Privacy Policy

§ 1 Information on data protection

The protection of your personal data is especially important to us. We therefore process your personal data (“data” for short) exclusively on the basis of legal provisions. We would like to inform you of the data we collect when you visit our website, or other of our processes that this privacy policy refers to, and for which purposes it is used.

Changes in the law or changes within our internal company processes may make it necessary to adapt this privacy policy. We ask you to read through them regularly. The privacy policy can be accessed, saved and printed out at any time at www.agrana.com/dsgvo/at.

_____________________________________________

Link to AGRANA’s data protection  policies

_____________________________________________

§ 2 Responsible parties and scope

The responsible parties regarding the EU General Data Protection Regulation (hereafter: GDPR) and other national data protection laws of the Member States as well as other data protection regulations are:

For questions and concerns

COMPLIANCE OFFICE
AGRANA Beteiligungs-AG
Friedrich-Wilhelm-Raiffeisen-Platz 1
1020 Wien
+43 1 21137-12763
E-mail: dataprotection@grana.com

Responsible for the processing

AGRANA BETEILIGUNGS-AG
Friedrich-Wilhelm-Raiffeisen-Platz 1
1020 Wien
+43 1 21137-0
E-mail: dataprotection@agrana.com

AGRANA FRUIT AUSTRIA GMBH
Mühlwaldstraße 1
8200 Gleisdorf

AGRANA FRUIT SERVICES GMBH
Friedrich-Wilhelm-Raiffeisen-Platz 1
1020 Wien

AGRANA ZUCKER GMBH
Friedrich-Wilhelm-Raiffeisen-Platz 1
1020 Wien
+43-1-211 37-0, Fax: -12998

Administration:
3430 Tulln, Josef-Reither-Strasse 21-23
+43-2272-602-0, Fax: -11225

AGRANA STÄRKE GMBH
Friedrich-Wilhelm-Raiffeisen-Platz 1
1020 Wien
+43-1-211 37-0, Fax: -12998

Administration:
3950 Gmünd, Conrathstraße 7
+43-2852-503-0, Fax: -19420

AUSTRIA JUICE GMBH
Kröllendorf 45
3365 Allhartsberg

AGRANA SALES & MARKETING GMBH
Friedrich-Wilhelm-Raiffeisen-Platz 1
1020 Wien

AGRANA INTERNATIONALE VERWALTUNGS-UND ASSET-MANAGEMENT GMBH
Friedrich-Wilhelm-Raiffeisen-Platz 1
1020 Wien
+43-1-211 37-0, Fax: -12998

BETA PURA GMBH
Friedrich-Wilhelm-Raiffeisen-Platz 1
1020 Wien

AGRANA BIH HOLDING GMBH
Friedrich-Wilhelm-Raiffeisen-Platz 1
1020 Wien

INSTANTINA GES.M.B.H.
Friedrich-Wilhelm-Raiffeisen-Platz 1
1020 Wien

AGRANA RESEARCH & INNOVATION CENTER GMBH
Josef-Reither-Strasse 21-23
3430 Tulln
+43-2272-602-11403

ÖSTERREICHISCHE RÜBENSAHMENZUCHT Ges.m.b.H
Josef-Reither-Strasse 21-23
3430 Tulln

§ 3 Principles of data processing

Personal data is any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, e-mail address, IP address or user behavior. Information that we cannot (or only with a disproportionate amount of effort) relate to your person, e.g. by anonymizing the information, is not personal data. The processing of personal data (e.g. collection, retrieval, use, storage or transmission) always requires a legal basis or your consent. Processed personal data will be deleted as soon as the purpose of the processing has been achieved and there are no longer any statutory retention obligations to maintain. Protecting your privacy is very important to us and we use recognized security measures to prevent misuse of your data.

If we process your personal data for the provision of certain offers, we will inform you below about the specific processes, the scope and purpose of the data processing, the legal basis for the processing and the respective storage period. The processing of your data is necessary for the fulfillment of the offers you have used. If you do not provide us with the relevant data for the respective offer, we will generally not be able to fulfill it.

§ 4 Individual processing operations

Provision and use of the website

Responsible for the data processing

AGRANA Beteiligungs-AG

Scope and purpose of data processing

When you access and use our website, we collect the personal data that your browser automatically transmits to our server. This information is temporarily stored in a so-called log file. When you use our website, we collect the following data, which is technically necessary to display our website and to ensure its stability and security:

• IP address of the requesting computer
• Date and time of access
• Website name and URL
• Website from which access is made (referrer URL)
• The browser used and, if applicable, the operating system of your computer, as well as the name of your access provider

Your data is passed on to our web service provider for the purpose of providing the website.

Legal basis

Art. 6 para. 1 (f) GDPR serves as the legal basis for the aforementioned data processing. The processing of the aforementioned data is necessary for the provision of a website and thus serves to protect a legitimate interest of our company.

Storage duration

As soon as the aforementioned data is no longer required to display the website, it will be deleted within 3 weeks. The collection of data for the provision of the website and the storage of the data in log files is mandatory for the operation of the website. Consequently, there is no possibility for the user to object. Further storage may take place in individual cases if required by law.

IR and PR Newsletter

Responsible for the data processing

AGRANA Beteiligungs-AG

Scope and purpose of data processing

It is possible to subscribe to free newsletters on our website. In order to send you this newsletter regularly, we need the following information from you:

• Salutation
• First and last name and, if applicable, company
• If applicable, job title
• E-mail address
• Country
• Your message

We use the double opt-in process to send the newsletter, i.e. we will only send you the newsletter if you have confirmed your registration using the link in a confirmation e-mail sent to you for this purpose. We want to ensure that only you, as the owner of the specified e-mail address, subscribe to the newsletter. Your confirmation must be made within 2 weeks of receiving the confirmation email, otherwise your newsletter subscription will be automatically deleted from our database. Your data will be passed on to our web service provider for the purpose of newsletter registration.

Legal basis

The processing of the aforementioned data for the distribution of the investor and press newsletter is based on the declaration of consent voluntarily provided by you in accordance with Art 6 para 1 (a) GDPR.

Storage duration

Your data will be stored for the duration of the newsletter distribution. After unsubscribing from the newsletter or after revocation, your data will be deleted after a transition period of 7 days. Further storage without permission to send the newsletter may take place in individual cases if this is required by law or if the data is still needed for other processing operations that are still active.

Applications

Responsible for the data processing

The AGRANA company named in the job advertisement

Scope and purpose of data processing

We process the data we receive from you as part of the application process. Personal data includes:

• First and last name
• Address
• Contact information (e-mail address, phone number, fax)
• Date of birth
• CV
• Cover letter
• References

Your data will only be processed for the purpose of storing, evaluating, allocating and transmitting your application. Your data will be forwarded to our applicant database service provider. Your personal data is accessible to the appropriate personnel officers at AGRANA Beteiligungs-AG, AGRANA Zucker GmbH, AGRANA Sales & Marketing GmbH AGRANA Stärke GmbH, AGRANA Fruit SAS, AGRANA Fruit Services GmbH, AGRANA Fruit Austria GmbH, AGRANA Research & Innovation Center GmbH, AGRANA Fruit US, Inc., Österreichische Rübensamenzucht Ges.m.b.H. and Austria Juice GmbH (AGRANA for short) and made available to selected executives of AGRANA Beteiligungs-AG, and its companies on a case-by-case basis. Furthermore, the company reserves the right to forward the data provided by you to personnel consultants commissioned by us.

With your consent, we can pass your candidate profile to other recruiters and HR business partners in AGRANA Beteiligungs-AG, AGRANA Zucker GmbH, AGRANA Sales & Marketing GmbH AGRANA Stärke GmbH, AGRANA Fruit SAS, AGRANA Fruit Services GmbH, AGRANA Fruit Austria GmbH, AGRANA Research & Innovation Center GmbH, AGRANA Fruit US, Inc., Österreichische Rübensamenzucht Ges.m.b.H. and Austria Juice GmbH so that they can contact you for other Group-wide vacancies. If you do not wish to do so, please send your request to the following email address: wd-recruiting.technicalsupport@agrana.com (please do not send application documents to this email address). This alternative contact via email will not affect your chances of being considered for the vacancy. We will contact you and inform you about how to proceed. Your data will be protected in the same way as described in this privacy policy.  You can revoke this consent at any time by sending an email to dataprotection@agrana.com. The revocation shall not affect the legality of the processing carried out up to that point.

If there is a legal obligation and in the context of legal prosecution, authorities and courts as well as external auditors may be recipients of your data.

Legal basis

Your application data will be processed for the purpose of handling your application and stored on the basis of a legitimate interest of the Group pursuant to Art. 6 para. 1 (f) GDPR. Storage after a possible rejection is based on a legitimate interest, as claims under the Equal Treatment Act may be asserted during this period.

Storage duration

Your application data will be stored for seven months from the time of rejection.

Contact form

Responsible for the data processing

AGRANA Beteiligungs-AG

Scope and purpose of data processing

You can contact us on our website using the provided secure form. During the process of sending your request using the contact form, reference is made to this privacy policy in order to obtain your consent. If you use the contact form, the following personal data will be processed:

• First and last name
• E-mail address
• If applicable, country
• If applicable, company
• Your message

The purpose of providing your e-mail address is to assign your request and respond to you. When using the contact form, your personal data will not be passed on to third parties.

Legal basis

The aforementioned data processing for the purpose of contacting you is based on the declaration of consent voluntarily provided by you in accordance with Art 6 para 1 (a) GDPR.

Storage duration

As soon as your request has been processed and the relevant facts have been conclusively clarified, your personal data processed via the contact form will be deleted. Further storage may take place in individual cases if this is required by law or serves to protect a legitimate interest of our company.

Competitions

Responsible for the data processing

AGRANA Group

Scope and purpose of data processing

We offer users the opportunity to participate in competitions by providing personal data. The data required for this is entered into an input screen, transmitted to us, stored and then used to process the respective competition. We are entitled to transmit the winner’s data to any cooperation partners in order to enable delivery of the prize (if the delivery is not carried out by us). These companies may only use your data for order processing and not for any other purposes. If, when registering for the competition, you agree (by ticking the appropriate checkbox in the registration process) that your data may be transferred to third parties in the course of the competition, it will only be sent to cooperation partners.

The following data will be processed in the context of the participation in the competition:

• Salutation including title
• First and last name
• E-mail address
• Phone number
• Address

The respective conditions of participation are provided separately for each competition.

Legal basis

When processing your personal data, which is necessary to fulfill the competition, Art 6 para 1 (b) GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual or contractual measures.

Storage duration

Upon complete delivery or handover of the prize, your data will be blocked for further use and deleted after expiry of the retention periods under tax and corporate law, unless you have expressly consented to the further use of your data. Further storage may take place in individual cases if required by law.

Order brochures/reports

Responsible for the data processing

AGRANA Beteiligungs-AG

Scope and purpose of data processing

On our websites, we offer users the opportunity to order brochures or reports by providing personal data. Your data will be passed on to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of the brochures or reports. These companies may only use your data for order processing and not for any other purposes.

The following data is processed as part of the ordering process:

• First and last name/company
• Address incl. country
• E-mail address

Legal basis

When processing your personal data, which is necessary to fulfil your order, Art 6 para 1 (b) GDPR serves as the legal basis.

Storage duration

As soon as the order you have placed is completed, your personal data will be deleted. Further storage may take place in individual cases if this is required by law or serves to protect a legitimate interest of our company.

Event photos

Responsible for data processing

The AGRANA company organizing the event.

Scope and purpose of data processing

Among other things we host events. At these events, we may take photographs and video recordings of people who participate. These (moving) images are then used or processed to present the event. This is done online (for example, on social media platforms such as Facebook, LinkedIn, Xing, Instagram or on the AGRANA website) and, where appropriate, in print media. If applicable, your first and last name may also be processed.

Legal basis

Art. 6 (1) (f) GDPR and § 12 (2) (4) DPA serve as the legal basis for the aforementioned data processing. The processing of the aforementioned data is necessary for the presentation of the event and thus serves to protect a legitimate interest of our company. If you have consented to photo and video recordings, Art. 6 para. 1 (a) GDPR serves as the legal basis.

Storage duration

Photos and videos will be stored for a period of two years after the event and then deleted. Unless you have given your consent for a longer period of processing or storage.

Customers and suppliers

Responsible for the data processing

The AGRANA company listed above with which a business relationship exists.

Scope and purpose of data processing

During the business relationship with an AGRANA company, the following data may be processed:

• First and last name/company
• Address
• Position in the company (for contacts in the company)
• E-mail address
• Phone number
• Account data/bank details
• VAT number
• Invoices and delivery bills
• AMA company number/ LGH membership number
• Other data (hectare, quality)

The data will be processed for the following purposes:

• Necessary internal or, if applicable, legal business partner check and training,

• Internal supplier qualification,
• Master data management,
• Business partner management,
• Handling/execution of legal matters (such as contracts, dispute resolution, consulting) and other services for contractual partners (such as the preparation of invoices),
• Delivery bills and invoices,
• Dunning,
• Access security and control,
• Fraud prevention,
• Procurement,
• Auctions

Supplier and customer data are accessible to a restricted group of processing employees in shared databases of the AGRANA Group companies and may be used by them exclusively for the specified purposes. Your data will be passed on to forwarding agents, haulers, shippers, warehouses, etc. as far as this is necessary for the fulfillment of the contract. For the processing of payments, we pass your payment data on to the credit institution commissioned with the payment. These companies may only use your data for processing and not for any other purposes.

Legal basis

When processing your personal data, which is necessary to fulfil a contract concluded with us, Art 6 para 1 (b) GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures. When processing data that is required for internal business partner checks, administration or fraud prevention, Art 6 para 1 (f) GDPR serves as the legal basis. The processing of data is necessary for business management and fraud prevention and thus serves to protect a legitimate interest of our company.

Storage duration

Once the contract has been completed and payment has been made in full, your data will be blocked for further use and deleted after the expiry of the storage periods under tax and corporate law. Further storage may take place in individual cases if this is required by law or is absolutely necessary for the person responsible.

Marketing

Responsible for the data processing

The AGRANA company mentioned in the marketing initiative.

Scope and purpose of data processing

We offer our customers and prospective customers various sources of information (invitations to trade fairs, participation in webinars, sending relevant product information, downloading other information packages). We also conduct customer surveys. With your explicit consent, your data may be used to send you further marketing content or for profiling in order to provide you with better marketing content. Profiling does not lead to decisions based solely on automated processing. Your data will be passed on to our marketing service provider for the purpose of carrying out marketing activities. These companies are not allowed to use your data for any other purpose.

The following data is processed as part of the marketing activities:

• Salutation
• First and last name and, if applicable, company
• If applicable, job title
• E-mail address
• Country
• Language
• Your message
• Your activity regarding the marketing initiative

Legal basis

The processing of the data for the marketing initiatives is based on the declaration of consent voluntarily given by you in accordance with Art 6 para 1 (a) GDPR.

Storage duration

The data you provide will be stored until you revoke this processing or, in the case of a one-time registration or download, after the specified period. You will regularly be asked to update your consent so that we can guarantee privacy-friendly processing. After revocation, your data will be deleted after a transition period of 7 days. Further storage may take place in individual cases if this is required by law or if the data is still needed for other processing operations that are still active.

§ 5 Disclosure of data

We will only share your personal data with third parties if:

• you have given your express consent to this in accordance with Art 6 para 1 (a) GDPR
• This is legally permissible and necessary, according to Art 6 para 1 (b) GDPR, for the fulfillment of a contractual relationship with you
• According to Art 6 para 1 (c) GDPR there is a legal obligation for the disclosure
• According to Art. 6 para. 1 (f) GDPR, disclosure is necessary for the protection of legitimate organizational interests and for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data.
• Processors are commissioned by us, we remain responsible for the protection of your data. All processors are contractually obliged to treat the transmitted data confidentially and to process it only in the context of service provision. The processors commissioned by AGRANA will receive your data if they require the data to fulfil their respective services. These are, for example:
  • IT service providers we need for the operation and security of our IT systems
  • Service providers who are responsible for the programming and maintenance of our website / applicant database / customer database and our newsletter program
  • Shipping partners for the transmission of print copies or prizes
  • Advertising and address publishers as well as printers for postal mailings

A transfer to a third-party country takes place in individual cases only on the basis of an adequacy decision by the European Commission, the current standard contractual clauses, appropriate guarantees or your express consent.

§ 6 Use of Cookies and AccessWidget

Scope and purpose of data processing

Our website uses so-called cookies. These are small text files that are stored on your end device with the help of the browser. They do not cause any damage. We use cookies to make our website user-friendly. Some cookies remain stored on your end device even after you leave our website until you delete them. They allow us to recognize your browser the next time you visit.

You can agree to the use of analysis tools. On our website, general information about the usage behavior of visitors is collected with the help of analysis tools. These include, for example, pages viewed, duration of visit, referring pages, and general information about your computer system such as operating system, screen resolution, browser used, etc. All collected data is stored anonymously and cannot be assigned to you personally.

The “SESSION IDENTIFIER” cookie is a strictly necessary cookie. This cookie stores your current session related to PHP applications, ensuring that all features of this website based on the PHP programming language can be fully displayed. The cookie is deleted when you close your internet browser.

You can set up your browser so that it informs you about the setting of cookies and you only allow this in individual cases. The settings required for this differ depending on the browser and end device, you can usually find the corresponding instructions in the “Help” section of the device or browser.

You can change your cookie settings at any time via the “Cookie settings” link. We only use non-essential cookies based on your consent and essential cookies based on our legitimate interest to ensure the proper functioning of this website. You have the right to withdraw your consent at any time by clicking on “Cookie Settings” at the bottom of the website. The revocation shall not affect the legality of the processing carried out up to that point.

If cookies are disabled, the functionality of our website may be limited.

We use Youtube on our website to offer you video content. YouTube does not set cookies. When you click on a video, your IP address is sent to Youtube. More information about how Youtube uses data can be found here: https://policies.google.com/privacy?hl=de 

We use Eurolandir to provide you with up-to-date stock price information. Eurolandir does not currently use cookies.

These services are only used with your consent. You have the right to withdraw your consent at any time by clicking on “Cookie Settings” at the bottom of the website. The revocation shall not affect the legality of the processing carried out up to that point.

To create a website that is as digitally accessible as possible, we use the services of AccessiWay GmbH, based in Vienna, Austria. In order to make the website technically accessible, purely technical data is transmitted to the server of AccessiBe Ltd, Israel (GDPR compliant through an adequacy decision), with an EU server location in Brussels/Belgium (GDPR compliant and additional SCC, Standard Contractual Clause). This data is SSL3 encrypted and deleted immediately after the accessible, technical information has been accessed. No data storage takes place. Only the IP address and user agent (web browser) are transmitted. Refer website. No cookies are set or saved, the data transfer is purely technical and is used to create a technically accessible website.

Legal basis

Due to the purposes described, the legal basis for the processing of personal data using cookies and AccessWidget is Art. 6 para. 1 (f) GDPR (website provision and accessibility). If you have given us your consent to the use of cookies or other services on the basis of a notice (“cookie banner”) issued by us on the website, the legality of the use is based on Art. 6 para. 1 (a) GDPR.

Storage duration

As soon as the data transmitted to us via cookies or other services are no longer required to achieve the purposes described above, this information is deleted. Further storage may take place in individual cases if required by law.

§ 7 Tracking tools and use of Siteimprove Analytics

To analyze and continuously improve our website, we use Siteimprove Analytics, a web analytics service provided by Siteimprove. Siteimprove Analytics uses “cookies”, text files that are stored on your computer or smartphone, to analyze how visitors use the website. The information created by the cookies about how visitors use the website is stored and processed by Siteimprove on servers in Denmark. IP addresses are completely anonymized before collected data is visible to us via the Siteimprove Suite. A reversal of the anonymization of IP addresses and an assignment of IP addresses to collected data is not possible. We use this information to evaluate and report on the user behavior of website visitors, and to improve the website experience for our visitors. Siteimprove will not share this information with third parties or use it for marketing or promotional purposes of any kind.

These cookies from Siteimprove are used on this website:

Cookie name: nmstat Type: Persistent – expires after 1000 days. About the cookie: This cookie is used to record visitor behavior on the website. It is used to collect statistics about website usage, such as when the visitor last visited the website. The cookie does not contain any personal data and is used solely for website analysis.

Cookie name: siteimproveses Type: Session cookie About the cookie: This cookie is used to track the sequence of pages that a visitor views during their visit to the website. The cookie does not contain any personal data and is used solely for website analysis.

Legal basis

Due to the described purposes of use, the legal basis for the processing of personal data using these tools and cookies is Art. 6 para. 1 (a) GDPR via the cookie banner.

Storage duration

As soon as the data transmitted to us via the cookies is no longer required to achieve the purposes described above, this information is deleted. Further storage may take place in individual cases if required by law.

§ 8 LinkedIn Insight Tag

If you give us your consent (Art. 6 para. 1 lit. a GDPR), we use the LinkedIn Insight Tag on our website to analyse the behaviour of our website visitors and to optimize our marketing activities. The following data is collected:

• URL of the page visited
• Referrer URL (previously visited page)
• IP address (shortened or hashed)
• Device and browser properties (user agent)
• Timestamp of the visit

The data collected is pseudonymized and deleted within 180 days. The recipient of the data is LinkedIn Ireland Unlimited Company. The data is transferred to the USA on the basis of the EU-U.S. Data Privacy Framework. We have concluded an order processing agreement with LinkedIn to ensure the protection of your personal data. You can find further information at https://linkedin.com/legal/cookie-policy/

§ 9 Hyperlinks

Our website contains so-called hyperlinks to websites of other providers. When these hyperlinks are activated, you will be redirected from our website directly to the website of the other provider. You can recognize this, among other things, by the change of URL. We cannot accept any responsibility for the confidential handling of your data on these third-party websites, as we have no influence on whether these companies comply with data protection regulations. Please refer to these websites directly for information about the handling of your personal data by these companies.

§ 10 Social Sharing

For the social sharing functionalities, we do not use plugins from the respective social media services. Instead, we just use a text link or image link. As a result, no data, such as your IP address, browser used, screen resolution, the website accessed, date and time, is transmitted to the respective social media services.

Such links may look like this: www.facebook.com/sharer/sharer.php

If you click on a social sharing link while logged into your respective social media account, you can share the content of our pages on your profile. This allows the social media service to assign the visit to our site to your user account.

We use links to the following social media services on our websites:

1. Facebook (Meta Platforms, Inc. 1601 Willow Road Menlo Park, California 94025, USA)
2. Instagram (Meta Platforms, Inc. 1601 Willow Road Menlo Park, California 94025, USA)
3. LinkedIn (605 West Maude Avenue, Sunnyvale, California, 94085, USA)

We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by the aforementioned providers.

§ 11 Use of social media

Responsible for the data processing

AGRANA Beteiligungs-AG

Scope and purpose of data processing

In order to stay in contact with our customers or prospective customers or to establish new contact and to present our company, we have set up our own company profile on Facebook, Instagram, YouTube and LinkedIn. As stated above, Facebook and Instagram are services of Meta Platforms, Inc. 1601 Willow Road Menlo Park, California 94025, USA. Youtube is a subsidiary of Google Inc, 160 Amphitheatre Parkway, Mountain View, CA 94043, USA. In addition to public or private interaction with other users, the purpose is as well the technical management of accounts.

At this point, we expressly point out that Meta Platforms, YouTube and LinkedIn (collectively “services”) store data provided by users and use it for business purposes. We have no control over the processing of data by these services. In this regard, we refer to the privacy policies of Meta Platforms for Facebook and Instagram, as well as Google Inc. for YouTube and LinkedIn.

We also point out that the services can assign the visit to our company profiles, if you enter via a browser that has stored your user data.

As soon as you access our profiles, the browser establishes a connection with the servers of the services. At this moment, your data may be transferred to third party countries, your IP address may be transmitted or cookies may be used. It cannot be ruled out that your data will also be processed in third party countries, in particular the USA. For more details, please visit the following.

https://www.facebook.com/policy

https://privacy.linkedin.com

https://policies.google.com/privacy

We use Facebook Insights on our Facebook fan page for statistical analysis purposes and the analytics tool on YouTube. In doing so, we receive statistical data about the visitors to our profiles. This data is anonymous and cannot be assigned to a specific person or profile. With the help of this function we can better analyze our profiles and adapt them to the needs and interests of the users.

The following data is processed as part of AGRANA’s profiles if these individuals have a social media account on Instagram, Facebook, YouTube or LinkedIn:

• First and last name/company/pseudonym
• Profile picture
• Interactions (public and private)
• Views, Likes, Reactions

We would like to point out that the respective AGRANA profiles are public and that reactions or comments on posts on the profiles are also public and thus available and visible worldwide; this also applies to persons who do not have a user account.

People who do not have an account on Instagram, Facebook, YouTube or LinkedIn can access information published on the respective profiles. However, any form of interaction via the profiles is not possible for people without an account.

Legal basis

The processing of the above data is carried out to protect the legitimate interests of the controller or a third party within the meaning of Art 6 (1) (f) GDPR, unless the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data, prevail. We see a legitimate interest in operating our profiles to provide effective marketing across global platforms and to provide contemporary communication opportunities.

Joint controllers according to Art 26 GDPR

According to the European Court of Justice, AGRANA is jointly responsible with Meta Platforms for the processing of the aforementioned personal data within the meaning of Art 26 GDPR.

For more information, please see the following links:

• https://www.facebook.com/legal/terms/page_controller_addendum
• https://www.facebook.com/legal/terms/information_about_page_insights_data
• https://www.facebook.com/privacy/policy/
• https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect

More information

You can find settings options for the processing of personal data by Facebook on your Facebook account under “Settings” in the menu.

For more information on data processing by Instagram, please visit: https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect

Setting options for the processing of personal data by YouTube can be found at:https://myaccount.google.com/intro/privacycheckup or https://policies.google.com/technologies/product-privacy

For more information on data processing by LinkedIn, please visit: privacy.linkedin.com

Storage duration

The data will be kept for the duration of the existence of your social media account.

§ 12 Rights of the data subject

The GDPR gives you the following rights as a data subject of the processing of personal data:

Right to information: According to Art. 15 GDPR, you can request information about your personal data processed by us. In particular, you can request information about the processing purposes, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right to complain, the origin of your data if it has not been collected by us, about a transfer to third party countries or international organizations, and about the existence of automated decision-making, including profiling, and, if applicable, meaningful information about its details.

Right to rectification: According to Art. 16 GDPR, you can immediately request the correction of incorrect personal data or the completion of your personal data stored by us.

Right to erasure: According to Art. 17 GDPR, you may request the erasure of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest, or to assert, exercise or defend against legal claims.

Right to restriction of processing: According to Art. 18 GDPR, you can request the restriction of the processing of your personal data if you dispute the accuracy of the data, the processing is unlawful, we no longer need the data and you refuse its deletion because you need it to assert, exercise or defend against legal claims. You are also entitled to the right arising from Art. 18 GDPR if you have objected to the processing in accordance with Art. 21 GDPR.

Right to data portability: According to Art. 20 GDPR, you may request to receive the personal data that you have provided to us in a structured, commonly used and machine-readable format or you may request the transfer to another responsible party.

Right to complain: According to Art. 77 GDPR, you have the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence, your workplace or our company headquarters.

Austrian Data Protection Authority
Barichgasse 40-42 
A-1030 Vienna
Phone: +43 1 52 152-0
E-mail: dsb@dsb.gv.at

Withdrawal of consent: According to Art.  7 (3) GDPR, you can revoke your consent at any time with impacts on the future. As a result, we are no longer permitted to continue the data processing based on this consent for the future.

If you wish to assert any of the aforementioned rights against us, please send an e-mail to dataprotection@agrana.com.

§ 13 Right to object

When your personal data is processed on the basis of legitimate interests pursuant to Art 6 para 1, S 1 (f) GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, insofar as there are grounds for doing so that arise from your particular situation or the objection is directed against direct advertising. In the case of direct advertising, you have a general right of objection, which is implemented by us without specifying a particular situation.

§ 14 Data security and security measures We are committed to protect your privacy and to keep your personal information confidential. In order to prevent manipulation, loss or misuse of your data stored by us, we take extensive technical and organizational security precautions, which are regularly