Data protection declaration of the 11er Nahrungsmittel GmbH and the 11er corporate group
The digital age entails the collection and processing of a wealth of data. Of this data, information related to persons enjoys particular protection because it directly affects the personal rights and privacy of people.
We at 11er also rely on processing certain personal data in order to render our services, for example data from customers, interested parties, suppliers, other business partners and employees. In this context, one of our top priorities is satisfying the statutory requirements that regulate the protection of personal data. But we also see this as a basis for a trusting business relationship with our partners and for trustworthy interaction between employer and employees as well as with our consumers.
The goal of this data protection declaration is to provide an overview of those categories of personal data we process, the legal basis on which we do so and the purposes thereof, which principles we hereby observe, to whom this data is disclosed if need be, as well as the rights of the data subject and how these can be exercised. This data protection declaration as well as our procedures are based on the General Data Protection Regulation (EU) 2016/679 (GDPR) as well as the relevant national laws and aims to guarantee the protection of personal data.
For reasons of easier legibility, we will not be using the masculine and feminine linguistic forms simultaneously in this text. It goes without saying that all references to persons apply equally for both genders. To ensure a better legibility, we have also tried to structure the following information so that you can scroll directly to the topic that interests you as needs be.
We will update this data protection declaration accordingly if amendments become necessary so that you will always find the latest version here.
Which personal data is processed?
Different categories of personal data will be processed depending on your kind of interaction with us. These data categories can comprise the following – depending on the contexts listed below:
To fulfil a contract and/or render a service
(including the performance of pre-contractual measures such as the preparation of offers as well as the fulfilment of other wishes of the contractual partner or interested party directed at the conclusion, execution or termination of a contract): Personal data including that of officials in charge and other persons involved, such as first/last name; academic degrees or other titles; contact information such as phone number, fax number, postal address, email address; customer number; information on the nature and content of our contractual relationship; associated correspondence; bank details; possibly information on credit standing; associated company or other organisation; function; if necessary, the scope of the power of representation.
To fulfil contracts in which 11er acts as employer:
Personal data that is necessary to set up, fulfil and terminate employment contracts, such as first/last name; academic degrees or other titles; gender; date of birth; social insurance number; contact information such as phone number, postal address, email address; information on the nature and content of the employment; correspondence and other information associated with the employment relationship; bank details; time sheets; time information from the door opening system on the business premises; recordings made within the scope of video surveillance to guarantee food safety and the protection of the properties on the business premises in accordance with the pertinent works agreement; further personal information provided by the employee such as CV, certificates, work samples, references, photos.
During visits to our website www.11er.at and its sub-pages:
This website uses functions of the web analysis service Google Analytics. This is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses so-called "cookies". These are text files that are saved on your computer and that allow an analysis of how you use the website. The information about your use of this website generated by the cookie is usually sent to and stored on a Google server in the USA. The Google Analytics cookies are saved on the basis of point (f) of Art. 6 (1) GDPR. The website operator has a legitimate interest in an analysis of the user behaviour to optimise both his website and his advertising.
We have activated the IP anonymisation function on this website. Consequently your IP address will be shortened by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area before being sent to the USA. The full IP address will only be sent to a Google server in the USA and shortened there in exceptional cases. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activities and to render further services for the website operator connected with the use of the website and the Internet. The IP address sent from your browser within the scope of Google Analytics will not be combined with other data from Google.
You can prevent cookies from being saved through a corresponding setting in your browser software; however, we would like to point out that in this case you may not be able to use all of the functions provided on this website. You can also prevent the data that is generated by the cookie and related to your use of the website (incl. your IP address) being sent to and processed by Google by downloading and installing the browser plug-in available from the following link: https://tools.google.com/dlpage/gaoptout?hl=en .
In the sense of an objection to the collection of data, you can prevent Google Analytics from collecting your data by clicking the following link: Deaktivate Google Analytics . An opt-out cookie is set that prevents your data from being collected during future visits to this website.
This website uses the function “demographic features” of Google Analytics. This allows the generation of reports that contains statements on the age, gender and interests of the visitor to the website. This data comes from interest-based advertising by Google as well as visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time in the display settings of our Google account or generally prohibit the collection of your data by Google Analytics as explained above in “objection to data collection”.
Our website uses the functions of Google Analytics Remarketing in connection with the multi-device functions of Google AdWords and Google DoubleClick. This is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. This function allows advertising target groups created with Google Analytics Remarketing to be linked to the multi-device functions of Google AdWords and Google DoubleClick. In this way, interest-based, personalised advertising messages that have been adapted to you depending on your earlier usage and surfing behaviour on one device (e.g. mobile phone) can also be shown on another of your devices (e.g. tablet or PC).
If you have granted a corresponding consent, Google links your web and app browser history with your Google account for this purpose. In this way the same personalised advertising messages can be shown on any device on which you log into your Google account. To support this function, Google Analytics collects Goggle-authenticated IDs of users that are temporarily linked to our Google Analytics data to define and create target groups for the multi-device advertising. You can block multi-device remarketing/targeting on a permanent basis by deactivating personalised advertising in your Google account; follow this link to do so: https://www.google.com/settings/ads/onweb/ .
The data collected in your Google account is only summarised on the basis of your consent, which you can grant or revoke in Google (point (a) of Art. 6 (1) GDPR). In the case of data collection processes that are not compiled in your Google account (e.g. because you do not have a Google account or have objected to the compilation), data collection is based on point (f) of Art. 6 (1) GDPR. The legitimate interest arises from the fact that the website operator has an interest in the anonymised analysis of visitors the website for advertising purposes.
This website uses Google AdWords. AdWords is an online advertising program of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”).
We use so-called conversion tracking within the scope of Google AdWords. If you click an ad placed by Google, a cookie will be set for conversion tracking. Cookies are small text files that the Internet browser saves on the user’s computer. These cookies become invalid after 30 days and are not used for the personal identification of the user. If the user visits certain pages of this website and the cookie has not yet expired, both Google and we can see that the user has clicked the ad and been forwarded to this page.
Each Google AdWords client receives a different cookie. The cookies cannot be tracked via the websites of AdWords clients. The information gathered with the help of the conversion cookies is used to generate conversion statistics for AdWords clients who have decided on conversion tracking. The client learns the total number of users who have clicked their ad and have been forwarded to a page tagged with a conversion tracking tag. However, they do not receive any information that would allow them to identify the user personally.
If you do not wish to take part in tracking, you can block its use by simply deactivating the Google conversion tracking cookie in the user settings of your Internet browser. You will then not be included in the conversion tracking statistics.
You can configure your browser so that you will be informed when cookies are set and to only allow cookies in individual cases, to reject the acceptance of cookies for certain cases or in general, or to activate the automatic deletion of cookies when you close your browser. If you deactivate cookies, the proper function of this website may be restricted.
Our website uses the visitor action pixel from Facebook, Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”) to measure conversions. This allows tracking of the page visitor’s behaviour after they have been forwarded to the provider’s website by clicking a Facebook ad. This means that the efficacy of the Facebook ads can be analysed for statistical and market research purposes and future advertising measures can be optimised.
You can also deactivate the “Custom Audiences” remarketing function in the ad settings area under https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. You have to be logged into Facebook for this. If you do not have a Facebook account you can deactivate Facebook’s usage-based advertising on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/ .
To carry out competitions and to send out newsletters and other information on companies, products and services:
Personal data, the provision of which you have consented to in the named context and that is needed to carry out the corresponding competition or to provide the corresponding information, such as first/last name; contact information such as postal address, email address, phone number. If you win the competition, your data will be forwarded to the redeeming partner institution so that you can be sent your prize.
If you are interested in receiving information on the Montafon holiday region, activate the corresponding check box to register for newsletters from Montafon Tourismus GmbH. Through this, you agree to the data that you have provided being forwarded to Montafon Tourismus GmbH to receive their newsletter. Your consent to receive this newsletter is not a condition for entering the competition. Please note that Montafon Tourismus GmbH are themselves responsible for the collection, storage and processing of data in their systems in accordance with data protection law and 11er can assume no liability in this respect. Any revocation of your consent to receive newsletters must be addressed to Montafon Tourismus GmbH. We take the liberty of referring you to the data protection guidelines of Montafon Tourismus GmbH in this context. 11er can assume no liability whatsoever for the content of the Montafon Tourismus GmbH newsletter.
To reply to inquiries via the contact form on our website:
Personal data you send to us, the processing of which you have explicitly consented to by providing such data, and that is needed to reply to inquiries via our website, namely first/last name; email address; the corresponding matter. You provide your postal address and phone number in our web contact form on a voluntary basis and this is not absolutely necessary to make contact with you, but may facilitate our response in individual cases.
To arrange guided tours via the contact form on our website:
Personal data you send to us, the processing of which you have explicitly consented to by providing such data, and that is needed to arrange and carry out a guided tour of our production facilities, namely first/last name and email address of the organiser of the visit; name of the visitor group; email address; number of persons attending; your preferred date including time; your corresponding message to us. You can provide a phone number and a time frame when you can be reached, but this is not obligatory.
To apply for a vacancy or on your own initiative via the “Careers” page on our website:
Personal data you provide via the corresponding web form or by uploading your documents, the processing of which you have explicitly consented to by providing such data and that is needed to complete the application process, namely first/last name; date of birth; nationality; your postal address, email address and phone number; the post you are applying for and/or your field of interest; the documents you provide such as covering letter; CV; certificates.
For visits to our company premises, for example as a visitor, supplier, customer or other interested party:
Information to arrange the visit, specifically to ensure your personal safety and the safety of the food we produce, namely, and in particular, first/last name; internal contact person; period of visit; recordings made within the scope of video surveillance of the company premises.
When using the download area of our website
Please note that we provide you with a generic user name and generic password and we do not track the information on the company and its products that you download. If you contact us to receive this information, you can explicitly consent to the processing of your contact information in the same way as in other matters.
To document various company activities in the sense of recording special occasions or promoting social cohesion between employees - e.g. in the context of company celebrations, anniversaries, excursions, etc. – as well as to present new employees (the latter linked to a brief personal introduction):
Photos that are afterwards published in-house or used within the employee magazine, whereby any employee may require a stop at any time. In connection with the intraductory presentation of new employees some further personal aspects such as job function and hobbies, whereby it is mentioned in each case that sharing of this info is fully voluntary.
When using discount cards in particular by employees for a discounted purchase in our factory outlet store:
Name and usage data to enable electronic control of start and end date of card use and for statistical purposes.
Why do we process personal data?
As can be seen from the explanations of the individual data categories above, we process personal data for a variety of different purposes. Irrespective of the purpose, we always ensure that the processing is carried out lawfully, in other words on the basis of a permissible legal basis. In summary, the following contexts can be named in this respect:
To fulfil a contract or to render an associated service, whereby this can also cover pre-contractual measures, for example to purchase products and services from suppliers as well as to offer and sell our own products and services.
To comply with legal obligations, for example with respect to the keeping of proper business records, the fulfilment of labour law regulations or compliance with food law specifications.
To safeguard a legitimate interest of 11er, for example in connection with the protection of our company premises, the facilitation and simplification of corporate processes, to optimise our website or to carry out marketing measures with existing customers for own products. In such cases, we always consider the interests as well as basic rights and freedoms of the data subject to determine whether these predominate and the measure is therefore not permissible.
Unless covered by the aforementioned legal bases, we obtain your consent before processing personal data, consent that you always provide on a voluntary basis. This takes place in particular in connection with offers on our website, before participating in competitions, before using contact forms or providing particulars including upload functions in connection with job application processes.
How long is the personal data kept?
We save personal data as long as it is needed to fulfil the purpose for which the data has been provided or collected. This means that in connection with a competition, for example, the data is only processed until the winner has been determined and is then deleted.
Different storage periods exist depending on the purpose and legal basis, whereby there may be legitimate interests on whose basis we can save information for an appropriate period after your interaction with us, for example to fulfil our obligation to produce proof and to defend rights.
To whom are personal data disclosed if need be?
Depending on the context, personal data may be disclosed to data processing companies and service providers whom we specifically employ to fulfil the purpose of the processing and who are contractually bound to us. These include agencies who help us maintain our website, for example, or service providers to maintain our computer and IT systems. In order to render these services, these service providers may be granted access to personal data to provide or otherwise process these for us. Our agreements with these service providers only allow the processing of personal data in accordance with the agreements or any other written instructions concluded or issued by ourselves and not for their own purposes, and while ensuring appropriate safety measures. Personal data will not be transferred to data processing companies and service providers outside the European Union or the European Economic Area, and we will only process personal data inside the EU. An exception to this are analyses by Google Analytics related to the use of our website; please refer to the statements above on Google Analytics in this connection.
How do we ensure that your personal data is protected?
We implement a number of technical and organisational measures that guarantee data security and integrity to ensure that your personal data is protected; this also includes protection against unauthorised or illegal processing as well as the accidental loss, destruction or damage of data. What’s more, access to personal data is restricted to those persons who must have access to this data to fulfil the purpose of the processing. In addition, suitable authentication procedures ensure that the data is only disclosed to authorised persons. We demand analogue contractual measures to guarantee confidentiality and data privacy from our data processing companies.
What rights do you have with respect to the personal data concerning you that we process?
With regard to our processing of your personal data, you have the right to access, the right to rectification, the right to erasure, the right to restriction of processing, the right to data portability and the right to object to the processing of the personal data concerning you.
In order to enforce these rights, please contact us directly at firstname.lastname@example.org.
You also have the right to lodge a complaint with the data supervisory authority in the event of a suspected violation with respect to your personal data.
Content of other websites and social media
If you use profile pages that have been created by 11er on social networks such as Facebook or Instagram, or where 11er is otherwise present on the Internet, such as YouTube, you should familiarise yourself with the different ways these pages share your personal data in your social profile(s). Since the privacy policies and procedures of these providers apply for these websites, we recommend that you familiarise yourself with the corresponding privacy policies, terms and conditions of business as well as similar information so that you understand how your personal data is used.
Our website may also contain links to third-party websites. Even though we select these third-party websites with great care, 11er can assume no liability for the content shown or offered on these pages or for the use of your personal data by these third parties. In these cases too, we recommend that you familiarise yourself with the corresponding privacy policies, terms and conditions of business as well as similar information so that you understand how your personal data is used.
Handling the personal data of children
Our website and any other communication is not addressed primarily at children. If, nevertheless, any kind of interaction should take place with children, we are particularly careful. Children aged 16 or younger, insofar as provided for by national law, should have the consent of a parent or guardian before providing us with personal data. Should we establish at the time the data is provided, that the corresponding person is below the named age limit and has not sent us the consent of a parent or guardian before providing said data, we will not process or store this data further without the consent of a parent or guardian.