Privacy Policy

 

This website (https://kettlechips.eu/) is owned and operated by Kettle Foods Ltd (“we,” “us,” or “our”). At Kettle Foods Limited, we are committed to protecting your privacy. We take the issue of security of your personal information very seriously.

This Privacy Policy (this “Policy”) together with our Terms & Conditions (https://kettlechips.eu/terms-conditions/)explains when and why we collect personal information about people who visit our website, how we use it, the conditions under which we may disclose it to others and how we keep it secure. Personal information is any information about you from which you can be identified (such as your name or your email address).

This Policy tells you about:

 

Our details

We are Kettle Foods Limited (company number 2238320) a leading manufacturer of premium hand cooked potato chips and snacks in the UK. Our registered office address is at 38 Barnard Road, Bowthorpe, Norwich, Norfolk NR5 9JP, UK.  We are the data controller for the purposes of data protection laws, in respect of your personal information collected and used through your use of the website.  We dictate the purpose for which your personal information is used and how we use your personal information.  See “Questions or complaints” section below for more information on how to contact us.

As described in the section below entitled “How is  your personal information shared?”, we may share your personal information with other organisations, such as other entities in the Kettle Foods Family, that may receive and process your personal information as a controller in their own right.

 

What personal information do we gather from you and how is it collected?

We gather personal information from you, such as first and last names, telephone numbers and email addresses, that you provide voluntarily when you fill in appropriate sections of our website or when we directly message with you via our social media channels. For example when you complete our “Contact Us” section, you provide us with personal information which we hold and use for the purposes set out in the next section. We may also obtain information about you when you contact us about products (e.g., nutrition/ingredient queries, product availability) or when you enter one of our competitions via our website, on pack promotions or through social media.  We may collect your postal and/or email address in order to send you information you have requested or to send you a competition prize.  

We also collect technical information (to the extent such information constitutes personal information) through your activity and use of the website.  For example, we collect information about the devices you have used (such as the IP address you use to connect your device to the internet and the browser type and version you use on your device); and information about your use of the website and any services we offer (such as the pages you have viewed).  We may receive information from other sources, such as information from any of the other websites we operate or the services we provide, if you use any of them.  We make use of Google Analytics and Facebook pixels which are subject to separate terms and conditions issued by the relevant companies https://policies.google.com/privacy/update and https://www.facebook.com/about/privacy/update.

If you provide us with personal information about another person, you must ensure that before you provide us with their personal information, you have their agreement to do so and that they are aware of the ways in which we use personal information as set out in this Privacy Policy.

 

How is your personal information used and on what legal bases?

Our main aim in gathering your personal information is to provide you with a customised service. In particular, your personal information may be used by us, our employees and service providers and disclosed to third parties for the following purposes. For each of these purposes, we have set out the legal basis on which we use your personal information.

Purpose

Legal Basis

To provide the website to you.

This is in our legitimate interest (i.e., the provision of the website to you).

To provide you with the services we offer (including any promotions, sweepstakes or contests).

This is in our legitimate interest (i.e., the provision of the services to you), and depending on the circumstances, to perform a contract between you and us.

To communicate with you and other individuals and to carry out your requests and respond to your communications.

This is in our legitimate interest (i.e., the provision and support of the website and service)

To carry out our obligations arising from any contracts entered into between you and us.

This is to perform a contract between you and us.

To notify you about changes to the website.

This is in our legitimate interest (i.e., the provision of the website and service).

To audit and monitor the use of the website and to improve the quality of the website.

This is in our legitimate interest (i.e., the provision of the website and service, as well as to improve and ensure the security of the website and those services).

We may request your consent in circumstances where a legal justification over and above legitimate interests is required by applicable law (e.g., in relation to our use of certain cookies).

To manage complaints, feedback and queries.

This is in our legitimate interests (i.e., the provision and support of the website and service and improvements and development of our business operations).

To comply with any legal or regulatory obligations

This is in our legitimate interests (i.e., protection of our business, employees and customers) and for compliance with legal obligations to which we are subject.

We may also use aggregate personal information and statistics for the purposes of monitoring website usage in order to help us develop the website and our services and may provide such aggregate personal information to third parties. These statistics will not include any data that can be used to identify any individual.

 

How is your personal information shared?

We do not share personal information with third parties unless certain safeguards and contractual arrangements are in place.  We may share personal information within the Kettle Foods Family and certain selected companies.  By “Kettle Foods Family”, we mean the companies within the same group as Kettle Foods Ltd. The companies in the Kettle Foods Family include our parent company, Campbell Soup Company, and our affiliates.  The Kettle Foods Family will process your personal information in accordance with this Policy and all applicable data protection legislation.

The selected companies are those that provide technical assistance and support and perform other functions to support our marketing activities. Our third-party service providers include our IT service providers and marketing agencies.  In some cases, third party providers will be acting as a data controller of your information and therefore we advise you to read their Privacy Policy.  If any of our third-party service providers shares your information with us, we will use it in accordance with this Policy.

All selected companies may have access to personal information if needed to perform such functions, but will only be permitted by us to use such personal information for the purpose of performing that function (which may include one to which you have expressly given your consent) and not for any other purpose.

We may transfer your personal information to a third party as part of a sale of some or all of our business and assets to any third party or as part of any business restructuring or reorganisation, or if we are under a duty to disclose or share your personal information in order to comply with any legal obligation or to enforce or apply our terms of use or to protect the rights, property or safety of our customers. However, we will take steps with the aim of ensuring that your privacy rights continue to be protected.

We reserve the right to use or disclose any personal information as needed to satisfy any law, regulation or legal request, to protect the integrity of the site, to fulfil your requests, or to cooperate in any law enforcement or regulatory investigation. Save for this, we do not sell, rent, transfer or disclose personal information we have collected from you in connection with our website activities, to third parties outside the Kettle Foods Family.

 

Transferring your information outside of the European Union/European Economic Area

Due to the global nature of our business, as part of the services offered to you through our website or competitions, the information which you provide to us may be transferred to countries outside the European Union/European Economic Area (“EU/EEA”) (such a country is called a “third country”), for example, a company within the Kettle Foods Family in the United States of America.  Data protection law imposes restrictions on the transfer of personal information outside of the EU/EEA but such transfers can be made if the country to which we may transfer the data has an adequate level of protection for your rights, there are appropriate safeguards or a contract is in place allowing the transfer to take place, you have provided your consent or the transfer is necessary for reasons set out in the data protection laws.

Some countries may not have similar data protection laws to the UK. If we transfer your information outside of the EU/EEA in this way, we will take reasonable steps and implement appropriate measures to ensure that appropriate security measures are taken with the aim of ensuring that your privacy rights continue to be protected as outlined in this Policy and in accordance with data protection law.  These measures generally include either transferring personal information to third countries that have been deemed to provide an adequate level of protection for personal information by the European Commission or transferring personal information to a third country where the recipient has agreed to a European Commission-approved data transfer agreement in the form of standard contractual clauses.  We use standard contractual clauses to protect the transfer of data to companies in the Kettle Foods Family.

 

Data breach

The Data Protection Act 2018 requires us as Data Controller of your personal information to notify any breach of personal information to the applicable regulator and in certain instances to you, the data subject, which we will do as appropriate.

 

Children

Where individuals under the age of 13 register on our website, we must obtain the consent of a parent or guardian. We also reserve the right to request parental/ guardian consent for anyone between the ages of 12 and 16. Information provided by under 16’s will not be used for marketing purposes but we may from time to time tell you about developments on our site or provide you with information about Kettle Foods Ltd.

 

Cookies

A cookie is an alphanumeric identifier which we transfer to your hard drive through your web browser when you visit our website. It enables our own system to recognise you when you visit our website, to track the pages you looked at while visiting our website and therefore to improve our service to you. Cookies may also be used to compile aggregate personal information about the areas of our website which are visited most frequently. This aggregate personal information can be used to enhance the content of our website and make your use of it easier. If you wish to reject our cookie (which you can do at any time), you may configure your browser to do so. However, if you do so, you may not be able to use certain features on our website.   

 

Protection of your personal information and retention

The internet is not a secure medium and Kettle Foods Ltd. cannot absolutely guarantee the security of your personal information provided over the internet and any transmission is at your own risk. However we have put in place various security measures as set out below.

We use appropriate technical, physical, legal and organisational measures, which comply with data protection laws to keep personal information secure.  For example, the website and associated databases are protected by certified firewalls in order to protect your personal information from access by unauthorised persons and against unlawful or unauthorised processing, accidental loss, destruction or damage. We also keep your personal information confidential. All outgoing and incoming email is scanned for viruses.

We will retain your personal information for as long as is necessary for purposes for which it was collected. The precise period will depend on the reason why it was collected. For example: for marketing purposes your personal information will be retained until you withdraw your consent; for competitions it will be retained until the competition has been administered and in relation to consumer services until your query has been dealt with and a reasonable period thereafter or as long as the law requires.  Once the retention period for each situation has expired we will take all reasonable steps to destroy or erase from our systems all personal data that we no longer require in accordance with all our applicable record retention schedules and policies.

 

Your rights

You have certain rights with respect to your personal information. The rights may only apply in certain circumstances and are subject to certain exemptions. Please see the table below for a summary of your rights. You can exercise those rights using the contact details below.

 

Summary of your rights

Right of access to your personal information

You have the right to receive a copy of your personal information that we hold about you, subject to certain exemptions.

Right to rectify your personal information

You have the right to ask us to correct your personal information that we hold where it is incorrect or incomplete.

Right to erasure of your personal information:

You have the right to ask that your personal information be deleted in certain circumstances.  For example (i) where your personal information is no longer necessary in relation to the purposes for which they were collected or otherwise used; (ii) if you withdraw your consent and there is no other legal ground for which we rely on for the continued use of your personal information; (iii) if you object to the use of your personal information (as set out below); (iv) if we have used your personal information unlawfully; or (v) if your personal information needs to be erased to comply with a legal obligation.

Right to restrict the use of your personal information

You have the right to suspend our use of your personal information in certain circumstances.  For example (i) where you think your personal information is inaccurate and only for such period to enable us to verify the accuracy of your personal information; (ii) the use of your personal information is unlawful and you oppose the erasure of your personal information and request that it is suspended instead; (iii) we no longer need your personal information, but your personal information is required by you for the establishment, exercise or defence of legal claims; or (iv) you have objected to the use of your personal information and we are verifying whether our grounds for the use of your personal information override your objection.

Right to object to the use of your personal information

You have the right to object to the use of your personal information in certain circumstances. For example (i) where you have grounds relating to your particular situation and we use your personal information for our legitimate interests (or those of a third party); and (ii) if you object to the use of your personal information for direct marketing purposes.

Right to data portability

You have the right to obtain your personal information in a structured, commonly used and machine-readable format and for it to be transferred to another organisation, where it is technically feasible. The right only applies where the use of your personal information is based on your consent or for the performance of a contract, and when the use of your personal information is carried out by automated (i.e. electronic) means.

Right to withdraw consent

You have the right to withdraw your consent at any time where we rely on consent to use your personal information.

Right to complain to the relevant data protection authority

You have the right to complain to the relevant data protection authority where you think we have not used your personal information in accordance with data protection law.  You may lodge a complaint with the authority in the Member State of your habitual residence or of an alleged infringement of data protection law. For the contact details for the Information Commissioner’s Office in the UK please see the Questions or Complaints section below.

 

Changes to our privacy policy

We keep this Policy under regular review and reserve the right to make changes at any time to take account of changes in our business, legal requirements, and the manner in which we process personal information. Any changes we make to this Policy in the future will be posted on this page.  The updated Policy will take effect as soon as it has been updated or otherwise communicated to you. This Policy was last updated in May 2018.

 

Links

The website may contain hypertext links to other sites, which are not under our control. Please note that we are not responsible for the privacy policies of such other websites and we advise you to read the privacy policies of each website you visit which collects personal information.

 

Questions or complaints:

If you have any questions, concerns, comments or complaints about this Policy and/or our collection or use of personal information, or if you wish us to stop processing your personal information for any particular purpose or purposes, then please contact our Data Protection Officer on privacy@kettlefoods.co.uk or telephone +44 (0)1603 744788.

You can also contact the data protection authority of your country as listed in the table below:

Austria

Österreichische Datenschutzbehörde
Hohenstaufengasse 3
1010 Wien
Tel. +43 1 531 15 202525
Fax +43 1 531 15 202690
e-mail: dsb@dsb.gv.at
Website: http://www.dsb.gv.at/

Belgium

Commission de la protection de la vie privée
Rue de la Presse 35
1000 Bruxelles
Tel. +32 2 274 48 00
Fax +32 2 274 48 10
e-mail: commission@privacycommission.be
Website: http://www.privacycommission.be/

Bulgaria

Commission for Personal Data Protection
2, Prof. Tsvetan Lazarov blvd.
Sofia 1592
Tel. +359 2 915 3523
Fax +359 2 915 3525
e-mail: kzld@cpdp.bg
Website: http://www.cpdp.bg/

Croatia

Croatian Personal Data Protection Agency
Martićeva 14
10000 Zagreb
Tel. +385 1 4609 000
Fax +385 1 4609 099
e-mail: azop@azop.hr or info@azop.hr
Website: http://www.azop.hr/

Cyprus

Commissioner for Personal Data Protection
1 Iasonos Street,
1082 Nicosia
P.O. Box 23378, CY-1682 Nicosia
Tel. +357 22 818 456
Fax +357 22 304 565
e-mail: commissioner@dataprotection.gov.cy
Website: http://www.dataprotection.gov.cy/

Czech Republic

The Office for Personal Data Protection
Urad pro ochranu osobnich udaju
Pplk. Sochora 27
170 00 Prague 7
Tel. +420 234 665 111
Fax +420 234 665 444
e-mail: posta@uoou.cz
Website: http://www.uoou.cz/

Denmark

Datatilsynet
Borgergade 28, 5
1300 Copenhagen K
Tel. +45 33 1932 00
Fax +45 33 19 32 18
e-mail: dt@datatilsynet.dk
Website: http://www.datatilsynet.dk/

Estonia

Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon)
Väike-Ameerika 19
10129 Tallinn
Tel. +372 6274 135
Fax +372 6274 137
e-mail: info@aki.ee
Website: http://www.aki.ee/en

Finland

Office of the Data Protection Ombudsman
P.O. Box 315
FIN-00181 Helsinki
Tel. +358 10 3666 700
Fax +358 10 3666 735
e-mail: tietosuoja@om.fi
Website: http://www.tietosuoja.fi/en/

France

Commission Nationale de l’Informatique et des Libertés – CNIL
8 rue Vivienne, CS 30223
F-75002 Paris, Cedex 02
Tel. +33 1 53 73 22 22
Fax +33 1 53 73 22 00
e-mail:
Website: http://www.cnil.fr/

Germany

Die Bundesbeauftragte für den Datenschutz und die Informationsfreiheit
Husarenstraße 30
53117 Bonn
Tel. +49 228 997799 0; +49 228 81995 0
Fax +49 228 997799 550; +49 228 81995 550
e-mail: poststelle@bfdi.bund.de
Website: http://www.bfdi.bund.de/

The competence for complaints is split among different data protection supervisory authorities in Germany.
Competent authorities can be identified according to the list provided here

Greece

Hellenic Data Protection Authority
Kifisias Av. 1-3, PC 11523
Ampelokipi Athens
Tel. +30 210 6475 600
Fax +30 210 6475 628
e-mail: contact@dpa.gr
Website: http://www.dpa.gr/

Hungary

Data Protection Commissioner of Hungary
Szilágyi Erzsébet fasor 22/C
H-1125 Budapest
Tel. +36 1 3911 400
e-mail: peterfalvi.attila@naih.hu
Website: http://www.naih.hu/

Ireland

Data Protection Commissioner
Canal House
Station Road
Portarlington
Co. Laois
Lo-Call: 1890 25 22 31
Tel. +353 57 868 4800
Fax +353 57 868 4757
e-mail: info@dataprotection.ie
Website: http://www.dataprotection.ie/

Italy

Garante per la protezione dei dati personali
Piazza di Monte Citorio, 121
00186 Roma
Tel. +39 06 69677 1
Fax +39 06 69677 785
e-mail: garante@garanteprivacy.it
Website: http://www.garanteprivacy.it/

Latvia

Data State Inspectorate
Director: Ms Signe Plumina
Blaumana str. 11/13-15
1011 Riga
Tel. +371 6722 3131
Fax +371 6722 3556
e-mail: info@dvi.gov.lv
Website: http://www.dvi.gov.lv/

Lithuania

State Data Protection
Žygimantų str. 11-6a
011042 Vilnius
Tel. + 370 5 279 14 45
Fax +370 5 261 94 94
e-mail: ada@ada.lt
Website: http://www.ada.lt/

Luxembourg

Commission Nationale pour la Protection des Données
1, avenue du Rock’n’Roll
L-4361 Esch-sur-Alzette
Tel. +352 2610 60 1
Fax +352 2610 60 29
e-mail: info@cnpd.lu
Website: http://www.cnpd.lu/

Malta

Office of the Data Protection Commissioner
Data Protection Commissioner: Mr Joseph Ebejer
2, Airways House
High Street, Sliema SLM 1549
Tel. +356 2328 7100
Fax +356 2328 7198
e-mail: commissioner.dataprotection@gov.mt
Website: http://www.dataprotection.gov.mt/

Netherlands

Autoriteit Persoonsgegevens
Prins Clauslaan 60
P.O. Box 93374
2509 AJ Den Haag/The Hague
Tel. +31 70 888 8500
Fax +31 70 888 8501
e-mail: info@autoriteitpersoonsgegevens.nl
Website: https://autoriteitpersoonsgegevens.nl/nl

Poland

The Bureau of the Inspector General for the Protection of Personal Data – GIODO
ul. Stawki 2
00-193 Warsaw
Tel. +48 22 53 10 440
Fax +48 22 53 10 441
e-mail: kancelaria@giodo.gov.pl; desiwm@giodo.gov.pl
Website: http://www.giodo.gov.pl/

Portugal

Comissão Nacional de Protecção de Dados – CNPD
R. de São. Bento, 148-3°
1200-821 Lisboa
Tel. +351 21 392 84 00
Fax +351 21 397 68 32
e-mail: geral@cnpd.pt
Website: http://www.cnpd.pt/

Romania

The National Supervisory Authority for Personal Data Processing
President: Mrs Ancuţa Gianina Opre
B-dul Magheru 28-30
Sector 1, BUCUREŞTI
Tel. +40 21 252 5599
Fax +40 21 252 5757
e-mail: anspdcp@dataprotection.ro
Website: http://www.dataprotection.ro/

Slovakia

Office for Personal Data Protection of the Slovak Republic
Hraničná 12
820 07 Bratislava 27
Tel.: + 421 2 32 31 32 14
Fax: + 421 2 32 31 32 34
e-mail: statny.dozor@pdp.gov.sk
Website: http://www.dataprotection.gov.sk/

Slovenia

Information Commissioner
Ms Mojca Prelesnik
Zaloška 59
1000 Ljubljana
Tel. +386 1 230 9730
Fax +386 1 230 9778
e-mail: gp.ip@ip-rs.si
Website: https://www.ip-rs.si/

Spain

Agencia de Protección de Datos
C/Jorge Juan, 6
28001 Madrid
Tel. +34 91399 6200
Fax +34 91455 5699
e-mail: internacional@agpd.es
Website: https://www.agpd.es/

Sweden

Datainspektionen
Drottninggatan 29
5th Floor
Box 8114
104 20 Stockholm
Tel. +46 8 657 6100
Fax +46 8 652 8652
e-mail: datainspektionen@datainspektionen.se
Website: http://www.datainspektionen.se/

United Kingdom

The Information Commissioner’s Office
Water Lane, Wycliffe House
Wilmslow – Cheshire SK9 5AF
Tel. +44 1625 545 745
e-mail: international.team@ico.org.uk
Website: https://ico.org.uk

European Data Protection Supervisor

Rue Wiertz 60
1047 Bruxelles/Brussel
Office: Rue Montoyer 63, 6th floor
Tel. +32 2 283 19 00
Fax +32 2 283 19 50
e-mail: edps@edps.europa.eu
Website: http://www.edps.europa.eu/EDPSWEB/