Data protection notice for the group CRM system Salesforce Sales Cloud and landing pages for campaigns

The customer relationship management system Salesforce Sales Cloud (hereinafter referred to as the “CRM system”) is made available to the individual companies of the Südzucker Group (hereinafter referred to as “we”, “us”) by 

Südzucker AG
Maximilianstraße 10
68165 Mannheim 
Germany

Südzucker AG has concluded the necessary agreements with the provider of the CRM system and the online campaigns (see section “a) CRM system Salesforce Sales Cloud (Salesforce)” and “b) Providing a landing page for online campaigns (Salesforce Marketing Cloud Account Engagement)”) as well as the provider for the collection of contacts at our trade fair stands (see in section "c) Digital contact data collection from trade fair visitors (Integrate)")and acts as a service provider to the individual companies of the Südzucker Group for the provision and use of the services offered with the CRM system to these companies.

The CRM system, the individual online campaigns (hereinafter also referred to as “landing pages”), which were developed for the collection of B2B sales and marketing contacts as well as the process of digitally collecting contacts at trade fair stands, have been designed uniformly for all companies of the Südzucker Group in order to ensure that data processing in accordance with Article 4 (2) EU General Data Protection Regulation. The Südzucker Group attaches great importance to the protection of your privacy and that of your personal data as well as the necessary data security for the processing of your data and has defined and established the necessary data protection measures. Within the CRM system, the individual online campaigns and at our trade fair stands, only personal data is collected, processed, and used in accordance with the principles described below as well as the provisions of the EU General Data Protection Regulation (hereinafter "GDPR") and the applicable national data protection law. It should be clarified that the processing and use of your data by all companies of the Südzucker Group can take place if you have given your consent to this. Furthermore, only the GDPR is referred to in the legal bases mentioned here. 

With this privacy policy, we inform you about the nature, scope and purpose of the collection, processing, and use of your personal data.

1. General information on data processing

We collect, process, and use your personal data only for the purpose of providing a group-wide CRM system as well as for group-wide management of our business partner contacts (customers, business partners and interested parties). 

Various personal data are processed in our CRM system. “Personal data” means any information relating to an identified or identifiable natural person (hereinafter “data subject”). Personal data will only be collected, such as your name and e-mail address, if you voluntarily provide it to us or if you have consented to it being collected.

Our CRM system and online campaigns are not aimed at people under the age of 16. We ask that persons under the age of 16 do not provide us with any personal data. If we notice that we have collected personal information from individuals under the age of 16, we will take steps to delete it as soon as possible. 

If you have any questions about data protection relating to our CRM system, please use the contact details provided at the end of this privacy notice to reach out.

2. Data processing in detail

a) CRM system Salesforce Sales Cloud (Salesforce)

Description and scope of data processing

For the technical provision and hosting of our group-wide CRM system we are using the cloud-based CRM solution “Salesforce Sales Cloud” by Salesforce.com Germany GmbH, Erika-Mann-Straße 31-37, 80636 Munich (hereinafter “Salesforce”). The data processing agreement required by data protection law was concluded with the provider Salesforce on the basis of the currently valid standard contractual clauses. In addition, Salesforce Inc. is certified according to the Data Privacy Framework. The proof of this can be found in the list of the U.S. Department of Commerce, which shows the voluntarily certified U.S. companies. Salesforce also has so-called Binding Corporate Rules (BCR), i.e. binding company-internal regulations, which legitimise company-internal data transmission to third countries outside the EU / EEA. For details, visit https://www.salesforce.com/en/blog/2020/07/die-binding-corporate-rules-von-salesforce-erfuellen-hoechste-da.html. 

For more information about Salesforce, please visit https://www.salesforce.com/en/. 

Südzucker AG, as a licensee of Salesforce, acts as a service provider for the companies of the Südzucker Group to be able to offer the technical solution of the CRM system to these companies. The respective Südzucker company is free to decide whether to use or make use of the service. On our behalf, all personal data are stored or processed on a certified server of our service provider Salesforce exclusively within the EU / EEA. 

The CRM system allows us to manage existing and potential customers as well as prospective customers for the purpose of organising our sales and communication channels with the B2B contacts. Our CRM system provides partially automated support in the analysis of our processes and the organisation of our B2B contacts: 

  • Our CRM system serves as a central platform for the maintenance of our customer and supplier master data throughout the group. The CRM system regularly transmits the master data via secure interfaces to other IT systems of the Südzucker Group (e.g. ERP system) in order to keep the data across the systems synchronous. However, only the data requested by the receiving system will be transmitted.
  • In our CRM system, potential sales opportunities as well as all sales projects are recorded, processed and tracked by our sales managers with detailed information (e.g. expected order volume, incoming order data, probability of success, etc.). 
  • In addition, our CRM system is used to collect and manage contacts with potential purchasing interest; i.e. prospective customers of products of the companies of the Südzucker Group are collected, qualified, distributed to our sales managers and tracked using our CRM system. For details refer to the section “b) Providing a landing page for online campaigns (Salesforce Marketing Cloud Account Engagement)”.
  • In our CRM system, information about our B2B contacts is centrally stored and linked to other information (e.g. contacts, opportunities). In addition, contacts and activities (e.g. sending offers, discussions with the respective contact, etc.) are stored.

We process the following categories of personal data in our CRM system:

  • Suffix, salutation, first, middle, and last name, title
  • Contact details (e-mail address, telephone number, language)
  • Professional data (company, position, department, address, website, company size, company turnover, industry, product category, product application)
  • Campaign data (campaign name, type, lead status, date of collection)
  • Contract data (existing contracts and contracts in negotiation)
  • Communication data (e-mail communication, visit reports and other interactions with us)
  • Data on goods or services purchased (order and delivery history, credit management)
  • Customer type (prospective customer, existing customer, new customer)

The aforementioned data will only be collected directly from you via the following channels: our websites, online campaigns, contact forms offered, at trade fairs as well as via direct telephone, messenger or e-mail contact with us, and for the aforementioned purposes stored, evaluated, assigned to the responsible sales manager of a company of the Südzucker Group and used to contact you. 

We will not ask you in our communication as well as in our online campaigns / contact forms to provide us with so-called particularly sensitive special categories of personal data. However, if you voluntarily provide us with such information, we understand it as consent given to the processing for the purpose of conducting the customer relationship and that you allow us to store this information within our CRM system. In principle, however, information about particularly sensitive data is not stored and processed by us, since the technical design of our CRM system does not intend to allow this. This data will only be processed in exceptional cases.

Access to our CRM system takes place within the framework of the existing authorisation concept after a separate login and authorisation check. Currently, the data in the CRM system can only be read and processed group-wide by authorised employees and sales managers of the respective group company. The limited number of authorised users and sales managers of the companies of the Südzucker Group have access to your personal data as far as necessary to process your data in the CRM system or to answer your contact requests according to the above-mentioned purposes. The permissions are assigned according to the need-to-know principle. Every access to the CRM system as well as to the contained data is always logged. Your data will not be passed on to third parties outside the Südzucker Group.

We would like to point out that some recipients or companies of the Südzucker Group are located in third countries (including India, Singapore, Moldova). Securing of the data takes place via intra-group agreements, including standard contractual clauses, in order to ensure an appropriate level of data protection. 

Legal basis for data processing

The use of our group-wide CRM system is based on Article 6(1)(f) GDPR. We have a legitimate interest in targeted and efficient organisation and communication with our customers, business partners and interested parties in Südzucker Group products. 

The collection of your personal data via contact forms, at trade fairs, via online campaigns or through direct contact takes place regularly based on your consent according to Article 6(1)(a) GDPR.

If the purpose of contacting our customers or interested parties is to conclude a contract for the purchase of products of the Südzucker Group, the legal basis for the processing is Article 6(1)(b) GDPR.

Purpose of data processing

We process your personal data in our CRM system to answer your contact requests, to maintain our customer and prospective customer relationships (CRM), to manage our business relationships as well as for marketing and sales purposes. Our group-wide CRM system aims to improve the results in marketing and sales. The CRM system provides the companies of the Südzucker Group with a platform that supports the employees and sales managers of the companies of the Südzucker Group, who are authorised by an authorisation concept, in sales, service, marketing and the maintenance of our customer and potential customer relationships. 

Duration of storage / Deletion of your data

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of personal data collected for the aforementioned purposes and processed in our CRM system, this will be the case if the respective addressee has objected to the processing. The data may also be stored if this is provided for by the European or national legislator in Union regulations, laws or other provisions to which the data controller is subject. Data will be blocked from further processing or erased upon expiry of a legally prescribed retention period, unless further storage of the data is necessary for the fulfilment of a contract.

To ensure a system-wide procedure for the deletion of personal data in the CRM system, we have implemented a group-wide deletion concept:

  • There is a regular check by the responsible persons for the contacts and sales managers, whether our contacts are still current contacts. If no storage periods require storage, your data will be completely deleted by us.
  • The maximum memory limit is currently six years of inactivity. If a contact stored in the CRM system has not had any interaction for six years or if there has been no change to the corresponding record, the contact will be deleted from the system.

In addition, we would like to point out that you can also change your data independently in our CRM system at any time using the contact details under Section 5 or request a deletion.  We will then delete your data immediately, unless there is a legal retention period that precludes deletion.

b) Providing a landing page for online campaigns (Salesforce Marketing Cloud Account Engagement)

For some campaigns, we provide our website visitors, business partners, customers and interested parties with websites, so-called landing pages. These landing pages provide you with information about our products, contact forms or download options for information materials. 

The Südzucker Group company listed in the imprint of each landing page is responsible for data protection in accordance with the GDPR.

We are currently working together with Salesforce Inc, Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105, USA (hereinafter “Salesforce Pardot”) B2B marketing automation system (formerly Salesforce Pardot - a Software as a Service (SaaS) platform) for the technical provision of landing pages of Südzucker Group companies, including integrated contact forms, the collection of data from you via the landing pages and the storage and management of this data, as well as for the intended marketing automation. The marketing automation service is a function for email automation to conduct targeted and interest-based email campaigns and group-wide semi-automated lead management for B2B sales and marketing contacts. On behalf of Südzucker AG, Salesforce Pardot also hosts landing pages and the corresponding databases for the respective companies in charge within the Südzucker Group. Südzucker AG, as a licensee of Salesforce Pardot, acts as a service provider for the Südzucker Group companies to be able to offer the technical solution of Salesforce Pardot to these companies. The respective Südzucker company is free to decide whether to use or make use of the service. On our behalf, all personal data is stored or processed on a certified server of our service provider within the USA. The data processing agreement required by data protection law was concluded with the provider Salesforce Inc. based on the currently valid standard contractual clauses. In addition, Salesforce Inc. is certified under the Data Privacy Framework. Proof of this can be found in the list of the U.S. companies that are voluntarily certified hereunder. For more information about Salesforce Pardot, visit https://www.salesforce.com/en/products/marketing-cloud/marketing-automation/.

In the following we inform you about the data processing on the respective landing pages of the companies of the Südzucker Group. Since each landing page is always set up according to the same specifications, the statements made here apply to each landing page:

Provision of the landing page and creation of log files

During the mere provision of the landing page, the respective company of the Südzucker Group only collects the personal data that your browser transmits to the server or provider of Salesforce Pardot and that is technically required to display our landing page to you and ensure its stability and security. 

The following data in log files or logs are currently processed by Salesforce Pardot due to the technical provision and hosting of the landing page and transmitted to the Salesforce Pardot server:

  • The name and version of the browser used;
  • The website from which the request was triggered (referrer URL);
  • Your device's operating system;
  • Your device's screen resolution; IP address of the requesting device;
  • The language setting of your browser or operating system.

This data is stored on the servers of Salesforce Pardot on our behalf for the respective responsible company of the Südzucker Group. An independent use of the data by Salesforce Pardot as well as an unauthorised transfer to third parties does not take place. This data is not stored together with other personal data of the website visitor.

The legal basis for the temporary storage of data and log files as well as the inclusion of technical hosting providers is Article 6(1)(f) GDPR. The temporary processing of the IP address by Salesforce Pardot is technically necessary to enable delivery of the landing page to the user's device. For this purpose, the user's IP address must be stored for the duration of the session. Salesforce Pardot only stores shortened IP addresses. The storage in log files takes place to ensure the functionality of the respective landing page. In addition, the data support us to optimise the landing page and to ensure the security of our information technology systems. An evaluation of the processed data for marketing purposes does not take place in this context. These purposes also constitute our legitimate interest in data processing in accordance with Article 6(1)(f) GDPR.

The data mentioned in this section will be deleted as soon as they are no longer needed to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the landing page, this is the case when the respective session has ended. If the data is stored in log files, this is the case after one year at the latest. Further storage is possible. In this case, the IP addresses of the users are deleted or anonymized, so that it is no longer possible to identify the calling client.

In principle, the user has the option under the conditions of Article 21 GDPR to object to the processing of personal data. The objection can be made at any time using the contact details given at the end of this data protection notice (section “Contact details of the responsible bodies and the data protection officer”). The collection of data for the provision of the website and the storage of data in log files is necessary for the operation of the website. Consequently, there is no possibility for the user to object.

Use of cookies

We use cookies to make your visit to our landing page more attractive. Cookies are small text files that are stored on your device and enable us, among other things, to recognise your browser. Cookies allow us to improve the comfort and quality of the services provided on the respective landing page. Cookies are also used to analyse the use of the landing page in an anonymous form. Some of the cookies we use are deleted after the end of your browser session, i.e. after closing your browser (so-called "session cookies"). Other cookies remain on your device during their respective validity period (see below) and enable us to recognise your browser the next time you visit us.

When accessing the respective landing page, we inform the users by means of an information text about the use of cookies (technically necessary, statistics and targeting) and have technically set up the consent required under data protection law to set the cookies for which consent is necessary. Except for the technically necessary cookies, consent must always be given in advance to set cookies on your end device. The user is also referred to this privacy policy via the consent banner. For more information about our consent banner, please refer to the section “Privacy settings with Cookie Script”. A list of the cookies used by us including purpose and validity period per category (technically necessary, statistics and targeting) can be found at any time in our consent banner.

The legal basis for the processing of personal data using technically necessary cookies is Article 6(1)(1)(f) GDPR. The setting of necessary cookies takes place in compliance with the requirements of Section 25(2)(2) TDDDG (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz). The legal basis for the processing of personal data using cookies for statistical purposes (statistics) and for targeting is based on your consent Article 6(1)(1)(a) GDPR. The setting of non-necessary cookies for the operation of the landing page takes place in compliance with the requirements of Section 25(1) TDDDG.

The purpose of the use of technically necessary cookies is to enable the use of landing pages for users. Some features (such as displaying the contact form) of our landing page cannot be offered without the use of cookies. For this it is necessary that the browser is recognised even after a page change. The user data collected by technically necessary cookies are not used to create user profiles.

The use of statistical and targeting cookies is for the purpose of improving the quality of the respective landing page and its content based on your present consent. Through the cookies, we learn how the landing page is used and can thus continuously optimise our offer. We also refer to the sections "Use of Pardot Analytics to analyse your usage behaviour", "Use of Crazy Egg to analyse your usage behaviour anonymously" and "LinkedIn Insights Tag (LinkedIn Pixel) advertising and marketing service".

Cookies are stored on the user’s device and transmitted from that device to our site. Therefore, as a user, you have full control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or restrict the transmission of cookies. Previously stored cookies can be deleted at any time. This can also be done automatically. 

In addition, by linking the privacy settings ("Change cookie settings") in the footer of our landing page, we offer you an opportunity to change the settings made via our consent banner at any time or to revoke your consent for the future. A use of our offers is also possible without cookies. However, this may lead to certain limitations to the functionality and usability of our offer on the landing page.

Privacy settings with Cookie Script

We use the CookieScript service provided by Objectis Ltd., Laisves st. 60, LT-05120 Vilnius, Lithuania (hereinafter “CookieScript”) on our landing page for the provision of our consent banner. The system controls the use of third-party providers, technical measures and cookies via a given or rejected consent.

With CookieScript, we have concluded the required data protection agreement in accordance with Article 28 GDPR. In accordance with this agreement, CookieScript undertakes to ensure the necessary protection of your data and to process it exclusively on our behalf and in accordance with our instructions in line with the applicable data protection regulations.

CookieScript processes the following data for the provision and management of the consent banner:

  • Your IP address;
  • Further information on the browser used and the browser version;
  • Date and time of your visit to our website or your settings made via our cookie banner;
  • The URL of the website accessed;
  • An anonymous, random and encrypted key (ID);
  • Your given consent or individual privacy settings

and uses both the local storage (also called "Local Storage") on your device and the setting of cookies to store this information locally in your browser. For this purpose, your individual settings as well as your ID are stored in a cookie, so that the settings you have made are taken into account when our landing page is called up again. A list of cookies used by CookieScript, including purpose and validity period, can be found at any time in our consent banner.

The retention period is the period in which the data processed by the consent banner is stored for the purpose of consent management. The consent data (given consent and revocation of consent) will be kept for one month. No renewed consent is required within this period unless new systems are introduced, or new consent is required due to statutory or legal conditions. For more information about processing by CookieScript, please visit the CookieScript Privacy Policy at https://cookie-script.com/en/legal/privacy-policy.

The purpose of data processing by CookieScript is to provide and manage the consents granted by our website visitors to comply with data protection-compliant consent management. The use of CookieScript is to provide evidence of consent given and not given, and to manage the individual privacy settings of our users. The processing takes place for the purpose of obtaining the consent of the website visitor, providing revocation and objection options, to provide evidence of the consent received (time of consent, end device used) as well as to identify the user to manage their individual privacy settings.

The use of a consent banner as well as the management and storage of your consent to the processing of your personal data takes place on the basis of our legal obligation to provide a website compliant with data protection (Article 6(1)(c) GDPR in conjunction with Section 26 TDDDG). The legal basis for the use of the service provider CookieScript is also Article 6(1)(f) GDPR. Our legitimate interest lies in the legally secure documentation and verifiability of consents as well as the management of our analysis campaigns based on your granted consent using specialised processors and the associated technical implementation.

The processing of the data for the provision of a consent banner is mandatory for the operation of the landing page. There is no possibility of objection on the part of the user as long as we have the legal obligation to obtain the consent of the user in certain data processing operations.

Making information available for download

If you wish, we will provide you with information material via download link, such as e.g. white papers on our products or suitable recipes. The information required for sending can be done via a form included in the respective landing page.

The scope of the processed personal data as well as which personal date is processed in individual cases may vary depending on the form. This includes in particular the following data:

  • First and last name;
  • Professional e-mail address;
  • Professional phone number;
  • Company name, size, department, and details of your position;
  • Your country of origin (country);
  • Industry.

Mandatory information (*) and voluntary information are indicated in the forms.

To secure your entries as well as to check and avoid interactions on our website by automated access, e.g. by so-called bots, we use a so-called captcha when applying for our information material. For more information, please refer to our section “Fraud Prevention – Use of Google reCAPTCHA”.

We will then send you an e-mail to confirm the e-mail address provided. Only after confirmation will you receive a download link to download the requested information material. The information saved are the name of the relevant information material, the campaign name, the time of registration, confirmation, cancellation, and the shortened IP address of the calling client. The collection of this data is necessary to be able to trace an abuse of the e-mail address of the data subjects and to safeguard the controller's processing.

As part of the collection of your contact data via the form, we offer you the option of agreeing to receive further information on products, information materials or services of the Südzucker Group - which fit thematically or in terms of content to your already sourced material. To ensure a sufficient reference of your consent to the materials offered as well as the necessary transparency for your consent, we have taken the following categorisation: Group-wide, the products and services of the companies of the Südzucker Group were divided into the following categories: Food, Feed and Pharmacy. For further information on data processing and your revocation options, please refer to the section "Processing of data within the Südzucker Group for targeted customer contact and presentation of products of the companies of the Südzucker Group". Through this categorisation, the CRM system used systemically ensures that materials are only left to the categories you have selected. 

For the technical implementation of the shipment and the provision of the download link, we use our marketing automation system Salesforce Pardot, in which the collected data is also stored. The data will be processed exclusively for the provision of the download link, unless you have consented to processing for the receipt of further information about the selection of the respective category made by you. 

The processing of your data is necessary for sending the respective download material via a download link to your e-mail address (Article 6(1)(1)(a) and 6(1)(1)(b) GDPR).

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For the personal data that has been sent via input form, this is the case when the respective campaign for downloading the information material has ended. All data collected will then be deleted on the system side. If you have consented to further processing within the Südzucker Group via the selection of the categories, the collected data will remain stored in our systems (Salesforce Pardot and Salesforce Sales Cloud) until your consent is revoked (see also "Processing of data within the Südzucker Group for targeted customer contact and presentation of products of the companies of the Südzucker Group"). 

Processing of data within the Südzucker Group for a targeted approach to customers and presentation of products of companies in the Südzucker Group

On our landing pages for individual campaigns, on selected websites of the Südzucker Group, at our trade fair booths, via advertised social media campaigns by companies of the Südzucker Group as well as in the context of subscribing to one of our newsletters (hereinafter collectively "Campaign"), consent to the group-wide processing of your data is possible for a targeted customer approach and presentation of products of the Südzucker Group. If you have given us your consent, the contact data collected by you as part of a campaign will be transferred to our marketing automation system Salesforce Pardot, through which we can offer you personalised e-mail campaigns on the products of the companies of the Südzucker Group. For this purpose, we have divided the products into the product categories Food, Feed and Pharmacy throughout the Group. By means of this categorisation, Salesforce Pardot systemically ensures that materials are only left to the categories you have selected. 

The group-wide semi-automated system for managing our B2B sales and marketing contacts then sends targeted further information via Salesforce-Pardot to your registered e-mail address based on your declaration of consent at regular intervals taking into account the product category selected by you (further information materials for download, videos on the products, further suitable products of other companies of the Südzucker Group, etc.). Your consent is always relevant to the selected product categories as well as group-wide. We store your interests in Salesforce Pardot so that we can provide you with information relevant to you.

If you have consented to the analysis of your usage behaviour using Pardot Analytics via the consent banner of our websites or landing pages, we will enrich your profile with the corresponding interests for our products or campaigns. The following events will be taken into account: activity type (such as visited website or landing pages of Südzucker Group (on which Pardot Analytics, an offer of Salesforce Inc., has been set up), length of stay, name of campaigns taken, view and fill in forms, access to files, registered/attended events/webinars, viewed product videos) and time of activity.

The evaluation of your usage behaviour takes place only if you have agreed to the profile formation for the group-wide targeted customer approach and also on the respective website / landing page to the use of Pardot Analytics. There is no retrospective assignment of your website activities. For more information on Pardot Analytics, please refer to the section entitled “Use of Pardot Analytics to analyse your usage behaviour”. 

To further improve the offer, data on the use of our targeted customer addresses or semi-automated info e-mails as well as your reaction to them are also collected. For this purpose, the e-mails sent contain so-called web beacons or tracking pixels (hereinafter referred to as “tracking measures”) of the Pardot Analytics service. The tracking measures are used to collect events (e-mail opened, e-mail rejected, e-mail unsubscribed, click on links, access files) with respective time stamps as well as other technical information, such as browser type, device type and operating system. This information is associated with your e-mail address and linked to your own user ID as well as the shortened IP address. With the help of so-called conversion tracking, it can also be analysed whether a pre-defined action (e.g. linking to an event) has taken place after clicking on the link in the respective e-mail. The data collected will be combined in our marketing automation system Salesforce Pardot with the information collected on our websites / landing pages.

Based on your interests stored in your profile and taking into account your selected product categories, we will then send you further content in the form of further e-mails at regular intervals. As soon as we come to the conclusion that your interest in one of our products is very high, we hand over your contact to the responsible sales managers of the group company for the relevant product and transfer your data (if available: first and last name, e-mail address, company, country, department, industry, telephone number, score, initial campaign with which you have registered / source campaign) in our group-wide CRM system of the provider Salesforce Inc. For more information about our CRM system, please refer to section “a) CRM System Salesforce Sales Cloud”. Our sales manager of the responsible group company will then contact you and will only use the contact details and thus contact routes provided by you. We are supported in our decision by our marketing automation system Salesforce Pardot; if you have agreed to an analysis of your user behaviour on our websites or landing pages, we measure your user behaviour and activity on our product recommendations. As soon as you download more content, spend more time on individual landing pages of campaigns or products, and watch our product videos, your score will increase in your profile. As soon as a certain threshold value is reached, we receive a notification and forward your contact internally to the responsible sales managers. Regardless of our opinion, you can contact us at any time via one of our contact channels (e-mail, contact form, etc.) to receive further information or an offer on one of our products. 

The legal basis for the processing of the data transmitted based on your consent for the sending of group-wide information, for the temporary storage of the data in profiles for the evaluation of success for targeted customer contact as well as the transfer of qualified contacts to the responsible sales manager, is Article 6(1)(a) GDPR. We are interested in direct advertising and evaluating the success of your response to the content to be able to successfully assert ourselves in the market.

The processing of personal data by us and our service provider Salesforce Pardot as well as the creation of profiles serve to send the requested materials or information and to target our customer approach and presentation of products and to evaluate the success of our campaigns. The statistics obtained about your use and reaction to our customer approaches as well as your interests help us to better align our offers with you. This is also the necessary legitimate interest in the processing of the data.

Your data is stored on hosted servers of Salesforce Pardot. Salesforce Pardot uses this information exclusively for the stated purposes on our behalf. Salesforce Pardot does not use the data independently, e.g. for contact purposes.

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For the personal data that you have provided to us for the purpose of group-wide targeted customer contact and presentation of products and that are stored in your profile, this is the case if the consent to processing has been revoked. After your revocation, all stored data in our systems will be deleted.

You have the option at any time to revoke your consent to the processing of personal data in a profile for the group-wide targeted customer approach and presentation of products. You can unsubscribe at any time by providing your data (e-mail address and first and last name) via an e-mail message ([email protected]) to us or via a dedicated unsubscribe link in the footer of the respective e-mail. Unfortunately, it is not possible to revoke your consent to the performance measurement independently.

Use of Pardot Analytics to analyse your usage behaviour

On our landing page we have integrated the web analysis service Pardot Analytics, a service offered by Salesforce Inc, Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105, USA (hereinafter "Pardot Analytics"). Pardot Analytics uses cookies to analyse the user behaviour of our visitors to the landing page if you have agreed to the analysis via our consent banners. Cookies are text files that are stored on your computer or your used device (tablet, smartphone, etc.) and that enable an analysis of your use of our website (see "Use of cookies"). A list of the cookies used by Pardot Analytics, including the purpose and validity period, can be found at any time in our consent banner. The setting of cookies takes place exclusively based on your consent.

Pardot Analytics uses Google Analytics, a service offered by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter “Google”) as a sub-service provider, to analyse both its own functions and functions of a web analysis service used. 

The information generated by the cookie about your use of the landing page (including your IP address) is transmitted by Pardot Analytics to its own servers as well as to servers of Google and stored there. It is not excluded that the data processing is carried out outside the scope of EU law. Pardot Analytics and Google will use this information to evaluate your use of the website, to compile reports on website activity for website operators and to provide other services related to website activity and internet usage. Google may also transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google. Due to the activation of IP anonymisation on our landing page, your IP address will be shortened by Google within Member States of the European Union or in other Contracting States of the Agreement on the European Economic Area before transmission to exclude a direct personal reference. Outside the European Union or the European Economic Area, IP anonymisation is not set up by Google on their system. For more information about how Google Analytics handles user data, see Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=en. 

The legal basis for the processing of personal data using cookies for statistical purposes is based on your consent given via our consent banners or the data protection settings Article 6(1)(a) GDPR. Statistical cookies are set in accordance with Section 25(1) TDDDG.

The information obtained using Pardot Analytics is used in particular to better understand the use of our landing page and to improve its content, functionality and traceability. As the operator of the landing page, we have an interest in analysing your user behaviour to improve both our offer and its performance. We use Pardot Analytics' information to better tailor our communications to our customers' needs. 

If you have consented to the group-wide use of your data (see also section "Processing of data within the Südzucker Group for targeted customer approach and presentation of products of the companies of the Südzucker Group", Pardot Analytics enriches your existing profile in Salesforce Pardot with information about the usage behaviour on our landing page, in order to send you targeted offers and information about our products within the Südzucker Group. 

The data will be deleted as soon as it is no longer needed for our purposes, or you have revoked your consent to the use of your data for analysis purposes via our privacy settings. Sessions are terminated after 30 minutes without activity and campaigns after six months. The time limit for campaigns can be a maximum of two years. Subsequently, all data and information collected will be deleted on the system side. 

Note: You can object to the collection, storage and use of information by Google at any time with effect for the future via the following methods across websites: You can object by installing the deactivation add-on provided by Google. For more information, visit https://tools.google.com/dlpage/gaoptout?hl=en. Alternatively, you can prevent the storage of cookies set by Google by setting your browser software accordingly.

You can revoke your consent to the collection of your data by Pardot Analytics via our consent banner at any time for the future by disabling the tick under "Statistics" cluster in our privacy settings. However, we would like to point out that if you deactivate or opt-out, you may not be able to fully use all functions of the landing page.

Use of Crazy Egg for anonymous analysis of your usage behaviour

On some of our landing pages we use the web analysis service Crazy Egg, offered by Crazy Egg, Inc., 16220 E. Ridgeview Lane, La Mirada CA 90638, USA (hereinafter “Crazy Egg”). Through the use of Crazy Egg we can understand how you move on our landing page and what you have viewed or clicked on in individual cases. The tracked usage behaviour is fed to a systemic and anonymous evaluation, i.e. the user affected by the evaluation is not identifiable. The selection of users whose behaviour is subject to evaluation is also subject to a random principle. By using Crazy Egg, we get valuable information to make our website faster and more customer-friendly.

Crazy Egg uses so-called cookies, text files that are stored on your computer and that allow an analysis of your use of the website (see section "Use of cookies"). A list of the cookies used by Crazy Egg, including purpose and validity period, can be found at any time in our consent banner. The setting of cookies is based on your consent.

Crazy Egg processes the following information:

  • IP address in anonymised form (the IP address is anonymised by Crazy Egg at the time of collection);
  • Seen websites and patterns of movement on these pages;
  • Number and position of clicks on links;
  • Browser type and version;
  • Screen size of the used device.

The information generated by the cookies or Crazy Egg about the user is transmitted anonymously on Crazy Egg servers hosted in the USA and stored there.

With Crazy Egg we have concluded the data processing agreement required by data protection law pursuant to Article 28 GDPR in connection with the EU standard contractual clauses, in which Crazy Egg undertakes to protect the data of our users and to process it in accordance with the applicable data protection regulations. Crazy Egg uses the collected data exclusively on our behalf, for the purpose specified here. A further use of the data by Crazy Egg as well as disclosure to third parties does not take place. No storage of the data collected by Crazy Egg together with other personal data of our website visitors takes place.

For more information about privacy and Crazy Egg, please visit Crazy Egg's privacy policy at http://www.crazyegg.com/privacy.

We use Crazy Egg based on your consent given to us via our consent banner (Article 6(1)(1)(a) GDPR):

  • to carry out aggregated data analyses on user activities on our landing page;
  • to statistically record the use of our website and to evaluate it for the purpose of optimising our offer for you;
  • for the continuous improvement and management of our offer.

You can revoke your consent to data processing by Crazy Egg at any time for the future via our consent banner. By changing the selection in the "Statistics" cluster in the consent banner, you prevent the Crazy Egg technical measures from being carried out and Crazy Egg cookies from being set. Alternatively, you can object to the processing of your data by Crazy Egg directly at the provider at http://www.crazyegg.com/opt-out or prevent the storage of cookies by a corresponding setting in your browser.

Advertising and marketing service LinkedIn Insights Tag (LinkedIn Pixel)

We use the online advertising program "LinkedIn Campaign Manager" on individual landing pages and the Insight Tag (hereinafter "LinkedIn Insights Tag") as part of the LinkedIn Campaign Manager. LinkedIn Insights Tag in the LinkedIn Campaign Manager is an analytics service provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (hereinafter “LinkedIn”). After you have given your consent via our consent banners, we will include a LinkedIn Insights tag on our landing page and enable LinkedIn to evaluate your surfing behaviour. If you click on an ad that we have placed in LinkedIn, cookies for conversion tracking by LinkedIn are stored on your respective device. The cookies set by the integration of the LinkedIn Insights Tag are described in our consent banner under the cluster "Targeting" including the respective validity period. 

If you visit our landing page and the cookie has not yet expired, LinkedIn can recognise that you clicked on the ad on LinkedIn and were redirected to this page. Every LinkedIn Campaign Manager customer gets a different day. Thus, there is no possibility that cookies can be tracked via the websites of LinkedIn campaign manager customers. 

The information collected using the LinkedIn Insights Tag is used to compile conversion statistics. Here, customers learn the total number of users who clicked on their ad and were redirected to a page with a LinkedIn Insights tag. For more information and LinkedIn’s Privacy Statement, please visit https://www.linkedin.com/legal/privacy-policy. 

It is important for us to make our campaigns and our respective landing page attractive and to increase the interaction with our visitors with the help of the service. We use our advertising and marketing services, in particular the use of the LinkedIn Insights Tag, for our conversion tracking and remarketing. With the help of the LinkedIn Insights Tag, a cost-benefit analysis of posted ads as well as the optimisation of our ads on LinkedIn is possible.  The processing, i.e. the activation of the pixel as well as the setting and evaluation of information stored in targeting cookies, takes place exclusively based on your consent given via the consent banner (Article 6(1)(a) GDPR) and Section 25(1) TDDDG. 

You can revoke your consent to use of the LinkedIn Insights Tag at any time for the future by the following means: 

You can disable the storage of cookies by setting the appropriate settings or set your browser so that you are notified as soon as cookies are set. To do this, you need to change the necessary settings in the browser preferences or options menus. We would like to point out that some areas of our landing page may not or may no longer function properly, i.e. only to a limited extent. 

You can revoke your consent to data processing by LinkedIn Insight Tag via our consent banner at any time for the future. By changing the selection in the "Targeting" cluster in the consent banner, you prevent the technical measures LinkedIn Insights Tag from being carried out and cookies from LinkedIn from being set. 

Fraud prevention – Using Google reCAPTCHA 

Through our service provider Salesforce, we use the Google reCAPTCHA service to check and prevent interactions on our website through automated access, e.g. by means of so-called bots, on isolated landing pages as well as to secure the entries of our contact forms. This is a service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter only referred to as "Google". 

Google is certified under the Data Privacy Framework. The proof of this can be found in the list of the U.S. companies that are voluntarily certified hereunder.

Through this service, Google can determine from which website a request is sent and from which IP address you use the so-called reCAPTCHA input box. In addition to your IP address, Google may collect additional information that is necessary for offering and guaranteeing this service. Google is responsible for data processing. For this purpose, Google offers further information on the general handling of your user data at https://policies.google.com/privacy.

Google may use so-called cookies, text files that are stored on your computer (see section “Use of cookies”) to collect information. A list of cookies used by Google, including purpose and validity period, can be found at any time in our consent banner.

The legal basis for this is Article 6(1)(1)(f) GDPR. Our legitimate interest lies in the security of our website as well as in the prevention of unwanted, automated access in the form of spam or similar and thus also serves the security of a visitor to our landing page.

The legal basis for the use of Google reCAPTCHA and the processing operations required for this is Article 6(1)(1)(f) GDPR:

  • Verify and eliminate interactions through automated access.

You can object to the collection, storage and use of information by Google at any time with effect for the future via the opt-out link https://adssettings.google.com/authenticated or you can unsubscribe from the Google service.

c) Digital contact data collection from trade fair visitors (Integrate)

Description and scope of data processing

We currently work with the cloud-based application solution "Integrate App" of the provider In-tegrate (Europe) Ltd, Piano House, 9 Brighton Terrace, Brixton, London SW9 8DJ, UK, United Kingdom (hereinafter "Integrate") for the digital collection of contact data of our trade fair visitors (including employees, customers and visitors). The order processing agreement required under data protection law was concluded with the provider Integrate using the EU standard contractual clauses. According to this agreement, Integrate undertakes to ensure the necessary protection of your data and to process it in accordance with the applicable data protection provisions exclusively on our behalf and in accordance with our instructions. For further in-formation on Integrate, please refer to https://www.integrate.com/. 

As a licensee of Integrate, Beneo GmbH acts as a service provider for the companies of the Südzucker Group in order to be able to offer the technical solution of the Integrate app to these companies. The respective Südzucker company is free to decide whether or not to use the service. On our behalf, all personal data is stored or processed on cloud servers hosted by Integrate with the provider Amazon Web Services (in short "AWS") exclusively within the EU / EEA.

Integrate enables us to digitally record the contact data of our trade fair visitors at our trade fair stands via the Integrate app. To do this, we can scan your visitor card using the Integrate app and then read it out using text recognition, or your data can be entered manually into the Integrate app by our sales staff in your presence. In rare cases, you may also enter your contact details yourself at our exhibition stands. We process the following categories of personal data in Integrate:

  • Salutation, first, middle and last name, job title,
  • Contact details (e-mail address, telephone number, language),
  • Professional data (company, position, department, address),
  • Products, applications and technologies of interest (campaign name, product, date of collec-tion)
  • Contact type (customer, grower, service provider, interested party, existing customer, new customer).

If you are interested in one or more of our Südzucker Group products, we can send you further information and information brochures on the products by e-mail on request. To do this, we record your product interests in the Integrate app and send you the information directly to the e-mail address you provide.

When requesting your data and interests in our products, you also have the option of subscribing to one of our newsletters. The newsletter, the specific purposes and the responsible body (Südzucker Group company) of the newsletter are made transparent when you register. Registration for the e-mail newsletter is done via a double-opt-in procedure set up by the system. This means that after you have entered your details at our stand, you will receive an e-mail with a link to the address you have given in order to start the registration process. After registration, you will receive a confirmation e-mail at the specified address. This confirmation e-mail serves to authorise the owner of the specified e-mail address to receive the newsletter. The e-mail address will only be included in the distribution list after confirmation.

If you have agreed to further contact by a sales employee of the companies of the Südzucker Group, the data collected from you will be transferred directly to our CRM system via interface (for further information on the processing of your data in our CRM system, please refer to our section "a) CRM system Salesforce Sales Cloud (Salesforce)"). Your contact is automatically assigned to the responsible sales employee of the Südzucker Group companies by means of rules stored in the system (e.g. country & product interests). A corresponding authorisation concept has been set up. The following data is transferred to our CRM system:

  • Source: Lead source and campaign 
  • Contact details: Salutation, first, middle and last name, email address, telephone number for contact by the responsible Sales Manager, 
  • Company information: Address, website, industry name, department, position, language, cus-tomer type for prequalification by the relevant Sales Manager,
  • Expressed product interest as well as product information / information flyers sent. 

The responsible sales manager will contact you after your visit to the fair to answer your question about our products in the Südzucker Group. 

Legal basis for data processing

The collection and processing of your personal data at trade fairs through direct contact by scanning your badge, business card or manual entry of the data in the Integrate app or through your direct entry of your data in the app, the sending of further information and the transfer to our CRM system, among other things, for contacting the respective sales manager is based on your consent in accordance with Art. 6 Para. 1 lit. a) DSGVO.

If the purpose of the contact by our customer or interested party is to conclude a contract for the purchase of Südzucker Group products, the legal basis for the processing is Art. 6 (1) (b) DSGVO.

Purpose of data processing

We process your personal data using Integrate's application for digitally recording contacts at trade fairs and for text recognition and text categorisation in the form of a cloud solution. Via Integrate, we also send the further information you have requested on our products and transfer your identified data to our CRM system (see also section "a) CRM system Salesforce Sales Cloud (Salesforce)") for contacting by the responsible sales manager of the Südzucker Group companies.

Duration of storage / deletion of your data

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data collected for the above-mentioned purposes and processed in Integrate as well as in our CRM system, this is the case if the respective addressee has ob-jected to the processing. Storage may also take place if this has been provided for by the Eu-ropean or national legislator in Union regulations, laws or other provisions to which the controller is subject. Blocking to further data processing or deletion of data will also take place if a legally prescribed storage period expires, unless there is a necessity for further storage of the data for the fulfilment of a contract.

For the personal data processed in Integrate, this is the case when the respective campaign to download the information material has ended. All data collected will then be deleted by the system. If you have consented to further processing within the Südzucker Group by the associated sales manager, the collected data will remain stored in our systems (Salesforce Sales Cloud) until you revoke your consent. For further information on the system-side deletion of personal data and the storage periods in the CRM system, please refer to our explanations above in section a) CRM system Salesforce Sales Cloud (Salesforce).

 

3. Rights of interested parties

We would like to point out that you, as a data subject within the scope of processing personal data in our CRM system within the meaning of GDPR, have the following rights towards the responsible bodies and the data controller. 

Right of Access and right to Rectification
You can request information about the data stored by you in our CRM system and provided to us at any time using the contact details below. We will not change your data at any time, unless you request this in writing, by e-mail to the e-mail address below.

Right to Erasure
The personal data of the data subject will be deleted as soon as the purpose of storage ceases to apply. However, storage may also take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. If a storage period prescribed by the aforementioned standards expires, the data will be deleted unless there is a need for further storage of the data for the conclusion or fulfilment of a contract. For further information on the duration of storage, please refer to Section 2. You can submit a written request to delete your data at any time by e-mail.

More information about your other rights of interest within the meaning of GDPR can be found in our General Privacy Policy of Südzucker AG at https://www.suedzuckergroup.com/en/privacy-policy. 

4. Availability and changes 

You can save or print this Privacy Notice by using the corresponding functions of your browser. In the event of discrepancies between the foreign language and the German translation, the original German text shall apply.

We reserve the right to change our Privacy Notice from time to time and to adapt it to new legal requirements or developments. We recommend that you inform yourself about the latest Privacy Notice occasionally and before you are visiting one of our landing pages as part of a campaign.

5. Contact details of the responsible agencies and the Data Protection Officer

As joint responsible bodies, we are happy to answer any further questions you may have about data protection and the processing of your data as part of our Group-wide CRM system. If you have any questions, please contact the responsible sales representative or the data protection officer of the respective company of the Südzucker Group. Alternatively, you can send your request to the following address:

Südzucker AG
Data Protection Officer
Maximilianstraße 10
68165 Mannheim

Email: [email protected]. 

Last update: October 2023

Contact