Rizla Privacy Policy IMPERIAL TOBACCO LIMITED (‘Imperial’, ‘we’ or ‘us’) is committed to protecting your privacy online. At Imperial, we appreciate that you do not want the personal information you provide to us distributed indiscriminately, and here we explain how we collect information, what we do with it and how we look after it. For the purpose of the European General Data Protection Regulation (the GDPR), the data controller is Imperial Tobacco Limited (company no. 01860181) whose registered office is at 121 Winterstoke Road, Bristol, BS3 2LL. This Privacy Notice was last updated on 26/04/2018 and is effective for new and existing users from 26/04/2018. Previous version: 03/06/2015 – If you would like a copy of the previous Privacy Notice please copy and paste this link into your browser: https://www.rizla.com/privacy-notice-03062015/ What information do we collect? We collect and use the following information about you: Information that you provide by filling in forms on our website. This includes information provided at the time of starting to use our site, asking for information from us, signing up to our newsletter or other promotional materials, and providing information on feedback forms. We also ask you for information when you report a problem with our website. If you contact us, we keep a record of that correspondence. Details generated on the basis of your visits to our site and the resources that you access. We collect and use information about your interaction with our website from Google Analytics. We use information from social media (Facebook, Instagram and YouTube) platforms to monitor the performance of our competitions. How we use your personal information Imperial will use the information you provide or that is generated about you to: verify your age to ensure that you fulfil the criteria for entry onto our website (see the Age Verification section below) to manage any queries you raise with us identify visitors to our website and to assess and improve the performance of our website allow us to communicate with you for daily operational and business reasons improve the content of our web page carry out research on our customers’ demographics, interests and behaviour where you have consented by signing up to our newsletter or other promotional materials, and where we are permitted to do so, send you information about our latest news, offers and events. (See the Marketing section below) track and analyse activity on our website Age verification Our products relate to tobacco. Because of this, we must ensure that users of our website are aged 18 years or over and that they are smokers. We do this by collecting certain information from you: (age). We pass it to our service provider Mentor Digital, to verify you are allowed to access our website. Our website is not available to non-smokers. When we collect this information from you, we are collecting information concerning your health. We will keep this information for evidential purposes all the time that you are a user of our website and for the period of time we need to hold it for legal reasons after that. Marketing If you are an existing customer or if you have made a sales enquiry, we may contact you by email / telephone / post with information about our products which are similar to the products previously provided to you, unless you have told us you do not want to hear from us. Otherwise we will only contact you if you agree we can contact you by email / telephone / post. Where appropriate and with your consent (by ticking the relevant boxes during the registration process), we may pass your information to our Imperial companies where you are located so that you receive further personalised information and service. You may ask us at any time not to use your information for marketing purposes by contacting us through our contact form in www.rizla.com. Legal Basis Information Purpose Legal basis IP address and identification details To identify individuals to the site ensuring only adult smokers access the site. Please see the Cookies Policy. Legitimate interests Name, contact details, location To correspond with you about our products and in response to your queries, and, with your consent, to send you marketing materials Legitimate interests and, where applicable, consent Age verification checks To ensure we are not aiming our products at people under the age of 18 or non-smokers Legal obligation Lifestyle and social circumstances information Market research purposes Legitimate interests Tracking and profiling using cookies Site traffic analysis to improve content and services, profiling to deliver personalised content Legitimate interests and, where applicable, consent Retention Archiving for statistical purposes and legal retention periods Legal obligation, dispute resolution and enforcing contracts We have a legitimate interest to use your information in the ways described in this Notice, for example, to improve and personalise our products, services and our website, and to conduct certain marketing and market research activities. We take appropriate steps to ensure that while we are doing this your information and your rights are protected. Automated Decisions We make automated decisions about you using your personal information to verify your age when you enter the site or attempt to buy any of our products (see the Age Verification section above). How we store your personal information We take the security of your personal information seriously. We have security procedures in place to help us ensure that our paper and computer systems and databases are protected against unauthorised use, loss and damage. Our website may contain links to other sites which are outside our control. These websites will have their own privacy policies. Imperial is not responsible for the content of such websites or the protection and privacy of any information you provide on those websites. We retain your personal information for as long as you are a user of our website or as needed to provide you with our goods, services and the promotional and marketing materials you have given us permission to send you. We will also retain and use your personal information as necessary to comply with our legal obligations, resolve disputes and enforce our agreements. All your contact details will be deleted within two years if your query has been solved. With whom is the information shared? Imperial shares your personal information when we appoint other organisations to carry out some of the activities listed above on our behalf. For example, data storage organisations, website hosting and marketing services providers, services involved in the shipment and delivery of products to you, and the collection and analysis of ratings, reviews and other feedback you provide about our products and services. Some of these organisations may be Imperial Group companies and some of them may be third party companies. Imperial may also disclose your personal information to public authorities, other businesses, financial organisations or law enforcement agencies for the prevention or detection of fraud, to comply with tax obligations, or if we are required or permitted to do so by law, or if we consider disclosure necessary to protect and defend the rights, property or personal safety of Imperial, the Rizla brand or other visitors to our website. Where we use third parties to process your personal information such as browsing history and general queries, we will ensure that they have adequate security measures in place to safeguard your personal information and that it is only used in accordance with this Privacy Notice. Sharing this information will help us to provide you a better service in the future. Imperial may give information we hold about you to third parties as part of the sale of Imperial or any of its group companies. Imperial will not disclose your information to third parties or group companies for marketing purposes, unless you’ve declared your willingness to participate in a specific campaign. Where we transfer your personal information Imperial stores the personal information it collects or generates in the UK. Your personal information will only be transferred to countries in the European Economic Area or where the recipient has confirmed an adequate level of protection for it, for instance, by contractual agreement. You can ask to see these arrangements by contacting us using the contact details below. Internet Protocol (IP) Addresses An IP address is the unique number assigned to your computer by your Internet Service Provider. Imperial keeps track of the IP address you are using to access our website. Imperial will track IP addresses in order to ensure the content you are viewing is compliant with the laws in the country where you are accessing our site. This IP identification is carried out by a third party (Maxmind) which will ensure you land on the correct page. Cookies What are cookies? A cookie is a small text file, usually made up of letters and numbers, that is downloaded to your computer when you access websites. A cookie will normally contain the following information: site name and unique user ID, duration of the cookie’s abilities and effects, and a random number. In general, cookies cannot be used to reveal any personal information about you, such as your name, address, age etc. When you visit a website that uses cookies for the first time, a cookie is downloaded onto your computer. The next time you visit that website, your computer checks to see if it has a cookie that is relevant and sends the information contained in that cookie back to the website. The website then notes that you have been there before, and in some cases, tailors what pops up on screen to take account of that fact. They also might record how long you spend on each page on a site, what links you click, even your preferences for page layouts and colour schemes. We use ‘cookie’ technology to provide online visitors with a personalised online experience, to make things easier for website visitors, and to learn about how our website is performing. In order to achieve this, we may store some information on your computer, usually within your web browser. This information will be in the form of a ‘cookie’ or similar file, and it allows the website to recognise your computer during your visit to our website. Targeting cookies: These record your visit to our website, the pages you have viewed and the links you have followed. We will use this information to make our website more relevant to your interests. Strictly necessary cookies: These are cookies that are required for the operation of our website, for example cookies that enable you to log into our website. Analytical/performance cookies: These allow us to recognise and count the number of visitors and to see how visitors use our website. They help us to improve the way our website works, for example by ensuring that users can find what they are looking for easily. Which cookies do we use, why and how long do they last? The cookies we use are as follows: Cookie Purpose Lifetime (est) Standard Cookies ASP.NET_SessionId Store information about the current session in the browser. When the browser session ends AgeVerification Used to confirm the age of a user – usually in the form of a “yes/no” scenario When the browser session ends CountryVerification Used to establish which country the user is accessing the site from 1 day 1 week Security Cookies XSRF-V To prevent cross-site request forgery – security When the browser session ends XSRF-TOKEN To prevent cross-site request forgery – security When the browser session ends __RequestVerificationToken This is an anti-forgery token. This helps the website guarantee that any details submitted throughout the site (whether it be via forms or other means) are genuine, and haven't been modified to contain any malicious links etc. When the browser session ends Google-related Cookies _ga Google Analytics: "Google Analytics is Google’s analytics tool that helps website and app owners to understand how their visitors engage with their properties. It may use a set of cookies to collect information and report website usage statistics without 2 years _gat Google Analytics: "Google Analytics is Google’s analytics tool that helps website and app owners to understand how their visitors engage with their properties. It may use a set of cookies to collect information and report website usage statistics without 1 minute _gid Google Analytics: "Google Analytics is Google’s analytics tool that helps website and app owners to understand how their visitors engage with their properties. It may use a set of cookies to collect information and report website usage statistics without 1 day NID Google: "The NID cookie contains a unique ID Google uses to remember your preferences and other information, such as your preferred language (e.g. English), how many search results you wish to have shown per page (e.g. 10 or 20), and whether or not you wi 6 months CONSENT Google: "Profiling Third-party cookies" 20 years (rounded down to nearest year) IDE Google Advertising via doubleclick.net: "One of the main advertising cookies on non-Google sites is named ‘IDE‘ and is stored in browsers under the domain doubleclick.net. ", This cookie is used for re-targeting, optimisation, reporting and attribution of online adverts 24 days DSID Google Advertising via doubleclick.net: "One of the main advertising cookies on non-Google sites is named ‘IDE‘ and is stored in browsers under the domain doubleclick.net. ", This cookie is used for re-targeting, optimisation, reporting and attribution of online adverts 1 day YouTube Cookies VISITOR_INFO1_LIVE YouTube.com - We embed videos from our official YouTube channel using YouTube’s privacy-enhanced mode. This mode may set cookies on your computer once you click on the YouTube video player, but YouTube will not store personally-identifiable cookie information for playbacks of embedded videos using the privacy-enhanced mode. 8 months CONSENT YouTube.com - We embed videos from our official YouTube channel using YouTube’s privacy-enhanced mode. This mode may set cookies on your computer once you click on the YouTube video player, but YouTube will not store personally-identifiable cookie information for playbacks of embedded videos using the privacy-enhanced mode. 20 years PREF YouTube.com - We embed videos from our official YouTube channel using YouTube’s privacy-enhanced mode. This mode may set cookies on your computer once you click on the YouTube video player, but YouTube will not store personally-identifiable cookie information for playbacks of embedded videos using the privacy-enhanced mode. 8 months YSC YouTube.com - We embed videos from our official YouTube channel using YouTube’s privacy-enhanced mode. This mode may set cookies on your computer once you click on the YouTube video player, but YouTube will not store personally-identifiable cookie information for playbacks of embedded videos using the privacy-enhanced mode. When the browser session ends GPS YouTube.com – No description available 1 hour How can you change your cookies settings? You can change the settings in your web browser to control how cookies are accepted or stored by your browser and computer and to block cookies if you wish. www.aboutcookies.org is a useful website that gives you information about how different browsers manage cookies. However, if you disable or restrict cookies, then you may find that some areas of our websites no longer function correctly for you. Your rights You have a right within certain legal parameters to ask us: to see what personal information we hold about you to correct your personal information to erase your personal information not to use your personal information in a particular way to port your personal information, and to restrict how we use your personal information. If we have asked you and you have given us permission to use your personal information in any particular way, you have the right to withdraw that permission at any time. To exercise any of the rights above, please complete the form on our contact section of this website. If you have any questions, concerns or comments about the use of your personal information or relating to this Privacy Notice you should contact us by completing the form on our contact section of this website. If you have a complaint about how we have used your information, you have the right to complain to the Information Commissioner’s Office https://ico.org.uk/ Contact us By post: Customer Services Imperial Tobacco Limited 121 Winterstoke Road Bristol Avon BS3 2LL By email: consumer.services@uk.imptob.com Changes to our Privacy Policy We may make changes to this Privacy Notice at any time. We will do this by sending you an email or by posting an updated version of the Privacy Notice on our website. We recommend that you check this page from time to time to ensure that you are aware of any changes.