Source: https://www.lindt.co.uk/help/privacy-notice/
Timestamp: 2019-04-21 14:52:37+00:00

Document:
We appreciate you visiting and using our websites, our online shops, our applications and our social media pages (called the “Sites”). We trust you will enjoy learning more about LINDT & SPRÜNGLI, the story of our Brands and our products and services.
1.	WHEN DOES THIS PRIVACY NOTICE APPLY?
2.	HOW DO YOU CONSENT?
3.	HOW IS DATA COLLECTED BY LINDT & SPRÜNGLI?
- Personal contact information such as name, address, email, phone number, picture and demographic information, including age, gender, household or location.
- Account login information if you open an account with us or your details when you fill out a survey (name, email address, login ID, username, password and security question).
- Payment information, such as name, credit card number, expiry date, billing address.
- Employment information such as your CVs and references.
- We collect personal data from third party social networking sites (such as the “Like” functionality on Facebook, the “Follow” functionality on Twitter or the YouTube functionality) through so called social plug-ins. The purpose of the data collection and the further processing and use of the data by the providers on their pages as well as the rights and setting options for the protection of your privacy can be found in the data protection references of the respective providers. If you do not want the third party social networking site to allocate data collected through our Sites to your account with this social network, you must log out of the respective social networking site before visiting our Sites.
Collected information can include name, address, age, shopping habits, preferences and interests, online advertising; publicly available information such as user-generated content, blogs and postings, as permitted by law.
Most of our Sites are designed and intended for use by adults. Where a Site is offering content to a younger audience, we will gather consent from a parent or guardian prior to collecting personal information where we feel it is appropriate or where it is required by applicable laws and regulations (the age of consent varies per country). If we detect that children’s personal data has been transmitted to us, it will be deleted from our database. The parents (or legal guardians) of the child may contact us and request deletion of the data or de-registration (contact details see below). For this purpose, we may ask for a copy of an identification document, confirming the parental or guardian relationship.
5.	WHY DO WE COLLECT PERSONAL DATA AND USE IT?
-	to allow you to create and access your user account including any loyalty program associated with your account [so-called “request or contract legal basis (according Art. 6 para. 1 lit. b GDPR)”].
-	to process and ship your orders and purchases [so-called “request or contract legal basis (according Art. 6 para. 1 lit. b GDPR)”].
to send you information, products or samples that you have requested [so-called “consent legal basis (according Art. 6 para. 1 lit. a GDPR)”].
to contact you in relation with your queries, complaints or comments, via email, letter, telephone or online chat features [so-called “request or contract legal basis (according Art. 6 para. 1 lit. b GDPR)”].
to get you more actively engaged with our products and services by publishing your content for example [so-called “consent legal basis (according Art. 6 para. 1 lit. a GDPR)”].
to administrate contests or promotions [so-called “request or contract legal basis (according Art. 6 para. 1 lit. b GDPR)”].
to publish the contact details of the winners [so-called “legitimate interest legal basis (according Art. 6 para. 1 lit. f GDPR)”].
to allow you to participate in our loyalty program and interact with us within the program [so-called “request or contract legal basis (according Art. 6 para. 1 lit. b GDPR)” or based on your consent (according Art. 6 para. 1 lit. a GDPR)”].
to send you our newsletters, if you have subscribed to such a service.
to suggest products or services which we think may be of interest to you.
to offer you the opportunity to take part in competitions or promotions.
to contact you via mobile message service if you have subscribed to such services. If done via a partner, we will communicate its name to you.
to evaluate the use of our Sites, using data such as information about account login, computer usage, and/or previous website usage.
to evaluate the use of our Sites with tracking-tools. Find out more in our Cookie Notice.
to improve our products and services using demographic information, consumer profiling and consumer feedback.
to analyse the effectiveness of our advertisement and promotions, via cookies or tracking technologies.
to personalize your website experience based on targeted advertising.
- to offer you social features via community forums, tell-a-friend program or social networking features such as Facebook Connect [so-called “consent legal basis (according Art. 6 para. 1 lit. a GDPR)”].
- to process your job application for employment and possibly to determine whether you would be suitable for other positions available with our company [so-called “consent legal basis (according Art. 6 para. 1 lit. a GDPR)”].
to maintain the day-to-day operation, the maintenance and the security of LINDT & SPRÜNGLI Sites.
to conduct demographic studies or audits.
to contact you for consumer research.
to manage risks, disputes and records.
6.	WHY DO WE SHARE PERSONAL INFORMATION WITH OTHER PARTIES?
-	authorities for legal reasons and potential buyers to carry a specific transaction.
a company receiving a query and transferring it to another company entitled to respond.
a company sharing a job application should it be addressed to another company.
a company transferring an account opened on its company site to another company site if so requested by you.
entities participating to a joint promotion or a loyalty program and wishing you to send you information if you have consented to it. Both LINDT & SPRÜNGLI and the partner might be joint controllers of your personal data. The privacy notice of such partner will apply to the processing of your personal information by the partner.
at your request, and provided we are under no legal obligation to keep it, we shall delete or anonymize your personal data from the Sites. However, you should note that your personal data may still be available in the partner’s own databases if transmitted prior to us receiving your request.
advertising, media and marketing agencies delivering and analysing our campaigns.
postal and logistic companies delivering a product you have ordered.
data processing entities acting upon instructions of LINDT & SPRÜNGLI, such as recruitment agencies, hosting or security providers.
governmental or law enforcement authorities requesting us to disclose the information based on applicable law.
entities to which LINDT & SPRÜNGLI divest all or a part of its business or a brand, or in connection with a merger, change in control, or liquidation of that business or brand.
We require such third parties, possibly based outside the country from which you have accessed the Sites, to comply with all relevant data protection laws and security requirements in relation to your personal data. Such third parties are obliged to protect data privacy to the same extent as we do ourselves. If the level of data protection in a country does not comply with Swiss or EU data protection laws, we contractually ensure that the protection of your personal data is the same as that in Switzerland or the European Economic Area (EEA) at all times.
Various third-party service providers have their residence in the USA. We would like to point out to users residing or based in Switzerland/EEA that in the USA there are monitoring measures taken by the US authorities that generally allow the storage of all personal data relating to all persons whose data has been transferred from Switzerland/EEA to the USA. This happens without differentiation, limitation or exception on the basis of the aim pursued and without an objective criterion that makes it possible to limit access to the data by US authorities and its later use to very specific, strictly limited purposes that may justify the intervention associated with both access to this data and use thereof. We would also like to point out that there are no judicial remedies in place in the USA for affected persons from Switzerland/EEA that would make it possible to receive access to the data relating to them and to have this corrected or deleted, as well as no effective legal protection against general access rights by US authorities. We refer the persons affected explicitly to this legal and factual situation so that they can make an appropriately informed decision on whether or not to consent to their data being used.
For users residing in EU Member States particularly, please note that, from the point of view of the European Union, the USA does not have sufficient data protection levels due, inter alia, to the issues mentioned in this section. To the extent that we have explained in this Privacy Notice that recipients of data (such as Google, Facebook and Twitter) are located in the USA, we will either based on a contract or by securing certification of these companies under the EU-US -Privacy Shield ensure that your data is protected at an appropriate level by our partners.
If we propose social plugins or if you connect your Account to your accounts on third party platforms like Facebook, we can collect and process account related information. If you connect with Facebook, your Facebook identity, name, email, location, friends list and profile picture will be stored and is used to connect with your Facebook account to provide certain functionality on the Sites. The third-party platform’s use of information collected from you (or as authorized by you) is governed by its own privacy notice and your settings on the service. For further information please check the privacy notice of the respective social network.
7.	HOW DO WE STORE AND SECURE DATA AND FOR HOW LONG?
You may request access to your personal data we hold by contacting us at Privacy.gbr@lindt.com. You have the right to tell us if you would like to correct, update or delete your personal data in our records. You also have the right to reclaim from us the data you have given us.
If your personal data is processed on the legal ground of legitimate interests you have the right to object processing. If the processing is based on your consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
In order to assist us in dealing with your request, please provide your full name and details. For this purpose, we may require a copy of an identification document at our discretion.
You can opt-out at any time from marketing communications, including targeted advertising messages, by choosing to ‘opt-out’ of marketing preferences or by contacting us at Privacy.gbr@lindt.com. You can also limit the use of tracking technologies (such as cookies for which you can set your browser to warn you before accepting them, or you can simply set it to refuse them).
Lindt & Sprüngli (UK) LTD, located at 4 New Square, Feltham, Middlesex, TW14 8HA, is operating this Website and the Sites referring to this Privacy Notice. Lindt & Sprüngli acts as a “data controller” for the personal data it processes in the framework of this Privacy Notice.
Should you be concerned about a possible interference with your privacy or misuse of your personal data by us, or if you have any questions or comments, you can contact via our online form: www.lindt.co.uk/contact-us/, by email Privacy.gbr@lindt.com or write to us using the address mentioned above.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6