This Privacy Statement provides information on the processing of personal data by Fonterra Co-operative Group Limited and its group companies (referred to as “Fonterra”, “we”, “our” or “us”).
“Personal data” means any information relating to an identified or identifiable individual. This Privacy Statement is not applicable to data about companies.
At Fonterra we take your privacy seriously. When you purchase our goods, use our services or interact with us, you may share some personal data with us. The purpose of this Privacy Statement is to be up front about the information we collect, how we use it, who we share it with and how you can exercise your privacy rights and all other privacy-related information that may be relevant to you.
Please read this privacy statement carefully in conjunction with our website terms and conditions. Please also read privacy notices on other websites owned and operated by Fonterra (such as anchor.co.nz), and the privacy terms governing any specific campaigns, promotions and terms of contract that you enter into with us, so that you have a full picture of how we treat your personal data when you choose to share it with us, when we create it about you, or when we receive it from a third party.
If you have any questions about our privacy practices or wish to access or request correction to any personal data we hold about you, please contact us.
Any changes to this privacy statement will always be reflected here. This privacy statement applies from May 2018 and was last update on 2 July 2018.
The commitments in this privacy statement apply to personal data we process of our consumers, customers, vendors and other business partners. Interactions may be with us in person, via our digital channels (such as websites and email), by phone or otherwise.
This privacy statement does not address the processing of personal data of applicants or employees in the context of their employment relationship with Fonterra. This Privacy Statement also does not address processing of personal data of Fonterra farmer shareholders.
Fonterra and its group companies are the controllers of all personal data that fall within the scope of this privacy statement. This privacy statement indicates what personal data is collected and used (processed) by Fonterra and for what purpose, and to which persons or entities the data will or may be provided. Fonterra may share your personal data with other companies for certain purposes. To read more about that, see ‘Who has access to your personal data?’.
3.1. Fonterra will process your personal data based on:
3.2. We collect your personal data, for example:
3.2.1. When you do business with us:
(a) For the assessment and acceptance of a customer, supplier or business partner;
When you get in contact with us, either via our website, telephone, offline or otherwise, we may process your personal data for assessment and acceptance purposes, for example to confirm and verify your identity. We may further process your personal data for other administrative purposes such as due diligence and screening against publicly available government and/or law enforcement agency sanctions lists.
(b) For the conclusion, execution and performance of agreements:
When you have purchased a product or service from us as a customer or consumer, either online through an online shop, via telephone or offline, or when you work together with us as a vendor, supplier or business partner, we may process your personal data for administrative purposes such as sending invoices and making payments. We also use your personal data to deliver or receive and administer our or your products or services. We process your personal data to further execute our agreement, including for the delivery of customer services.
(c) For relationship management and marketing
We may use the information stored in our customer database to send you suitable offers and newsletters, to invite you to take part in competitions, as well as to provide customer services, perform account management and communicate recalls. We may also use your personal data for the development, execution and analysis of market surveys and marketing strategies.
(d) For business process execution and internal management
We process your personal data in the performance and organisation of our business. This includes general management, order management and management of our assets. We have central processing facilities which conduct audits and investigations, implement business controls, and manage and use consumer, customer, vendor and business partner directories. Also, we process your personal data for finance and accounting, archiving and insurance purposes, legal and business consulting and in the context of dispute resolution.
(e) For organisational analysis and development, management reporting and acquisition and divestitures
At Fonterra, we process your personal data in the preparation and performance of management reporting and analysis. We use aggregated and anonymised personal data to create management reports and to analyse our business and report on certain metrics, either to comply with reporting regulations or to improve our processes and services. We may conduct customer, supplier and business partner surveys to learn more about your views and opinions in preparation of our management reporting. We may process your personal data for management reporting purposes in the context of mergers, acquisitions and divestitures and to manage such transactions.
(f) To monitor and investigate compliance and fraud within Fonterra
We monitor our IT systems to check for compliance with regulations and laws, fraud, and compliance with Fonterra policies. During compliance and monitoring activities, personal data we hold about you may be accessed and viewed for this purpose. The personal data that are accessed and viewed for this purpose will not be stored following such checking unless we need them to further investigate potential non-compliant behaviour.
3.2.2. When you use our Websites or Apps:
(g) To deliver you our websites’ or apps' functionalities and for their technical and functional management
If you open a user account with us, to administer the account and to ensure confidentiality and security of your transactions
(h) When you choose to register with one of Fonterra’s websites, apps or online portals, you need to provide personal data so that we can create a personal account for you. Upon creating your account, we will send you your personal login information. These personal data enable us to administer your account and enable us to ensure confidentiality and to maintain the security of your transactions or use of the account. We are, for instance, able to change your password for you. We are, however, not able to view your password.
(i) To allow you to connect with us (e.g. via social media)
We are active on social media platforms like Facebook, Twitter, and Instagram. When you contact us via social media, we process your personal data to answer your questions, to respond to your messages, and to provide customer services support.
In addition, when you visit a 'Connect with us' screen on one of our websites or apps, you can contact us through a variety of communication channels. We provide you with our email address, for you to send us your feedback and suggested improvements, as well as our website, Twitter, Facebook, Instagram details. When you click one of the corresponding icons we will refer you to the website or app of the applicable external party, whether this is your email provider or a social media platform.
3.2.3. When you interact with Fonterra (online or offline):
If you get in touch with us via our customer services centres, corporate email addresses, phone numbers, physical address or via a contact form on a Fonterra website, we will use your personal data to reply to and answer your question or to provide other customer services or commercial support. For this purpose, we process your name, contact details, your correspondence with us your question and all other personal data which are necessary to respond to your communication.
(j) For the development and improvement of products and/or services
We process your personal data to assess, analyse and improve our products and services for our customers and consumers. We use aggregated personal data to analyse consumer and customer behaviour and to adjust our products and services accordingly. When you use a website, app, or online portal, enter or search data through this website or app, we also process your personal data to compile analytics reports. We use aggregated personal data to analyse customer behaviour and to adjust our products and services accordingly, to ensure that it is relevant to our customers. This means that we may analyse how often you read our newsletters, how often you visit our website, apps or portals, which pages you click on and what transactions you make. We may purchase supplementary data from public sources to complement our database for the above purposes.
(k) To protect health, safety, security and to ensure integrity
At Fonterra, we value your health, safety, security and integrity highly. We process your personal data to safeguard our employees, customers, suppliers and business partners. As such, we authenticate your access rights to our premises. We also process your personal data to protect Fonterra and employee and customer assets.
(l) To comply with the law
In some cases, we process your personal data to comply with laws and regulations. This could, for example, be the case where tax or business conduct related obligations apply. To comply with relevant laws and regulations, we may need to disclose your personal data to government institutions or supervisory authorities.
3.3. The types of information we may collect and process are, where applicable:
To assist with the performance of the website. cookies may be installed on your computer. Cookies are small text files that are placed on your computer by websites that you visit. Cookies are useful because they allow a website to recognise a user’s device. They are widely used to make websites work, or work more efficiently, as well as to provide information to the owners of the site.
Most cookies we use on this website collect information about how visitors use the website, for instances which pages visitors go to most often. These cookies do not collect information that identifies a visitor. All information collected by these cookies is aggregated and therefore anonymous.
Most internet browsers give you the option to reject all cookies, accept all cookies, erase cookies stored on your computer or be notified before a cookie is stored on your computer. However, if you reject or erase the cookies referred to above some our Site features or services will not function properly or may not be fully available. Please refer to your internet browser instructions if you want to find out more about rejecting or erasing cookies.
Please visit www.fonterra.com/cookiesstatement for our full Cookies Statement.
5.1. Transferring your personal data
As a global organisation, personal data we collect may be transferred internationally throughout our worldwide organisation. Your personal data may be exchanged within Fonterra and amongst its group companies. We exchange your data for administrative purposes and so that we can have a complete overview of your contacts and contracts with the Fonterra Group. We may also exchange your data to offer you a complete package of services and products.
If your personal data are transferred to a recipient in a country that does not provide the level of protection for personal data as New Zealand or the European Union do, we will take measures to ensure that your personal data are adequately protected, such as entering into EU Standard Contractual Clauses with these recipients.
5.2. Access to your personal data by external parties
The following types of external parties may have access to your personal data, where relevant:
When external parties are given access to your personal data, we will take the required contractual, technical and organisational measures to ensure that your personal data are only processed to the extent that such processing is necessary. The external parties will only process your personal data in accordance with applicable law.
We will provide your personal data to regulatory bodies, tax authorities and/or investigating authorities only if Fonterra is obliged to do so by law or regulation, or if you have provided instructions to Fonterra to allow this information to be disclosed.
5.3. The use of your personal data by data processors:
When a third party processes your personal data solely following Fonterra instructions, it acts as a data processor. We enter into an agreement with such a data processor for the processing of personal data. In this agreement we include obligations to ensure that your personal data are protected and processed by the data processor solely to provide services to us.
We make all reasonable efforts to secure our systems to ensure the confidentiality and security of your personal data. We have implemented appropriate technical, physical and organisational measures to protect personal data against accidental or unlawful destruction or accidental loss, damage, alteration, unauthorised disclosure or access as well as all other forms of unlawful processing (including, but not limited to, unnecessary collection) or further processing. Examples are specialised security teams, IT security policies, staff training and secure servers.
We will keep your personal data for as long as it is required for the purpose for which it was collected, considering our need to answer queries or resolve problems, provide improved and new services, and comply with legal requirements.
This means that we may retain your personal data for a reasonable period after your last interaction with us. When the personal data that we collect is no longer required or is not required to be retained by law, we destroy, delete or permanently anonymise it.
If you would like to know specific retention periods for a certain type of information we collect, please contact us. For data retention periods of any other companies, please check their privacy statement on their website.
You have the right to request access of an overview of your personal data, and under certain conditions, rectification and/or erasure of personal data. In addition, you may also have the right of restriction of processing concerning your personal data, the right to object to processing as well as to data portability.
To invoke any of these rights, please contact us by using the contact details at the bottom of this Privacy Statement. Please keep in mind that we may ask for additional information to verify your identity.
If you have given your consent to a certain purpose, you can withdraw your consent at any time. Please keep in mind that withdrawal does not have retrospective effect.
It is important to us that your personal data held by us is accurate, complete and current. If you are a registered user of a Fonterra company website account, you may log in to your account and (functionality permitting) update your personal data.
If you want to contact us about any of your rights or complain about how we use your information, you can contact us on the details set out below. We’ll do our best to help but if you are still not satisfied, you can lodge a complaint with your local data protection supervisory authority.
If you have any questions about the way we process your personal data, or want to request access to, deletion of, or correction of your personal data held by us, please go to the website through which you supplied the information to find the relevant contact details, or contact us in writing to Fonterra, Privacy Officer, Private Bag 92032, Auckland 1142, New Zealand, or by email: email@example.com