Privacy statement of 11er Nahrungsmittel GmbH and 11er corporate group
The Digital Age entails having to record and process a vast number of data. Of this data, personal information enjoys special protection because it directly affects the personal rights and privacy of real people.
We here at 11er also rely on the processing of certain personal data so that we can provide our services, for example data relating to customers, interested parties, suppliers, other business partners and employees. In this context, we consider it a particular priority to satisfy the legal requirements that regulate the protection of personal data. Moreover, we also regard this as the basis for trustful business relationships with our partners and for trusting cooperation between an employer and their employees as well as with consumers.
The aim of this privacy statement is to provide an overview of the categories of personal data we process, the legal basis and the purposes for which we do so, the principles we follow in doing so, to whom this data may be disclosed, as well as the rights of data subjects and how they can be exercised. This privacy statement and our procedures are aligned with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the relevant national laws and are intended to ensure the protection of personal data.
For reasons of easier legibility, we will not use the masculine and feminine forms of language at the same time here. It goes without saying that all references to persons apply equally to both genders. To make for easier reading, we have also tried to list the following information in a structured way so that you can scroll directly to the topic area that interests you as necessary.
Should any amendments become necessary, we will update this privacy statement accordingly, so that you will always be able to find the most recent version here.
Which personal data do we process?
Different categories of personal data are processed depending on the nature of your interaction with us. Depending on the contexts listed below, these categories of data may include the following:
- For the performance of a contract or the provision of a service:
Including the performance of pre-contractual measures, such as the preparation of offers as well as the fulfilment of other wishes of the contractual partner or interested party pertaining to the conclusion, performance or termination of the contract: personal data, including that of clerks and other persons involved, such as first name/surname; academic degrees or other titles; contact information such as telephone number, fax number, postal address, e-mail address; customer number; information on the nature and content of our contractual relationship; associated correspondence; bank details; if applicable, information on creditworthiness; associated company or other organisation; function; if applicable, scope of power of representation.
- For the performance of contracts in which 11er acts as an employer:
Personal data necessary for the initiation, performance and termination of employment contracts, such as first name/last name; academic degrees or other titles; gender; date of birth; national insurance number; contact information such as telephone number, postal address, e-mail address; information on the nature and content of the employment relationship; correspondence related to the employment relationship and other information; bank details; time sheets; time information from the door opening system at the company premises; recordings made within the framework of video surveillance to ensure food safety and property protection at the company premises in accordance with the relevant company agreement; further personal information provided by the employee, such as curriculum vitae, certificates, work samples, references, photos.
- During visits to our company
Personal data pertaining to incoming visitors, customers, suppliers, service providers and other persons that is necessary for the safe organisation of the visit and for securing our operational processes, such as first name/last name, company, signature, number of visitors attending, internal contact person at our company, registration number, duration of the visit. Recordings made within the scope of video surveillance to ensure food safety and property protection on the company premises in accordance with the relevant company agreement.
- When visiting our website www.11er.at and its sub-pages:
So-called cookies are used on this website and its sub-pages (hereinafter referred to solely as “website”). A cookie is a small file that can be saved on your computer when you visit a website. Cookies are always used to offer visitors additional functions on a website. For example, they can be used to make it easier for you to find your way around a website, to allow you to continue using a website where you left off on your last visit and/or to save your preferences and settings when you visit the website again. Cookies cannot access, read or change any other data on your computer.
Unless specific deletion periods are named in the following sections on cookies, the following generally applies for the storage period: You can control whether and which cookies are to be placed on your computer in the corresponding browser settings. The majority of browsers are configured to allow the unlimited acceptance of cookies by default. You can change this configuration and either limit or block the acceptance of cookies. And you can delete saved cookies on your browser at any time; the cookies can also be deleted automatically with the corresponding browser configuration. Please user your browser’s “Help” function to find out more about how this works.
Please note that blocking or deleting cookies can affect your online experience and may prevent you from making full use of this website. Some of the functions on this website require cookies. Cookies are technically necessary for these functions. These include the login, selecting items, shopping cart, the order process or bookmarking search terms on our website. The purpose of cookies is to offer and execute these functions. The legal basis for setting technically necessary cookies and the processing of any data associated with these cookies is our legitimate interest, consisting of achieving these purposes.
Finally, for advertising purposes and conversion measurement, our website uses the Visitor Action Pixel of Meta Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA, and for the European Union, of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook") and Google Analytics Remarketing and Google AdWords of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and for the European Union, of Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland. Learn more about this in the explanations below. The legal basis for using these cookies is your consent, which you can give in the cookie settings.
Google LLC and Meta Platforms Inc. are certified under the EU-US Data Privacy Framework, and are thus obliged to comply with European data protection laws.
This website uses functions of the Google Analytics 4 web analysis service. This is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses “cookies” scripts and pixels that enable an analysis of how your use the website. Among the data collected are the time spent on the website, language and location, the browser used to access it, the operating system and screen size, but also events such as clicks, scrolls, downloads and page views. Google Analytics 4 uses algorithms and machine learning to recognise usage behaviour across devices from the data and events collected and to automatically combine the sessions into a uniform user experience across devices via identifiers (user ID, Google ID, device ID) that Google stores in your end device by means of cookies.
According to Google, the information generated by the cookie about your use of this website will be transmitted to and stored by Google on servers in Ireland. We do not store any of your data collected by Google Analytics 4.
IP anonymisation is the default setting in Google Analytics 4.
Google will use the information collected on our behalf to evaluate your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.
The tracking technologies described above are used on the basis of your consent as given in the cookie banner, which you can revoke there by disabling tracking at any time with future effect.
You have the option of preventing the storage of cookies by changing the settings in your browser software accordingly; however, we would like to point out that in this case you may not be able to use all the features of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
For the purpose of objecting to the collection of data, you can prevent the collection of your data by Google Analytics by clicking the following link: Disable Google Analytics. This will set an opt-out cookie that prevents the collection of your data during future visits to this website.
This website uses the ”demographic features” function of Google Analytics. This allows reports to be created that contain statements about the age, gender and interests of the site visitors. This data comes from interest-based advertising provided by Google as well as visitor data from third-party providers. This data cannot be assigned to a specific person. You can disable this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics, as shown above under "Objecting to the collection of data".
Our website uses the functions of Google Analytics Remarketing in conjunction with the cross-device functions of Google AdWords and Google DoubleClick. This is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. This function allows the advertising target groups created with Google Analytics Remarketing to be linked with the cross-device functions of Google AdWords and Google DoubleClick. In this way, interest-based, personalised advertisements that have been adapted according to your previous usage and surfing behaviour on one end device (e.g. mobile phone) can also be displayed on another of your end devices (e.g. tablet or PC).
If you have given your consent, Google will link your web and app browsing history to your Google Account for this purpose. In this way, the same personalised advertisements can be delivered to every device on which you log in with your Google account. To support this feature, Google Analytics collects Google authenticated IDs of users, which are temporarily linked to our Google Analytics data in order to define and create target groups for cross-device advertising. You can permanently object to cross-device remarketing/targeting by disabling personalised advertising in your Google account; follow this link to do so: https://www.google.com/settings/ads/onweb/.
The aggregation of the collected data in your Google account is based exclusively on your consent, which you can give or revoke at Google (Art. 6 (1) letter a GDPR). In the case of data collection processes that are not merged in your Google account (e.g. because you do not have a Google account or have objected to the merging), the collection of the data is based on the consent you give in the cookie settings, and that you can withdraw with effect for the future.
Further information and the data protection provisions can be found in Google's privacy statement at: https://www.google.com/policies/technologies/ads/.
This website uses Google AdWords. AdWords is an online advertising programme provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”).
We use so-called conversion tracking as part of Google AdWords. If you click on an ad displayed by Google, a cookie is set for conversion tracking. Cookies are small text files that the internet browser stores on the user's computer. These cookies become invalid after 30 days and are not used to personally identify users. If the user visits certain pages of this website and the cookie has not yet expired, both Google and we are able to ascertain that the user has clicked on the ad and been redirected to this page.
Each Google AdWords customer is assigned a different cookie. The cookies cannot be tracked via the websites of AdWords customers. The information collected using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. Customers are informed of the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.
If you no longer wish to participate in tracking, even though you have given your consent to this, you can also withdraw your consent by disabling the Google Conversion Tracking cookie under user settings in your Internet browser. You will then no longer be included in the conversion tracking statistics.
You can find more information about Google AdWords and Google Conversion Tracking in Google's privacy statement: https://www.google.de/policies/privacy/.
You can configure your browser so that you will be informed about the placement of cookies and only allow cookies in individual cases, exclude the acceptance of cookies in specific cases or in general and activate the automatic deletion of cookies when you close your browser. Disabling cookies may limit the functionality of this website.
Our website uses the Visitor Action Pixel and the Conversions API from Facebook, Meta Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”) for conversion measurement. This means that, firstly, the behaviour of page visitors can be tracked after they have been redirected to the provider's website by clicking on a Facebook ad and, secondly, page visitors who log in to Facebook can be shown ads from the provider there. As a result, the impact of Facebook ads can be evaluated for statistical and market research purposes and future advertising measures can be optimised.
Conversions API is simply an interface with which we transmit data about your user behaviour on our website to Meta (Facebook) for evaluation. Meta (Facebook) uses the Conversions API to send a unique ID to our server when a user clicks on a Facebook ad and lands on a website. Our server then tracks the user by this ID as they visit different pages on our website. The server remembers what the user does, which "events" he triggers, e.g. whether he completes a purchase, fills out a form, puts a product in the shopping basket or carries out any other action. Our server finally sends a message to Meta (Facebook), and in this way informs Meta (Facebook) of the events or actions carried out by the user. Meta (Facebook) evaluates user behaviour so that we can show you advertisements that match your usage behaviour on our website.
The use of Meta Pixel and Conversions API and the associated tracking are based on your consent, which you give in our cookie consent and can revoke at any time with future effect. You can also revoke this consent by disabling it in your Facebook account.
You can also disable the "Custom Audiences" remarketing feature in the Ad Settings section at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. You must be logged in to Facebook to do this. If you do not have a Facebook account, you can disable Facebook's usage-based advertising on the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/de/praferenzmanagement/.
- For order processing as part of our online gift basket shop:
Personal data of interested parties that is necessary to process the order.
- To carry out competitions and other information about companies, products and services:
Personal data, the provision of which you consent to in the aforementioned contexts and which is necessary to carry out the competition in question or to provide the information in question, such as first name/last name, contact information such as postal address, e-mail address, telephone number. In the event of you winning, your data will be forwarded to the partner institutions for the purpose of redeeming the prize.
- To respond to enquiries via the contact form on our website:
Personal data which you provide and which you explicitly consent to the processing of when you provide it, and which is necessary to respond to enquiries via our website, namely first name/last name, e-mail address, the associated request. The provision of a postal address and telephone number in our Internet contact form is voluntary and is not mandatory if you wish to contact us, but may facilitate our response in individual cases.
- To arrange a guided tour using the relevant form on our website:
Personal data which you provide and which you explicitly consent to the processing of when you provide it, and which is necessary to arrange and carry out a production tour, namely first name/last name and email address of the visit organiser, name of the visitor group, email address, number of people taking part, your desired date including time, your associated message to us. You may, but are not obliged to, provide us with a telephone number and a time when we can reach you.
- To apply for a vacancy or on your own initiative via the "Careers" page of our website:
Personal data that you provide to us via the relevant internet form or by uploading your documents, and which you explicitly consent to the processing of when you provide it, and which is necessary to complete the application process, namely first name/last name, date of birth, nationality, your postal address, e-mail address and telephone number, the position you are seeking or your area of interest, the documents you provide such as a covering letter, CV, certificates.
- When using the download area of our website:
Please note that we provide you with a generic user name and password and that we do not track the company and product information you download. When contacting us to obtain this information, you can explicitly consent to the processing of your contact information in the same way as for other matters.
- To illustrate various company activities for the purpose of documenting special occasions or promoting social cohesion among employees - for example, in the context of company celebrations, anniversaries, excursions, etc. - as well as to introduce new employees (the latter combined with a short personal introduction):
Photographs subsequently made available in-house or used as part of the staff magazine, whereby any employee may request that they be removed at any time. During the introductory presentation, some additional personal details such as field of activity and hobbies are provided, whereby it is pointed out in each case that the disclosure is made on a voluntary basis.
- When using discount cards, especially by employees for discounted purchase in our factory outlet:
Name and usage data in order to be able to electronically control the beginning and end of card usage, as well as for statistical purposes.
Why do we process personal data?
As can be seen from the explanations regarding the individual data categories above, we process personal data for different purposes. Irrespective of the purpose, we ensure that processing is carried out in accordance with the law, i.e. on the basis of a permissible legal basis. To summarise, the following contexts can be named:
To perform a contract or provide related services, which may include pre-contractual measures, such as purchasing products and services from suppliers and offering and selling our products and services.
To comply with legal obligations, for example with regard to the keeping of proper business records, the fulfilment of labour law regulations or compliance with food law requirements.
To protect a legitimate interest of 11er, for example in connection with the protection of our company premises, to enable and simplify corporate processes, to optimise our Internet presence or to carry out marketing measures to existing customers for our own products. In each case, the interests and fundamental rights and freedoms of the data subject are weighed against one another to determine whether they are more important and the measure is therefore not permissible.
Unless covered by legal bases already mentioned, we obtain your consent before processing personal data, which you always provide on a voluntary basis. This occurs in particular in connection with offers on our website, before participating in competitions, before using contact forms or before providing personal data, including upload functions in connection with application procedures.
How long is personal data kept?
We store personal data for as long as is necessary to fulfil the purpose for which the data was provided or collected. In connection with a competition, for example, this means that the data is only processed and stored until the winner is identified and is then deleted.
Depending on the purpose and legal basis, there are different retention periods, although there may be legitimate interests on the basis of which we may retain information for a reasonable period after your interaction with us, for instance to comply with obligations to provide evidence and to defend rights.
To whom, if anyone, is personal data disclosed?
Depending on the context, personal data may be disclosed to processors and service providers who are specifically employed by us to fulfil the purpose of the processing and who are contractually bound to us. This includes, for example, agencies that support us in the maintenance of our website or service providers for the maintenance of our IT systems. In order to provide these services, these service providers may have access to, store or otherwise process personal data on our behalf. Our agreements with these service providers permit the processing of personal data only in accordance with the agreements concluded or any other written instructions by us and not for their own purposes and subject to them ensuring appropriate security measures. Personal data is not transferred to processors and service providers outside the European Union or the European Economic Area, and personal data is only processed by us within the EU. This does not include evaluations by Google Analytics and the Visitor Action Pixel or the Facebook Conversions API regarding the use of our website; please refer to the comments above regarding Google Analytics.
How do we ensure that your personal data is protected?
We take a number of technical and organisational measures to ensure the protection of your personal data, including protection against unauthorised or unlawful processing and accidental data loss, data destruction or data corruption. Access to personal data is also limited to only those persons who need to have access to the data in order to fulfil the purpose of the processing. Furthermore, we use suitable authentication procedures to ensure that the data is only disclosed to authorised persons. We require similar contractual measures from our processors to ensure confidentiality and data security.
What rights do you have regarding personal data we process about you?
With regard to our processing of your personal data, you have the right of access, the right of rectification, the right of erasure, the right to restrict processing, the right of data portability and the right to object to the processing of personal data concerning you.
If you wish to exercise these rights, please contact us directly at email@example.com.
You also have the right to lodge a complaint with the data protection authority if you suspect a violation of your rights with regard to your personal data.
Contents of other websites and social media
If you use profile pages created by 11er on social networking sites such as Facebook or Instagram, or where 11er otherwise has a presence on the Internet, such as YouTube, you should familiarise yourself with the options these sites offer you in terms of how you share personal data on your social profile(s). As these websites are governed by the privacy policies and practices of those providers, we encourage you to read their privacy statements, terms and conditions, and similar information so that you understand how your personal information will be used.
Our website may also contain links to third-party websites. Although we choose these third-party websites with care, 11er cannot accept any liability for the content shown or offered on these sites or for the use of your personal data by these third parties. In such cases, we also encourage you to read their privacy statements, terms and conditions, and similar information so that you understand how your personal information will be used.
Handling the personal data of children
Our website and any other communication are not primarily aimed at children. However, we take special care if there is any interaction with children. Children aged 16 or under, where required by national law, should obtain the consent of a parent or guardian before providing us with any personal data. Should we discover that the individual is below the age limit and has not obtained the consent of a parent or guardian prior to providing their data, we will not process or store that data without the consent of a parent or guardian.