Privacy Notice – Fermentis Website

How we collect, use, and protect your personal data

Summary of how we use your data

Lesaffre uses your personal data as a data controller for certain purposes including to operate and maintain our Platform and to manage our interactions and relationships with you. We may also use your personal data for purposes such as to communicate with you about our products and services, direct marketing or analytics. More information is set out in sections 2 and 3.

Personal data is shared with others including our other Lesaffre group companies and third-party vendors. In some instances, personal data is transferred outside the EEA. More information is set out in sections 4 and 5.

Depending on your location, you have certain data protection rights. Specifically, if you reside within the EEA, please see information set out in section 6.

What does this notice cover?

This privacy notice describes how Lesaffre International (also referred to as “we” or “us”) will make use of your data when you use our Platform or app (the “Platform”), you attend Lesaffre events/trade shows or when we do business with you (as a seller or buyer of products or services).

This privacy notice also describes your data protection rights, including the right to object to some of the processing which Lesaffre carries out if you reside within the EEA. More information about your rights, and how to exercise them, is set out in section 7.

Personal data we may collect about you

We collect and process personal data about you when you interact with us. This includes:

• Contact information (name, email address, phone number, postal address)
• Professional information (job title, company, industry)
• Communication preferences
• Information about your use of our Platform (IP address, browser type, pages visited)
• Transaction and payment information
• Information you provide when contacting us or completing forms

Sometimes, we receive information about you from third parties. In particular, we may receive data about you from other entities within the Lesaffre group. This data sharing is part of our global operations and necessary for us to provide you with the best possible service and support. For instance, if you are a client or a supplier of another Lesaffre entity, we may receive information about your business transactions, contact details, and preferences.

How do we use this information, and what is the legal basis for this use?

We will only use your personal data for the purposes and legal bases set out below:

There are instances where we have a legitimate interest to use your data. Our legitimate interest will vary depending on what we are using your data for, and we explain above what the interest is and how it relates to the processing operations that we are carrying out. Where we process personal data on the basis of a legitimate interest, then – as required by data protection law – we have carried out a balancing test to document our interests, to consider what the impact of the processing will be on individuals and to determine whether individuals’ interests outweigh our interests in the processing taking place. You can obtain more information about this balancing test by using the contact details at the end of this privacy notice.

How we share your personal data

We may share your data with the following categories of recipients:

• Lesaffre Group Companies: Other entities within the Lesaffre group worldwide for operational and administrative purposes
• Service Providers: Third-party vendors who provide services on our behalf (hosting, analytics, marketing, payment processing)
• Professional Advisors: Lawyers, accountants, auditors, and other professional advisors
• Legal Authorities: When required by law or to protect our rights
• Business Partners: With your consent or as necessary for specific services

Where we transfer your personal data

Personal data that we collect from you may be transferred to and stored at a destination outside the EEA/UK. Due to the global nature of our business, your personal data will be disclosed to Group Companies outside of the UK and the EEA. Where these locations do not provide an adequate level of data protection, we ensure appropriate safeguards are in place to protect the transfer of your personal data to these countries. A copy of the relevant mechanism can be obtained for your review on request by using the contact details below.

Your choices and rights

You have the following rights:

• Access: To request access to the personal data we hold about you
• Rectification: To request correction of inaccurate or incomplete data
• Erasure: To request deletion of your personal data in certain circumstances
• Restriction: To request restriction of processing in certain circumstances
• Data Portability: To receive your data in a structured, commonly used format
• Objection: To object to processing based on legitimate interests
• Withdraw Consent: To withdraw consent at any time where processing is based on consent

These rights may be limited, for example if fulfilling your request would reveal personal data about another person, or if you ask us to delete information which we are required by law or have compelling legitimate interests to keep.

If you wish to exercise any of these rights, please contact us at the contact details set out below.

Wherever we rely on your consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. We may however have other legal grounds for processing your data for other purposes, such as those set out above.

In some cases, we are able to send you direct marketing without your consent, where we rely on our legitimate interests. You have an absolute right to opt-out of direct marketing, or profiling we carry out for direct marketing, at any time. You can do this by following the instructions in the communication where this is an electronic message, or by contacting us using the details set out below.

If you have unresolved concerns, you have the right to complain to a data protection authority in the country that you reside in or, the country of your place of work or the country where the alleged infringement took place.

In some cases, the provision of information will be mandatory: if relevant data is not provided, then we will not be able to process your request. The mandatory nature of the information to be provided will be clearly indicated at the point of collection. The provision of all other information is optional. For instance, for the contact forms available on our Platform, the data necessary for managing your request are those marked with an asterisk on the contact form. Without providing these data, your request will not be considered by us.

How long we retain your personal data

• Requests and queries: We retain this data for the period necessary to deal with your request, and up to a maximum of 5 years from the last contact.
• Marketing purposes or with your consent: We process the data for a period of 3 years. We also keep a record of the fact that you have asked us not to send you direct marketing or to process your data indefinitely so that we can respect your request in future.
• Site security purposes: We retain it for 6 months.
• Performing a contract: We keep the data for 5 years from your last interaction with us.

Updates to this privacy notice

We reserve the right to update this privacy notice at any time, and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal data.

Contact us

The data controller for your personal data is Lesaffre International. If you have questions about this privacy notice or wish to contact us for any reason in relation to our personal data processing, please contact us at: