Rules for use of the website and the personal data protection principles

Rules for use of the website

The website operated under the domain name of www.vitana.cz (hereinafter the “website”) was created and is operated by the Orkla Foods Česko a Slovensko a.s. Company, Company ID No.: 14803691, with registered office at Mělnická 133, 277 32 Byšice, registered in the Commercial Register administered by the Municipal Court in Prague in Section B, File No. 605 (hereinafter “Orkla Foods Česko a Slovensko” or “we/us“).

These rules for use of the website (hereinafter the “Rules“) stipulate the terms under which you can use our website. By visiting our website and using it, you acknowledge these Rules and agree with them. Please do not use our website if you do not agree with these Rules.

Intellectual property

The website and its entire content, consisting of texts, images, graphics, sounds, animations and video-recordings, including trademarks and logos, as well as the layout of the website, are the exclusive property of Orkla Foods Česko a Slovensko (or were used with the respective owner’s consent) and are protected by legal regulations for protection of intellectual property, particularly Act No. 121/2000 Sb., on copyright, on rights related to copyright and on amendments to some acts (Copyright Act), as amended.

Any use, extraction or utilisation of the website or its content without our prior written consent is forbidden, with the exception of use of the website for personal requirements, the purpose of which is not to acquire direct or indirect economic or business benefits.

Elimination of liability

We endeavour to ensure that the information published on the website is accurate and valid. However, we cannot guarantee that the information published on the website will be accurate, correct (from the aspect of subject-matter and time) and complete. We reserve the right to modify the content of the website at any time, even without prior notification. You can contact us by sending an email to vitana@orkla.cz to verify that information is current.

Although we implement strict measures to protect against viruses and other harmful elements, we cannot ensure that your visit to our website will not be disrupted or free of all risk with regard to the nature of the internet.

This means we are not liable for:

• any inaccuracy or omission of information published on the website or on other web pages that are available through our website;
• any disruption of the website or any errors;
• any harm caused by the illegal actions of third parties, which resulted in changes to the information published on the website;
• in general, any direct or indirect harm incurred in relation to (i) use of the website or (ii) the inability to use the website.

The user acknowledges this elimination of liability and the fact that the user uses the website and its content at their own risk.

Personal data protection principles

The controller of the personal data is the Orkla Foods Česko a Slovensko a.s. Company, Company ID No.: 14803691, with registered office at Mělnická 133, 277 32 Byšice, registered in the Commercial. Register administered by the Municipal Court in Prague in Section B, File No. 605 (hereinafter “Orkla Foods Česko a Slovensko“ or “we/us“).

Orkla Foods Česko a Slovensko respects the privacy of all persons and ensures the protection of their personal data. We are committed to implementing the appropriate measures to ensure the protection, confidentiality and security of all personal data, which we obtain from the subjects of data, and to processing this data in compliance with the generally valid legal regulations, particularly Regulation (EU) 2016/679 of the European Parliament and Council of 27 April 2016 on the protection of natural persons in relation to the processing of personal data and on the free movement of such data, and repealing Guideline 95/46/EC (hereinafter the “GDPR“).

The purpose of these personal data protection principles (hereinafter the “Principles”) is to inform you of the methods by which we can process your personal data. These Principles also provide information about your rights in relation to the processing of personal data.

The fact that you provide us with your personal data means that you accept these Principles and acknowledge that we may process your personal data by the methods and for the purposes set out below. Please do not provide your personal data to us if you do not agree with these Principles.

These Principles do not apply to other websites, business partners or other third parties, not even in cases when their websites are linked to our website.
We do not assume any liability or guarantees for their principles or for their processing of your personal data. We recommend that you read the personal data protection principles and the principles for using cookie files applying to these websites before you provide your personal data to any connected or linked websites.

These Principles consist of the following parts:

• What is personal data?
• What personal data do we collect and how do we use it?
• Passing on data. Who are the recipients of your personal data?
• Is your personal data passed on outside the EU, or the EEA?
• Security and storage of collected data
• Collection and processing of children’s personal data
• Your rights
• Principles of use of cookie files
• Social network widgets and widgets of other applications
• Amendment of these Principles
• Contact us

What is personal data?

Personal data is all information about an identified or identifiable natural person (subject of data) such as the name, surname, date of birth, email address, telephone number, etc.

What personal data do we collect and how do we use it?

We only collect the personal data that you voluntarily provide to us or which we obtain through our website or by means of written or telephone communication with you. We only collect and process personal data that is relevant, appropriate and limited to the essential requirements in relation to the purpose for which it is processed. We take all reasonable steps to ensure that your personal data is accurate, complete and, where necessary, up-to-date.

The personal data we collect may include:

• your identification and address data (e.g. name, surname, residential address);
• your contact data (e.g. contact address, email and telephone number);
• CV data (e.g. information about prior employment, information about your education);
• information related to your claim, complaint or suggestion;
• electronic data (e.g. IP address, cookie files);
• other data that you provide to us, or which we collect in relation to the provision of arranged services.

The data may chiefly be processed for the following purposes (we also give the legal grounds for processing by each purpose):

Provision of personal data processed for the purpose of adherence to the legal obligations of Orkla foods Česko a Slovensko is a legal requirement and you are required to provide such personal data. We are unable to fulfil our obligations according to the generally valid legal regulations if you do not provide this data.

You are not legally required to provide the personal data we require for performance of a contract with you or provide personal data for the purpose of our legitimate interests, and provision of this data is completely voluntary. However, we are unable to provide the required services (at all or in the required quality) if you do not provide this personal data. If personal data is processed on the basis of your consent, you also provide this personal data completely voluntarily. You are entitled to refuse to grant your consent or may withdraw previously granted consent at any time without any negative impact on your relationship with us.

We will not sell or lease your personal data to any third party.

Passing on personal data. Who are the recipients of your personal data?

We only pass on your personal data to authorised recipients in compliance with the relevant legal regulations.

We may pass on your personal data to the relevant public bodies and other recipients, to whom we are required to provide your personal data pursuant to the generally valid legal regulations. These recipients will process your personal data as separate controllers, independently of us.

We are also authorised to pass on your personal data to persons who process personal data for us as processers and with whom we have concluded a contract to process personal data. This concerns independent suppliers involved in the services we provide to you for example. These suppliers only act on the basis of our instructions and only have access to your personal data in the scope essential for achieving the purpose for which the personal data was collected. They are bound by the same obligations concerning security and confidentiality as we are. You can request the current list of processors by sending an email to privacy@orkla.cz.

Your personal data may also be shared within the Orkla Group for internal administrative purposes on the basis of the legitimate interests of Orkla Foods Česko a Slovensko. The Orkla Group means the ORKLA ASA Company, with registered address at 0277 OSLO, Drammensveien 149A, Kingdom of Norway, Registration Number: 910747711, and its subsidiary and controlled companies.

Is your personal data passed on outside the EU or EEA?

With regard to the fact that Orkla is active in many countries, your personal data may be provided to recipients outside the European Union (EU) or outside the European Economic Area (EEA), or may be passed on to countries outside the EEA or stored in these countries. The legal level of protection of your personal data may be lower in these countries than in the EEA. In such cases, we will ensure that your personal data is processed with assurance of the relevant guarantees (e.g. by concluding standard contractual clauses with the recipient of the personal data).

The European Commission has approved some countries outside the EEA as countries providing essentially equal protection to that guaranteed by the personal data protection regulations in the EEA. No other legal guarantees are required when passing on personal data to such countries (the list of these countries is available here). In the case of countries that have not been approved as specified above, we may ask you for consent to pass on your personal data or will pass it on, on the basis of standard contractual clauses approved by the European Commission. This does not apply if the valid legal regulations on protection of personal data allow us to pass the data on without taking these steps.

Security and storage of the collected data

We implement strict physical, electronic and administrative security measures to protect your data against unauthorised persons and against illegal processing and random loss, destruction or damage, both online and offline.

We will store your personal data only for the essential period in relation to the purpose for which it is processed. We apply the following criteria for determining the period for which the personal data is processed:

• if your personal data is processed for the purpose of meeting our legal obligations, we will process your personal data for the duration of the relevant legal obligations;
• if your personal data is processed on the legal grounds of performance of a contract (or for the reason of taking the relevant steps at your request before conclusion of a contract), we will process your personal data for the duration of the contractual relationship between us;
• if your personal data is processed on the basis of our legitimate interests, we will process your personal data for the duration of our respective protected interests. For the purpose of protection of our rights, we will also process your personal data after the obligations from the concluded contract expire, until the end of the 5^th calendar year from such time. if a judicial, administrative or other proceeding is initiated and continues, the subject of which is our rights or obligations towards you, your data will not cease to be processed before the end of such proceedings;
• personal data processed on the basis of your consent shall be processed until the time you withdraw your consent (unless it is stipulated that your personal data will be processed for a limited period, at the time we obtain your consent).

Collecting and processing children’s personal data

If you are younger than 15 and wish to grant your consent to the processing of your personal data through our website (e.g. by registering for our newsletter), please ask your parents, carers or other legal guardians to approve this step before you provide your personal data to us.

Your rights

In relation to processing your personal data, you have the rights set out below in compliance with the personal data protection legal regulations. Please be aware that certain exceptions may apply to execution of these rights, so it may not be possible to exercise them in all situations. If you exercise your rights and your request is found to be legitimate, we will implement the required measures without undue delay, within one month at the latest (this deadline may be extended by another two months in legitimate cases).

If you wish to exercise your rights as the subject of data in relation to the personal data we process, you may contact us by sending an email to: privacy@orkla.cz. If you exercise your rights, we may ask that you prove your identity in an appropriate manner. This is a security measure, which is intended to prevent unauthorised persons from accessing your personal data.