Privacy Policy

The responsible party pursuant to the EU General Data Protection Regulation (GDPR), other national data protection regulations in EU Member States, and with regard to other data protection provisions is:

Hilcona AG, based in Schaan, Duchy of Liechtenstein
Phone: +41 58 895 95 95
Email: data-protection@hilcona.com

The Data Protection Coordinator for the responsible party is:

Birgit Schmidinger
Hilcona AG, based in Schaan, Duchy of Liechtenstein
Phone: +41 58 895 95 95
Email: data-protection@hilcona.com
www.hilcona.com

1. Scope of the processing of personal data

We only process our users’ personal data when this is necessary to the provision of a properly functioning website and of our content and services. In addition, we only do so when there is a legal basis according to the provisions of the EU General Data Protection Regulation (“GDPR”) and the Swiss Federal Act on Data Protection (“FADP”). With regard to the FADP, the following shall refer to the current version that is valid until 30 August 2023 and (under the designation “FADP – new”) the version that shall be valid from 1 September 2023.

Furthermore, we process personal information such as name, email address, and surfing and communication behaviour, in particular information for marketing purposes, insofar you have given us your corresponding consent via the cookie consent platform and other consents within the framework of the EU General Data Protection Regulation (GDPR).

2. Description and scope of data processing

Every time that our website is visited, our system automatically collects data and information from the computer system from which the website is being visited. The following data are collected:

Information on the browser type (and version), operating system, internet service provider, server logs, IP address, date and time of access, last access, websites from which the user accesses our website, websites that are opened/accessed from our website, clickstreams; name, email address, and surfing and communication behaviour.

The data are also saved in our system’s log files.

3. Purpose of data processing

The temporary storage of the IP address by the system is necessary in order to provide the website to the user’s computer. To do this, it is necessary to store the user’s IP address for the duration of the session.

This is saved in log files to ensure the proper functioning of the website. These data also help us to operate the website and to ensure the security of our IT systems. This does not involve evaluating the data for marketing purposes.

4. Legal basis for processing personal data

For the purposes of this website, our data processing is performed on the following legal bases:

The legal basis for the temporary storage of data and log files is Article 6 para. 1 lit. f of the GDPR, as well as Article 13 of the FADP / Article 31 of the FADP-new, because the storage is necessary in order to safeguard the legitimate interests of our company or of a third party, and the interests, fundamental rights and fundamental freedoms of the data subjects do not override the aforementioned interests.

5. Duration of storage

The data are deleted as soon as they are no longer required for the purpose for which they were collected. In the event that the data were collected for the provision of the website, this shall be the case when the session is concluded.

With regard to the storage of data in log files, this is the case after no more than seven days. It is possible that data may be stored past this point. In this case, the users’ IP addresses are deleted or anonymised such that they can no longer be attributed to the accessing client.

6. Right to object and the possibility of removal

The collection of data for providing the website and the storage of data in log files is absolutely essential for operating the website. As a result, the user does not have a right to object to this storage. Should the user wish to prevent the collection and continued storage of their data, they must leave the website and avoid visiting this website in future.

7. Use of cookies

Our website uses cookies. Cookies are text files that are saved in the internet browser / which the internet browser saves on the user’s computer system. If a user visits a website, a cookie can be saved in the user’s operating system. This cookie contains a characteristic string of characters that make it possible to definitively identify the browser the next time that the website is accessed.

The purpose of cookies to it simplify the use of the website for the user. We would not be able to offer some of our website’s functions without the use of cookies. These functions require that it be possible to recognise the browser after other websites have been visited.

We require cookies for the following applications:

Adoption of language settings, user-friendly configuration of the website, improving the navigation, optimising use, statistical analysis of the use by Google Analytics.

The following data are saved and transmitted in the cookies:

Language settings and information in the contact form

The user data collected by cookies that are required for technical purposes are not used for the creation of user profiles. The following data are processed in this manner:

In addition to the technically necessary cookies, we also use cookies that are not technically necessary in order to make it possible to analyse the user’s surfing behaviour.

Search terms entered, frequency of page impressions, utilisation of website functions

Analytical cookies are used for the purposes of improving the quality of our website and its content. We use analytical cookies to find out how the website is used, allowing us to continuously optimise what we offer.

When our website is visited, the user is informed that cookies are utilised for analytical purposes and their consent to the processing of their personal data in this regard is obtained. Reference is also made to this Privacy Policy in this regard.

Cookies are saved on the user’s computer and transmitted from there to our website. As a result, you – as the user – also have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been saved can be deleted by the user at any time through their web browser. This can also be done automatically.

If cookies are deactivated for our website, it is possible that the user will no longer be able to use the full scope of our website’s functions.

Obtaining consent using Cookiebot

Our website uses Cookiebot’s consent technology to obtain your consent to the storage of certain cookies on your device and/or the use of certain technologies and the documentation thereof in compliance with data projection regulations. The provider of this technology is Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter referred to as “Cookiebot”).

8. Google Tag Manager

We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

9. Google Analytics

This website uses Google Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses cookies. These are text files that are saved on your computer and that make it possible to analyse your use of the website. The information on your use of this website that is generated by the cookies is generally transferred to a Google server in the USA and stored there. We have activated the IP anonymisation function on this website. This means that Google shortens your IP address within the Member States of the European Union or in other Contracting States to the Agreement on the European Economic Area before it is transmitted to the USA. It is only in exceptional cases that the full IP address is transferred to a Google server in the USA and shortened there.

10. Utilisation of social media plug-ins and Pixel

Facebook plug-in

Facebook Pixel

Instagram plug-in

LinkedIn plug-in

LinkedIn Insight Tag

Our website uses LinkedIn Insight Tag, an analytical tool provided by LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA. The LinkedIn Insight Tag makes it possible to collect data on visits to our website, including URL, referrer URL, IP address, device and browser characteristics, and a time stamp. These data are encrypted, anonymised within seven days, and the anonymised data are deleted within 90 days.

11. Newsletter

Our website offers the opportunity to subscribe to a newsletter free of charge. The opportunity to obtain this newsletter is also offered when an order is placed and if contact is made through our website.

When registering for the newsletter, the following data are transmitted to us through the entry screen:

The user’s name, position, employer, type of restaurant/catering/food service business, email address, country, postcode, language, date and time of registration, consent to the privacy policy

In the event that the user has given their consent, the legal basis for processing the data after registering for the newsletter is provided by Article 6 para. 1 lit. a of the GDPR (consent of the data subject).

No data are transmitted to third parties in relation to the data processing performed for the dispatch of newsletters, except for within the framework of the Bell Food Group, i.e. the corporate group to which we belong. These data are forwarded for the purposes of storage in the Bell Food Group’s central data centres and for the performance of analyses and creation of strategies for the business activities of the Bell Food Group. It is possible that data may be transferred to other countries in the EU, the EEA or Switzerland in this regard.

The user’s email address is collected in order to facilitate the delivery of the newsletter. The collection of other personal data within the framework of the registration process helps to prevent the misuse of the services or of the email address used and to document compliance with the GDPR.

The user's personal data related to the newsletter are deleted as soon as they are no longer required for the purpose for which they were collected, i.e. when the user cancels their subscription to the newsletter.

The individual concerned may cancel their subscription to the newsletter at any time. A link allowing them to do so can be found in every newsletter, while the website at
http://newsletter-hilcona-en.mail-eur.net/
http://newsletter-hilcona.mail-eur.net/
http://newsletter-hilcona-fr.mail-eur.net/
has an entry screen for this purpose. This also makes it possible for the user to revoke their consent to the storage of the personal data that were collected during the registration process.

12. Contact form, telephone and email contact

There is a contact form on our website that can be used to get into contact electronically. If a user takes advantage of this opportunity, the data they enter into this entry screen will be transmitted to us and saved. These data are:

The user’s name, email address, postal address, form of address, date and time of registration, consent to the privacy policy, and the user’s enquiry.

As an alternative, it is also possible to contact the company using the email address provided or to do so by telephone. In this case, the personal data that the user supplied with their email or by phone will be saved, and in particular the user’s email address and/or phone number.

No data are transmitted to third parties in this regard, except for within the framework of the Bell Food Group. These data are forwarded for the purposes of storage in the Bell Food Group’s central data centres and for the performance of analyses and creation of strategies for the business activities of the Bell Food Group. It is possible that data may be transferred to other countries in the EU, the EEA or Switzerland in this regard.

In the event that the user has given their consent, the legal basis for processing the data is provided by Article 6 para. 1 lit. a of the GDPR and Article 13 of the FADP / Article 31 of the FADP-new.

The legal basis for processing the data that are supplied when sending an email is provided by Article 6 para. 1 lit. f of the GDPR and Article 13 of the FADP / Article 31 of the FADP-new. Should the email contact have taken place for the purposes of concluding a contract, an additional legal basis for processing the data is provided by Article 6 para. 1 lit. b of the GDPR and Article 13 para. 2 lit. a of the FADP / Article 31 para. 2 lit. a of the FADP-new.

The processing of personal data from the entry screen is used by us solely for the purpose of facilitating communication with the user. In the event that contact is made via email, the required legitimate interest in processing these data is also given.

The personal data that are otherwise processed during the process of sending the email help to prevent any misuse of the contact form while ensuring the security of our IT systems.

The data are deleted as soon as they are no longer required for the purpose for which they were collected. With regard to personal data from the entry screen of the contact form and those data that are transmitted via email, this shall be the case if the respective conversation with the user has concluded. The conversation is considered to have ended if circumstances make it evident that clarification of the relevant issue has been completed.

Any other personal data that are collected during the process of sending the email will be deleted after a period of no more than seven days.

The user has the right to revoke their consent to the processing of their personal data at any time. If the user contacts us by email, they can object to the storage of their personal data at any time by sending an email to Foodservice@hilcona.com or data-protection@hilcona.com. Should this occur, it will not be possible to continue the conversation. If, on the account of communication that has already occurred, action should have been taken that triggers binding legal consequences for us or for the data subject, we are authorised to deny a request to delete the data insofar as our data processing can be justified according one of the legal bases specified in Article 6 of the GDPR.

All personal data that are saved in the context of contact being made will be deleted in this case.

13. Rights of the user

In the event that your personal data are processed, you are the data subject in accordance with the GDPR and you have the following rights with respect to us as the responsible party:

Right to obtain information

You have the right to demand a confirmation from us as to whether or not we have processed your personal data. In the event that such data processing has taken place, you can request information on the following from us.

You have the right to demand information as to whether your personal data have been transmitted to a third country or to an international organisation. In this regard, you can demand that you be informed of suitable guarantees in accordance with Article 46 of the GDPR in conjunction with the data transfer.

Right to rectification

You have the right to the rectification and/or the supplementation of data, insofar as the personal data relevant to you that are processed are incorrect or incomplete. We must carry out the rectification without delay as soon as you have informed us of how these data should be collected and recorded properly.

Right to demand the restriction of data processing

In the following circumstances you have the right to demand that the processing of your personal data be restricted:

In the event that the processing of your personal data has been restricted, these data – with the exception of their storage – may only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.

Should processing of the data have been restricted due to one of the aforementioned circumstances, you will be notified by us before any restriction is lifted.

Right to erasure (‘right to be forgotten’)

You have the right to demand that your personal data be deleted without delay, in which case we are obligated to delete these data without delay insofar as one of the following reasons should apply:

In the event that we have made your personal data public and are obligated under an applicable law to delete these data, we shall – taking into account the available technology and implementation costs – undertake appropriate measures, including of a technical nature, to inform the parties responsible for the data processing that you as the data subject have demanded the deletion of all links to these personal data and the deletion of these data and any copies or replicas of these personal data.

There is no right to erasure insofar as processing of the data is required

If you have asserted your right to the rectification, erasure or restriction of the processing of the data against us, we are obligated to inform all of the parties to whom your personal data have been revealed about this rectification or erasure of data or of the restrictions on the processing thereof, unless this should prove to be impossible or would require disproportional effort. You have the right to demand that we inform you of who these recipients are.

Right to data portability

You have the right to obtain the data pertaining to you that you have provided to us in a structured, standard and machine-readable format. Furthermore, you have the right to transfer these data to another responsible party without being hindered by us to whom the personal data were provided insofar as

In exercising this right, you also have the right to see to it that your personal data are transferred by us directly to another responsible party insofar as this is technically feasible. The freedoms and rights of other persons must not be infringed hereby.

The right to data portability does not apply to the processing of personal data that are required for the performance of activities that are in the public interest or which are taking place for the exercise of official authority that has been vested in us.

Right to lodge an objection

You have the right, on grounds relating to your particular situation, to at any time object to the processing of your personal data; this also applies to profiling based on these provisions.

We will then cease processing your personal data unless we are able to demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or if the processing serves the purposes of the establishment, exercise or defence of legal claims.

In the event that your personal data are processed for the purposes of direct marketing, you have the right to object at any time to the processing of your personal data for the purposes of such marketing activities; this shall also apply to profiling insofar as this is related to such direct marketing.

In the event that you object to processing for the purposes of direct marketing, your personal data will no longer be processed for these purposes.

You have the opportunity in conjunction with the use of services offered by the Information Society to exercise your right to object via automated procedures in which technical specifications are utilised.

Right to revoke a declaration of consent under data protection law

You have the right to revoke your declaration of consent under data protection law at any time. A revocation of your declaration of consent under data protection law does not impact the lawfulness of any data processing performed on the basis of this consent before the revocation.

Automated decision-making in individual cases including profiling

You have the right not to be subject to a decision based solely on automated means – including profiling

Even so, these decisions may not be based on special categories of data nor on personal data that is particularly deserving of protection, insofar as statutory provisions have not been satisfied and appropriate measures for the protection of rights and freedoms and of your legitimate interests have not been taken.

With regard to the specified cases, we shall implement suitable measures to safeguard your rights and freedoms and your legitimate interests, including at least the right to obtain human intervention on our part, to express the point of view and to contest the decision.

Right to lodge a complaint with a competent supervisory authority

Notwithstanding other administrative or judicial remedies, you have the right to lodge a complaint with a competent supervisory authority, particularly within the Member State in which you are currently located, in which you work, or which is the location of the suspected violation, if you believe that the processing of your personal data is in violation of the provisions of the GDPR and/or the FADP/FADP-new.

The supervisory authority to which the complaint is submitted shall inform the complainant of the status and results of their complaint, including the possibility for judicial remedies.