In the following we inform you in detail about the scope and purpose of the processing of the data as well as about the transmission of your data to third parties.
3.1. Visiting the website
Personal data is processed when you visit our website.
3.1.1. Scope of data processing
When you access our website, we automatically collect and store information in so-called server log files, which your browser automatically transmits to us. These are:
3.1.2. Purpose of data processing
We process this data for the purposes of logging system use, the authorization process and evaluating the server log files for problem analysis. If you do not provide us with your data, it may be the case that access is not possible.
3.1.3. Legal basis of data processing
The processing of the data mentioned is in our legitimate interest as the operator of the website (see also Article 6 Paragraph 1 lit f GDPR). In principle, the individual data sets are not merged, but we reserve the right to check the data if we become aware of specific indications of illegal use, in particular malicious attacks.
You can object to the processing of your personal data at any time, stating reasons. Please address your revocation to DataProtectionOffice@cchellenic.com.
3.1.4. Recipient of the data
We use Costa Limited, Costa House, 6 Porz Avenue, Houghton Hall Business Park, Houghton Regis, Dunstable, Beds, LU5 5YG, Great Britain as a service provider to operate our website, including hosting, and to ensure the security of our IT systems, who may have access to your personal data in the course of your work. If necessary, sub-service providers are used. If your personal data is transferred to third countries, the service provider is contractually obliged to always ensure the protection of your personal data, to take appropriate technical and organizational measures with regard to the security of the data and under no circumstances to process or transfer your data for its own purposes.
Furthermore, we reserve the right to forward the data collected for this purpose to the competent authorities and courts if there is reasonable suspicion. This is due to our legitimate interest in proper legal prosecution (see also Art 6 Para 1 lit f GDPR).
3.1.5. Storage duration
The data collected here will be stored for a period of two years. If we have reasonable suspicion of abusive behavior and forward the data to the responsible public authorities, this data will be stored on a separate data medium and deleted after the legal prosecution has ended.
3.2. Contact initiation
3.2.1. Scope of data processing
We only process your personal data to the extent necessary to process your contact request. This may include names, addresses, e-mail addresses, phone numbers or other personal data you are providing us with.
3.2.2. Purpose of data processing
The processing of your data in the context of initiating contact serves the sole purpose of offering easier communication with concrete answer options to process communication as efficiently and quickly as possible. Of course, we have taken all technical and organizational measures to ensure the security of your data.
3.2.3. Legal basis of data processing
The processing of this data takes place in fulfillment of the (pre-) contractual measures (see also Art 6 Para. 1 lit b GDPR), provided that the contact serves to initiate business. For other purposes, in particular to simply obtain information about our products, processing takes place on the basis of our legitimate interest.
If the required data is not provided, we will unfortunately not be able to answer your request.
3.2.5. Storage duration
Data that we collect as part of your contact will be stored by us for the purpose of processing your request for as long as reasonably necessary after the last contact. In addition, the data will be kept for as long as concrete claims are asserted against us. If we have reasonable suspicion of abusive behavior and forward the data to the responsible public authorities, this data will be stored on a separate data medium and deleted after the legal prosecution has ended.
3.2.6. Recipient of the data
The personal data you provide to us based on your contact initiation will be held in a Data center hosted in Crawley, UK, by a company named Rackspace, whose secondary site is in Ireland, and can be accessed by or given to our staff working outside UK and to third parties, to business partners, government bodies and law enforcement agencies, successors in title to our business and suppliers we engage to process data on our behalf, some of whom are located outside the European Economic Area, who act for us for the purposes and justifications set out in this policy.
Categories of the recipient:
companies within the group of companies of Coca-Cola HBC Switzerland Ltd and/or Coca-Cola Switzerland LLC and/or third-party service providers that process data on our behalfor are involved to provide the services you requested
Purpose of the sharing:
to provide our products and services
Categories of the recipient:
government bodies
Purpose of the sharing:
to fulfil a legal obligation
Categories of the recipient:
successors in title to our business and suppliers
Purpose of the sharing:
performance of the services you requested
If you submit personal information to us, you agree to such sharing.
