Updated 5th July, 2024. Click here to see recent changes to this Policy.
This Privacy Statement describes how the personal data of consumers and the contact people of companies, other organisations and stakeholders is processed by Fazer Group companies in the context of their business.
In the general section we go through the processing of data and your rights in general. You can quickly and easily see from the service-specific information how we process your personal data in the services you are using.
Our key values include customer focus and quality: we process your data responsibly, and we want to be worthy of your trust. You can influence the way in which your data is processed. In this Privacy Statement, we tell you about your rights and how to exercise them.
Your data will be stored when you make an agreement or otherwise use our services, for instance, when you register as a user of our service, give us your consent to send you marketing messages, purchase products from an online store, use web or mobile services, participate in a marketing campaign or survey, provide feedback or contact our customer service.
We process your data in the course of fulfilling an agreement or implementing our services, in our marketing and customer communication, as well as in our customer services. In addition, we use the data to target our marketing and communication so that it fits your interests. In the future, we want to create increasingly better experiences, and the data we collect will help us understand our customers better.
We collect data about you when you:
• register as a user of our services or subscribe to a newsletter from us,
• give us a marketing permission and receive messages from us;
• make purchases at our online store or use our other web or mobile services,
• take part in one of our marketing campaigns or a marketing
survey or an opinion poll we organise,
• give us feedback, leave us a message to contact you or otherwise get in touch with Fazer;
• sign up for
an event organized by Fazer,
• are a contact person of one of our corporate customers or partners (such as a press representative or an influencer) or
contact us as a representative of your organisation; or
• share, publish, comment on something or send a message in Fazer’s social media channels when
you wish to get customer service. We also carry out social media monitoring on a general level to better understand our customers and to get a better
picture of what is said about Fazer and the industry.
In addition, for sales and marketing communications and customer management purposes, we may obtain contact information of corporate customers and other stakeholder representatives from service providers which maintain and sell data from such databases. Fazer obtains contact details and other personal information regarding media contacts and influencers from a variety of sources including Cision. If you wish to know more about how such information is collected and used, please refer to Cision’s privacy notice at www.cision.com/us/legal/privacy-policy/.
We can also collect data about you from other registers of companies belong-ing to the Fazer Group, for example, in conjunction with a business purchase or another business transaction. In such a case, we will tell you in more detail about the data processing conjunction with a business purchase or another business transaction.
The data we process may vary depending on which of our services you use and how you use them. You can influence the type of data we collect. We get some of the data directly from you, for instance, when you do business in our online store or participate in one of our campaigns. We get some of the data through cookies and other similar technologies. This way we learn, for instance, how our services are used, and we can offer the best service experience possible. To check how we process your data in the different services you use, go to the section on service-specific details. When you give a cookie consent on our website, you can learn more about what the information collected with cookies is used for. Read more about our cookies here.
Depending on which services you use, we collect the following data concerning you:
We collect your first and last name, address, email address, and telephone number.
We collect other descriptive data, such as age and/or date of birth, language and country.
We collect registration information for online services, such as user ID and password and other logging information.
We collect data, for example, on any purchases, reservations, used benefits or other activities you have made or placed in the online store, or other activities. We also collect information on customer feedback and other customer contacts. In certain complaint situations, we may process health-related data to investigate our legal liability.
To be able to process your payments, we collect the necessary information for the payment of your purchases. Among other things, we collect information about the means of payment you use and on invoicing details, in the event that you choose an invoice as the means of payment.
We collect information about your position in the company or other organisation you represent, as well as the name and contact details of the company or organisation in question, when you interact with us as a representative of your company or other organisation or stakeholder group. We also collect other information necessary for the management of the relationship between Fazer and the company or organisation you represent, such as information related to access management or the trainings you have participated in.
When you participate in one of our marketing campaigns, such as a prize draw or competition, we collect the data provided in this connection, as well as the data on participation in the campaign.
When we carry out market surveys and opinion polls, we collect data through which we can learn to develop our services, business operations and product.
We collect data on our customers’ interests. We use interest data at group level to support our product and service development. In addition to expressly provided data, your interests can be deduced or derived from other data we collect, such as the newsletters you receive (e.g. whether the message has been opened and what other actions have been taken on the content). We can target content and marketing to different customer groups based on e.g. e-commerce purchases, feedback given or survey responses. If you are a member of MyFazer Loyalty Programme, we will target content, benefits and services to you based on the data on your interests in order to provide you with the best possible customer experience.
We collect data on opt-ins and opt-outs with regard to marketing.
If the aforementioned data changes, our systems may record details of the changes so that we can ensure that the data is accurate.
We may take photographs or record video at Fazer events. If we photograph you in particular and not the whole audience, we will ask for your consent to publishing the image. Your picture may also be recorded by our security cameras for security reasons when you visit Fazer facilities.
If, exceptionally, we collect health-related data, we will ask for your express consent for its processing, unless we have some other legal grounds for processing it. Such legal grounds include an investigation concerning legal liability in complaint situations.
You can influence the type of data we collect. You can use most of our services without giving us the above information. However, the use of certain services, such as participation in a campaign, processing a complaint, or purchasing products or services through an online service, requires that you submit your personal data. If you decide not to submit your personal data to us, we may be unable to provide all the offers or content to you, or provide as targeted and personal a service as we could if we had access to your data. You can quickly and easily see from the service-specific information how we process your personal data in each service.
We collect data on the use of our online services with the help of cookies, for example.
A cookie is a small file that a website stores in the visitor’s browser, which sends data to the website’s administrator when the visitor revisits the website. We use cookies that work as intended on our website – they improve the user experience or monitor traffic on the Fazer website. We may also use cookies to target, personalise and advertise our webpages. In such case, advertising is based on the visitor's behavior on the site, i.e. what content the visitor has read, listened to, clicked on, etc. We will ask for the website visitor’s consent for other cookies than cookies that are strictly necessary for the use of the website. You can refuse to have marketing and analytics cookies being set and set an alarm for cookies in the browser settings.
Read more about our cookies here.
We process your data for business purposes, such as to deliver any products you have ordered, produce the service you have purchased or to fulfil some other contract. We also process your data if it is necessary for the realisation of Fazer’s legitimate interests. Under certain circumstances we are legally obliged to process your personal data in order to comply with our legal obligations. In some cases, we may ask you for your consent for the processing of your data. You can always withdraw your consent given for processing, but such withdrawal will not affect the lawfulness of processing carried out on the basis of consent before its withdrawal. We combine the data we collect to be able to offer you as good service as possible.
We process your data for the following purposes:
We process your data so that you can use our online services and mobile apps, on the basis of necessity for the performance of contract. Your data allows us to identify you, offer our digital services to you and fulfil a contract, by delivering an order, for example.
We process your data for the purpose of providing customer services, such as responding to any feedback or complaint you have sent us, carrying out customer communication and resolving disputes, on the basis of necessity for the performance of contract and where applicable when necessary to comply with a legal obligation.
We process your data to be able to market our products and services. We can also process your data in marketing surveys and opinion polls to gain a better understanding of our customers and thereby provide them with better services, which is necessary for the purposes of the legitimate interests pursued by the controller or, if necessary, based on your consent.
We process your data to target communication and marketing, on the basis of necessity for the purposes of the legitimate interests pursued by the controller or, where applicable, on the basis of your prior given consent. For example, we use the data in our customer register to create anonymous target audiences. This allows us to provide you with information about our products and services that is as relevant as possible. The targeting of content is based on interests the customer has indicated or information we have learned about the customer with the help of recorded data. Such data consists of information on which campaigns you have participated in and your activities in our online services.
We process your data based on your consent and on the controller’s legitimate interest for providing our services, for managing of customer and other such relationships and related obligations, customer communications and marketing and for ensuring security. Consumer marketing is always based on prior consent which can be withdrawn at any time. Personal data is also processed for provision, maintenance and further development of current and future services and/or products. By processing camera surveillance recordings, we also wish to ensure your safety. When we process your data we always strive to ensure that the processing is proportional and necessary for the described purposes. Fazer is introducing new AI-based tools that aim to make knowledge work more efficient by utilising existing data. In the M365 environment, data processing is enhanced with the help of an AI-based application, M365-Copilot. Artificial intelligence is not used for producing automated decisions, but it serves as a tool for knowledge work in conjunction with other M365 tools.
If necessary, we process your personal data to prevent fraud and comply with regulations (such as trade sanctions and anti-bribery regulation). Personal data is processed in accordance with applicable law and best practices in order to fulfil our legal obligations and on the basis of our legitimate interest. We collect much of the personal data that we hold about you directly from you. We may also receive your personal data from other sources, such as public databases and other trusted public sources, as well as third-party databases.
“Legitimate interest” refers to an interest that is legal and the realisation of which is important for Fazer’s operations. Fazer may act on the grounds of legitimate interest where a significant and pertinent relationship exists between the user of the service, i.e. the data subject, and Fazer. Fazer’s legitimate interests cover improvement of the quality and effectiveness of our services, protection of our visitors, detection of fraud and security incident, defending ourselves in legal proceedings and compliance with law. When assessing legitimate interest, the interests of the data subject and Fazer are evaluated, including the realisation of fundamental rights, the nature and purpose of use of the data collected, and data security. The data subject has the right to object to processing that occurs on the basis of a legitimate interest. You can find more information about your rights under the section 8. How can you influence the processing of your personal data?
You can read more about the data we collect in various services and about service-specific purposes of use and grounds under section 1. From where do we collect data?
We do not store your data for any longer than is necessary for the purposes described in this Privacy Statement and to comply with any mandatory legislation, such as accounting laws. If you have joined the MyFazer loyalty programme, we however store your basic data until you have ended your MyFazer loyalty programme membership; purchase data and data collected from media monitoring are stored for six years and three months from the accumulation of data. The retention period of your data is also affected by the connection in which and the purpose for which your data has been collected. You can read more on how the retention periods are determined below.
You can check the grounds for the retention periods of personal data by service from the table below. When the grounds for retaining your data comes to an end, a process which removes your data from our registers in a secure manner begins.
| The services or functions subject to retention periods | What do we use your data for in this particular service, for example? | How long do we store your data? |
|---|---|---|
| One-time purchase or recurring order in our online store | The delivery of an order and the reception of any possible complaints | Until such time as the order (or the final delivery of a recurring order) has been delivered, the complaint period has expired, the data is no longer needed for the monitoring of product quality and we have no reason to assume that you would get in touch with us in relation to the order. |
| To fulfill obligations according to the Accounting Act | For a maximum period of six years and three months from placing of the order | |
| Booking systems (e.g. Fazer’s visitor centre, Meetings & Parties service) | The production of a service or event | Until such a service or event has been delivered, the complaint period has expired, the data is no longer needed for the monitoring of service or product quality and we have no reason to assume that you would get in touch with us in relation to the service or event. The data of registered customers is retained for the duration of the customer account. |
| Participation in a campaign | The realisation of a campaign (such as the delivery of a prize) | Until such time as the campaign has ended and the measures following the campaign (such as the delivery of prizes) has been carried out and we have no reason to assume that you would get in touch with us in relation to the campaign. |
| Marketing communication | For the marketing of new products and offers | Until the consent for marketing and/or the subscription concerning a newsletter has been cancelled. |
| Feedback, new idea, complaint or other customer service | The processing of feedback, the improvement of services and investigating legal liability | Until the complaint period has expired, the requirements of food safety self-monitoring have been fulfilled, the complaint has been processed and Fazer’s legal liability has been investigated and the matter concluded. |
| Order | For service implementation | Until such time as the order has been delivered/picked up, the complaint period has expired or the data is no longer needed for the monitoring of product quality and we have no reason to assume that you would get in touch with us in relation to the order. |
| Responding to an opinion poll or survey | For the improvement of our services | Until the opinion poll has closed or the survey has concluded and the purpose of the research or survey has been fulfilled. |
| For the use of a mobile app | For service implementation | Until the application’s use has ended and the related account has been terminated. |
| For the use of the MyFazer loyalty program / basic data (name, preferences) | For service implementation | Until you end the MyFazer loyalty program membership. |
| For the use of the MyFazer loyalty program / webstore purchase data and data collected from media monitoring | For targeted marketing | For a maximum period of six years and three months. |
| Processing the personal data of the representatives of companies or other organisations or a stakeholder group | The implementation of services and communication | Until we no longer need your data for the purpose it was collected for, or until you no longer manage the tasks in the company or organisation on the basis of which your personal data is processed. We will nevertheless continue to process your data, if your new job description gives grounds for such processing. |
| Video surveillance systems | Ensuring the personal safety, protection of property and food safety of persons staying at or visiting our facilities | Two weeks to three months, as applicable country-by-country. |
| Access control systems | Ensuring the personal safety, protection of property and food safety of persons staying at or visiting our facilities | Three years. If access rights have not been granted, the application data will be erased within three months of entering the application in the system. |
Please note that regardless of the above criteria, we may have an obligation due to mandatory legislation to process certain data concerning you (such as transaction data for the online store in order to comply with accounting legislation) for a longer time, in which case we will only process the data for the purpose of complying with the legislation in question. We may also make an exception in retention periods when a legal claim is made against Fazer or when the handling of matters related to such a claim is incomplete.
In addition, regardless of what is stated above, we may process the data in an anonymised format, among other things, for analysis and statistical purposes and to improve our business, products and services.
Your data is processed within Fazer Group. We may disclose your data to the authorities, for example, if the law requires us to do so, i.e. to comply with a statutory obligation (including court order), if this is necessary to prevent, investigate or prosecute criminal offence or if this is necessary to enforce our policies, or to protect the rights and freedoms of others. In addition, we may disclose your data in the context of any disposal of business or some other corporate transaction to the buyer of the business or another relevant party related to the corporate transaction.
To fulfil the agreement, we may disclose personal data to third parties. Such third parties include our partners offering payment agency or transportation services in our online stores or sales outlets; companies providing IT services or solutions, companies providing consultancy and audit services, companies providing marketing services; these partners may act as data processors, on our instructions and be contractually bound by us not to use your data for their own purposes but may also act as separate controllers in terms of personal data needed for the payment and transportation. Each online store provides information on the partners it uses. We advise you to read the data protection policies of such third parties. In order to be able to handle customer feedback or product enquiries flexibly, we may, if necessary, also disclose personal data related to feedback or product inquiry to a distributor, retailer, brand owner, or licensee on the basis of the legitimate interest of such party or Fazer.
We use services provided by third parties in the processing of personal data, but we do not, as a rule, disclose your data to them in such a manner that they would be able to use it for other purposes than those defined by Fazer.
We use subcontractors and service providers for the processing of your data, such as for technical maintenance or the implementation of campaigns and direct marketing. In such cases, we obligate our subcontractors and service providers with appropriate contractual means to maintain a level of information security that is adequate to protect your data and to comply with the valid personal data legislation. The subcontractors and service providers we use only use your data for the purposes defined by Fazer, described above. We do not disclose your data to them in a format that would allow them to use it for other purposes.
If we use your data for electronic communications, your data may be transferred to our service provider located in the United States. Your data may also be transferred to the US and Canada when you complete transactions in our online stores.
We can also transfer your data outside the EU or EEA in other cases than those mentioned above if this is necessary for the purposes of processing, for inventory management and shipping purposes or the technical maintenance of the data, provided that the requirements set in the EU’s General Data Protection Regulation are met, such as by carrying out the transfer by applying the model clauses approved by the European Commission.
We use the digital tool of our service provider in the United States to implement digital marketing and customer communication, due to which your data may be transferred to the United States when we use the data for digital communication. We also use an inventory and shipping management service provider in the United States which uses subcontractors located in other third countries, due to which your data may be transferred to other third countries when we use the data for inventory management and shipping purposes. We use a digital user interface development tool which shows a different version to a particular user group and reports back to us through its interface. The service provider uses a platform provided by a subcontractor located in the United States. Therefore, when accessing our online services, your data may be transferred to the United States for the purpose of development of our online services.
The service provider which offers the platform for Fazer’s online stores (Fazer Store online store, Gateau artisan bakeries online store, Fazer Café cake shop and Fazer Café’s takeaway service online stores, Custom Fazer service and Fazer Pro online store) is located in Canada, and data may be transferred to the Unites States in connection with the data processing of this service provider. Therefore, when you make purchases in the above-mentioned online stores, your personal data may be transferred to the United States and Canada to enable your online transaction. In connection with making a purchase at the above-mentioned online stores you also disclose information to a payment service provider of your choice. In case Stripe or Klarna Bank AB is the chosen payment service provider, the companies may process data e.g. in the United States. You can find out more about data processing in relation to webstores in the service specific information.
According to a decision by the EU Commission, the level of data protection in Canada is sufficient, which secures the transfer of personal data to Canada. In case we transfer your data to the United States or other countries outside the EEA, the transfers are legitimized by contractual measures (such as by applying the model clauses approved by the European Commission) or by other measures fulfilling the requirements set in the EU’s General Data Protection Regulation (such as adequacy decisions or the EU US Data Privacy Framework).
You can control how Fazer collects and uses your data. Because your rights are important for us, we have established several means by which you can influence the processing of your data. Below, you can read about your rights and the methods you can use to exercise them.
You are entitled to influence the processing of your data in the following ways:
• You have the right to forbid the processing of your personal data for the purposes of direct marketing at any time (right to object). If you object to processing for direct marketing purposes, we will no longer be entitled to process your personal data for such purposes. Please note that if you unsubscribe from a newsletter you earlier subscribed to through the link in a newsletter but have given us general marketing permission, you may continue to receive marketing communication from us. In such cases, you can withdraw the consent you have given by filling in the form found on our website or contacting our customer service. Please note that even if you opt out of direct marketing, you may still see our advertisements in online services external to Fazer and receive customer communication from us, such as confirmation of an order you made through our online store. In addition, you may receive marketing communication like this from Fazer in relation to your work or area of responsibility. The easiest way to opt out is to unsubscribe via the link at the end of the message you receive.
• In some situations, you may have the right, for reasons related to special personal circumstances, to object to the processing of your personal data beyond the purposes of direct marketing. In such cases, your right only pertains to your data that we process by virtue of Fazer’s legitimate interests. When you ask us to stop processing your personal data on these grounds, you must tell us what the special personal reason is due to which the processing of your data should be stopped.
• You have the right to request access to the data concerning you or to receive confirmation that we do not process data concerning you (right of access). The easiest way to make such a request is to fill in the relevant form found on our website. In certain situations, you also have the right to receive the personal data you provided to us in digital format so that you can transfer it to another controller (right to data portability).
• You have the right to have data rectified (right to rectification). This means that if your data is incorrect, inaccurate or deficient, you are entitled to ask us to rectify or complete the data. In certain situations, you may have the right to restrict the processing (right to restriction of processing). This means that if you dispute the accuracy of your data, you have the right to restrict its processing for a period of time that allows us to ensure that your data is accurate.
• You have the right to have your data erased in certain situations, including situations where the processing of your personal data is no longer necessary for the purposes for which it was collected, or if the processing of your personal data was based on your consent and you wish to withdraw your consent, and there are no other grounds for processing your personal data (right to be forgotten). Please note that if the processing of your personal data is necessary for the purpose of, for instance, delivering an online store order you have made or complying with your desire to opt out of direct marketing, we cannot remove your data.
You can exercise your rights related to the processing of your personal data by contacting us via the form found on our website.
You can read more about our data protection policies at www.fazergroup.com/privacy , where you can contact us, for example, or exercise your rights related to the processing of your data.
If you think that we, despite the principles mentioned in this Privacy Statement, have infringed upon your rights based on personal data legislation, you can also file a complaint with your local data protection authority. We nevertheless recommend that you first get in touch with our customer service to clear up the matter.
Oy Karl Fazer Ab, together with the companies belonging to the same Group, which are the controllers in respect of their own operations.
Fazer is an international family-owned company offering quality bakery, confectionery, biscuit and grain products as well as café services. Fazer operates in eight countries and exports to around 40 countries.
Oy Karl Fazer Ab
Fazerintie 6, 01230 Vantaa, Finland
P.O. Box 4, 00941 Helsinki, Finland
Finland
Fazer Ravintolat Oy
Fazerintie 6, 01230 Vantaa, Finland
P.O. Box 4, 00941 Helsinki, Finland
Fazer Confectionery Ltd
Fazerintie 6, 01230 Vantaa, Finland
P.O. Box 4, 00941 Helsinki, Finland
Oy NIS- Nordic Industrial Sales Ab
P.O. Box 4, 00941 Helsinki, Finland
Fazer Bakeries Ltd
Fazerintie 6, 01230 Vantaa, Finland
P.O. Box 17, 00941 Helsinki, Finland
Fazer Finland Oy, Fazer Mills
P.O. Box 4, 00941 Helsinki, Finland
Sweden
Fazer Bageri AB
Lindhagensgatan 120
P.O. Box 30170
104 25 Stockholm, Sweden
Fazer Sweden AB
Hallgränd 3
121 62 Johanneshov, Sweden
Trensums Food AB
Storgatan 37,
362 22 Tingsryd, Sweden
Norway
Fazer Norway AS
Karl Johans Gate 2
0154 Oslo, Norway
Denmark
Fazer Denmark ApS
Lindgreens Allé 12
DK-2300 Copenhagen, Denmark
Estonia
Fazer Eesti AS
Veerenni 24
10135 Tallinn, Estonia
Latvia
Fazer Latvija SIA
Druvas iela 2
Ogre, 5001, Latvia
Lithuania
Fazer Lietuva UAB
Raudondvario pl. 129A
47188 Kaunas, Lithuania
Poland
Fazer Poland sp. z o.o.
ul. Towarowa 28,
00-839 Warszawa, Poland
The service-specific details provide you with information on where we collect data from and on the way in which we process your data in the various services you use.
Our online stores let you order our products or services. We process your personal data to fulfil the agreement and to manage the customer relationship. In connection with orders, and as regards MyFazer members, in connection with loyalty programme related activities, we will ask for details such as your name and contact information, your customer relationship information, change data and identification data, which allow us to deliver the order. We also collect your payment data, such as the selected means of payment and invoicing details, if the means of payment is an invoice. If you wish, you can grant us electronic direct marketing permission.
To fulfil the agreement, we may disclose personal data to third parties. Such third parties include our partners offering payment agency or transportation services in our online stores; these partners may also act as the controller in terms of personal data needed for the payment and transportation. Each online store provides information on the partners it uses. We advise you read the data protection policies of such third parties.
Fazer Group has the following online stores: Fazer Store, Gateau artisan bakeries' online store, , Fazer Café cake shop and takeaway service Custom Fazer service and Fazer Pro online store. Fazer Store online include a functionality which reminds the user of an abandoned shopping cart. If you have placed a product in the online store's cart, filled in the contact information and clicked "Continue to shipping", but reject the cart's contents without making a payment, Fazer will process your personal data in order to send a service message, i.e. a reminder of the uncompleted purchase.
When you make purchases in the Fazer online stores, your personal data may be transferred to our service providers in the United States and Canada. According to a decision by the EU Commission, the level of data protection in Canada is sufficient. For more information on transferring data to third countries, read section 7. Do we transfer your data beyond the borders of the EU or EEA (“third countries”)?
You can use our booking systems to make a reservation for a space or event or a table at one of our restaurants or cafés. In order to fulfil the agreement, we will ask for details when you make the booking. These details include your name and contact information, and your customer relationship data, so that we can complete the booking under your name, confirm the booking and get in touch with you in connection with any cancellations, for example. We may also request other information necessary to carry out the reservation in question. This information includes special diets, any possible need for accessible spaces or the first name and age of the person celebrating their birthday in connection to any invitations to birthday parties. Based on the customer relationship, we may also collect other data on your interests and changes. If you wish, you can join our MyFazer loyalty programme and grant us an electronic direct marketing permission.
You can place an order for cake, bread or other food with us. In order to fulfil the agreement, we will ask for details in connection with such orders. These details include your name and contact information, which allow us to confirm the order and get in touch with you if necessary. We can also collect data about special diets which is necessary to prepare your food order.
In campaigns, we market a particular product, service or offer for the duration of the campaign. In connection with a campaign, we may offer you a chance to participate in a prize drawing or competition or ask your consent to marketing. In such cases, we will ask you to provide personal data, such as your name and contact information. We need this information to implement the campaign and to send you any possible prize you have won. Through the campaigns, you may also become a member of our MyFazer loyalty programme and give us an electronic direct marketing permission. Read the terms of the MyFazer loyalty programme.
Marketing communication aimed at consumers
Newsletters allow us to send you information about offers or new products and services digitally. We will ask your consent before sending you newsletters. If you have given us general permission for marketing, we can send you news and newsletters which we think might interest you on the basis of the services you have used. You can unsubscribe for a newsletter sent to you through a link at the end of the email in question. Please note that despite the cancellation of an individual newsletter, you may still receive other marketing communication from Fazer Group if you have not cancelled the general consent to marketing you have given to Fazer Group.
You can cancel a general consent to marketing either in the contacting our customer service or with a form available on our website. The cancellation of a general consent to marketing stops all marketing communication aimed at consumers, including any newsletters you may have subscribed to.
Marketing communication aimed at the representatives of companies and other stakeholders
You may receive marketing communication related to your work or area of responsibility from Fazer when, for example, your company is our customer, you have shown interest in Fazer’s services or products as a representative of your company, you belong in some other stakeholder group or if you have subscribed to one of our newsletters. We do this on the basis of the customer relationship or Fazer’s legitimate interests. When the local legislation so requires, we will ask for your consent to such marketing. If you receive marketing communication like this from Fazer in relation to your work or area of responsibility, the easiest way to opt out is to unsubscribe via the link at the end of the message you receive.
You can give us feedback, make a complaint concerning a product or service of ours or send us an idea through our customer service aimed at consumers. In this context, we will collect data such as your name, your contact information and possible data on representation, based on the customer relationship. This data facilitates the processing of the idea or complaint and allow us to respond. We may also collect health-related data if this is necessary for the processing of compensation or an investigation concerning legal liability. We will do this in cases where our products have caused you health-related symptoms of some kind.
Opinion polls and surveys allow us to collect information important for our operations. It is voluntary to answer to them, and we will process your data on your consent. When you participate in a poll or a survey, we may ask personal details that are necessary for carrying out the poll or survey or if the poll or survey involves a prize draw, in which case we need the personal data to send you your prize. We will also process your information for providing MyFazer membership related services in case you are a member.
We provide our customers with mobile apps, through which you can place orders or receive benefits when you visit our cafés or restaurants. For you to be able to use an app, we will collect personal data from you (such as your contact information, change data and customer relationship data, as well as information on your interests, such as information on the use of the app, so that we can send you offers suitable for you).
MyFazer is a mobile app that can be downloaded to your smartphone. The MyFazer mobile app is a service that is part of the MyFazer loyalty programme. To use the app, we collect your name and email address from you based on your customer relationship. If you give your consent, we may use the mobile application to track your location and target you with current offers. You can also give us marketing permission if you wish. For more information, see MYFAZER LOYALTY PROGRAM.
MyFazer is the loyalty programme of Fazer Group. The loyalty programme includes a variety of services, benefits and offers, as well as an opportunity to participate in the development of Fazer’s products and services. The loyalty programme can be joined through Fazer's online service or by downloading the MyFazer mobile app. A member can terminate their membership at any time in the MyFazer service.
The processing of data related to the MyFazer loyalty programme is based on the loyalty agreement you have signed. We ask for your name and contact information to administer the MyFazer loyalty programme. You can modify and manage your own data in the MyFazer service.
In addition, we use cookies and other similar technologies to collect data on the online service browsing, purchases, and product and service evaluations of the members of the MyFazer loyalty programme as well as information provided by the members themselves, such as feedback and answers given in different surveys and studies. We may combine the collected data with other customer information and use the data to provide interesting, targeted benefits, services and contents to the members of the MyFazer loyalty programme and for the programme’s analytics, statistics and development.
The MyFazer loyalty programme includes marketing communication, and when you join the programme, you will receive Fazer’s newsletters, benefits and offers via e-mail and possibly by other electronic means, if you so wish. You can manage your message settings in the MyFazer service. The push messages of mobile applications related to the loyalty programme can be managed in the relevant application.
We use the services of third parties for the implementation of the loyalty programme, which means your data may be transferred to the United States. You can find further information on the transfer of data to third countries in 7. Do we transfer your data beyond the borders of the EU or EEA (i.e. to "third countries")?
Video surveillance enables us to ensure the personal safety, protection of property and food safety of our employees, customers and other persons staying at or visiting our facilities as well as to prevent and resolve situations that jeopardise safety, property and production processes.
Video surveillance stores data on persons who are within the range of the cameras at any given time. Surveillance may target, among other things, public spaces, loading docks, factory areas and, under certain conditions, areas where money is handled. This will enable us to ensure safety and protect people and property from harm. If Fazer uses video surveillance systems in the premises, the covered area is marked with clear notice tags (for example with camera images or with a notice reading “video surveillance” or other similar notification).
Fazer processes the data based on the legitimate interest of the controller. The retention period of the data is defined based on requirements of local legislation and/or supervisory authority recommendations and the initial retention time ranges from two weeks to three months, as applicable country-by-country. The data may be retained for longer if required by presenting, resolving or defending a legal claim; in other words, until the judgment is legally valid or the matter has been finally settled. Surveillance has been outsourced to a security company whose security guards monitor events on the property through a TV monitor. The security guards have technical access to the video surveillance material and they are allowed to access the material if necessary on prior consent from Fazer security manager. The security system is maintained on premise by Fazer itself.
Data can be disclosed to the authorities on the basis of the statutory right to obtain information. Such authorities include the police.
Access control enables us to ensure the personal safety, protection of property and food safety of our employees, customers and other persons staying at or visiting our facilities as well as to prevent and resolve situations that jeopardise safety, property and production processes.
The access control register stores data on persons who have applied for access rights and who at any given time have entered or exited through doors or gates included in the system or used the facilities included in the system. The information to be stored in the system includes the person's background information, such as name, role, employer and possibly their personal identity code, date of birth and picture, as well as the date and time of access and the vehicle’s registration number and picture. The background information is usually obtained from the person themselves or their representative when the access right is applied for, and the other information is obtained from the access control systems.
Fazer processes the data based on the legitimate interest of the controller. Processing the personal identity code is required for unambiguous identification of the person in question in order to ensure the safety of persons, among other things. The data is retained for a maximum of three years or longer, if required by presenting, resolving or defending a legal claim; in other words, until the judgment is legally valid or the matter has been finally settled. If access rights have not been granted, the data will be erased within three months of entering the application in the system.
Data can be disclosed to the authorities on the basis of the statutory right to obtain information. Such authorities include the police.
Fazer processes the data of its corporate customers and potential corporate customers, suppliers and subcontractors as well as other stakeholders in the course of its business operations. We process your data in these contexts when you are in contact with us as a representative of your company, other organisation or a stakeholder group. In such cases, we typically process the data on the basis of the fulfilment of contractual obligations or Fazer’s legitimate interest. Read more about legitimate interest in section 4. How is the data used? We can also request your consent to the processing of your personal data when, for instance, the applicable legislation requires your consent for marketing communication related to your work or area of responsibility.
We process your data to be able to make an agreement with you or provide services to you, for customer communication and service as well as for the analysis, statistics, reporting and development of our business operations. We also use your data for the marketing of our products and services and can, on the basis of any work-related interests you have informed us of, target the marketing we send to you in such a way that it benefits you in your work as much as possible. If you receive marketing communication like this from Fazer in relation to your work or area of responsibility, you can opt out at any time by unsubscribing via the link at the end of the message you receive.
When you deal with us as a representative of a company or other organisation or stakeholder group, the data we collect from you includes your name, contact details, position and job and/or title in the company or other organisation you represent. In some situations, we can also collect information about your interests and possibly other data necessary for the management of the relationship between Fazer and the company or organisation you represent. In addition, we collect information from generally available sources, such as the websites of companies, social media services and directories and contact databases maintained by the authorities or service providers.
Fazer maintains several Facebook pages. If you like any of Fazer’s Facebook pages, comment on posts or otherwise interact with one of Fazer’s Facebook pages, we will receive your public profile details visible to all Facebook users, such as your user name and profile picture. We process your data in order to tell you about new products and services as well as benefits or offers, to carry out marketing campaigns, such as competitions and draws, to receive feedback, purchase advertising from Facebook and to measure the performance of our advertising. If you have provided feedback or filed a complaint on our Facebook pages, we may direct the processing of the feedback or complaint to a party outside of Facebook, in which case we will process your data in the same manner as in other customer service situations.
We also obtain visitor data from Facebook collected by Facebook when users visit Fazer’s Facebook pages or interact with the page or its contents. Such statistics help us understand how our users interact with Fazer’s Facebook pages.
Fazer processes the data on Fazer’s Facebook pages on the basis of Fazer’s legitimate interest.
Facebook Ireland Limited and the Fazer company maintaining the Fazer Facebook page are joint controllers of the visitor data of Fazer’s Facebook pages, as applicable. Facebook bears the primary responsibility for compliance with data protection legislation as well as fulfilling the information security requirements and data subject requests. Facebook processes personal data in accordance with its own data policy: www.facebook.com/policy/. You can manage your own Facebook settings in Facebook. If you want to exercise your privacy rights related to your Facebook visitor data, you can contact Facebook.