ads (App)

Facebook App Ads is provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour Dublin 2, Ireland (“Facebook”). More information about Facebook App Ads can be found here. Please also refer to the Facebook Data Policy.

Facebook is established in the United States through other companies of the same group of companies (in particular, through Meta Platforms Inc., 1 Hacker Way Menlo Park, CA 94025, USA) and uses them as data processors, so that we cannot exclude a transfer of your personal data to the United States.

● Facebook Page

We run a Facebook Page. Facebook Page is provided by Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). When using the Facebook Page, personal data may be processed by Facebook, for which Facebook and we are jointly responsible. This joint controllership is governed by the Facebook “Page Controller Addendum”.

All key information about data processing on the Facebook Page can be found in the Facebook Data Policy and the Facebook Cookie Policy.

There you will also find all information on the nature and scope of the personal data affected by the data processing and your rights to information, confirmation, correction, deletion, restriction, data portability and complaint with a supervisory authority.

Legal basis for the data processing on the Facebook Page is the legitimate interest of us, Facebook and their customers to provide advertisements, recommendations and to receive insights and measurements (Art. 6 para. 1 f) GDPR). You may object to data processing towards Facebook (please refer to the Facebook Data Policy and the Facebook Cookie Policy).

We have no influence on data processing by Facebook. We do not receive any data from Facebook that would enable us to identify Facebook Page users or analyse their usage behaviour. Nor do we use any tools of our own within the framework of the Facebook Page that would allow us to identify or analyse such users.

3. Withdrawal of consent (Art. 7 para. 3 GDPR)

If processing is based on your consent (Art. 6 para. 1 a) GDPR) you may withdraw your consent for future processing at any time. You may reach us through the contact data that is provided in the "Controller" section or use options for withdrawal of consent that are described in the context of a specific processing activity.

4. Right to object (Art. 21 GDPR)

If processing is based on our legitimate interest (Art. 6 para. 1 f) GDPR) you have the right to object, on  grounds  relating  to  your  particular  situation, at any time to processing of personal data that concerns you. This also extends to profiling.

Where we process personal data for marketing purposes, you have the right to object at any time to processing of personal data that concerns you for such marketing. This also extends to profiling that is related to such direct marketing.

5. Further data subject rights

With regard to personal data that concerns you, you may also use the following rights:

●       Right to access (Art. 15 GDPR)

●       Right to rectification (Art. 16 GDPR)

●       Right to erasure (‘right to be forgotten’) (Art. 17 GDPR)

●       Right to restriction of processing (Art. 18 GDPR)

●       Right to data portability (Art. 20 GDPR)

You also have the right  to  lodge  a  complaint  with  a  supervisory  authority (Art. 77 GDPR)

6. Automated individual decision-making, including profiling

Automated  individual  decision-making,  including  profiling, does not take place.

7. Version information

Last revision: 25 July 2022