Privacy Policy

This privacy policy provides information about processing of your personal data on our website www.oetker.com.my\n\nIt also covers the following social media profiles:\n\nFacebook Page Dr. Oetker Nona - \nhttps://www.facebook.com/DrOetkerNona\n
Facebook Page Dr. Oetker Pizza Malaysia - \nhttps://www.facebook.com/droetkerpizzamalaysia\n

1. Controller

1. Controller\nThe following company is the controller for all data processing activities described below:\n\nDr. Oetker Nona Malaysia Sdn. Bhd.\nPlot 105, MK11, Lorong Perusahaan Utama 1\nKawasan Perindustrian Bukit Tengah\n14000 Bukit Mertajam\nPenang, Malaysia.
Telefon: 04-501 7504
E-Mail: \nservice@oetker.com.my\n

2. Data Protection Officer

2. Data Protection Officer\nPlease do not hesitate to contact our Data Protection Officer in case of questions about processing of your personal data:\n\nDr. Oetker Nona Malaysia Sdn. Bhd.\nPlot 105, MK11, Lorong Perusahaan Utama 1\nKawasan Perindustrian Bukit Tengah\n14000 Bukit Mertajam\nPenang, Malaysia.
E-Mail: \nservice@oetker.com.my\n

3. Details about specific processing activities

3. Details about specific processing activities\nEvents & tours\nYou may sign up for events or tours through our website. We use the data provided by you through registration forms to fulfill our contract, for example, to reserve a tour for you.\n \nLegal basis for this processing activity is the fact that data processing is necessary for performance of a contract or entering into such a contract (Art. 6 para. 1 b) GDPR). Information that is entered through mandatory fields in registration forms is necessary for participation in an event or tour (i.e. necessary to form a contract). If you do not provide this information you cannot participate in an event or tour.\n\nCustomer retention / Advertising similar goods and services\nWe also use your contact data for advertising purposes in cases in which we do not need your consent to do so (for example, for advertising through mail or direct marketing for our own similar goods and services based on an existing customer relationship).\n \nLegal basis for this processing activity is our legitimate interest (Art. 6 para. 1 f) GDPR). Our legitimate interest lies in customer care and in providing information about our products.\n \nPlease refer to section “\nRight to object (Art. 21 GDPR)\n” in particular. You may object to these processing activities at any time and free of charge, for example by contacting us via the contact details provided in the section “\nController\n”.\n\nPromotions: Raffles / loyalty programmes / other promotions\nIf you participate in a raffle, loyalty programme or other promotion (for example, by claiming a cashback for a product that you have bought in a shop) we will only use the data provided by you to organise the promotion as long as you did not provide further consent for other processing activities (for example, for receiving our newsletter).\n \nLegal basis for this processing activity is the fact that data processing is necessary for performance of a contract or entering into such a contract (Art. 6 para. 1 b) GDPR). Information that is entered through mandatory fields in registration forms is necessary for participation in a promotion (i.e. necessary to form a contract). If you do not provide this information you cannot participate in a promotion.\n\nContacting us / feedback\nYou may contact us through forms or via email. We will process your data in order to reply to you. Legal basis for this processing activity is your consent (Art. 6 para. 1 a) GDPR).\n\nNewsletter\nYou may sign up for our email newsletter. We will process your data in order to send you email and to evaluate which emails you open. Legal basis for this processing activity is your consent (Art. 6 para. 1 a) GDPR). You may withdraw your consent for future processing at any time, for example, by clicking the “unsubscribe” link in one of our newsletters.\n \nWe send emails through the SC-Networks GmbH, Würmstraße 4, 82319 Starnberg, Germany (“Evalanche”). Evalanche processes your data on our behalf (data processor).\n\nServer logs\nWhen accessing our website, we will process data in server log files. This data derives from your terminal equipment and may include personal data. In particular, we process the following data:\n \nThe operating system of your terminal equipment\nThe browser used by you\nThe name of your provider\nYour IP address\nData and time of access\nAccesses pages and search terms (if applicable)\nThe website that referred you to our website (referrer)\n \nThis processing activity is necessary to ensure the operation of our website, to optimise the content and deliverability of our website, and to provide the necessary information to public bodies in case of a cyber attack. Therein also lies our legitimate interest for data processing. Legal basis for this processing activity is our legitimate interest (Art. 6 para. 1 f) GDPR).\n \nWe regularly delete this data after 14 days, in case of misuse after administrative or legal proceedings are finished.\n\nTracking and cookies\nOur website uses cookies and similar technologies that store information on your terminal equipment or accesses such information for the following purposes:\n\nProviding our website\nAnalytics and personalisation - Tracking\n(Re-)Marketing / data sharing with third parties\n\nNote on data processing in the United States\nFor the purpose of "analytics and personalisation - tracking", we work with technology providers (as data processors) with whom a transfer of your personal data to the United States cannot be ruled out.\n\nLikewise, for the purpose of "(Re-)Marketing / data sharing with third parties", we work with partners with whom a transfer of your personal data to the United States cannot be ruled out.\n\nWhere possible, we instruct our technology providers to process your personal data in data centres within the European Union.\n\nHowever, in the case of technology providers or partners who also have an establishment in the United States or are located there with other companies of their group of companies, we cannot rule out the possibility of US security services gaining access to your personal data. This may occur, for example, via remote access or a legally binding instruction to our technology provider or partner. In particular, this may expose you to the risk that US security services may access your personal data without specific cause and on a large scale basis, and that you may not be able to take effective legal action against that in the United States.\n\nProviding our website\nWe use cookies and similar technologies to ensure certain features of our website. This is strictly necessary to provide our website. By doing this, we can, for example,\n\nSave your preferred language version of our website or similar settings for your next visit.\nDistribute requests to our website across multiple web servers (load balancing).\nProvide a uniform context (session) to multiple requests to our website, in order to facilitate login-secured parts of our website or checkout / payment processes.\nSave your consent regarding tracking tools and active / deactivate tracking tools according to your choice.\n\nOur legitimate interest for these processing activities lies in the uninterrupted usability of our website and in ensuring that user interactions are actually linked to an authenticated user.\n \nLegal basis for this processing activity is our legitimate interest (Art. 6 para. 1 f) GDPR)\n\nAnalytics and personalisation - Tracking\nWe use cookies and similar technologies to evaluate user behaviour on our website and to adapt it according to this.\n \nProvided you have given your consent, we process information on your terminal equipment and the browser you are using (in the case of the website) every time you interact with our website. For example, we can find out with which language settings you use our website, whether you use a smartphone or a desktop computer or from which country you access our website.\n \nIn addition, we process information about how you interact with our website, e.g. from where you are referred to our website, how long you use our website and the path you take through individual sub-pages. For example, we can record whether you found us via a search engine (and if so, under which search term) or an advertisement, how long you spent browsing the content of a particular page and how many pages you visited in total.\n \nWe use this information to create analyses of user behaviour on our website and to optimise the website / accordingly. In some cases, we create several different versions of our website, which we present to individual users or user groups, and use cookies or similar technologies to evaluate which version is used by you in which way.\n \nLegal basis for this processing activity is your consent (Art. 6 para. 1 a) GDPR. You may withdraw or change your consent for future processing at any time by changing your tracking settings . Additionally, you may change your browser settings regarding cookies and similar technologies.\n \nWe use the following products for analytics and personalisation:\n\nGoogle Analytics / Google Optimize\nGoogle Analytics and Google Optimize are provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google processes your data on our behalf (data processor). Our configuration of Google Analytics and Google Optimize does not allow Google to use data that is gathered through Google Analytics or Google Optimize to improve Google products and services.\n \nPlease find more information about the cookies that are used by Google Analytics and their respective storage periods \nhere\n. Google Optimize also uses the cookies that are set by Google Analytics (please refer to the documentation \nhere\n).\n\n(Re-)Marketing / data sharing with third parties\nWe use cookies and similar technologies to evaluate the reach of our advertising campaigns and how users who have become aware of our website through our advertising campaigns use our services. We also use cookies and similar technologies to record which users use our website in order to form groups (so-called audiences) and to address these audiences on other online platforms with personalised advertising.\n \nWe also transfer this information to third parties who may also process it for their own purposes.\n \nIf you have consented to this, we will record whether you have reached us via one of our advertising campaigns and how you then interact with our website. For example, we can record which share of users who have seen an ad actually use content from our website. This enables us to better plan and control our advertising budget. \n \nIn addition, we group the users of our website in so-called audiences. Audiences are user groups that are put together by us according to certain criteria (e.g. all users who have accessed a category of recipes). If the users of an audience are also users of our marketing partners, we can individually address these users  with advertisements (re-marketing) through our marketing partner’s platform.. Information that our marketing partner has about his users in one of our audiences can also be used by him to suggest similar user groups to us for advertising.\n \nTo this end, we inform our marketing partners that you have visited our website and whether you have visited pages defined by us or have carried out other actions (e.g. registered an account). Our marketing partners may also use this information for their own purposes, for example to further personalise your profile on their own platform.\n \nLegal basis for this processing activity is your consent (Art. 6 para. 1 a) GDPR. You may withdraw or change your consent for future processing at any time by changing your tracking settings. Additionally, you may change your browser settings regarding cookies and similar technologies.\n \nOur marketing partners are separate controllers for the data processing that they carry out for their own purposes. The marketing partner also provides you with data protection information.\n \nWe use the following products for (re-)marketing and share data with the following third parties\n\nFacebook Pixel\nFacebook Pixel is provided by Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour Dublin 2, Ireland (“Facebook”). More information about Facebook Pixel can be found \nhere\n. Please also refer to the \nFacebook Data Policy\n.\n\nGoogle Ads / Doubleclick\nGoogle Ads / Doubleclick is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).  More information about cookies set by Google can be found \nhere\n. Please also refer to the \nGoogle Privacy Policy\n.\n\nGoogle Floodlight\nGoogle Floodlight is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).  More information about cookies set by Google can be found \nhere\n. Please also refer to the \nGoogle Privacy Policy\n.\n\nThe Trade Desk Pixel\nThe Trade Desk Pixel is provided by The UK Trade Desk Ltd.10th Floor, 1 Bartholomew Close, London EC1A 7BL, Great Britain (“The Trade Desk”). Please also refer to the \nThe Trade Desk Privacy Policy\n (among other things for information about cookies storage periods) and the possibility to \nopt-out\n from data processing by The Trade Desk.\n\n●      Facebook Page\nWe run a Facebook Page. Facebook Page is provided by Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). When using the Facebook Page, personal data may be processed by Facebook, for which Facebook and we are jointly responsible. This joint controllership is governed by the Facebook “\nPage Controller Addendum\n”.\n \nAll key information about data processing on the Facebook Page can be found in the \nFacebook Data Policy\n and the \nFacebook Cookie Policy\n.\n \nThere you will also find all information on the nature and scope of the personal data affected by the data processing and your rights to information, confirmation, correction, deletion, restriction, data portability and complaint with a supervisory authority.\n \nLegal basis for the data processing on the Facebook Page is the legitimate interest of us, Facebook and their customers to provide advertisements, recommendations and to receive insights and measurements (Art. 6 para. 1 f) GDPR). You may object to data processing towards Facebook (please refer to the Facebook Data Policy and the Facebook Cookie Policy).\n \nWe have no influence on data processing by Facebook. We do not receive any data from Facebook that would enable us to identify Facebook Page users or analyse their usage behaviour. Nor do we use any tools of our own within the framework of the Facebook Page that would allow us to identify or analyse such users.\n \nPlease add a reference to you local legislation that transforms Art. 5 para. 3 of the ePrivacy regulation into local law regarding non-necessary cookies. Please refer to https://eur-lex.europa.eu/legal-content/EN/NIM/?uri=CELEX:32009L0136&qid=1605788273830 for information about national transformation measures.\nPlease delete highlighted text if this should be impossible.\n \nPlease add a reference to you local legislation that transforms Art. 5 para. 3 of the ePrivacy regulation into local law regarding non-necessary cookies. Please refer to https://eur-lex.europa.eu/legal-content/EN/NIM/?uri=CELEX:32009L0136&qid=1605788273830 for information about national transformation measures.

4. Withdrawal of consent (Art. 7 para. 3 GDPR)

4. Withdrawal of consent (Art. 7 para. 3 GDPR)\nIf processing is based on your consent (Art. 6 para. 1 a) GDPR) you may withdraw your consent for future processing at any time. You may reach us through the contact data that is provided in the \n"Controller"\n section or use options for withdrawal of consent that are described in the context of a specific processing activity.

5. Right to object (Art. 21 GDPR)

5. Right to object (Art. 21 GDPR)\nIf processing is based on our legitimate interest (Art. 6 para. 1 f) GDPR) you have the right to object, on  grounds  relating  to  your  particular  situation, at any time to processing of personal data that concerns you. This also extends to profiling.\n\n\nWhere we process personal data for marketing purposes, you have the right to object at any time to processing of personal data that concerns you for such marketing. This also extends to profiling that is related to such direct marketing.\n

6. Further data subject rights

6. Further data subject rights\nWith regard to personal data that concerns you, you may also use the following rights:\n\nRight to access (Art. 15 GDPR)\nRight to rectification (Art. 16 GDPR)\nRight to erasure (‘right to be forgotten’) (Art. 17 GDPR)\nRight to restriction of processing (Art. 18 GDPR)\nRight to data portability (Art. 20 GDPR)\n\nYou also have the right  to  lodge  a  complaint  with  a  supervisory  authority (Art. 77 GDPR).

7. Automated individual decision-making, including profiling

7. Automated individual decision-making, including profiling\nAutomated  individual  decision-making,  including  profiling, does not take place.