Data protection declaration of the 11er Nahrungsmittel GmbH and the 11er corporate group


The digital age entails the collection and processing of a wealth of data. Of this data, information related to persons enjoys particular protection because it directly affects the personal rights and privacy of people.

 

We at 11er also rely on processing certain personal data in order to render our services, for example data from customers, interested parties, suppliers, other business partners and employees. In this context, one of our top priorities is satisfying the statutory requirements that regulate the protection of personal data. But we also see this as a basis for a trusting business relationship with our partners and for trustworthy interaction between employer and employees as well as with our consumers.

 

The goal of this data protection declaration is to provide an overview of those categories of personal data we process, the legal basis on which we do so and the purposes thereof, which principles we hereby observe, to whom this data is disclosed if need be, as well as the rights of the data subject and how these can be exercised. This data protection declaration as well as our procedures are based on the General Data Protection Regulation (EU) 2016/679 (GDPR) as well as the relevant national laws and aims to guarantee the protection of personal data.

 

For reasons of easier legibility, we will not be using the masculine and feminine linguistic forms simultaneously in this text. It goes without saying that all references to persons apply equally for both genders. To ensure a better legibility, we have also tried to structure the following information so that you can scroll directly to the topic that interests you as needs be.

 

We will update this data protection declaration accordingly if amendments become necessary so that you will always find the latest version here.

Which personal data is processed?

Different categories of personal data will be processed depending on your kind of interaction with us. These data categories can comprise the following – depending on the contexts listed below:

(including the performance of pre-contractual measures such as the preparation of offers as well as the fulfilment of other wishes of the contractual partner or interested party directed at the conclusion, execution or termination of a contract): Personal data including that of officials in charge and other persons involved, such as first/last name; academic degrees or other titles; contact information such as phone number, fax number, postal address, email address; customer number; information on the nature and content of our contractual relationship; associated correspondence; bank details; possibly information on credit standing; associated company or other organisation; function; if necessary, the scope of the power of representation.

Personal data that is necessary to set up, fulfil and terminate employment contracts, such as first/last name; academic degrees or other titles; gender; date of birth; social insurance number; contact information such as phone number, postal address, email address; information on the nature and content of the employment; correspondence and other information associated with the employment relationship; bank details; time sheets; time information from the door opening system on the business premises; recordings made within the scope of video surveillance to guarantee food safety and the protection of the properties on the business premises in accordance with the pertinent works agreement; further personal information provided by the employee such as CV, certificates, work samples, references, photos.

Personal data of visitors, visiting customers, suppliers, service providers and other visiting persons, which are required to make their visit safe and to safeguard our company processes, such as first/last name, company name, signature, number of accompanying persons, internal contact person on our side, number plate, time of visit.

So-called cookies are used on this website and sub-pages (hereinafter referred to solely as “website”). A cookie is a small file that can be saved on your computer when you visit a website. Cookies are always used to offer visitors additional functions on a website. For example, they can be used to make it easier for you to find your way around a website, to allow you to continue using a website where you left off on your last visit and/or to save your preferences and settings when you visit the website again. Cookies cannot access, read or change any other data on your computer.

 

When you visit our website, a pop-up window about cookies appears with information on how we use cookies on our website within the scope of this privacy statement and that allows you to adjust the settings of and your consent to the use of certain cookies. By granting your consent, you agree to the use of the corresponding cookies and the associated processing of certain data. You can withdraw your consent at any time by changing the cookie settings on either our website or in your browser configuration. The legitimacy of the data processing based on your consent up to the time of its withdrawal is not affected by the withdrawal.

 

We explain which kind of cookies are used and which data is processed by these cookies in the following elaboration.

 

Unless specific deletion periods are named in the following sections on cookies, the following generally applies for the storage period: You can control whether and which cookies are to be placed on your computer in the corresponding browser settings. The majority of browsers are configured to allow the unlimited acceptance of cookies by default. You can change this configuration and either limit or block the acceptance of cookies. And you can delete saved cookies on your browser at any time; the cookies can also be deleted automatically with the corresponding browser configuration. Please use your browser’s “Help” function to find out more about how this works.

 

Please note that blocking or deleting cookies can affect your online experience and may prevent you from making full use of this website.

 

Some of the functions on this website require cookies. Cookies are technically necessary for these functions. These include the login, selecting items, the shopping cart, the order process or bookmarking search terms on our website. The purpose of cookies is to offer and execute these functions. The legal basis for setting technically necessary cookies and the processing of any data associated with these cookies is our legitimate interest, consisting of achieving these purposes.

 

We also use cookies on our website that allow us to analyse your surfing behaviour and how you use our website, in particular cookies from Google Analytics (more details can be found below). We use these cookies to analyse the search words you enter on our website, which functions you use, how often and for how long, and which sub-pages you visit on our website, how often and for how long. The data collected in this way is pseudonymised by technological measures. This means that the data can no longer be assigned to you. Nor is the data saved together with any other of your data. The data that is collected allows us to constantly optimise our website and its functions and to adapt it to your needs. The legal basis for setting the cookies that are used for this purpose and the associated processing of any data would already be given through our legitimate interest, which consists of achieving these purposes. However, we still only use these cookies if you agree to this in the cookie settings and thus consent to their use.

 

We have a social media wall on which we post contributions from our social media channels. We use Tint Up for this social media wall, a service that is provided by Hypemarks Inc, 122 East Houston St, San Antonio TX 78205, USA. This service uses not only the aforementioned Google Analytics cookies but also other cookies related to the surfing and usage behaviour of the contents on our social media wall. These cookies are placed by Tint Up, Facebook and Instagram. Instagram belongs to Facebook. We only use these cookies if you agree to this in the cookie settings and thus consent to their use.

 

And finally, our website uses the visitor tracking pixel of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”) as well as Google Analytics Remarketing and Google Adwords from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA for advertising purposes and to measure conversions. Learn more about this in the explanations below. The legal basis for using these cookies is your consent, which you can give in the cookie settings.

 

Google Inc., YouTube and Facebook Inc. are certified under the US-EU-Privacy-Shield agreement, and are thus obliged to comply with European data protection laws. However, we would like to point out that the European Court of Justice has invalidated the resolution by which the EU Commission declared the level of data protection granted by this agreement to be adequate.

 

The transfer of data to Google Inc., YouTube, Tint Up and Facebook Inc. takes place without suitable guarantees in accordance with the GDPR. There is a risk that these recipients are unable to comply with the regulations of European data protection laws. US American data protection laws do not grant your data the same level of protection as the GDPR, in particular, they have only very limited rights for affected individuals. There is also risk of US authorities accessing your data for the purposes of monitoring and surveillance.

 

If you click “Yes, I accept all cookies including US providers” in the cookie consent, you thus agree to the use of cookies and the associated transfer of data to the aforementioned recipients in the USA in accordance with this privacy statement.

 

You can withdraw all and any consent at any time independent of each other with effect for the future in the cookie settings, without the legitimacy of the data processing based on your consent up to the time of its withdrawal being affected by the withdrawal.

 

This website uses functions of the web analysis service Google Analytics. This is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses so-called "cookies". These are text files that are saved on your computer and that allow an analysis of how you use the website. The information about your use of this website generated by the cookie is usually sent to and stored on a Google server in the USA.

 

We have activated the IP anonymisation function on this website. Consequently your IP address will be shortened by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area before being sent to the USA. The full IP address will only be sent to a Google server in the USA and shortened there in exceptional cases. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activities and to render further services for the website operator connected with the use of the website and the Internet. The IP address sent from your browser within the scope of Google Analytics will not be combined with other data from Google.

 

You can prevent cookies from being saved through a corresponding setting in your browser software; however, we would like to point out that in this case you may not be able to use all of the functions provided on this website. You can also prevent the data that is generated by the cookie and related to your use of the website (incl. your IP address) being sent to and processed by Google by downloading and installing the browser plug-in available from the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

 

In the sense of an objection to the collection of data, you can prevent Google Analytics from collecting your data by clicking the following link: Deaktivate Google Analytics. An opt-out cookie is set that prevents your data from being collected during future visits to this website.

 

More information on how Google Analytics handles user data can be found in the Google Privacy Policy: https://support.google.com/analytics/answer/6004245?hl=en.

 

This website uses the function “demographic features” of Google Analytics. This allows the generation of reports that contains statements on the age, gender and interests of the visitor to the website. This data comes from interest-based advertising by Google as well as visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time in the display settings of our Google account or generally prohibit the collection of your data by Google Analytics as explained above in “objection to data collection”.

 

Our website uses the functions of Google Analytics Remarketing in connection with the multi-device functions of Google AdWords and Google DoubleClick. This is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. This function allows advertising target groups created with Google Analytics Remarketing to be linked to the multi-device functions of Google AdWords and Google DoubleClick. In this way, interest-based, personalised advertising messages that have been adapted to you depending on your earlier usage and surfing behaviour on one device (e.g. mobile phone) can also be shown on another of your devices (e.g. tablet or PC).

 

If you have granted a corresponding consent, Google links your web and app browser history with your Google account for this purpose. In this way the same personalised advertising messages can be shown on any device on which you log into your Google account. To support this function, Google Analytics collects Goggle-authenticated IDs of users that are temporarily linked to our Google Analytics data to define and create target groups for the multi-device advertising. You can block multi-device remarketing/targeting on a permanent basis by deactivating personalised advertising in your Google account; follow this link to do so: https://www.google.com/settings/ads/onweb/.

 

The data collected in your Google account is only summarised on the basis of your consent, which you can grant or revoke in Google (point (a) of Art. 6 (1) GDPR). In the case of data collection processes that are not merged in your Google account (e.g. because you do not have a Google account or have objected to the merging), the collection of the data is based on the consent you give in the cookie settings, and that you can withdraw with effect for the future.

 

Further information on the data protection regulations can be found in the Google Privacy Policy at: https://www.google.com/policies/technologies/ads/.

 

This website uses Google AdWords. AdWords is an online advertising program of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”).

 

We use so-called conversion tracking within the scope of Google AdWords. If you click an ad placed by Google, a cookie will be set for conversion tracking. Cookies are small text files that the Internet browser saves on the user’s computer. These cookies become invalid after 30 days and are not used for the personal identification of the user. If the user visits certain pages of this website and the cookie has not yet expired, both Google and we can see that the user has clicked the ad and been forwarded to this page.

 

Each Google AdWords client receives a different cookie. The cookies cannot be tracked via the websites of AdWords clients. The information gathered with the help of the conversion cookies is used to generate conversion statistics for AdWords clients who have decided on conversion tracking. The client learns the total number of users who have clicked their ad and have been forwarded to a page tagged with a conversion tracking tag. However, they do not receive any information that would allow them to identify the user personally.

 

If you no longer wish to participate in tracking, even though you have given your consent to this, you can also withdraw your consent by deactivating the Google Conversion Tracking cookie under user settings in your Internet browser. You will then no longer be included in the conversion tracking statistics.

 

Further information on Google AdWords and Google Conversion Tracking can be found in the Google Privacy Policy: https://www.google.de/policies/privacy/.

 

You can configure your browser so that you will be informed when cookies are set and to only allow cookies in individual cases, to reject the acceptance of cookies for certain cases or in general, or to activate the automatic deletion of cookies when you close your browser. If you deactivate cookies, the proper function of this website may be restricted.

 

Our website uses the visitor action pixel from Facebook, Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”) to measure conversions. This allows tracking of the page visitor’s behaviour after they have been forwarded to the provider’s website by clicking a Facebook ad. This means that the efficacy of the Facebook ads can be analysed for statistical and market research purposes and future advertising measures can be optimised.

 

The data that is collected is anonymous for us, the operators of the website and we can draw no conclusions about the identity of the user. However, the data is saved and processed by Facebook so that it can be linked to the respective user profile and Facebook can use the data for its own advertising purposes, in accordance with the Facebook Privacy Policy. This allows Facebook to place ads on both Facebook pages as well as pages outside of Facebook. We as the website operator have no influence over how this data is used. Further information on the protection of your privacy can be found in the Facebook Privacy Policy: https://www.facebook.com/about/privacy/.

 

You can also deactivate the “Custom Audiences” remarketing function in the ad settings area under https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. You have to be logged into Facebook for this. If you do not have a Facebook account you can deactivate Facebook’s usage-based advertising on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.

Personal data, the provision of which you have consented to in the named context and that is needed to carry out the corresponding competition or to provide the corresponding information, such as first/last name; contact information such as postal address, email address, phone number. If you win the competition, your data will be forwarded to the redeeming partner institution so that you can be sent your prize.

 

If you are interested in receiving information on the Montafon holiday region, activate the corresponding check box to register for newsletters from Montafon Tourismus GmbH. Through this, you agree to the data that you have provided being forwarded to Montafon Tourismus GmbH to receive their newsletter. Your consent to receive this newsletter is not a condition for entering the competition. Please note that Montafon Tourismus GmbH are themselves responsible for the collection, storage and processing of data in their systems in accordance with data protection law and 11er can assume no liability in this respect. Any revocation of your consent to receive newsletters must be addressed to Montafon Tourismus GmbH. We take the liberty of referring you to the data protection guidelines of Montafon Tourismus GmbH in this context. 11er can assume no liability whatsoever for the content of the Montafon Tourismus GmbH newsletter.

Personal data you send to us, the processing of which you have explicitly consented to by providing such data, and that is needed to reply to inquiries via our website, namely first/last name; email address; the corresponding matter. You provide your postal address and phone number in our web contact form on a voluntary basis and this is not absolutely necessary to make contact with you, but may facilitate our response in individual cases.

Personal data you send to us, the processing of which you have explicitly consented to by providing such data, and that is needed to arrange and carry out a guided tour of our production facilities, namely first/last name and email address of the organiser of the visit; name of the visitor group; email address; number of persons attending; your preferred date including time; your corresponding message to us. You can provide a phone number and a time frame when you can be reached, but this is not obligatory.

Personal data you provide via the corresponding web form or by uploading your documents, the processing of which you have explicitly consented to by providing such data and that is needed to complete the application process, namely first/last name; date of birth; nationality; your postal address, email address and phone number; the post you are applying for and/or your field of interest; the documents you provide such as covering letter; CV; certificates.

Please note that we provide you with a generic user name and generic password and we do not track the information on the company and its products that you download. If you contact us to receive this information, you can explicitly consent to the processing of your contact information in the same way as in other matters.

Photos that are afterwards published in-house or used within the employee magazine, whereby any employee may require a stop at any time. In connection with the intraductory presentation of new employees some further personal aspects such as job function and hobbies, whereby it is mentioned in each case that sharing of this info is fully voluntary.

Name and usage data to enable electronic control of start and end date of card use and for statistical purposes.

Why do we process personal data?

As can be seen from the explanations of the individual data categories above, we process personal data for a variety of different purposes. Irrespective of the purpose, we always ensure that the processing is carried out lawfully, in other words on the basis of a permissible legal basis. In summary, the following contexts can be named in this respect:

 

To fulfil a contract or to render an associated service, whereby this can also cover pre-contractual measures, for example to purchase products and services from suppliers as well as to offer and sell our own products and services.

 

To comply with legal obligations, for example with respect to the keeping of proper business records, the fulfilment of labour law regulations or compliance with food law specifications.

 

To safeguard a legitimate interest of 11er, for example in connection with the protection of our company premises, the facilitation and simplification of corporate processes, to optimise our website or to carry out marketing measures with existing customers for own products. In such cases, we always consider the interests as well as basic rights and freedoms of the data subject to determine whether these predominate and the measure is therefore not permissible.

 

Unless covered by the aforementioned legal bases, we obtain your consent before processing personal data, consent that you always provide on a voluntary basis. This takes place in particular in connection with offers on our website, before participating in competitions, before using contact forms or providing particulars including upload functions in connection with job application processes.

How long is the personal data kept?

We save personal data as long as it is needed to fulfil the purpose for which the data has been provided or collected. This means that in connection with a competition, for example, the data is only processed until the winner has been determined and is then deleted.

 

Different storage periods exist depending on the purpose and legal basis, whereby there may be legitimate interests on whose basis we can save information for an appropriate period after your interaction with us, for example to fulfil our obligation to produce proof and to defend rights.

To whom are personal data disclosed if need be?

Depending on the context, personal data may be disclosed to data processing companies and service providers whom we specifically employ to fulfil the purpose of the processing and who are contractually bound to us. These include agencies who help us maintain our website, for example, or service providers to maintain our computer and IT systems. In order to render these services, these service providers may be granted access to personal data to provide or otherwise process these for us. Our agreements with these service providers only allow the processing of personal data in accordance with the agreements or any other written instructions concluded or issued by ourselves and not for their own purposes, and while ensuring appropriate safety measures. Personal data will not be transferred to data processing companies and service providers outside the European Union or the European Economic Area, and we will only process personal data inside the EU. An exception to this are analyses by Google Analytics related to the use of our website; please refer to the statements above on Google Analytics in this connection.

How do we ensure that your personal data is protected?

We implement a number of technical and organisational measures that guarantee data security and integrity to ensure that your personal data is protected; this also includes protection against unauthorised or illegal processing as well as the accidental loss, destruction or damage of data. What’s more, access to personal data is restricted to those persons who must have access to this data to fulfil the purpose of the processing. In addition, suitable authentication procedures ensure that the data is only disclosed to authorised persons. We demand analogue contractual measures to guarantee confidentiality and data privacy from our data processing companies.

What rights do you have with respect to the personal data concerning you that we process?

With regard to our processing of your personal data, you have the right to access, the right to rectification, the right to erasure, the right to restriction of processing, the right to data portability and the right to object to the processing of the personal data concerning you.

In order to enforce these rights, please contact us directly at info@11er.at.

You also have the right to lodge a complaint with the data supervisory authority in the event of a suspected violation with respect to your personal data.

Content of other websites and social media

If you use profile pages that have been created by 11er on social networks such as Facebook or Instagram, or where 11er is otherwise present on the Internet, such as YouTube,  you should familiarise yourself with the different ways these pages share your personal data in your social profile(s). Since the privacy policies and procedures of these providers apply for these websites, we recommend that you familiarise yourself with the corresponding privacy policies, terms and conditions of business as well as similar information so that you understand how your personal data is used.

 

Our website may also contain links to third-party websites. Even though we select these third-party websites with great care, 11er can assume no liability for the content shown or offered on these pages or for the use of your personal data by these third parties. In these cases too, we recommend that you familiarise yourself with the corresponding privacy policies, terms and conditions of business as well as similar information so that you understand how your personal data is used.

Handling the personal data of children

Our website and any other communication is not addressed primarily at children. If, nevertheless, any kind of interaction should take place with children, we are particularly careful. Children aged 16 or younger, insofar as provided for by national law, should have the consent of a parent or guardian before providing us with personal data. Should we establish at the time the data is provided, that the corresponding person is below the named age limit and has not sent us the consent of a parent or guardian before providing said data, we will not process or store this data further without the consent of a parent or guardian.