Privacy policy for www.business-partner.kaufland.hr/en

The following privacy policy applies to you when you visit our website at www.business-partner.kaufland.hr/en. The statutory basis is, in particular, the EU General Data Protection Regulation (GDPR). 

1. Name and contact details of the controller

Kaufland Hrvatska k.d.

Donje Svetice 14

10 000 Zagreb

Telefon +385 1 2353-555

E-Mail: bpp.support@kaufland.com   

Data processed when you visit our websites

The information contained in this section applies equally to our websites as well as to the associated sub-domains and sub-pages. At present, this includes:

  • www.stackit.de
  • www.stackit.cloud

Purposes and legal basis of processing

When you visit our websites, log files are generated containing the following information:

  • the website/application from which you accessed our site (referrer URL)
  • the IP address;
  • the date and time of access;
  • the client request;
  • the http response code;
  • the data volume transmitted;
  • the name and URL of the requested file;
  • information about the type of browser and operating system you are using;
  • the name of your Internet service provider

The legal basis for the processing is Article 6 (1) (f) GDPR. Our legitimate interest arises from our interest in protecting our systems and preventing improper and/or fraudulent activity each time that a user accesses this website.

Where processing of the aforementioned data is necessary for preparing or performing a contractual relationship, we process your data on the basis of Article 6(1)(b) GDPR.

Recipients/categories of recipient

As a rule, we do not transfer the data to third parties outside Kaufland Group. In exceptional cases, we will have a processor process the data on our behalf. Such processors are carefully selected and bound by contract in accordance with Article 28 GDPR.

Obligation to provide your data

You are under no statutory or contractual obligation to provide personal data to us. However, such data will be processed for technical reasons as soon as you access our site. The only way to prevent your data from being processed is to stop using our website.

Storage time

We store the aforementioned data for a period of seven days.

2. Cookies

Purposes of the processing/legal bases:

We use cookies on the website https://business-partner.kaufland.hr/en/Cookies store information on your end device (laptop, tablet, smartphone, etc.) when you visit our websites. Cookies do not cause any harm to your end device, nor do they contain any viruses, trojans or other malware. The cookie stores certain information that results in connection with the specific end device deployed. This does not, however, mean that we will immediately become aware of your identity. 

Cookies and the other similar technologies used to process usage data are deployed for the following purposes, depending on the categories of cookie/other technologies:

  • Technically necessary: these are cookies and similar technologies without which you cannot use our services (e.g., for the correct display of our website/functions requested by you, to record you signing in, etc.). A list of all technically necessary technologies/cookies in use can be found here
    Technically necessary cookies and other technologies categorized as "technically necessary" are used on the basis of section 25 (2) no. 2 of the German Telecommunications and Telemedia Data Protection Act (Telekommunikation-Telemedien-Datenschutz-Gesetz – TTDSG).
  • Preferences: using these methods, we can take into account your actual or perceived preferences to enhance the user experience. For example, we can use your settings to display our website in a language relevant to you. They also mean we can avoid displaying products that may not be available in your region. A list of all preference technologies/cookies in use can be found here
    Cookies and other technologies for the purposes of preferences are used on the basis of section 25 (1) TTDSG. Data is subsequently processed based on your consent pursuant to Article 6(1) sentence 1(a) GDPR.
  • Statistics: These methods enable us to tailor the design of our services by producing pseudonymized statistics about how they are used. For example, we can use them to determine how better to adapt our websites to user habits. A list of all statistics technologies/cookies in use can be found here
    Cookies and other technologies for the purposes of statistics are used on the basis of section 25 (1) TTDSG. Data is subsequently processed based on your consent pursuant to Article 6(1) sentence 1(a) GDPR.
  • Marketing: these enable us to display relevant advertising content based on an analysis of your pseudonymized usage behavior. Your usage behavior can also be tracked over various websites, browsers or devices via a user ID (unique identifier).
    Cookies and other technologies for the purposes of marketing are used on the basis of section 25 (1) TTDSG. Data is subsequently processed based on your consent pursuant to Article 6(1) sentence 1(a) GDPR.

Depending on the purpose, the use of cookies and similar technologies to process usage data involves processing the following types of personal data in particular:

Technically necessary:

  • user inputs, in order to remember inputs across multiple sub-pages;
  • Authentication data to identify a user after they have logged on so that authorized content (e.g., in the business partner account) can be accessed on subsequent visits; 
  • Security-related events (e.g., identifying repeat failed log-in attempts); 
  • Data to play back multimedia content (e.g., to play (product) videos of your choice). 

Preferences:

  • Settings to customize the user interface that are not linked to a persistent identifier (e.g., active language selection). 

Statistics:

  • Pseudonymized usage profiles containing information on the use of our websites. These contain in particular:
    • browser type/browser version;
    • operating system used;
    • referrer URL (i.e., the previously visited page);
    • host name of the accessing computer (IP address);
    • time of the server request;
    • individual user ID; and
    • events triggered on the website (web browsing behavior).
  • The IP address is routinely anonymized, which in principle means it is no longer possible to identify you.
  • We only store the user ID together with other data you provide (e.g., name, e-mail address) if you give us separate express permission to do so. In itself, we cannot use the user ID to identify you.

Marketing:

  • Pseudonymized usage profiles containing information on the use of our websites. These contain in particular:
    • IP address;
    • individual user ID;
    • products potentially of interest;
    • events triggered on the website (web browsing behavior). 
  • IP addresses are routinely anonymized, which in principle means it is no longer possible to identify you.
  • We only store the user ID together with other data you provide (e.g., name, e-mail address) if you give us separate express permission to do so. In itself, we cannot use the user ID to identify you. 

You may withdraw/modify your consent at any time with effect for the future without this affecting the lawfulness of the processing based on consent before its withdrawal. Click here.  to make your selection. Simply uncheck the respective box to withdraw your consent for the given data processing purpose.

Recipients/Categories of Recipients:

When using cookies and similar technologies to process usage data, we may on occasion retain specialized service providers, particularly from the field of online marketing, to process data. They process your data on our behalf as processors. Each has been carefully selected and bound by contract in accordance with Article 28 GDPR. All of the companies listed as service providers in our cookie policy act as processors on our behalf, to the extent they are not named as (joint) controllers in this section.

Storage Time/Criteria for Determining Storage Time:

For information on the duration of storage for cookies, see our cookie policy.

If "persistent" is entered in the "expiration" column, the cookie will be stored permanently until the corresponding consent is withdrawn.

If "session" is entered in the "expiration" column, the cookie will be stored for the duration of your visit to the site. The cookies saved locally are deleted as soon as you end the session or close your browser.

3. Web tracking using Adobe Analytics

Purpose of processing/legal basis: This website uses the Adobe Analytics web analytics service to analyze user access to the website. The data is processed on the basis of your consent (Article 6(1)(a) GDPR and section 25 (1) TTDSG). We use information generated during your use of our web pages (namely, the page from which the file was requested, the name of the file, the date and time of the request, the volume of data transferred, the access status such as "file transferred", "file not found", etc., a description of the type of web browser used and an anonymized IP address – truncated by the last three digits) for purposes of user navigation, statistical analyses, adapting our web pages to your needs, displaying ads on the website (displaying product information on the relevant buttons on this website that reflect your click behavior on business-partner.kaufland.hr/en/) and to identify and protect against abnormal website traffic. For this purpose, we use cookies that control your connection to our web pages during the session. A permanent cookie is set in your web browser by our provider Adobe Systems GmbH to create a pseudonymized user profile. This permanent cookie makes it possible to recognize your browser the next time you visit our website. It is used for advertising, market research and tailoring our website to users.

The information stored on the Adobe servers cannot be used to directly identify you because Adobe Analytics is used with the settings "Before Geo-Lookup: Replace visitor's last IP octet with 0" and "Obfuscate IP-Removed". The setting "Before Geo-Lookup: Replace visitor's last IP octet with 0" ensures that the IP address is anonymized before geolocation by replacing the last octet of the IP address with zeros. The user's approximate location is added to the tracking packet, which still contains the full IP address, for purposes of statistical analysis. Before the tracking packet is stored, the IP address is then replaced with a single fixed IP address referred to as a generic IP address if the "Obfuscate IP-Removed" setting is configured. This means that the IP address is no longer included in a stored data record.

The data collected using Adobe Analytics technology is not used to personally identify visitors to this website. Nor is the usage data stored in the cookie merged with personal data about the bearer of the pseudonym.

To prevent general tracking by Adobe, simply click on this Link (or in section 9.12 below) and confirm your objection on the page it redirects you to. In this case, Adobe will place a permanent "Do not track" cookie in your browser so that the Adobe technology is no longer used.

4. Options for Withdrawing Consent for Cookies and Tracking Technologies Used

If the data processing is carried out on the basis of consent granted under section 25 (1) TTDSG or Article 6(1)(1a) GDPR, you may withdraw that consent at any time with effect for the future without this affecting the lawfulness of the previous processing.

Your consent relates to the following domains: website www.business-partner.kaufland.hr/en/.

5. Rights of data subjects

Pursuant to Article 15(1) of the GDPR, you have the right to request information, free of charge, on the personal data stored about you at Kaufland.

If the statutory requirements are met, you also have a right to rectification (Article 16 GDPR), erasure (Article 17 GDPR) and restriction of processing (Article 18 GDPR) of your personal data.

If the basis of processing is Article 6(1)(e) or (f) GDPR, you have a right to object under Article 21 GDPR. If you object to processing, your data will no longer be processed thereafter, unless the controller demonstrates compelling legitimate grounds for the processing which override the interests of the data subject in the objection.

If you have provided the processed data yourself, you have a right to data portability under Article 20 GDPR.

If the data processing is carried out on the basis of consent granted under Article 6(1)(a) or Article 9(2)(a) GDPR, you may withdraw that consent at any time with effect for the future without this affecting the lawfulness of the previous processing.

In the above-mentioned cases, or if you have questions or complaints, please write to or e-mail the data protection officer.

You also have a right to lodge a complaint with a data protection supervisory authority. The data protection supervisory authority located in the state in which you live or where the controller is domiciled has jurisdiction.

6. Data Protection Officer contact information: 

E-mail: gdpr@kaufland.hr

Adresa:

Kaufland Hrvatska k.d.

Službenik za zaštitu podataka

Donje Svetice 14

10 000 Zagreb