1. Controller

The following company is the controller for processing your personal data as described in this privacy notice:

Dr. August Oetker KG
⁠Holding der Oetker-Gruppe
⁠Lutterstraße 14
⁠33617 Bielefeld
⁠Germany

Tel.: +49 (0) 521 155 0
⁠E-Mail: dsgvo-service@oetker.com

2. Data Protection Officer

Please do not hesitate to contact our Data Protection Officer in case of questions about processing of your personal data:

Dr. August Oetker KG
⁠Data Protection Officer
⁠Lutterstraße 14
⁠33617 Bielefeld

E-Mail: oetker-nm@corporate-data-protection.com

3. Details about specific processing activities

• Online appointment bookingsWe use Microsoft Bookings, a service provided by Microsoft Ireland Operations Ltd, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, to book appointments electronically.The legal basis for this is your consent (Art. 6 para. 1 a) GDPR). You can revoke this consent at any time with effect for the future, for example by contacting us by email.

• Contacting us / feedback
  ⁠
  ⁠You may contact us through forms or via email. We will process your data in order to reply to you. Legal basis for this processing activity is your consent (Art. 6 para. 1 a) GDPR).
  ⁠

• Server logs
  ⁠
  ⁠When accessing our website, we will process data in server log files. This data derives from your terminal equipment and may include personal data. In particular, we process the following data:

  • The operating system of your terminal equipment

  • The browser used by you

  • The name of your provider

  • Your IP address

  • Data and time of access

  • Accesses pages and search terms (if applicable)

  • The website that referred you to our website (referrer)
    ⁠
    ⁠
    ⁠This processing activity is necessary to ensure the operation of our website, to optimise the content and deliverability of our website, and to provide the necessary information to public bodies in case of a cyber attack. Therein also lies our legitimate interest for data processing. Legal basis for this processing activity is our legitimate interest (Art. 6 para. 1 f) GDPR).
    ⁠We regularly delete this data after 14 days, in case of misuse after administrative or legal proceedings are finished.

• Tracking and cookies
  ⁠
  ⁠Our website uses cookies and similar technologies that store information on your terminal equipment or accesses such information for the following purposes:

  • Providing our website

  • Analytics and personalisation - Tracking

  • (Re-)Marketing / data sharing with third parties

Note on data processing in the United States

For the purpose of "analytics and personalisation - tracking", we work with technology providers (as data processors) with whom a transfer of your personal data to the United States cannot be ruled out.

Likewise, for the purpose of "(Re-)Marketing / data sharing with third parties", we work with partners with whom a transfer of your personal data to the United States cannot be ruled out.

Where possible, we instruct our technology providers to process your personal data in data centres within the European Union.

However, in the case of technology providers or partners who also have an establishment in the United States or are located there with other companies of their group of companies, we cannot rule out the possibility of US security services gaining access to your personal data. This may occur, for example, via remote access or a legally binding instruction to our technology provider or partner. In particular, this may expose you to the risk that US security services may access your personal data without specific cause and on a large scale basis, and that you may not be able to take effective legal action against that in the United States.

Providing our website

We use cookies and similar technologies to ensure certain features of our website. This is strictly necessary to provide our website. By doing this, we can, for example,

Save your preferred language version of our website or similar settings for your next visit.

• Distribute requests to our website across multiple web servers (load balancing).

• Provide a uniform context (session) to multiple requests to our website, in order to facilitate login-secured parts of our website or checkout / payment processes.

• Save your consent regarding tracking tools and active / deactivate tracking tools according to your choice.

Our legitimate interest for these processing activities lies in the uninterrupted usability of our website and in ensuring that user interactions are actually linked to an authenticated user.
⁠Legal basis for this processing activity is our legitimate interest (Art. 6 para. 1 f) GDPR.

Analytics and personalisation - Tracking

We use cookies and similar technologies to evaluate user behaviour on our website and to adapt it according to this.

Provided you have given your consent, we process information on your terminal equipment and the browser you are using (in the case of the website) every time you interact with our website. For example, we can find out with which language settings you use our website, whether you use a smartphone or a desktop computer or from which country you access our website.

In addition, we process information about how you interact with our website, e.g. from where you are referred to our website, how long you use our website and the path you take through individual sub-pages. For example, we can record whether you found us via a search engine (and if so, under which search term) or an advertisement, how long you spent browsing the content of a particular page and how many pages you visited in total.

We use this information to create analyses of user behaviour on our website and to optimise the website / accordingly. In some cases, we create several different versions of our website, which we present to individual users or user groups, and use cookies or similar technologies to evaluate which version is used by you in which way.

Legal basis for this processing activity is your consent (Art. 6 para. 1 a) GDPR. You may withdraw or change your consent for future processing at any time by changing your tracking settings . Additionally, you may change your browser settings regarding cookies and similar technologies.

We use the following products for analytics and personalisation:

Google Analytics / Google Optimize

Google Analytics and Google Optimize are provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google processes your data on our behalf (data processor). Our configuration of Google Analytics and Google Optimize does not allow Google to use data that is gathered through Google Analytics or Google Optimize to improve Google products and services.

Please find more information about the cookies that are used by Google Analytics and their respective storage periods here. Google Optimize also uses the cookies that are set by Google Analytics (please refer to the documentation here).

Google is established in the United States through other companies of the same group of companies (in particular, through Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043. USA) and uses them as data processors, so that we cannot exclude a transfer of your personal data to the United States.

(Re-)Marketing / data sharing with third parties

We use cookies and similar technologies to evaluate the reach of our advertising campaigns and how users who have become aware of our website through our advertising campaigns use our services. We also use cookies and similar technologies to record which users use our website in order to form groups (so-called audiences) and to address these audiences on other online platforms with personalised advertising.

We also transfer this information to third parties who may also process it for their own purposes.

If you have consented to this, we will record whether you have reached us via one of our advertising campaigns and how you then interact with our website. For example, we can record which share of users who have seen an ad actually use content from our website. This enables us to better plan and control our advertising budget.

In addition, we group the users of our website in so-called audiences. Audiences are user groups that are put together by us according to certain criteria (e.g. all users who have accessed a category of recipes). If the users of an audience are also users of our marketing partners, we can individually address these users with advertisements (re-marketing) through our marketing partner’s platform.. Information that our marketing partner has about his users in one of our audiences can also be used by him to suggest similar user groups to us for advertising.

To this end, we inform our marketing partners that you have visited our website and whether you have visited pages defined by us or have carried out other actions (e.g. registered an account). Our marketing partners may also use this information for their own purposes, for example to further personalise your profile on their own platform.

Legal basis for this processing activity is your consent (Art. 6 para. 1 a) GDPR. You may withdraw or change your consent for future processing at any time by changing your tracking settings. Additionally, you may change your browser settings regarding cookies and similar technologies.

Our marketing partners are separate controllers for the data processing that they carry out for their own purposes. The marketing partner also provides you with data protection information.

We use the following products for (re-)marketing and share data with the following third parties

• Facebook Pixel

Facebook Pixel is provided by Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour Dublin 2, Ireland (“Facebook”). More information about Facebook Pixel can be found here. Please also refer to the Facebook Data Policy.

• Google Ads / Doubleclick

Google Ads / Doubleclick is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). More information about cookies set by Google can be found here. Please also refer to the Google Privacy Policy.

• Google Floodlight

Google Floodlight is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). More information about cookies set by Google can be found here. Please also refer to the Google Privacy Policy.

• The Trade Desk Pixel

The Trade Desk Pixel is provided by The UK Trade Desk Ltd.10th Floor, 1 Bartholomew Close, London EC1A 7BL, Great Britain (“The Trade Desk”). Please also refer to the The Trade Desk Privacy Policy (among other things for information about cookies storage periods) and the possibility to opt-out from data processing by The Trade Desk.

4. Withdrawal of consent (Art. 7 para. 3 GDPR)

If processing is based on your consent (Art. 6 para. 1 a) GDPR) you may withdraw your consent for future processing at any time. You may reach us through the contact data that is provided in the "Controller" section or use options for withdrawal of consent that are described in the context of a specific processing activity.

5. Right to object (Art. 21 GDPR)

If processing is based on our legitimate interest (Art. 6 para. 1 f) GDPR) you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data that concerns you. This also extends to profiling.

Where we process personal data for marketing purposes, you have the right to object at any time to processing of personal data that concerns you for such marketing. This also extends to profiling that is related to such direct marketing.

6. Further data subject rights

With regard to personal data that concerns you, you may also use the following rights:

• Right to access (Art. 15 GDPR)

• Right to rectification (Art. 16 GDPR)

• Right to erasure (‘right to be forgotten’) (Art. 17 GDPR)

• Right to restriction of processing (Art. 18 GDPR)

• Right to data portability (Art. 20 GDPR)

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

7. Automated individual decision-making, including profiling

Automated individual decision-making, including profiling, does not take place.

8. Version information

Last revision: 19 November 2020