Privacy Policy

This privacy policy provides information about processing of your personal data on our website www.oetker.com

1. Controller

The following company is the controller for processing your personal data as described in this privacy notice:

Dr. August Oetker Nahrungsmittel KG
Lutterstraße 14
33617 Bielefeld
Germany

Tel.: +49 (0) 521 155 0
E-Mail: dsgvo-service@oetker.com

2. Data Protection Office

Please do not hesitate to contact our Data Protection Officer in case of questions about processing of your personal data:

Dr. August Oetker Nahrungsmittel KG

Data Protection Officer

Lutterstraße 14

33617 Bielefeld

E-Mail: oetker-nm@corporate-data-protection.com 

Details about specific processing activities

Contacting us / feedback

You may contact us through forms or via email. We will process your data in order to reply to you. Therein also lies our legitimate interest for data processing. Legal basis for this processing activity is our legitimate interest (Art. 6 para. 1 f) GDPR).

Server logs

When accessing our website, we will process data in server log files. This data derives from your terminal equipment and may include personal data. In particular, we process the following data:

- The operating system of your terminal equipment
⁠- The browser used by you
⁠- The name of your provider
⁠- Your IP address
⁠- Data and time of access
⁠- Accesses pages and search terms (if applicable)
⁠- The website that referred you to our website (referrer)

This processing activity is necessary to ensure the operation of our website, to optimise the content and deliverability of our website, and to provide the necessary information to public bodies in case of a cyber attack. Therein also lies our legitimate interest for data processing. Legal basis for this processing activity is our legitimate interest (Art. 6 para. 1 f) GDPR). We regularly delete this data after 14 days, in case of misuse after administrative or legal proceedings are finished.

Note on data processing in the United States

For the purpose of "analytics and personalisation - tracking", we work with technology providers (as data processors) with whom a transfer of your personal data to the United States cannot be ruled out.

Likewise, for the purpose of "(Re-)Marketing / data sharing with third parties", we work with partners with whom a transfer of your personal data to the United States cannot be ruled out.

Where possible, we instruct our technology providers to process your personal data in data centres within the European Union. 

However, in the case of technology providers or partners who also have an establishment in the United States or are located there with other companies of their group of companies, we cannot rule out the possibility of US security services gaining access to your personal data. This may occur, for example, via remote access or a legally binding instruction to our technology provider or partner. In particular, this may expose you to the risk that US security services may access your personal data without specific cause and on a large scale basis, and that you may not be able to take effective legal action against that in the United States.

Tracking and cookies

Our website uses cookies and similar technologies that store information on your terminal equipment or accesses such information for the following purposes:

Providing our website
We use cookies and similar technologies to ensure certain features of our website. This is strictly necessary to provide our website. By doing this, we can, for example,

  • Save your preferred language version of our website or similar settings for your next visit.
  • Distribute requests to our website across multiple web servers (load balancing).
  • Provide a uniform context (session) to multiple requests to our website, in order to facilitate login-secured parts of our website or checkout / payment processes.
  • Save your consent regarding tracking tools and active / deactivate tracking tools according to your choice.

 Our legitimate interest for these processing activities lies in the uninterrupted usability of our website and in ensuring that user interactions are actually linked to an authenticated user. Legal basis for this processing activity is our legitimate interest (Art. 6 para. 1 f) GDPR.

Analytics and personalisation - Tracking
We use cookies and similar technologies to evaluate user behaviour on our website and to adapt it according to this. Provided you have given your consent, we process information on your terminal equipment and the browser you are using (in the case of the website) every time you interact with our website. For example, we can find out with which language settings you use our website, whether you use a smartphone or a desktop computer or from which country you access our website. In addition, we process information about how you interact with our website, e.g. from where you are referred to our website, how long you use our website and the path you take through individual sub-pages. For example, we can record whether you found us via a search engine (and if so, under which search term) or an advertisement, how long you spent browsing the content of a particular page and how many pages you visited in total.

We use this information to create analyses of user behaviour on our website and to optimise the website / accordingly. In some cases, we create several different versions of our website, which we present to individual users or user groups, and use cookies or similar technologies to evaluate which version is used by you in which way. Legal basis for this processing activity is your consent (Art. 6 para. 1 a) GDPR . You may withdraw or change your consent for future processing at any time by changing your tracking settings. Additionally, you may change your browser settings regarding cookies and similar technologies.

We use the following products for analytics and personalisation:

  • Google Analytics / Google Optimize
    Google Analytics and Google Optimize are provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google processes your data on our behalf (data processor). Our configuration of Google Analytics and Google Optimize does not allow Google to use data that is gathered through Google Analytics or Google Optimize to improve Google products and services.
    ⁠Please find more information about the cookies that are used by Google Analytics and their respective storage periods here. Google Optimize also uses the cookies that are set by Google Analytics (please refer to the documentation here).
    ⁠Google is established in the United States through other companies of the same group of companies (in particular, through Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043. USA) and uses them as data processors, so that we cannot exclude a transfer of your personal data to the United States.

(Re-)Marketing / data sharing with third parties
We use cookies and similar technologies to evaluate the reach of our advertising campaigns and how users who have become aware of our website through our advertising campaigns use our services. We also use cookies and similar technologies to record which users use our website in order to form groups (so-called audiences) and to address these audiences on other online platforms with personalised advertising. We also transfer this information to third parties who may also process it for their own purposes. If you have consented to this, we will record whether you have reached us via one of our advertising campaigns and how you then interact with our website. For example, we can record which share of users who have seen an ad actually use content from our website. This enables us to better plan and control our advertising budget.

In addition, we group the users of our website in so-called audiences. Audiences are user groups that are put together by us according to certain criteria (e.g. all users who have accessed a category of recipes). If the users of an audience are also users of our marketing partners, we can individually address these users  with advertisements (re-marketing) through our marketing partner’s platform.. Information that our marketing partner has about his users in one of our audiences can also be used by him to suggest similar user groups to us for advertising.

To this end, we inform our marketing partners that you have visited our website and whether you have visited pages defined by us or have carried out other actions (e.g. registered an account). Our marketing partners may also use this information for their own purposes, for example to further personalise your profile on their own platform. Legal basis for this processing activity is your consent (Art. 6 para. 1 a) GDPR . You may withdraw or change your consent for future processing at any time by changing your tracking settings. Additionally, you may change your browser settings regarding cookies and similar technologies. Our marketing partners are separate controllers for the data processing that they carry out for their own purposes. The marketing partner also provides you with data protection information.

We use the following products for (re-)marketing and share data with the following third parties

  • Facebook Pixel
    Facebook Pixel is provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour Dublin 2, Ireland (“Facebook”). More information about Facebook Pixel can be found here. Please also refer to the Facebook Data Policy.
    ⁠Facebook is established in the United States through other companies of the same group of companies (in particular, through Meta Platforms Inc., 1 Hacker Way Menlo Park, CA 94025, USA) and uses them as data processors, so that we cannot exclude a transfer of your personal data to the United States.

  • Google Ads / Doubleclick
    Google Ads / Doubleclick is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).  More information about cookies set by Google can be found here. Please also refer to the Google Privacy Policy.
    ⁠Google is established in the United States through other companies of the same group of companies (in particular, through Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043. USA) and uses them as data processors, so that we cannot exclude a transfer of your personal data to the United States.

  • Google Floodlight
    Google Floodlight is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).  More information about cookies set by Google can be found here. Please also refer to the Google Privacy Policy.
    ⁠Google is established in the United States through other companies of the same group of companies (in particular, through Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043. USA) and uses them as data processors, so that we cannot exclude a transfer of your personal data to the United States.

  • The Trade Desk Pixel
    The Trade Desk Pixel is provided by The UK Trade Desk Ltd.10th Floor, 1 Bartholomew Close, London EC1A 7BL, Great Britain (“The Trade Desk”). Please also refer to the The Trade Desk Privacy Policy (among other things for information about cookies storage periods) and the possibility to opt-out from data processing by The Trade Desk.
    ⁠For the United Kingdom, the European Commission has issued an adequacy decision pursuant to Art. 45 GDPR. The United Kingdom thus offers an adequate level of protection for the processing of personal data.
    ⁠The Trade Desk is established in the United States through other companies of the same group of companies (in particular, through The Trade Desk Inc., 42 N. Chestnut St., Ventura, CA 93001, USA) and uses them as data processors, so that we cannot exclude a transfer of your personal data to the United States.

Facebook Page

We run a Facebook Page. Facebook Page is provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). When using the Facebook Page, personal data may be processed by Facebook, for which Facebook and we are jointly responsible. This joint controllership is governed by the Facebook “Page Controller Addendum”. All key information about data processing on the Facebook Page can be found in the Facebook Data Policy and the Facebook Cookie Policy. There you will also find all information on the nature and scope of the personal data affected by the data processing and your rights to information, confirmation, correction, deletion, restriction, data portability and complaint with a supervisory authority.

Legal basis for the data processing on the Facebook Page is the legitimate interest of us, Facebook and their customers to provide advertisements, recommendations and to receive insights and measurements (Art. 6 para. 1 f) GDPR). You may object to data processing towards Facebook (please refer to the Facebook Data Policy and the Facebook Cookie Policy). We have no influence on data processing by Facebook. We do not receive any data from Facebook that would enable us to identify Facebook Page users or analyse their usage behaviour. Nor do we use any tools of our own within the framework of the Facebook Page that would allow us to identify or analyse such users.

If processing is based on your consent (Art. 6 para. 1 a) GDPR) you may withdraw your consent for future processing at any time. You may reach us through the contact data that is provided in the "Controller" section or use options for withdrawal of consent that are described in the context of a specific processing activity.

5. Right to object (Art. 21 GDPR)

If processing is based on our legitimate interest (Art. 6 para. 1 f) GDPR) you have the right to object, on  grounds  relating  to  your  particular  situation, at any time to processing of personal data that concerns you. This also extends to profiling. Where we process personal data for marketing purposes, you have the right to object at any time to processing of personal data that concerns you for such marketing. This also extends to profiling that is related to such direct marketing.

6. Further data subject rights

With regard to personal data that concerns you, you may also use the following rights:

●     Right to access (Art. 15 GDPR)

●     Right to rectification (Art. 16 GDPR)

●     Right to erasure (‘right to be forgotten’) (Art. 17 GDPR)

●     Right to restriction of processing (Art. 18 GDPR)

●     Right to data portability (Art. 20 GDPR)

You also have the right  to  lodge  a  complaint  with  a  supervisory  authority (Art. 77 GDPR).

7. Automated individual decision-making, including profiling

Automated  individual  decision-making,  including  profiling, does not take place.

8. Version information

Last revision: August 2022.