Ferrero Australia Pty Ltd (ACN 001 249 261) and Agri Australis Pty Limited (ACN 151 383 934) (collectively "Ferrero", "we", "us" or "our") are committed to protecting the privacy of users of this website (the "Website") and to ensuring that users' Personal Data is treated with respect to their fundamental rights and freedoms as well as personal dignity, with particular reference to confidentiality. "Personal Data" means information or an opinion about an identified individual or an individual who is reasonably identifiable.
In general, any Personal Data which you provide, or which is otherwise gathered by us in the context of the Website, will be used by Ferrero in compliance with the applicable legislation (e.g., EU’s General Data Protection Rules, Australia’s Privacy Act 1988 (the "Privacy Act") etc.). Ferrero is bound by the Australian Privacy Principles in the Privacy Act.
The Data Controller/Owner regarding all Personal Data processing operations carried out through the Website is Ferrero, with registered offices at Level 36, 100 Miller St, North Sydney, NSW, 2060, Australia. Ferrero has appointed a local privacy officer. To get in touch with him/her for any information regarding the processing of Personal Data by Ferrero, including a list of its data processors, please contact: firstname.lastname@example.org.
WHAT TYPES OF PERSONAL DATA DO WE COLLECT FROM YOU AND HOW DO WE COLLECT IT?
As you use the Website and, in particular, as you provide information and upload files to the Website in order to access the Website's services and/or participate in any consumer promotions, Ferrero may collect and process your Personal Data.
This information may be collected by Ferrero both when you choose to provide it (e.g., when you request any services provided by Ferrero over the Website) or simply by analyzing your behaviour on the Website, including as set out below:
- Data voluntarily provided by users
When creating an account on the Website, you will be asked to provide certain Personal Data such as contact details (e.g. your name, email address, telephone number, country of residence and physical address) and marketing preferences.
Where the Website allows you to register through your personal social media profile, with your prior and revocable consent, we may access the same limited information included in such profile related to your name, age, location, likes, interests, contacts and images.
- Browsing data
The routine operation of the Website, as is standard with any websites on the Internet, involves the use of computer systems and software procedures, which collect information about the Website's users. This transmission is automatic when using Internet communication protocols. Although Ferrero does not collect this information in order to identify users personally, it is still possible that such data may permit a user to be identified, either directly via that information, by using other information collected or through processing and association with further data held by third parties. As such, this information may also be considered Personal Data.
Such data about the use of the Website shall only be used by Ferrero for anonymous, statistical purposes (and not for the purposes of identifying any users) to ensure the correct operation of, and identify any faults and/or abuse related to, the Website. This data may also be used for the purposes of investigating liabilities in the event of information crimes committed against the Website.
- Clickstream Data
Each time you visit the Website our server collects some anonymous information, known as click-stream data, including the type of browser and system you are using, the address of the website you have come from and move to after your visit, the date and time of your visit, and your server's IP address.
We may collect this information for statistical purposes to find out how the Website is used and navigated, including the number of hits, the frequency and duration of visits, most popular session times. We may use this information to evaluate and improve any of our Website's performance, or as necessary to investigate or report any suspected unlawful activity, as required or permitted by law or as reasonably necessary for the activity of an enforcement body.
In this regard, you should ensure that all Personal Data provided to us is complete, accurate and true at the time of provision. Failure on your part to do so may result in our inability to provide you with services you have requested.
WHY DO WE PROCESS YOUR PERSONAL DATA? PURPOSES OF PROCESSING AND LEGAL GROUNDS
Ferrero may collect, hold, use and disclose your Personal Data for the following purposes:
- Service Provision – To provide answers or services you request, including to allow the creation of an account for you to receive information from Ferrero and alerts by means of push notifications; to verify your identity and assist you, in case you lose or forget your login/password details for any of Ferrero's registration services; to allow you to create and maintain a registered user profile, to process transactions and enrolments you request, including emails; to process card payments and to provide any other services which you may request; to send you newsletters you have subscribed to as a service (containing only informative content); to finalize purchase orders and deliver products bought on the Website and to provide any other services which you may request. No consent is required for the processing of data for these purposes since such processing is necessary to provide the services requested and, therefore, for the performance of an agreement to which you are a party or for the implementation of measures requested by you prior to entering into an agreement. You are not required to give Ferrero your Personal Data for these purposes; however, if you do not, Ferrero will not be able to provide any services to you.
- Marketing – For marketing, promotional and publicity purposes, including to carry out consumer promotions, direct marketing as well as studies, research, market statistics or surveys via e-mail, SMS, push notifications, pop-up banners, instant messaging, phone calls by an operator or Ferrero's official social media pages, regarding Ferrero's products and services and to send you offers, promotions or other information about our goods and services. Processing for these purposes is based on your consent. You are not required to give consent to Ferrero for the use of your Personal Data for this purpose, and you will suffer no consequence if you choose not to give it (aside from not being able to receive further marketing communications from Ferrero). Any consent given may also be withdrawn at a later stage in accordance with the process set out under the heading "WHAT ARE YOUR RIGHTS? HOW CAN YOU EXERCISE THEM?".
- Soft Spam – For future marketing, promotional and publicity purposes, by sending you direct e-mail marketing communications regarding products and services provided by Ferrero which are identical or similar to those you have previously requested through the use of the Website. Processing for these purposes is based on Ferrero's legitimate interest in sending you direct e-mail marketing communication regarding products and services provided by Ferrero and which are identical or similar to those you have previously purchased through the Website. You can block these communications, and you will suffer no consequence if you do so (aside from not being able to receive further marketing communications from Ferrero), by objecting through the unsubscribe link provided at the bottom of all such communications.
- Profiling – To create your user profile (individual and/or aggregate profiles) on our Website, by collecting and analyzing information on the preferences you select and choices you make on the Website as well as on your general activities on the Website, through the use of profiling cookies. This information will be used to personalize the services provided through by Ferrero, where possible, to suit your preferences and choices, as well as to serve you with information and advertisements which may be relevant to you and your interests, to propose customized offers that may be of your interest and to give you information about other websites/services which Ferrero believes you may be interested in. All algorithms involved in this processing are regularly tested, to ensure the processing's fairness and control for bias. Processing for this purpose is based on your consent, collected by means of the cookie pop-up banner and/or a specific tick box. You are not required to give consent to Ferrero for use of your Personal Data for this purpose, and you will suffer no consequence if you choose not to (aside from not being able to benefit from greater personalization of your user experience regarding the Website). Any consent given may also be withdrawn at a later stage in accordance with the process set out under the heading "WHAT ARE YOUR RIGHTS? HOW CAN YOU EXERCISE THEM?".
- Compliance – For compliance with our legal obligations, resolve any disputes that we may have with any of our users, and enforce our agreements with third parties. When you provide any Personal Data to Ferrero, Ferrero must process it in accordance with the applicable laws, which may include retaining and reporting your Personal Data to official authorities for compliance with tax, customs or other legal obligations. No consent is required for the processing of data for this purpose since such processing is necessary to comply with a legal obligation.
- Misuse/Fraud – To prevent and detect any misuse of the Website, or any fraudulent activities carried out through the Website. Processing for this purpose is necessary to pursue Ferrero's legitimate interests in preventing and detecting fraudulent activities or misuse of the Website (for potentially criminal purposes).
- Analytics – To analyze and improve our service provision, enhance the Website, evaluate the effectiveness of Ferrero's marketing activities and services, perform statistical and demographics analyses on Ferrero's corporate clients and registered users. Processing for this purpose is necessary to pursue Ferrero's legitimate interests in the development and administration of the Website and to improve the services provided by Ferrero.
Users shall not be required to provide Personal Data to browse public pages of the Website. The provision of Personal Data for the purposes mentioned above is optional, however, failure to provide required data (indicated as such in the registration form, as applicable) may prevent users from completing registration or receiving related services.
TO WHOM DO WE DISCLOSE YOUR PERSONAL DATA?
- Other companies within the Ferrero Group for internal administrative purposes;
- Duly appointed data processors/intermediaries, providing specific processing or accessory services (e.g. storing data, sending out messages for us, web hosting, contests' management, consumer service, IT services regarding the Website operation, emailing) on Ferrero's behalf and under its instructions, whose data protection maturity has been checked by Ferrero before entering into the required data processing agreement. You may request the full updated list of appointed data processors, which may include other companies within the Ferrero Group, from our privacy officer using the contact details set out under the heading "DATA CONTROLLER/OWNER";
- Selected individuals authorized by Ferrero to process Personal Data to carry out activities strictly related to the provision of the services (e.g. technical maintenance of network equipment and electronic communications networks), who have undertaken an obligation of confidentiality or are subject to an appropriate legal obligation of confidentiality (e.g., employees of Ferrero);
- Anyone to whom our assets or businesses (or any part of them) are transferred; and
- Public entities, bodies or authorities in accordance with the applicable law or binding orders of those entities, bodies or authorities. We may also disclose your Personal Data when we believe in good faith that disclosure is necessary to protect your safety or the safety of others, investigate fraud, or respond to a government request.
DATA TRANSFER OVERSEAS
Personal Data may be transferred outside of Australia to other countries where the premises or the servers of Ferrero or of any of its affiliates or suppliers are located (including Singapore and countries in the European Union), provided that an adequate level of data protection is guaranteed.
Ferrero will not transfer Personal Data outside Australia unless it has taken reasonable steps to ensure that the transferred Personal Data will be accorded a level of protection which is comparable to the protection under the Privacy Act or any other data protection regulation, or Ferrero has obtained your explicit consent.
In order to comply with laws protecting children's online privacy, Ferrero does not knowingly collect any Personal Data from children under 16. Ferrero takes children's privacy seriously. As such, we would recommend that a parent or guardian assist and guide any children under 16 which may intend to browse the Website or access the services provided by Ferrero. Children under age 16 should not use Ferrero’s Website or services. In the event that Ferrero learns that it has inadvertently collected Personal Data from a child under the age of 16, Ferrero will promptly delete such information.
SECURITY OF PERSONAL DATA
Personal Data collected by Ferrero about you may be stored on servers in Singapore and the European Union and on cloud servers owned by third party cloud service providers. All Personal Data collected and processed by Ferrero will be stored and processed so as to minimize the risk of destruction, loss (including accidental loss), unauthorized access, use or incompatible use with the initial purpose of collection. This is achieved by the technical and organizational security measures put in place by Ferrero. A detailed list of Ferrero's security measures is available here.
Although every reasonable effort has been made to ensure that all Personal Data will be protected, Ferrero cannot be responsible for any unauthorised use or misuse of such information and from risks which are inherent in all internet communications.
RETENTION OF PERSONAL DATA
Generally, Ferrero will keep your Personal Data only for as long as strictly necessary, according to the reason for which it was collected:
- Personal Data processed for Service Provision will be kept by Ferrero for the period deemed strictly necessary to fulfil such purposes. Information will, however, be kept for longer if we need it to address any claims regarding the services or to protect Ferrero's interests related to potential liability related to the Service Provision.
- Personal Data processed for Marketing and Profiling will be kept by Ferrero from the moment you give consent until such data is no longer necessary for the purpose for which it was collected. If consent is withdrawn (or not given, following a renewal request which occurs at fixed intervals of 24 months), Personal Data will no longer be used for these purposes, although it may still be kept by Ferrero as it may be necessary to protect Ferrero's interests related to potential liability related to this processing.
- Personal Data processed for Soft Spam will be kept by Ferrero from the moment it is provided by you to Ferrero. If you have objected to this processing, Personal Data will no longer be used for these purposes, although it may still be kept by Ferrero, in particular as may be necessary to protect Ferrero's interests related to potential liability related to this processing.
- Personal Data processed for Compliance will be kept by Ferrero for the period required by the specific legal obligations for which the Personal Data was processed.
- Personal Data processed for preventing Misuse/Fraud and Analytics will be kept by Ferrero for as long as deemed strictly necessary to fulfil the purposes for which it was collected.
After such periods, all Personal Data shall be deleted or anonymized, except that data we are required by law to keep for a longer period.
WHAT ARE YOUR RIGHTS? HOW CAN YOU EXERCISE THEM?
As a data subject, you are entitled to exercise the following rights, at any time:
- Obtain confirmation as to the existence of your Personal Data being processed by Ferrero, access and obtain copy of such data;
- Update, modify and/or rectify your Personal Data where it may be inaccurate or incomplete. Please note that most of the Personal Data you provide to Ferrero can be changed at any time, including your e-mail preferences, by accessing, where applicable, your user profile created on the Website;
- Withdraw your consent to processing (for Marketing and Profiling), where your consent serves as the legal basis for processing, in accordance with the process set out below - this will not affect the lawfulness of processing carried out prior to your withdrawal.
When requesting services via the Website, you may have selected one or more means of communication for the processing of Personal Data for Marketing purposes (e.g., phone, SMS, email, mail, social media). You may withdraw your consent to this processing for all selected means of communication, or you can choose to block specific means only (e.g., if you only withdraw consent for SMS marketing communications, you will not receive further communications via SMS, but may continue to receive them via e-mail), by changing your preferences on your user profile created on the Website, where applicable. You can also withdraw consent for Marketing (for communications received via e-mail) by selecting the appropriate link included at the bottom of every marketing message.
Consent for Profiling carried out by cookies may be withdrawn at any time. Where consent for Profiling was given via a specific tick box, you may withdraw this consent by changing your preferences, at any time, within your user profile created on the Website, where applicable. You may otherwise withdraw this consent by modifying your device settings or contacting Ferrero using the details set out under the heading "DATA CONTROLLER/OWNER".
If you wish to make a request or complaint about the way we have handled your Personal Data, you can contact our privacy officer at email address: email@example.com. Please include your name, email address and/or telephone number and clearly describe your query or complaint. We will acknowledge your email and respond to you regarding your query or complaint within a reasonable period of time.