We collect data about you, among other occasions, when you:
• register as a user of our services,
• give us a marketing permission and receive messages from us;
• make purchases at our online store or use our other web or mobile services,
• take part in one of our marketing campaigns or a marketing survey or an opinion poll we organise,
• give us feedback, leave us a message to contact you or otherwise get in touch with Fazer;
• are a contact person of one of our corporate customers or partners or contact us as a representative of your organisation; or
• share, publish, comment on something or send a message in Fazer’s social media channels when you wish to get customer service. We also carry out social media monitoring on a general level to better understand our customers and to get a better picture of what is said about Fazer and the industry.
We can also collect data about you from other registers of companies belonging to the Fazer Group, for example, in conjunction with a business purchase or another business transaction.
The data we process may vary depending on which of our services you use and how you use them. You can influence the type of data we collect. We get some of the data directly from you, for instance, when you do business in our online store or participate in one of our campaigns. We get some of the data through cookies and other similar technologies. This way we learn, for instance, how our services are used, and we can offer the best service experience possible. To check how we process your data in the different services you use, go to the section on service-specific details.
Depending on which services you use, we collect the following data concerning you:
We collect your first and last name, address, email address, telephone number and other similar contact details.
We collect other descriptive data, such as age and/or date of birth, language and country.
We collect registration information for online services, such as user ID and password and other similar security information.
We collect data, for example, on any purchases, reservations, used benefits or other activities you have made or placed in the online store, any newsletters you have received (e.g. whether or not you have opened the message) or other activities. We also collect information on customer feedback and other customer contacts. In certain complaint situations, we may process health-related data to investigate our legal liability.
To be able to process your payments, we collect the necessary information for the payment of your purchases. Among other things, we collect information about the means of payment you use and on invoicing details, in the event that you choose an invoice as the means of payment.
We collect information about your position in the company or other organisation you represent, as well as the name and contact details of the company or organisation in question, when you interact with us as a representative of your company or other organisation or stakeholder group. We also collect other information necessary for the management of the relationship between Fazer and the company or organisation you represent.
When you participate in one of our marketing campaigns, such as a prize draw or competition, we collect the data provided in this connection, as well as the data on participation in the campaign.
When we carry out market surveys and opinion polls, we collect data through which we can learn to develop our services, business operations and product.
We collect data on your interests. In addition to expressly provided data, your interests can be deduced or derived from other data we collect.
We collect data on opt-ins and opt-outs with regard to marketing.
If the aforementioned data changes, our systems may record details of the changes so that we can ensure that the data is accurate.
We may take photographs or record video at Fazer events. If we photograph you in particular and not the whole audience, we will ask for your content to publishing the image. Your picture may also be recorded by our security cameras for security reasons when you visit Fazer facilities.
We collect data concerning your health in the context of some services, such as Fazer Brainhow. Such information includes data on your activeness, diet and sleep. When we collect health-related data, we will ask for your express consent for its processing, unless we have some other legal grounds for processing it. Such legal grounds include an investigation concerning legal liability in complaint situations.
You can influence the type of data we collect. You can use most of our services without giving us the above information. However, the use of certain services, such as participation in a campaign, processing a complaint, or purchasing products or services through an online service, requires that you submit your personal data. If you decide not to submit your personal data to us, we may be unable to provide all the offers or content to you, or provide as targeted and personal a service as we could if we had access to your data. You can quickly and easily see from theservice-specific information how we process your personal data in each service.
We collect data on the use of our online services with the help of cookies, for example.
Read more about our cookies here.
We process your data for business purposes, such as to deliver any products you have ordered, produce the service you have purchased or to fulfil some other contract. We also process your data if it is necessary for the realisation of Fazer’s legitimate interests. In some cases, we may ask you for your consent for the processing of your data. We combine the data we collect to be able to offer you as good service as possible.
We process your data for the following purposes, among others:
We process your data so that you can use our online services and mobile apps. Your data allows us to identify you, offer our digital services to you and fulfil a contract, by delivering an order, for example.
We process your data for the purpose of providing customer services, such as responding to any feedback or complaint you have sent us, carrying out customer communication and resolving disputes.
We process your data to be able to market our products and services. We can also process your data in marketing surveys and opinion polls to gain a better understanding of our customers and thereby provide them with better services.
We process your data to target communication and marketing. This allows us to provide you with information about our products and services that is as relevant as possible. The targeting of content is based on interests the customer has indicated or information we have learned about the customer with the help of recorded data. Such data consists of information on which campaigns you have participated in and your activities in our online services. We use this data to form groups at which we target our marketing, and do not therefore target marketing specifically at any individual person.
We process the data for analysis, for compiling statistics and reporting, as well as for developing our business, products and services, and improving the user experience.
We process the data in the aforementioned ways on the basis of the fulfilment of contractual obligations or Fazer’s legitimate interest. We can also request your consent for the processing of your data for the realisation of particular purposes. For example, our direct marketing aimed at consumers is always based on your consent given in advance, which you can withdraw at any time.
“Legitimate interest” refers to an interest that is legal and the realisation of which is important for Fazer’s operations. Fazer may act on the grounds of legitimate interest where a significant and pertinent relationship exists between the user of the service, i.e. the data subject, and Fazer. When assessing legitimate interest, the interests of the data subject and Fazer are evaluated, including the realisation of fundamental rights, the nature and purpose of use of the data collected, and data security. The data subject has the right to object to processing that occurs on the basis of a legitimate interest. You can find more information about your rights under the section 8. How can you influence the processing of your personal data?
You can read more about the data we collect in various services and about service-specific purposes of use and grounds under section 1. From where do we collect data?
We do not store your data for any longer than is necessary for the purposes described in this Privacy Statement and to comply with any mandatory legislation, such as accounting laws. The retention period of your data is also affected by the connection in which and the purpose for which your data has been collected. You can read more on how the retention periods are determined below.
You can check the grounds for the retention periods of personal data by service from the table below. When the grounds for retaining your data comes to an end, a process which removes your data from our registers in a secure manner begins. Please note that with the help of the MyFazer service, for example, you can use several of our services by logging in our online store with your MyFazer credentials. In such cases, the retention period is subject to what is stated on the MyFazer service below.
|The services or functions subject to retention periods||What do we use your data for in this particular service, for example?||How long do we store your data?|
|One-time purchase or recurring order in our online store||The delivery of an order and the reception of any possible complaints||Until such time as the order (or the final delivery of a recurring order) has been delivered, the complaint period has expired, the data is no longer needed for the monitoring of product quality and we have no reason to assume that you would get in touch with us in relation to the order.|
|Booking systems (e.g. Fazer’s visitor centre, Meetings & Parties service)||The production of a service or event||Until such a service or event has been delivered, the complaint period has expired, the data is no longer needed for the monitoring of service or product quality and we have no reason to assume that you would get in touch with us in relation to the service or event. The data of registered customers is retained for the duration of the customer account.|
|Participation in a campaign||The realisation of a campaign (such as the delivery of a prize)||Until such time as the campaign has ended and the measures following the campaign (such as the delivery of prizes) has been carried out and we have no reason to assume that you would get in touch with us in relation to the campaign.|
|Marketing communication||For the marketing of new products and offers||Until the consent for marketing and/or the subscription concerning a newsletter has been cancelled.|
|Feedback, new idea, complaint or other customer service||The processing of feedback, the improvement of services and investigating legal liability||Until the complaint period has expired, the requirements of food safety self-monitoring have been fulfilled, the complaint has been processed and Fazer’s legal liability has been investigated and the matter concluded.|
|Order||For service implementation||Until such time as the order has been delivered/picked up, the complaint period has expired or the data is no longer needed for the monitoring of product quality and we have no reason to assume that you would get in touch with us in relation to the order.|
|Responding to an opinion poll or survey||For the improvement of our services||Until the opinion poll has closed or the survey has concluded and the purpose of the research or survey has been fulfilled.|
|For the use of a mobile app (e.g. Fazer Brainhow)||For service implementation||Until the application’s use has ended and the related account has been terminated.|
|Fazer card||For service implementation||Until the card agreement has expired.|
|For the use of the My Fazer service||For service implementation||Until you remove the MyFazer service from your use.|
|Processing the personal data of the representatives of companies or other organisations or a stakeholder group||The implementation of services and communication||Until we no longer need your data for the purpose it was collected for, or until you no longer manage the tasks in the company or organisation on the basis of which your personal data is processed. We will nevertheless continue to process your data, if your new job description gives grounds for such processing.|
Please note that regardless of the above criteria, we may have an obligation due to mandatory legislation to process certain data concerning you (such as transaction data for the online store in order to comply with accounting legislation) for a longer time, in which case we will only process the data for the purpose of complying with the legislation in question. We may also make an exception in retention periods when a legal claim is made against Fazer or when the handling of matters related to such a claim is incomplete.
In addition, regardless of what is stated above, we may process the data in an anonymised format, among other things, for analysis and statistical purposes and to improve our business, products and services.
Your data is processed within Fazer Group. We may disclose your data to the authorities, for example, if the law requires us to do so. In addition, we may disclose your data in the context of any disposal of business or some other corporate transaction to the buyer of the business or another relevant party related to the corporate transaction.
To fulfil the agreement, we may disclose personal data to third parties. Such third parties include our partners offering payment agency or transportation services in our online stores or sales outlets; these partners may also act as the controller in terms of personal data needed for the payment and transportation. Each online store provides information on the partners it uses. We advise you read the data protection policies of such third parties.
We use services provided by third parties in the processing of personal data, but we do not, as a rule, disclose your data to them in such a manner that they would be able to use it for other purposes than those defined by Fazer.
We use subcontractors and service providers for the processing of your data, such as for technical maintenance or the implementation of campaigns and direct marketing. In such cases, we obligate our subcontractors and service providers with appropriate contractual means to maintain a level of information security that is adequate to protect your data and to comply with the valid personal data legislation. The subcontractors and service providers we use only use your data for the purposes defined by Fazer, described above. We do not disclose your data to them in a format that would allow them to use it for other purposes.
If we use your data for electronic communications, your data may be transferred to our service provider located in the United States. Your data may also be transferred to the US and Canada when you complete transactions in our online Fazer Candy Store offered by Fazer Confectionery Ltd. According to a decision by the EU Commission, the level of data protection in Canada is sufficient. Our service providers in the United States, on the other hand, comply with rules based on the Privacy Shield agreement between the EU and the United States.
We use the digital tool of our service provider in the United States to implement digital marketing and customer communication, due to which your data may be transferred to the United States when we use the data for digital communication.
The service provider which offers the platform for the online Fazer Candy Store operating under Fazer Confectionery Ltd is located in Canada, and data may be transferred to the Unites States in connection with the data processing of this service provider. Therefore, when you make purchases in the online Fazer Candy Store, your personal data may be transferred to the United States and Canada to enable your online transaction.
According to a decision by the EU Commission, the level of data protection in Canada is sufficient, which secures the transfer of personal data to Canada. Our service providers in the United States, on the other hand, have undertaken to abide by rules based on the Privacy Shield agreement between the EU and the United States, which ensure an adequate level of data protection. You can read more about the Privacy Shield agreement between the EU and the United States on the website of the European Commission.
We can also transfer your data outside the EU or EEA in cases other than those mentioned above if this is necessary for the purposes of use stated above or the technical maintenance of the data, provided that the requirements set in the EU’s General Data Protection Regulation are met, such as by carrying out the transfer by applying the model clauses approved by the European Commission.
You can control how Fazer collects and uses your data. Because your rights are important for us, we have established several means by which you can influence the processing of your data. Below, you can read about your rights and the methods you can use to exercise them.
You are entitled to influence the processing of your data in the following ways:
• You have the right to forbid the processing of your personal data for the purposes of direct marketing at any time (right to object). Please note that if you unsubscribe from a newsletter you earlier subscribed to through the link in a newsletter but have given us general marketing permission, you may continue to receive marketing communication from us. In such cases, you can withdraw the consent you have given by filling in the form found on our website, contacting our customer service or through the MyFazer service, if you have taken it into use. Please note that even if you opt out of direct marketing, you may still see our advertisements in online services external to Fazer and receive customer communication from us, such as confirmation of an order you made through our online store. In addition, you may receive marketing communication like this from Fazer in relation to your work or area of responsibility. The easiest way to opt out is to unsubscribe via the link at the end of the message you receive.
• In some situations, you may have the right, for reasons related to special personal circumstances, to object to the processing of your personal data beyond the purposes of direct marketing. In such cases, your right only pertains to your data that we process by virtue of Fazer’s legitimate interests. When you ask us to stop processing your personal data on these grounds, you must tell us what the special personal reason is due to which the processing of your data should be stopped.
• You have the right to request access to the data concerning you or to receive confirmation that we do not process data concerning you (right of access). The easiest way to make such a request is to fill in the relevant form found on our website. In certain situations, you also have the right to receive the personal data you provided to us in digital format so that you can transfer it to another controller (right to data portability).
• You have the right to have data rectified (right to rectification). This means that if your data is incorrect, inaccurate or deficient, you are entitled to ask us to rectify or complete the data. In certain situations, you may have the right to restrict the processing (right to restriction of processing). This means that if you dispute the accuracy of your data, you have the right to restrict its processing for a period of time that allows us to ensure that your data is accurate.
• You have the right to have your data erased in certain situations, including situations where the processing of your personal data is no longer necessary for the purposes for which it was collected, or if the processing of your personal data was based on your consent and you wish to withdraw your consent, and there are no other grounds for processing your personal data (right to be forgotten). Please note that if the processing of your personal data is necessary for the purpose of, for instance, delivering an online store order you have made or complying with your desire to opt out of direct marketing, we cannot remove your data.
You can exercise your rights related to the processing of your personal data by contacting us via the form found on our website.
A MyFazer account is the easiest way to manage and view your data. When you log in, you can make changes to your personal data and manage any consumer newsletter subscriptions and direct marketing permission.. You can also request a copy of your own personal data when you wish to do so. If you wish to stop using the service, you can request that the data related to your MyFazer account be removed. We recommend creating a MyFazer account so that you can manage your own data and exercise your rights pertaining the processing of your personal data at any time. You can get more information on the MyFazer service and create a MyFazer account here.
You can read more about our data protection policies at www.fazergroup.com/privacy , where you can contact us, for example, or exercise your rights related to the processing of your data.
If you think that we, despite the principles mentioned in this Privacy Statement, have infringed upon your rights based on personal data legislation, you can also file a complaint with your local data protection authority. We nevertheless recommend that you first get in touch with our customer service to clear up the matter.
Oy Karl Fazer Ab, together with the companies belonging to the same Group, which are the controllers in respect of their own operations.
Fazer is an international family-owned company offering quality bakery, confectionery, biscuit and grain products as well as food and café services. Fazer operates in eight countries and exports to around 40 countries.
The service-specific details provide you with information on where we collect data from and on the way in which we process your data in the various services you use.
Our online stores let you order our products or services. We process your personal data to fulfil the agreement and to manage the customer relationship. In connection with orders, we will ask for details such as your name and contact information, your customer relationship information, change data and identification data, which allow us to deliver the order. We also collect your payment data, such as the selected means of payment and invoicing details, if the means of payment is an invoice. If you wish, you can grant us marketing permission.
To fulfil the agreement, we may disclose personal data to third parties. Such third parties include our partners offering payment agency or transportation services in our online stores; these partners may also act as the controller in terms of personal data needed for the payment and transportation. Each online store provides information on the partners it uses. We advise you read the data protection policies of such third parties.
When you make purchases in the online Fazer Candy Store provided by Fazer Confectionery Ltd, your personal data may be transferred to our service providers in the United States and Canada. According to a decision by the EU Commission, the level of data protection in Canada is sufficient. Our service providers in the United States, on the other hand, comply with rules based on the Privacy Shield agreement between the EU and the United States. For more information on transferring data to third countries, read section 7. Do we transfer your data beyond the borders of the EU or EEA (“third countries”)?
You can use our booking systems to make a reservation for a space or event or a table at one of our restaurants or cafés. In order to fulfil the agreement, we will ask for details when you make the booking. These details include your name and contact information, and your customer relationship data, so that we can complete the booking under your name, confirm the booking and get in touch with you in connection with any cancellations, for example. We may also request other information necessary to carry out the reservation in question. This information includes special diets, any possible need for accessible spaces or the first name and age of the person celebrating their birthday in connection to any invitations to birthday parties. Based on the customer relationship, we also collect other data on your interests and changes. If you wish, you can grant us marketing permission.
You can place an order for cake, bread or other food with us. In order to fulfil the agreement, we will ask for details in connection with such orders. These details include your name and contact information, which allow us to confirm the order and get in touch with you if necessary. We can also collect data about special diets which is necessary to prepare your food order.
In campaigns, we market a particular product, service or offer for a fixed period of time. In connection with a campaign, we may offer you a chance to participate in a prize drawing or competition or ask your consent to marketing. In such cases, we will ask you to provide personal data, such as your name and contact information. We need this information to implement the campaign and to send you any possible prize you have won and, if you have given your consent to marketing, to send you offers, newsletters or news via email also after the campaign has ended.
Marketing communication aimed at consumers
Newsletters allow us to send you information about offers or new products and services digitally. We will ask your consent before sending you newsletters. If you have given us general permission for marketing, we can send you news and newsletters which we think might interest you on the basis of the services you have used. You can unsubscribe for a newsletter sent to you through a link at the end of the email in question. Please note that despite the cancellation of an individual newsletter, you may still receive other marketing communication from Fazer Group if you have not cancelled the general consent to marketing you have given to Fazer Group.
If you have MyFazer credentials, you can yourself manage the types of newsletters sent to you. You can cancel a general consent to marketing either in the MyFazer service, contacting our customer service or with a form available on our website. The cancellation of a general consent to marketing stops all marketing communication aimed at consumers, including any newsletters you may have subscribed to.
Marketing communication aimed at the representatives of companies and other stakeholders
You may receive marketing communication related to your work or area of responsibility from Fazer when, for example, your company is our customer, you have shown interest in Fazer’s services or products as a representative of your company, you belong in some other stakeholder group or if you have subscribed to one of our newsletters. We do this on the basis of the customer relationship or Fazer’s legitimate interests. When the local legislation so requires, we will ask for your consent to such marketing. If you receive marketing communication like this from Fazer in relation to your work or area of responsibility, the easiest way to opt out is to unsubscribe via the link at the end of the message you receive.
You can give us feedback, make a complaint concerning a product or service of ours or send us an idea through our customer service aimed at consumers. In this context, we will collect data such as your name, your contact information and possible data on representation, based on the customer relationship. This data facilitates the processing of the idea or complaint and allow us to respond. We may also collect health-related data if this is necessary for the processing of compensation or an investigation concerning legal liability. We will do this in cases where our products have caused you health-related symptoms of some kind.
Opinion polls and surveys allow us to collect information important for our operations. It is voluntary to answer to them, and we will process your data on your consent. When you participate in a poll or a survey, we may ask personal details that are necessary for carrying out the poll or survey or if the poll or survey involves a prize draw, in which case we need the personal data to send you your prize.
We provide our customers with mobile apps, through which you can place orders or receive benefits when you visit our cafés or restaurants. For you to be able to use an app, we will collect personal data from you (such as your contact information, change data and customer relationship data, as well as information on your interests, such as information on the use of the app, so that we can send you offers suitable for you.
MyFazerCafé is a customer loyalty programme which includes a mobile card you can charge on your smart phone. The card allows you to use benefits in all Fazer Cafés. For you to be able to use an app, we will collect your name and contact information, customer relationship data, change data and information on your interests, based on your customer relationship. If you wish, you can grant us marketing permission.
Fazer Brainhow is a well-being service offered by Oy Karl Fazer Ab. In this Privacy Statement, we describe how Fazer, in its capacity as the controller, processes your data in the service.
The service is produced on the platform of Wellmo Mobile Wellness Solutions MWS Oy (hereinafter “Wellmo”) and it employs the services of Wellness Foundry Holding Oy (hereinafter “MealLogger”) which allow the monitoring of meal data. Wellmo and MealLogger process part of the data entered in the service by a user as independent controllers. We also recommend that you read the data protection policies of Wellmo and a MealLogger before taking the service into use.
Fazer collects and processes your personal data related to the Fazer Brainhow service so that we can help you improve your well-being and find peer support and so that you can keep notes on the development of your well-being. For this purpose, we will ask your name and contact information, step count, weight, height, details of your memberships in the service groups and communities and information on your diet. You can select to provide information about your gender, how you sleep and how active you are, which you may choose to complement with any data added by yourself, which can help you along journey towards better well-being. Such data can include information on your outdoor activities or stress level. You can also upload pictures in the service.
You decide the data we may collect on you, and you can remove your data from our service at any time. Given that the information concerns health-related sensitive personal data, we will request your express consent for the collection and processing of this data.
If the service is offered to you by your employer, your collected data can be used in compiling the anonymous statistics of your workplace. The data will not be disclosed to your employer in any other form than as anonymous statistical data. In addition, your data can, if you so wish, be used in various comparisons with the other users at your workplace. If you want to share your data with other users, you can do so in the settings of the service.
A Fazer card allows you to pay for your purchases at certain Fazer restaurants. Once you have received the card you will be instructed to create a profile which allows you to keep an eye on your purchases. When you create the profile, we will ask you, on the basis of your customer relationship, to provide us with your personal data, such as name, contact information and date of birth, so that we are able to identify you as the user of your card.
You can use MyFazer credentials for placing some orders in online stores, for example, or for participating in campaigns as well as the management of your marketing consent and the newsletters you receive. When you join the service, we will ask you to provide some personal data, such as your name and contact information, so that we are able to identify you as the user of the service.
The MyFazer service is the easiest way to manage and view your data. When you log in, you can make changes to your personal data or choose to not use the service anymore by requesting the removal of your personal data related to the MyFazer credentials. Please note that even if you remove your data related to the account, we may continue to process your data in other connections, such as data related to your purchase in the online store to deliver your order.
Fazer processes the data of its corporate customers and potential corporate customers, suppliers and subcontractors as well as other stakeholders in the course of its business operations. We process your data in these contexts when you are in contact with us as a representative of your company, other organisation or a stakeholder group. In such cases, we typically process the data on the basis of the fulfilment of contractual obligations or Fazer’s legitimate interest. Read more about legitimate interest in section 4. How is the data used? We can also request your consent to the processing of your personal data when, for instance, the applicable legislation requires your consent for marketing communication related to your work or area of responsibility.
We process your data to be able to make an agreement with you or provide services to you, for customer communication and service as well as for the analysis, statistics, reporting and development of our business operations. We also use your data for the marketing of our products and services and can, on the basis of any work-related interests you have informed us of, target the marketing we send to you in such a way that it benefits you in your work as much as possible. If you receive marketing communication like this from Fazer in relation to your work or area of responsibility, you can opt out at any time by unsubscribing via the link at the end of the message you receive.
When you deal with us as a representative of a company or other organisation or stakeholder group, the data we collect from you includes your name, contact details, position and job and/or title in the company or other organisation you represent. In some situations, we can also collect information about your interests and possibly other data necessary for the management of the relationship between Fazer and the company or organisation you represent. In addition, we collect information from generally avaialble sources, such as the websites of companies, social media services and directories and contact databases maintained by the authorities or service providers.