Privacy Notice

Introduction

This Notice explains how FAGE International S.A. (hereafter “FAGE”, “the Company” or “we”) utilizes personal information relating to partners and third parties contracted by FAGE and other individuals (e.g. consumers). The purpose of this Notice is to help you understand why and how we may use your information.

FAGE takes your right to privacy very seriously and is committed to respect your privacy rights according to the Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereafter the “GDPR”), as well as to the Data Protection Act 2018 (hereafter, together, the “Data Protection Laws”).

This Notice states what data we may collect in the course of our relationship and/or interaction with you and how we may use that information. For information on the processing of personal data when you visit our Website please refer to the relevant Privacy Policy (Privacy Policy | Fage Ireland (ie.fage)).

Please note that the content of this document may be changed by FAGE at any time.

How to contact FAGE in case of questions about the processing of your personal data?

  • By post:1, 145, Rue du Kiem, 1st Floor, L-8030 Strassen, Luxembourg

  • By e-mail: privacy.ie@mail.fage

What categories of personal data do we process within FAGE?

"Personal data" refers to information about you that can be used to identify you directly or indirectly, including information that may be protected under relevant privacy or data protection legislation. Depending on your circumstances, your job, and the legislation, FAGE may collect, utilize, or otherwise handle certain types of personal information about you, which include inter alia:

Categories of personal data

Examples of data collected and processed

Data on customer representatives

Name, surname, email, phone number, company, team and language

Data on vendor representatives

Name, surname, email, phone number, role, company, hours charged

Data on delivery drivers

Name and signature

Data on consultants and auditors

Name, surname, email, telephone, position/role, company

Data on sales agents

Name, surname, phone number, and email

Data related to end customer

Name, surname, email, complaint date, address (optional), phone number

For which purposes do we process this personal data within FAGE?

Your personal information is used by FAGE for a variety of purposes, including, inter alia:

Categories of Purposes

Examples of purposes of processing

Commercial/Business

  • Communication with vendors and customers in the course of our business relationship.

Legal

  • Provide evidence in case of tax inspection;

  • Realisation of audits by third independent party.

Contractual

  • Ensure customer payments and follow-up in case of delay;

  • Management of relationship with customers and vendors;

  • Management of logistics behind customers’ orders, including delivery of goods from warehouses to customers;

  • Management of disputes and eventual litigation with customers and other third parties;

  • Administration of Sales agents in order to find new buyers for FAGE.

Legitimate Interest

  • Realize audits by third independent party, even when not required by law;

  • Receive advice for the improvement of business processes by third parties;

  • Facilitate communication of consumers and partners with FAGE;

  • Ensure a proper follow-up of complaints introduced by consumers;

  • Provide coupons to unsatisfied consumers as a courtesy and customer care.

We will limit the processing of personal data to the minimum necessary to achieve these objectives.

The personal data we hold about you will be processed lawfully and fairly. It will be accurate, relevant and not excessive. The information will be kept up to date, where necessary, and not retained for longer than necessary in relation to the above specified purposes. Afterwards, your personal data will be erased or anonymised, unless a longer storage period is required by law, or unless your personal data are still necessary for us or for one of the other entities of FAGE in the context of the establishment, exercise or defence of a legal claim.

All personal data received will only be used for FAGE purposes, as specified above.

With whom do we share your personal data?

FAGE will share, if necessary, your personal data with authorities, such as tax authorities, as well as with its auditors in the course of audits mandated by law and with its partners (e.g. banks, software providers). When the processing of your personal data is carried out by third parties on FAGE’s behalf, we ensure that there are strict confidentiality clauses in place.

As FAGE is part of FAGE’s international network, data may be transferred to other entities of FAGE Group, which are located in Greece and the USA. In principle, FAGE does not transfer personal data outside the European Economic Area (“EEA”). In particular, the only transfer of your personal data from FAGE outside the EEA consists in the hosting of email journals on the servers of FAGE USA Diary Industry Inc. in the USA.

This transfer is based on intercompany data transfer agreement between FAGE International S.A. and FAGE USA Diary Industry Inc. as well as standard contractual clauses of the European Commission. You can obtain a copy of these by sending an email to privacy.ie@mail.fage or by contacting FAGE via one of the other means described in the beginning of this Notice

In the case of further transfers of personal data outside the EEA, FAGE will implement appropriate safeguards in order to ensure that your rights as a data subject are complied with and that effective legal remedies are available.

For cases where processors used by FAGE transfer the personal data provided to them by FAGE outside the United Kingdom and the EEA, FAGE ensures that is adequately and timely informed and that adequate safeguards are in place for such data transfers.

How does FAGE collect your data?

FAGE collects your personal data directly from your or from FAGE’s partners, your employer, who share your data with us as a contact point for your organisation.

Under which legal basis does Fage process your personal data?

FAGE only processes your personal data when FAGE has a lawful ground to do so. In particular, the processing of your personal data is based on the following legal grounds:

  1. the performance of FAGE’s contractual obligations (as detailed above);
  2. the compliance with FAGE’s legal obligations under European or national law;
  3. FAGE’s legitimate interests to ensure the proper administration, management and protection of FAGE’s activities and products (as detailed here above);

Please note that for the use of non-necessary cookies FAGE requests your consent. For more details, please, refer to our Cookies Policy.

Which measures does FAGE apply to ensure the security of your personal data?

FAGE will protect your personal data by using appropriate security safeguards.

FAGE takes all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Notice. FAGE takes every precaution to protect all information received from you against unauthorised access and use.

What rights to you own regarding the processing of your personal data?

According to the GDPR, you have the following rights:

Right to information about your data and access to your data (GDPR – Art. 15): You can request at any time information about your personal data that FAGE stores. This information includes the categories of data that FAGE processes, the purposes for which FAGE processes it, the origin of the data, if FAGE has not collected it directly from you, and, if applicable, the recipients to whom FAGE transmits your data.

Right of rectification (GDPR – Art.16): You can ask FAGE to correct or complete your personal data if it is incorrect or incomplete. FAGE takes all reasonable steps to keep the information it has about you up to date.

Right to be forgotten (GDPR – Art. 17): You can request the deletion of your data if one of the following conditions is met:

  • Your data is no longer necessary for the purposes for which it was collected or otherwise processed;

  • You object to the processing of your data and there is no compelling legitimate reason for the processing, or you object to the processing of your data for marketing purposes;

  • Your data has been processed illegally.

However, FAGE cannot satisfy your request for deletion if the processing of your personal data is necessary:

  • in order to comply with a legal obligation which requires us to store and process your data, in accordance with the retention periods prescribed by the applicable regulations;

  • for the establishment, exercise or defense of legal claims.

Right to restriction of processing (GDPR – Art.18): You can request FAGE to limit the processing of your personal data in the following conditions:

  • You dispute the accuracy of your data. The further processing of the data is limited to the period necessary to verify the accuracy;

  • The processing is illegal and you refuse the deletion of your data. Instead, you request that their use be restricted;

  • FAGE no longer needs your data, but you need it to assert, exercise or defend your claims;

  • You have objected to the processing and FAGE has to verify whether the legitimate reason it pursues outweighs yours.

Right to data portability (RGPD – Art. 20): You can have your personal data transferred to another controller, insofar as this is technically possible.

Right to object (RGPD – Art. 21): You can at any time object to the processing of your data which is to protect the legitimate interests of FAGE or a third party for reasons related to your particular situation. In this case, FAGE will no longer process the mentioned data. This does not apply if FAGE can prove a compelling legitimate reason for the data processing, provided that this outweighs your interests, or if FAGE needs your data to establish, exercise or defend legal claims.

If you wish to exercise any of the rights described above, you can contact FAGE at the abovementioned channels by providing also a copy of a valid identity document in order to be able to duly identify you.

FAGE undertakes to respond as soon as possible, and in any event, within one month of receipt of the request. If necessary, this period may be extended by two months, taking into account the complexity and the number of requests addressed to FAGE. In this case, you will be informed of this extension and the reasons for the delay. If FAGE does not respond to your request, it will inform you of the reasons for its inaction and you will have the possibility to lodge a complaint with the competent supervisory authority.

In particular, you have the right to lodge a complaint with the Irish supervisory authority, the DPC, at the following address:

Data Protection Commission

21 Fitzwilliam Square South, Dublin 2

D02 RD28, Ireland

Or via the electronic form: https://forms.dataprotection.ie/contact.

Use of Cookies

The Website uses cookies to enhance your user experience. Please see FAGE’s Cookie Policy for more information.

Changes to the Privacy Notice

Any changes FAGE makes to the Privacy Notice in the future will be posted on this page. You should visit this page periodically to review any changes to the Privacy Policy.

Contact

If you have any questions, comments or requests about this Privacy Notice or about this Website, please do contact us: privacy.ie@mail.fage.