Information about data transfers beyond the borders of the EU or EEA (“third countries”) has been updated to reflect the implementation of an inventory and shipping management service provider located in the United States which uses subcontractors located in third countries.
The service-specific information has been updated
- Old MyFazer service section has been removed, as the new My Fazer customer loyalty programme replaces the previous service.
- My Fazer customer loyalty programme has been added to the service-specific information.
Fazer Group has continued and accelerated its preparations for the EU General Data Protection Regulation that will enter into force in May 2018. At the same time, we have revised our Privacy Statement. As a result, we are more accurately and clearly able to describe how we process your personal data. In addition, we have improved the layout of the Privacy Statement so that it is easier to read.
The central changes are the following:
Currently, our Privacy Statement also describes how we process your personal data when you contact us as a representative of a company or another organisation.
We have specified the From where do we collect data? section.
In Service-specific details, we describe what personal data we collect in each service and for what purposes we use this data. From now on, you can easily check all matters related to the processing of your data in each service.
In the What kind of data do we collect? section, we have specified the examples of the type of personal data we collect about you. For example, we have specified the description of how we process personal data related to your health.
We have specified the description of what your data is used for. Our aim is to tell you as clearly as possible for what purposes we use your personal data and why.
We have added details to the description of how long we store your data. We only store your data for as long as is required for the purpose for which your data was collected. We have added a table for you to check the service-specific purposes of use and criteria for data storage periods.
Furthermore, we have specified the description of who can process your data. For example, we use third parties in some services to which we disclose your data so that we can fulfil our contractual obligations. These parties include providers of payment transfer and transportation services.
We have specified the description of how we transfer your data outside the EU/EEA, i.e. third countries.
In addition, we have specified the description of who you can turn to if you have any questions concerning the processing of your data.
In the Controllers section, we have listed all controllers within the Fazer Group. Oy Karl Fazer Ab acts as a controller of personal data, together with subsidiaries belonging to the Fazer Group which are controllers regarding their own operations.
Fazer Group is preparing for the EU’s General Data Protection Regulation that will enter into force in May 2018. We have harmonised and centralised the processing of personal data in companies belonging to Fazer Group to be able to protect your personal data in the best way possible.
The most significant change is that in the future, Oy Karl Fazer Ab will be the controller of personal data together with subsidiaries belonging to the same Group, which are controllers for their own operations. In the updated Privacy Statement, we will describe in more detail how your personal data is processed in Fazer companies and how you can exercise your rights as easily and effectively as possible.
The central changes are the following:
We have refined the From where do we collect data? section.
In the What kind of data do we collect? section, we have refined the examples of the types of personal data we collect about you. Our goal is that in the future, you will be more aware of what kinds of data we record concerning you.
We have refined the description of what your data is used for. Our goal has been to be increasingly clear on the basis for using your data.
We have added details to the description of how long we store your data.
We have refined the description of who can process your data.
We have included a section where we describe how you can exercise your rights and affect the processing of your personal data.
We have also included a section where we describe how you can follow the changes in our Privacy Statement