This Notice explains how FAGE International S.A. (hereafter “FAGE”, “the Company” or “we”) utilizes personal information relating to partners and third parties contracted by FAGE and other individuals (e.g. consumers). The purpose of this Notice is to help you understand why and how we may use your information.
FAGE takes your right to privacy very seriously and is committed to respect your privacy rights according to the Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereafter the “GDPR”), as well as to the Data Protection Act 2018 (hereafter, together, the “Data Protection Laws”).
Please note that the content of this document may be changed by FAGE at any time.
How to contact FAGE in case of questions about the processing of your personal data?
By post:1, 145, Rue du Kiem, 1st Floor, L-8030 Strassen, Luxembourg
By e-mail: firstname.lastname@example.org
What categories of personal data do we process within FAGE?
"Personal data" refers to information about you that can be used to identify you directly or indirectly, including information that may be protected under relevant privacy or data protection legislation. Depending on your circumstances, your job, and the legislation, FAGE may collect, utilize, or otherwise handle certain types of personal information about you, which include inter alia:
Categories of personal data
Examples of data collected and processed
Data on customer representatives
Name, surname, email, phone number, company, team and language
Data on vendor representatives
Name, surname, email, phone number, role, company, hours charged
Data on delivery drivers
Name and signature
Data on consultants and auditors
Name, surname, email, telephone, position/role, company
Data on sales agents
Name, surname, phone number, and email
Data related to end customer
Name, surname, email, complaint date, address (optional), phone number
For which purposes do we process this personal data within FAGE?
Your personal information is used by FAGE for a variety of purposes, including, inter alia:
Categories of Purposes
Examples of purposes of processing
We will limit the processing of personal data to the minimum necessary to achieve these objectives.
The personal data we hold about you will be processed lawfully and fairly. It will be accurate, relevant and not excessive. The information will be kept up to date, where necessary, and not retained for longer than necessary in relation to the above specified purposes. Afterwards, your personal data will be erased or anonymised, unless a longer storage period is required by law, or unless your personal data are still necessary for us or for one of the other entities of FAGE in the context of the establishment, exercise or defence of a legal claim.
All personal data received will only be used for FAGE purposes, as specified above.
With whom do we share your personal data?
FAGE will share, if necessary, your personal data with authorities, such as tax authorities, as well as with its auditors in the course of audits mandated by law and with its partners (e.g. banks, software providers). When the processing of your personal data is carried out by third parties on FAGE’s behalf, we ensure that there are strict confidentiality clauses in place.
As FAGE is part of FAGE’s international network, data may be transferred to other entities of FAGE Group, which are located in Greece and the USA. In principle, FAGE does not transfer personal data outside the European Economic Area (“EEA”). In particular, the only transfer of your personal data from FAGE outside the EEA consists in the hosting of email journals on the servers of FAGE USA Diary Industry Inc. in the USA.
This transfer is based on intercompany data transfer agreement between FAGE International S.A. and FAGE USA Diary Industry Inc. as well as standard contractual clauses of the European Commission. You can obtain a copy of these by sending an email to email@example.com or by contacting FAGE via one of the other means described in the beginning of this Notice
In the case of further transfers of personal data outside the EEA, FAGE will implement appropriate safeguards in order to ensure that your rights as a data subject are complied with and that effective legal remedies are available.
For cases where processors used by FAGE transfer the personal data provided to them by FAGE outside the United Kingdom and the EEA, FAGE ensures that is adequately and timely informed and that adequate safeguards are in place for such data transfers.
How does FAGE collect your data?
FAGE collects your personal data directly from your or from FAGE’s partners, your employer, who share your data with us as a contact point for your organisation.
Under which legal basis does Fage process your personal data?
FAGE only processes your personal data when FAGE has a lawful ground to do so. In particular, the processing of your personal data is based on the following legal grounds:
- the performance of FAGE’s contractual obligations (as detailed above);
- the compliance with FAGE’s legal obligations under European or national law;
- FAGE’s legitimate interests to ensure the proper administration, management and protection of FAGE’s activities and products (as detailed here above);
Please note that for the use of non-necessary cookies FAGE requests your consent. For more details, please, refer to our Cookies Policy.
Which measures does FAGE apply to ensure the security of your personal data?
FAGE will protect your personal data by using appropriate security safeguards.
FAGE takes all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Notice. FAGE takes every precaution to protect all information received from you against unauthorised access and use.
What rights to you own regarding the processing of your personal data?
According to the GDPR, you have the following rights:
Right to information about your data and access to your data (GDPR – Art. 15): You can request at any time information about your personal data that FAGE stores. This information includes the categories of data that FAGE processes, the purposes for which FAGE processes it, the origin of the data, if FAGE has not collected it directly from you, and, if applicable, the recipients to whom FAGE transmits your data.
Right of rectification (GDPR – Art.16): You can ask FAGE to correct or complete your personal data if it is incorrect or incomplete. FAGE takes all reasonable steps to keep the information it has about you up to date.
Right to be forgotten (GDPR – Art. 17): You can request the deletion of your data if one of the following conditions is met:
Your data is no longer necessary for the purposes for which it was collected or otherwise processed;
You object to the processing of your data and there is no compelling legitimate reason for the processing, or you object to the processing of your data for marketing purposes;
Your data has been processed illegally.
However, FAGE cannot satisfy your request for deletion if the processing of your personal data is necessary:
in order to comply with a legal obligation which requires us to store and process your data, in accordance with the retention periods prescribed by the applicable regulations;
for the establishment, exercise or defense of legal claims.
Right to restriction of processing (GDPR – Art.18): You can request FAGE to limit the processing of your personal data in the following conditions:
You dispute the accuracy of your data. The further processing of the data is limited to the period necessary to verify the accuracy;
The processing is illegal and you refuse the deletion of your data. Instead, you request that their use be restricted;
FAGE no longer needs your data, but you need it to assert, exercise or defend your claims;
You have objected to the processing and FAGE has to verify whether the legitimate reason it pursues outweighs yours.
Right to data portability (RGPD – Art. 20): You can have your personal data transferred to another controller, insofar as this is technically possible.
Right to object (RGPD – Art. 21): You can at any time object to the processing of your data which is to protect the legitimate interests of FAGE or a third party for reasons related to your particular situation. In this case, FAGE will no longer process the mentioned data. This does not apply if FAGE can prove a compelling legitimate reason for the data processing, provided that this outweighs your interests, or if FAGE needs your data to establish, exercise or defend legal claims.
If you wish to exercise any of the rights described above, you can contact FAGE at the abovementioned channels by providing also a copy of a valid identity document in order to be able to duly identify you.
FAGE undertakes to respond as soon as possible, and in any event, within one month of receipt of the request. If necessary, this period may be extended by two months, taking into account the complexity and the number of requests addressed to FAGE. In this case, you will be informed of this extension and the reasons for the delay. If FAGE does not respond to your request, it will inform you of the reasons for its inaction and you will have the possibility to lodge a complaint with the competent supervisory authority.
In particular, you have the right to lodge a complaint with the Irish supervisory authority, the DPC, at the following address:
Data Protection Commission
21 Fitzwilliam Square South, Dublin 2
D02 RD28, Ireland
Or via the electronic form: https://forms.dataprotection.ie/contact.
Changes to the Privacy Notice
If you have any questions, comments or requests about this Privacy Notice or about this Website, please do contact us: firstname.lastname@example.org.