DATA PROTECTION NOTICE

We, Lorenz Bahlsen Snack-World GmbH & Co KG Germany (hereinafter also referred to as the “controller”) take the protection of personal data very seriously and observe the relevant data protection regulations, in particular the stipulations of the EU General Data Protection Regulations (GDPR). In the following text, we wish to inform you of when we collect what data in the context of the use of our website and how we use them.

I. General

1. Scope of data processing

As a matter of principle, we collect and use personal data of our users only to the extent necessary for the provision of a functional website and the use of our content and services. The collection and use of our users’ personal data ensues only to the extent that the processing of the data is permitted by statutory stipulations or at the consent of the user.

2. Legal basis for the data processing

Where we obtain the consent of the user for the processing of personal data on our website, Art. 6, paragraph1, point a GDPR serves as the legal basis for the processing.

In processing personal data necessary for the fulfillment of a contract to which the user is a party, Art. 6, paragraph 1, point b GDPR serves as the legal basis.

This also applies for processing operations necessary for the execution of a contract or measures leading to the conclusion of a contract.

Where the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6, paragraph 1, point c GDPR serves as the legal basis.

If the processing is necessary to safeguard the legitimate interests of our company or a third party, and the interests or fundamental rights and freedoms of the user do not override these legitimate interests, Art. 6, paragraph 1, point f GDPR shall serve as the legal basis for the data processing (so-called balancing of interest).

In addition, further statutory bases exist for the processing of personal data, which we shall specify later – where relevant.

3. Duration of storage

The personal data of the user shall be deleted or blocked as soon as the intended purpose of the storage lapses. Storage beyond this point can ensue when so required by European or national legislation in Union regulations, laws or other stipulations to which the company is subject. Any blocking or erasure of the data only ensues when any retention period specified by the above norms expires, unless it is necessity to further store the data for the conclusion or fulfillment of a contract.

4. Passing on personal data

When we pass on personal data we do so exclusively to service providers supporting us in the fulfillment of the above-named purposes. Acting as what are known as commissioned processors, these companies may use your personal data only to render their services on our instructions and are obliged to observe the relevant data protection stipulations. The commissioned processors working on our behalf are:

Denkwerk GmbH
Vogelsanger Str. 66
50823 Cologne

Google Analytics, Google Inc.,
1600 Amphitheatre Parkway Mountain View
CA 94043, USA

For the purpose of handling the competitions occasionally run on our website, we sometimes pass your personal data on to our cooperation partners. We have selected our cooperation partners very carefully. In particular, our cooperation partners are not permitted to transmit the data of our users to third parties for commercial purposes. Data passed on in this way may only be processed by our cooperation partners to fulfil their assignment (e.g. handover of the prize to the winner).

Generally, personal data are not passed on to third parties.

5. Place of data processing

The processing of the data stored on you by us takes place in states belonging to the European Economic Area. With regard to the processing of the data in the context of Google Analytics, Item IV. 2. shall apply.

II. Processing of personal data on the website

1. Provision of the website and creation of log files

a) Description of the data processing

Each time our website is visited, our system automatically collects data and information from the computer system of the visiting computer.

The following data are collected:

•       Information regarding the browser type and the version used
•       The user’s system software
•       The user’s IP address
•       Date and time of access
•       Websites from which the user’s system has contacted our website

The data are also stored in the log files in our system. There is no storage of these data together with other personal data of the user.

b) Legal basis for the data processing

Legal basis for the temporary storage of data and the log files is Art. 6, paragraph 1, point f GDPR.

c) Purpose of the data processing

The storage in log files ensues in order to ensure the functionality of the website. In addition, the data serve to optimise the website and safeguard our information technology systems. There is no analysis of the data for marketing purposes in this context. These purposes are also the basis of our legitimate interest in the data processing pursuant to Art. 6, paragraph 1, point f GDPR.

d) Duration of storage

The data will be deleted as soon as achievement of the purpose for which they were collected is no longer necessary. So-called access logs (without IP address) are automatically deleted after seven days and so-called error-logs (with IP address) after two days.

e) Option for objection and elimination

The collection of the data on the provision of the website and the provision of the data in log files is vital for the operation of the website. Consequently, no objection option exists for the user.

2. Contact form and e-mail contact

a) Description of the data processing

Our website features a contact form which can be used for establishing electronic contact. When a user avails of this option, the data entered in the input mask are transmitted to us and stored. These details are:

•       First name and surname
•       E-mail address
•       Where applicable, further optional details

Alternatively, contact is possible via the e-mail address supplied by us. In this event, the user’s personal data transmitted along with the e-mail will be stored.

In this case, no passing on of data to third parties ensues. The data will be used exclusively for processing the conversation.

b) Legal basis for the data processing

Legal basis for the processing of the data is Art. 6, paragraph 1, point f GDPR. If the e-mail contact is aimed at the conclusion of a contract or compliance with a contract, an additional legal basis for the processing shall be Art. 6, paragraph 1, point b GDPR.

c) Purpose of data processing

Processing of the personal data from the input mask serves solely to allow us to process the contact. In the event of an establishment of contact, this shall constitute the necessary legitimate interest in the processing of the data.

d) Duration of storage

The data shall be deleted as soon as they are no longer necessary for achieving the purpose for which they were collected. With regard to the personal data from the contact form input mask and those sent by e-mail, this shall be the case when the respective conversation with the user has been concluded. The conversation shall be ended when the circumstances indicate that the relevant matter has been conclusively clarified.

e) Possibilities for objection and elimination

If the user gets in touch with us using the contact form or by e-mail, he can object to the storage of his personal data at any time. The objection can be lodged by notification sent to the contact specified at the end of our data protection notice. In the event of an objection, the conversation with the user cannot be continued and all personal data stored in the context of the establishment of contact will be deleted by us.

3. Competitions/campaigns

a) Description of the data processing

We occasionally run competitions/campaigns on our website. If a user avails of this opportunity, the data entered in the input mask for the competition will be transmitted to us and stored. As a rule, these data are:

•       First name and surname
•       E-mail address
•       Postal address
•       Where applicable, further details marked as mandatory, or optional details

b) Legal basis for the data processing

Legal basis for the processing of the data is Art. 6, paragraph 1, point b GDPR.

c) Purpose of the data processing

The processing of personal data from the input mask serves solely for the execution and running of the competition or the campaign.

d) Duration of storage

The data shall be deleted as soon as they are no longer necessary for achieving the purpose for which they were collected. With competitions, this is generally the case when the winner has been determined and the prize dispatched, unless statutory or contractual retention periods apply for deletion of the data. Further details on the competition can be found in the respective conditions of entry.

e) Option for objection and elimination

As a general rule, the user can object to the storage of his personal data at any time; further participation in the competition is then no longer possible. The objection can be lodged by notification sent to the contact specified at the end of our data protection notice.

III. Use of cookies

1. Description of the data processing

In order to make your visit to our website attractive and permit the use of certain functions, we use “cookies”. These are small text files stored in the browser or the browser on the user’s end device. When a user calls up a website, a cookie can be stored on the user’s system software. These cookies contain a characteristic string which permits clear identification of the browser on a repeat visit to the website.

a) Technically-necessary cookies

We use cookies to make our website more user-friendly. Some elements of our website make it necessary to be able to identify the retrieving browser even after a change of website. The following data is stored and transmitted in the cookies:

•       Cookie_accepted (provided the user accepts the cookie notification)
•       NSC_mc (technically-necessary session cookie required by the upstream loadbalancer (Netscaler))
•       php-session ID and session_cookie (Intro-Video)

b) Non technically-necessary cookies, third party cookies

In addition, we also use cookies on our website which are not technically necessary but which, in particular, permit us to analyse the surfing patterns of the user.

The following non technically-necessary cookies, resp. third-party cookies, are used by us:

•       The cookies deployed by Google Analytics with the use of day managers (compare Item IV. of our data protection notice)

When our website is called up, the user is informed of the use of these analysis cookies and his consent to the processing of the personal data used in this context obtained. In this context, we also refer to the data protection notice.

c) Notes on changing the browser settings

Most browsers are set to automatically accept cookies. However, the user can prevent the storage of cookies on his computer by setting the browser accordingly; this may result in the functional scope of our website being restricted.

2. Legal basis for the data processing

The legal basis for processing personal data using technically-necessary cookies is Art. 6, paragraph 1, point f GDPR.

The legal basis for processing personal data using the above analysis cookies is the existence of relevant consent of the user under Art. 6, paragraph 1, point a GDPR.

3. Purpose of the data processing

The purpose of the use of the technically-necessary cookies is to make using the website easier for the user. Some functions of our website cannot be offered without the use of cookies. These must be recognisable for the browser even following a change of website. This purpose also constitutes our legitimate interest in the processing of personal data pursuant to Art. 6, paragraph 1, point f GDPR.

Analysis cookies show us how the website is being used and thus allow us to constantly optimise our online offer.

The user data collected by cookies on our website are not used to compile user profiles.

4. Duration of storage, options for objection and elimination

Cookies are stored on the user’s computer and transmitted by same to our website. Therefore, as a user, you have full control over the use of cookies. By changing the setting in your browser you can deactivate or restrict the use or transmission of cookies. Cookies already stored can be deleted at any time. This can also be done automatically. If you deactivate the setting of cookies for our website, it is possible that not all functions of the website will be fully usable.

IV. Use of Google services

1. General information on Google services

On our website, we use various services of Google Inc. (“Google”), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Through the use of the Google services, Google may, under certain circumstances, collect information (including personal data) and process same. It is possible that Google may transfer the information to a server in a Non-member State.

Google has undertaken to observe what are known as the EU-US Privacy Shield Framework and the Swiss-US Privacy Shield Framework regarding the collection, use and storage of personal data originating in Member States of the EU or in Switzerland. By means of certification, Google, including Google LLC and its 100 % subsidiaries in the US, has declared that it observes the Privacy Shield principals. Further information can be found under https://www.google.de/policies/privacy/frameworks/

We cannot influence what data Google actually collects and processes. However, Google states that, among other things, the following information (including personal data) may be processed:

•       Protocol data (in particular the IP address)
•       Site-specific information
•       Clear application numbers
•       Cookies and similar technologies

If you have logged into your Google account, Google can add the information processed to your account, regardless of your account settings, and treat it as personal data; see, in particular https://policies.google.com/technologies/partner-sites?hl=en

You can prevent the direct addition of this data by logging out from your Google account or by adjusting the appropriate settings in your Google account.

In addition, you can change your cookie settings (e.g. delete or block cookies, among other things). Further information can be found under Item III:

Further information can also be found in the data protection notice of Google which you can call up here:
https://www.google.com/policies/privacy/

Notes on the Google privacy settings can be found under privacy.google.com/take-control.html

You have the right to object. The objection can be submitted by notification to the contact information at the end of the data protection notice. Further possibilities to be object may be described in the individual Google services.

2. Use of Google Analytics

This website uses Google Analytics, a web analysis service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google“). Using Google Analytics allows us to analyse the user behaviour on our website and react to it. This permits us to constantly improve our online offer.

When our website is called up, the user is informed of the use of Google Analytics and his consent to the process of the data used in this context obtained. In this context, reference is also made to the data protection notice.

Where it applies, the legal basis for the use of Google Analytics is the consent of the user pursuant to Art. 6, paragraph1, point a GDPR.

Google Analytics uses “cookies“, i.e. text files which are stored on the users’ computers and which permit an analysis of their use of the website. As a rule, the information generated by the cookies regarding the user’s use of this website is sent to a Google server in the US and stored there. When IP anonymisation is activated on the website, your IP address will previously be abbreviated by Google within a Member State of the EU or in another EEA state. Only in exceptional circumstances will the full IP address be sent to a Google server in the US and abbreviated there. The IP address sent from your browser in the context of Google Analytics – according to Google – will not be matched with other data by Google.

On behalf of the operator of this website, Google will use this information to analyse the use of the website by the users, to compile reports on website activity and to provide services relating to website use and internet use to the website operator. This purpose represents our legitimate interest in the data processing.

According to our settings, the data will be deleted after 26 months in Google Analytics.

We draw your attention to the fact that, on this website, Google Analytics has added the code “ga('set', 'anonymizeIp', true);” to ensure anonymised collection of IP addresses.

Further information on the handling of data in the context of Google Analytics can be found in the Google data protection declaration:
https://support.google.com/analytics/answer/6004245?hl=en

Possibilities for revocation and elimination:

You can revoke your consent to web analysis by clicking on the following link:

Revocation web analysis

You can prevent the storage of cookies by setting your browser software accordingly; however, we would point out that in this event you will not be able to fully use all the functions of this website. You can also prevent the collection of data generated by the cookie and relating to your use of the website (incl. Your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link. The current link is: https://tools.google.com/dlpage/gaoptout?hl=enhttps://tools.google.com/dlpage/gaoptout?hl=en

3. Use of YouTube

On our website, we occasionally use YouTube videos. YouTube is a service of YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA. YouTube LLC is a subsidiary of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

We use imbedded YouTube videos is what is called the extended data protection mode-i.e. YouTube does not store information on users of our website unless the users view the video. Clicking on the YouTube video can trigger further data processing operations (such as storage of cookies by YouTube) on which we have no influence.

By imbedding YouTube we pursue the aim of being able to present various videos on our website, so that these can be viewed directly on our website.

The legal basis for the processing of personal data described here is Art. 6, paragraph 1 point f) GDPR. Our legitimate interest as required lies in the great benefit offered by YouTube. By imbedding external videos, we take the pressure off our server and can make alternative use of the corresponding resources. Among other things, these can increase the stability of our server. In addition, YouTube or Google has a legitimate interest in the (personal) data collected in order to improve its own services.

Further information can be found on the data protection notice of YouTube or Google:
https://www.google.com/intl/de/policies/privacy/

4. Use of reCAPTCHA

This website uses Google reCAPTCHA (hereinafter referred to as “reCAPTCHA”),a Captcha service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
reCAPTCHA is used to check whether the data entry on our websites (e.g. in a contact form) was carried out by a human or by an automated system (known as robots). To this end, reCAPTCHA analyses the behaviour of the visitor to the website using various parameters. This analysis begins automatically as soon as the user enters the (sub-) page in which reCAPTCHA is imbedded. For its analysis, reCAPTCHA evaluates various items of information (e.g. IP address, duration of the visitors visit to the site or the number of mouse movements made by the user). The data collected in the analysis are passed on to Google.
The reCAPTCHA analysis runs completely in the background. Website users are not notified that an analysis is being carried out.

reCAPTCHA may use “cookies”, i.e. data files which are stored on your end device and which permit analysis of the use of the websites you visited. Furthermore, reCAPTCHA may, under certain circumstances, use what are known as WebBeacons, i.e. small pixels or graphics. The information on the use of this website (including your IP address) generated by the cookie, where relevant in conjunction with the WebBeacon, is transmitted by Google to a server, possible in the USA or other Non-member States and stored there.

The embedding of reCAPTCHA serves the purpose of determining whether entries on our website were made by a real person or possibly improperly by an automated system.

Legal basis for the processing of personal data described here is Art. 6, paragraph 1 point f) GDPR. Our legitimate interest as required lies in the great benefit offered by the above function for our online offer. The automatic checking of whether a real person or an automated system makes entries accelerates and simplifies our work and increases the degree of reliability of the entries made. In addition, this check prevents improper use. Furthermore, Google has a legitimate interest in the (personal) data collected in order to improve its own services

Further information on Google reCAPTCHA and the data protection at Google can be accessed through the following links:
https://policies.google.com/privacy?hl=en
https://developers.google.com/recaptcha/docs/v3

5. Use of Google Web Fonts

In order to make our website more attractive and uniform, we use external fonts, known as Google Web Fonts. Google Web Fonts is a service of Google Inc. (“Google“), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

The embedding of the Google Web Fonts ensues through a http request to the Google services. Through the embedding of the Google Web Fonts, Google may, under certain circumstances, collect information (including personal data) and processes same. It is possible that Google may transfer the information to a server in a Non-member State We ourselves collect no data in the context of the use of the Google Web Fonts service.

We use Google Web Fonts with the aim of being able to show uniform fonts on the user’s end device.

Legal basis for the processing of personal data described here is Art. 6, paragraph 1 point f) GDPR. Our legitimate interest lies in the major benefit offered by a uniform presentation of the fonts. In this way, we have less work that if we had to react to the font standards of various operating systems or browsers with their own graphically-adapted websites.

Where your browser does not support web fonts, the standard fonts of your end device will be used.

V. Links to social networks

Our website is augmented by an official presence in the following social networks:

•       Facebook
•       Twitter
•       Pinterest
•       Instagram
•       Google+
•       YouTube

The links are identified by logos of the respective social networks; no social plugins of the above-named social networks are used.

Where you follow the links to the social networks, please note that the processing and user of personal data is the responsibility of the respective social network and we have or receive no knowledge whatsoever of the actual extent of the use of your data by the respective provider. For information on the scope of processing your personal data by the provider of the social networks and possible settings to protect your privacy see the data protection guidelines of the respective provider.

VI. Rights of data subjects

Where your personal data is processed, you are a data subject within the meaning of the GDPR and have the following rights vis-a-vis the controller:

1. Right to information

You can request confirmation from the controller of whether personal data relating to you is being processed.

If processing of this kind applies, you can demand details of the following from the controller:

•       The purpose to which the personal data are processed;
•       The categories of personal data being processed;
•       The recipients or categories of recipient to whom your personal data has been disclosed or will be disclosed;
•       The planned duration of storage of your personal data; where specific details are not possible, the criteria used to determine the period of storage;
•       The existence of a right to rectification or erasure of your personal data, a right to restrict the processing by the controller or a right to object to this data processing;
•       The existence of a right to complain to a supervisory authority;
•       All the available information regarding the origin of the data when the personal data has not been obtained from the data subject;
•       The existence of automated decision-making including profiling pursuant to Art.22, paragraph 1 and 4 GDPR and – at least in these cases – clear information on the logic involved as well as the scope of the intended effect of processing of this kind for the data subject.

You are entitled to obtain information on whether your personal data have been transmitted to a Non-member State or an international organisation. In this context, you can demand information on the suitable guarantees pursuant to Art.46 GDPR in relation to the transmission.

2. Right to rectification

You have a right to rectification and/or completion vis-a-vis the controller provided your personal data processed is incorrect or incomplete. The controller must carry out the rectification immediately.

3. Right to restrict processing

Under the following circumstances, you can demand the restriction of the processing of your personal data:

•       When you contest the accuracy of the personal data for a period enabling the controller to verify the accuracy of the personal data; •       When the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead; •       The controller no longer needs the personal data for the processing purpose, but you require them for the establishment, exercise of defence of a legal claim or •       When you have lodged an objection to the processing pursuant to Art.21, paragraph 1 GDPR and it has not yet been verified whether the legitimate interests of the controller override your grounds.

 

When the processing of your personal data has been restricted, these data – apart from their storage – may only be processed with your consent or for the establishment, exercise or defence of legal claims for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

Where the restriction of the processing has been effected in accordance with the above provisions, you will be notified by the controller before the restriction is lifted.

4. Right to erasure

a) Erasure obligation

You can demand that the controller immediately erase your personal data, and the controller is obliged to erase this data immediately where one of the following grounds apply:

•       Your personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
•       You withdraw your consent on which the processing is based according to Art. 6, paragraph 1, point a or Art. 9, paragraph 2, point a GDPR, and where there are no other legal grounds for the processing.
•       You object to the processing pursuant to Art. 21, paragraph 1 GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21, paragraph 2 GDPR.
•       Your personal data has been unlawfully processed.
•       Your personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
•       The personal data have been collected in relation to the offer of information society services referred to in Art. 8, paragraph 1 GDPR.

b) Information to third parties

Where the controller has made your personal data public and is obliged pursuant to Art.17, paragraph 1 GDPR to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers processing the personal data that you have requested the erasure by such controllers of any links to, or copy or replication of, these personal data.

c) Exception to the duty to erase

The right to erasure shall not apply where the processing is necessary

•       For exercising the right of freedom of expression and information;
•       For compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
•       For reasons of public interest in the area of public health in accordance with Art. 9, paragraph 2, point h and i as well as Art. 9, paragraph 3 GDPR;
•       For archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89, paragraph 1 GDPR, insofar as the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives for that processing; or
•       For the establishment, exercise or defence of legal claims.

5. Right to notification

When you have asserted the right to rectification, erasure or restriction of processing vis-a-vis the controller, the controller shall be obliged to communicate any rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort.

You have the right vis-a-vis the controller to be informed about those recipients if you so request.

6. Right of data portability

You have the right to receive your personal data which you have provided to a controller, in a structured, commonly-used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which you provide the personal data, where

•       The processing is based on consent pursuant to Art. 6, paragraph 1 point a GDPR or Art. 9, paragraph 2 point a GDPR or on a contract pursuant to Art. 6, paragraph 1 point b GDPR and
•       The processing is carried out by automated means.

In exercising this right, you shall also have the right to have the personal data transmitted directly from one controller to another, where technically feasible. Freedoms and rights of other persons may not be adversely affected.

The right to data portability shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

7. Right to object

You shall have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on Art. 6, paragraph 1 point e or f GDPR; this also applies to profiling based on these provisions.

The controller shall no longer process your personal data unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise of defence of legal claims.

Where your personal data are processed for direct marketing purposes, you shall have the right to object at any time to the processing of your personal data for direct marketing; this shall also apply to profiling to the extent that it is related to such direct marketing.

Where you object to the processing for direct marketing purposes, your personal data shall no longer be processed for such purposes.

In the context of the use of services of the information society, and notwithstanding Directive 2002/58/EG, you may exercise your right to object by automated means using technical specifications.

8. Right to withdraw consent

You have the right to withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

9. Automated decision-making in individual cases including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This shall not apply when the decision

•       Is necessary for entering into, or performance of, a contract between you and the controller,
•       Is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests or
•       Is based on your explicit consent.

However, these decisions shall not be based on special categories of personal data pursuant to Art.9, paragraph 1 GDPR, unless Art. 9, paragraph 2, point a or g applies and suitable measure are in place to safeguard your rights and freedoms and legitimate interests.

With regard to the cases referred to in the above points (1) and (3), the controller shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express your view and contest the decision.

10. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you shall have the right to lodge a complaint with a supervisory authority, in particular in the Member state in which you have your habitual residence, place of work or place of the alleged infringement if you consider that the processing of your personal data infringes the GDPR.

The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and outcome of the complaint including the possibility of a judicial remedy pursuant to Art.78 GDPR.

VII. External links

Our website can contain external links to the sites of third parties. Where this is not obvious, we refer to the fact that these are external links. We have no influence on the content and design of the sites of external providers. In this respect, this data protection notice does not apply to these.

VIII. Amendments to this data protection notice

The constant further development of the internet and the consequent frequent amendment of the applicable legal norms make it necessary to adapt our data protection notice from time to time. We will keep you informed here of the relevant new developments.

IX. Controller

Controller within the meaning of GDPR and other national data protection legislation of the EU Member States and other data protection provisions is:

The Lorenz Bahlsen Snack-World GmbH & Co KG Germany
Rathenaustr. 54
63263 Neu-Isenburg
Telephone: +49 (0) 6102 - 2930
E-mail: snacks.info-line@lbsnacks.com

The complete legal notice can be found here: http://lorenz-snackworld.de/impressum

X. Contact data of the Data Protection Officer

The contact data of the controller’s Data Protection Officer is:

Datenschutz@lbsnacks.com

Status: December 2018