Last revision date: September 2021
Coca-Cola Europacific Partners plc and its subsidiaries and affiliates ("CCEP", “we”) are committed to respecting your privacy and to manage your personal data fairly and safely. With this Privacy Notice, we would like to inform you why and how we may process your personal data when you participate in one of our marketing campaigns. For more information about CCEP and our general privacy notice, please visit our website www.cocacolaep.com or refer to the Contact us section below.
The entity responsible for the processing of data on this e-commerce platform www.yourcoca-cola.co.uk is Coca-Cola Europacific Partners plc, whose head office is located 2 Bakers Rd, Uxbridge UB8 1EZ, United Kingdom (hereinafter, "CCEP" or "we"). Our main business is bottling, selling and marketing Coca-Cola products.
The entity responsible for processing your personal data in relation to the purchase order and delivery of the products is The Hut Group, whose head office is located5th Floor, Voyager House, Manchester Airport, Manchester, M90 3DQ (hereinafter, "THG").
In case you provide your consent, your personal data will also be shared with The Coca-Cola Company whose head office is located 1A Wimpole St, Marylebone, London W1G 0EA, United Kingdom (hereinafter, " TCCC"). TCCC will use your personal data for the purpose of marketing communications, personalization of marketing communications, promotions, special offers, loyalty programs, prize draws and other offers/promotions and compliance with our legal obligations.
I. Personal data we collect
II. Purposes and legal grounds
III. How we disclose Personal Data
IV. International data transfers
V. Retention periods
VI. Your rights and choices
VII. Changes to this Privacy notice
VIII. Contact us
I. Personal data WE collect
We may collect personal data in connection with the performance of any activity that is part of our operations. We may collect or obtain this data because you provide it to us (for example via a form), because other people provide it to us (for example, third-party service providers we use to assist us in our operations) or because they are public.
When we obtain personal data about you through other parties, we make reasonable efforts to include clauses in our contract with those parties, requiring that they comply with the privacy laws and regulations. This may include, for example, requirement to provide you with adequate privacy notice and obtain the necessary consent so that we may process this information in the manner described in this Privacy Notice.
We may also collect or obtain personal data from you, as we observe or deduct such data about you in the way you interact with us or other parties.
In this Privacy Notice, "Personal Data" refers to any information relating to an identified or identifiable individual. For example, your personal data includes your name, email address, IP address, and phone number. The following personal data may be collected:
- Contact information, such as your name, address, telephone number, e -mail address (private or business), country of residence, postal address.
- Correspondence, such as the content, date and time of emails, chats, social media messages and other communications with you, as well as details of your preferences for interactions with us and similar information
- Credentials, such as your user name and password (hashed), recovery email address, and security logs, language, operating system, times you access a service, pages you visit, and the website that has redirected you to us, etc.
- Payment data, such as your payment details, and other information needed to make or receive payments.
- Personal characteristics such as your age, date of birth.
- Preferences, such as your personal preferences regarding our products and services, your lifestyle and social situation, your family situation (e.g. marital status and dependents), the languages you master, your preferred buying and consumption times, and your marketing preferences.
- Transaction information, such as your purchases, customer account data, order and contract data, delivery data, billing and financial data, and transaction history.
- User generated content, such as your posts on our sites, blogs, forums, wikis, and any other social networking applications and services we provide.
Where applicable, we indicate whether and why you must provide us with your personal data, as well as the consequences of failing to do so. For example, if certain personal data is necessary to provide services you have requested, or if we are legally required to collect it, and you decline to provide us with that personal data, then we cannot provide you with the services you have requested.
II. Purposes and legal Grounds
Your personal data is being used for the following purposes:
· Registration on our platform: To enable you to register and use all features of the e-commerce platform and to provide you with all the related services.
- Communication with you: To respond to your requests and comments, to provide you with the information you have requested.
- Processing your orders: To process orders for products or services and related activities, such as delivery of products and services, customer service, account and billing management and support, and to provide you with other services related to your orders.
- Managing our relationship with you: To manage your current relationship with us, including managing contractual obligations and other obligations, interact with you, inform you about our products or services, as well as special offers and promotions.
- Marketing: For marketing and market research purposes, such as contacting you with our newsletters, surveys and other marketing or promotional materials, analyzing and maintaining our activities, internal management, and forecasting, auditing, developing new products, improving our websites, products and services, identifying trends, conducting market research, evaluate the effectiveness of our marketing campaigns, measuring customer satisfaction and improving customer service.
- Send content to a friend: You can send certain types of content to your friends. To do so, we ask you to provide your friend's email address. We use this information to send the content to your friend.
We only process your personal data based on a valid legal ground, including when:
- You have consented to the use of your personal data, for example when you consent to receive marketing communications from us;
- We need your personal data to enter into, or perform an agreement with you, for example to process orders or participate in a promotional campaign;
- We have a legal obligation to use your personal data, for example to comply with tax and accounting obligations;
- We have a legitimate interest in using your personal data. For example, CCEP has a legitimate interest in using your personal data to conduct market research, product development and internal analytics, and otherwise to improve the safety, security and performance of our services. We only rely on our or a third party’s legitimate interests to process your personal data when these interests are not overridden by your rights and interests.
III. How we disclose personal Data
We may disclose information to third parties with your consent, as well as in the following circumstances:
- CCEP Group companies. We may disclose your personal data about you to other members of the CCEP Group of companies.
- Service providers. We may disclose your personal data to third party service providers who provide us with application development, hosting, maintenance, and other services. These third parties may have access to or process personal data about you as part of providing those services for us. We limit the personal data provided to these service providers to that which is reasonably necessary for them to perform their functions, and we require them to agree to maintain the confidentiality of such information.
· Business partners. We may disclose your personal data to partners like customers, brand owners, distributors, joint ventures and others in conducting our business. For example, in case you provide your consent your personal data might also be shared with The Coca-Cola Company, they will use your personal data for the purpose of marketing communications, personalization of marketing communications, promotions, special offers, loyalty programs, prize draws and other offers/promotions and compliance with our legal obligations.
- Compliance with laws and law enforcement. We may disclose your personal data as required by law or when we believe that disclosure is necessary to protect the security or integrity of our services, or to protect the legitimate interests, rights, property, or safety of CCEP, its employees, users, or others, or to comply with a judicial proceeding, court order, or governmental or regulatory request or any other legal process served on us.
- Business transfers. We may disclose personal data to an acquirer, successor, or assignee of our company as part of any merger, acquisition, debt financing, sale of assets, or similar transaction, or in the event of an insolvency, bankruptcy, or receivership in which information is transferred to one or more third parties as one of our business assets.
- Advertising partners. With your consent, we may transfer your personal data to third party advertisers or sponsors for direct marketing purposes, including targeted advertising, for example to reach a particular audience.
- Aggregated data. We may pass aggregated information to third parties but this will not include information that could be used to identify you.
IV. International data transfers
We may transfer your personal data to recipients in countries outside of the European Union and the United Kingdom whose laws may not provide the same level of data protection. When we do so, we will ensure that there are adequate safeguards in place to protect your personal data that comply with our legal obligations. The adequate safeguard might be a data transfer agreement with the recipient based on standard contractual clauses approved by the relevant authorities for transfers of personal data to third countries.
For more information about the transfers described above and the adequate safeguards we use to protect such transfers, you may contact us through the contact information set forth below.
We take steps to erase your personal data or to keep it in a form that does not identify you when that information is no longer needed for the purposes for which we process it, unless we are required by law to keep it longer.
When determining the retention period, we take into account several criteria, such as the type of services we provide to you or that you provide us, the nature and duration of our relationship with you, a possible re-registration in our services, the impact on our services if we delete certain information you have provided to us or about you, the mandatory retention periods provided by law and the corresponding limitation period.
VI. Your rights and choices
You can contact us at any time for assistance regarding the processing of your personal data. In addition, you have the right at any time to:
- To obtain confirmation that we are processing your personal data and to request a copy of the personal data that we hold about you;
- Request that we update your personal data, or correct any personal data that you believe is incorrect or incomplete;
- To request that we delete your personal data, or that we limit our use of your personal data if you believe that there is no (longer a) a lawful ground for us to process it;
- Withdraw your consent to the processing of your personal data (to the extent such processing is based on consent);
- Receive a copy of the personal data concerning you, which you have provided to us, in a structured, commonly used, machine-readable format and to transmit such personal data to another party (to the extent that processing is based on consent or a contract) ;
- Object to our processing of your personal data for which we use a legitimate interest as a legal basis, in which case we will cease the processing unless we have compelling legitimate grounds for the processing; and
- You also have the right to object at any time to the processing of your personal data for direct marketing. If you no longer wish to receive direct marketing from us, you can contact us or click on the unsubscribe link in any such communication.
In order to exercise your rights, you can send us a request, indicating the right you wish to exercise by contacting us as indicating at the bottom of this Privacy Notice. However, there are exceptions and limitations to each of these rights. We may, for example, charge a reasonable fee or refuse to act on a request if it is manifestly unfounded or excessive, in particular because of its repetitive character. In some situations, we may refuse to act or may impose limitations on your rights if, for instance, your request is likely to adversely affect the rights and freedoms of others, prejudice the execution or enforcement of the law, interfere with pending or future litigation, or infringe applicable law. In all cases, you have a right to file a complaint with a data protection authority.
VII. Changes to this Privacy notice
We may modify or amend this Privacy Notice from time to time. Any changes we may make to this Privacy Notice in the future will be posted on this page. To let you know when we make changes to this Privacy Notice, we will amend the revision date at the top of this page. The new modified or amended Privacy Notice will apply from that revision date. Please check back periodically to see changes and additions.
VIII. Contact us
If you have any questions about this Privacy Notice or our privacy practices in general, please contact us via our contact form, or via post at:
Coca-Cola Europacific Partners Services srl/bv
Attention: Privacy Office
Chaussée de Mons 1424
You can also contact our Data Protection Officer by e-mail at email@example.com.
If you have any questions regarding this e-commerce platform, please contact us via the help centerhttps://www.yourcoca-cola.co.uk/help-centre.list