Privacy Policy

This “Privacy Policy” (this “Policy”) explains how and why your personal data is processed by Ritter Sport Chocolate UK Ltd of Pinnacle 67 Albion Street, 18th Floor, Leeds, England, LS1 5AA (also referred to as “Ritter Sport UK”, “we”, “our” and “us”) when we provide you products and/or services, when you use our websites and other digital platforms, and when we send you marketing communications.

Ritter Sport UK is a “controller” in relation to its use of your personal data. This is a legal term – it means that we make decisions about how and why we use your personal data and, because of this, we are responsible for making sure it is used in accordance with applicable data protection laws. Your privacy is important to us. It is Ritter Sport UK’s policy to respect your privacy regarding any information we may collect from you across our website, www.ritter-sport.co.uk/ (the “Website”), and other sites we own and operate.

 

1. Information we collect

We collect your personal data from various sources. Below we set out the different types of personal data that we collect through the Website and selected other sources.

Through your use of the Website:

Log data

When you visit our Website, our servers automatically log the standard data provided by your web browser. This will ordinarily include your computer’s Internet Protocol (IP) address, your browser type and version, the pages you visit, the time and date of your visit, the time spent on each page, and other details.

Device data

We also collect data about the device you’re using to access our Website. This data includes the device type, operating system, unique device identifiers, device settings, and geo-location data. What we collect can depend on the individual settings of your device and software. We recommend checking the policies of your device manufacturer or software provider to learn what information they make available to us.

Personal information

We collect personal information, such as your:

  • Name
  • Email
  • Social media profiles
  • Date of birth
  • Phone/mobile number
  • Home/Mailing address
  • Website address

When you enter a competition with us:

Information which is collected from entrants in person at our roadshows

  • Any entry video required for the competition
  • Full name
  • Contact telephone number
  • Email address
  • City of residence
  • If a valid driver’s license held (where required)
  • If a valid passport is held (where required)
  • If you have agreed with the competition T&Cs (as shown on the Website)

Information which is collected from entrants on the Ritter Sport UK Website

  • Any entry video required for the competition
  • First name
  • Last name
  • Contact telephone number
  • Email address
  • Age
  • Instagram handle 
  • Twitter handle 
  • If you have agreed with the competition T&Cs (as shown on the Website)

If you are a winner of one of our competitions or prize draws we may need to collect additional personal data from you in order to facilitate/provide prizes to you. Further details will be provided to you in a separate winners’ privacy notice and are also available on request using the contact details below.

2. How we use your information

We use your personal data for a number of different purposes in connection with your use of the Website and the purposes applicable to you will vary according to your interaction with us, but will include the some or all of the following purposes:

  • to enable you to customise or personalise your experience of our Website;
  • to attribute any content (eg. posts and comments) you submit that we publish on our Website;
  • to process any transactional or ongoing payments;
  • to deliver products and/or services to you;
  • to enable you to access and use our Website, associated applications and associated social media platforms;
  • to contact and communicate with you;
  • for internal record keeping and administrative purposes;
  • for analytics, market research and business development, including to operate and improve our Website, associated applications and associated social media platforms;
  • to run competitions and/or offer additional benefits to you, to facilitate your entry into the prize draws and allow us to determine the winning entries;
  • for advertising and marketing, including to send you promotional information about our products and services and information about third parties that we consider may be of interest to you;
  • if we or our assets are acquired, or in the unlikely event that we go out of business or enter bankruptcy, we would include your data among the assets transferred to any parties who acquire us (or may be required to include your information  to respond to queries from the prospective buyer or merging organization); and
  • to comply with our legal obligations and resolve any disputes that we may have.

3. Legal bases for processing

We will process your personal information lawfully, fairly and in a transparent manner. We collect and process information about you only where we have legal bases for doing so.

These legal bases depend on the services you use and how you use them, meaning we collect and use your information only where:

  • it’s necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract (for example, when we provide a service you request from us);
  • it satisfies a legitimate interest (which is not overridden by your data protection interests), such as for research and development, to market and promote our services, and to protect our legal rights and interests;
  • you give us consent to do so for a specific purpose (for example, you might consent to us sending you our newsletter); or
  • we need to process your data to comply with a legal obligation.

Where you consent to our use of information about you for a specific purpose, you have the right to change your mind at any time (but this will not affect any processing that has already taken place).

We don’t keep personal information for longer than is necessary for the purposes for which we are processing it.  The period we retain it will depend on a number of factors, including:

  • any laws or regulations that we are required to follow;
  • whether we are in a legal or other type of dispute with each other or any third party;
  • the type of information that we hold about you; and
  • whether we are asked by you or a regulatory authority to keep your personal data for a valid reason.
  • the period of time during which any claims or proceedings can be brought against us to defend against any such claims.

For more information on our data retention practices, please contact r.cairney@ritter-sport.co.uk.

While we retain this information, we will protect it within commercially acceptable means to prevent loss and theft, as well as unauthorised access, disclosure, copying, use or modification. That said, we advise that no method of electronic transmission or storage is 100% secure and cannot guarantee absolute data security.

4. Disclosure of personal information to third parties

From time to time we will disclose personal information to:

  • third party service providers for the purpose of enabling them to provide their services, including (without limitation) IT service providers, data storage, hosting and server providers, ad networks, analytics, error loggers, debt collectors, maintenance or problem-solving providers, marketing or advertising providers, professional advisors and payment systems operators;
  • our employees, contractors and/or related entities;
  • sponsors or promoters of any competition we run;
  • third parties, including agents or sub-contractors, who assist us in providing information, products, services or direct marketing to you;
  • third parties to collect and process data on our behalf (for example, Noonah Marketing Limited provides the video entry mechanism you might use if you enter the #PositivityFuel Adventure competition at one of our #PositivityFuel Roadshows and Creative Race who administer competitions on our behalf); and
  • We are part of the Ritter group, which includes a number of companies and operations internationally. Therefore, we will need to share your personal data with other companies in the Ritter group for our general business management purposes and, in some cases, to meet our customer needs where providing services across branches/locations and/or for authorisations/approvals with relevant decision makers, reporting and where systems and services are provided on a shared basis. Access rights between members of the Ritter group are limited and granted only on a need to know basis, depending on job functions and roles. Where any Ritter group companies process your personal data on our behalf (as our processor), we will make sure that they have appropriate security standards in place to make sure your personal data is protected.

5. International transfers of personal information

The personal information we collect is stored and processed in United Kingdom, or where we or our partners, affiliates and third-party providers maintain facilities. We operate internationally and have a German headquarters who we share personal data with in connection with the processing purposes outlined above, and in order to centralize certain processes across our group. 

We will ensure that any transfer of personal information from countries in the European Economic Area (EEA) to countries outside the EEA will be protected by appropriate safeguards, for example by using standard data protection clauses approved by the European Commission, or the use of binding corporate rules or other legally accepted means (for example, where that country ensures an adequate level of protection for your personal data) .

Where we transfer personal information from a non-EEA country to another country, you acknowledge that third parties in other jurisdictions may not be subject to similar data protection laws to the ones in our jurisdiction. There are risks if any such third party engages in any act or practice that would contravene the data privacy laws in our jurisdiction and this might mean that you will not be able to seek redress under our jurisdiction’s privacy laws.

6. Your rights and controlling your personal information

Restrict: You may choose to restrict the collection or use of your personal information. If you have previously agreed to us using your personal information for direct marketing purposes, you may change your mind at any time by contacting us using the details below. If you ask us to restrict or limit how we process your personal information, we will let you know how the restriction affects your use of our Website or products and services.

Access and data portability: You may request details of the personal information that we hold about you. You may request a copy of the personal information we hold about you. Where possible, we will provide this information in CSV format or other easily readable machine format. You may request that we erase the personal information we hold about you at any time. You may also request that we transfer this personal information to another third party.

Correction: If you believe that any information we hold about you is inaccurate, out of date, incomplete, irrelevant or misleading, please contact us using the details below. We will take reasonable steps to correct any information found to be inaccurate, incomplete, misleading or out of date.

Notification of data breaches: We will comply laws applicable to us in respect of any data breach.

Complaints: If you believe that we have breached a relevant data protection law and wish to make a complaint, please contact us using the details below and provide us with full details of the alleged breach. We will promptly investigate your complaint and respond to you, in writing, setting out the outcome of our investigation and the steps we will take to deal with your complaint. You also have the right to contact a regulatory body or data protection authority in relation to your complaint.

Unsubscribe: To unsubscribe from our e-mail database or opt-out of communications (including marketing communications), please contact us using the details below or opt-out using the opt-out facilities provided in the communication.

7. Cookies

We use “cookies” to collect information about you and your activity across our Website. A cookie is a small piece of data that our Website stores on your computer, and accesses each time you visit, so we can understand how you use our Website. This helps us serve you content based on preferences you have specified. Please refer to our Cookie Policy for more information.

8. Limits of our policy

Our Website may link to external sites that are not operated by us. Please be aware that we have no control over the content and policies of those sites, and cannot accept responsibility or liability for their respective privacy practices.

9. Changes to this policy

At our discretion, we may change our privacy policy to reflect current acceptable practices. We will take reasonable steps to let users know about material changes via our website. Your continued use of this Website after any changes to this policy will be regarded as acceptance of our practices around privacy and personal information.

Ritter Sport UK Data Controller
Waqaas Akram
07554445575

Ritter Sport UK Data Protection Officer
Waqaas Akram
07554445575

For any queries or further information in relation to this Policy, please contact either r.cairney@ritter-sport.co.uk or k.clark@ritter-sport.co.uk

This policy is effective as of  October 2019.