Privacy Policy English

1. BASIC INFORMATION

1.1 This document ("Personal data policy") constitutes a policy regarding the collection, use and processing of personal data carried out by FoodFacts Sweden AB, organization number 559054-2295 with address c / o Erik Strandin Pers, Fågelkärrsvägen 11, 122 32, Enskede, Sweden ("FoodFacts" “We” or “us”).

1.2 This Personal Data Policy provides you with information on how we, as data controllers, collect and process your personal data when you use our mobile application FoodFacts to obtain information about food (the "Service").

1.3 All definitions in this Personal Data Policy shall be interpreted in accordance with the applicable data protection laws, in particular with the General Data Protection Regulation (GDPR) 2016/679 related to the processing of personal data, the Data Protection Directive 2002/58 / EC on processing of personal data and privacy in the electronic communication sector, as well as national implementations and other related national legislation.

2. PROCESSING OF PERSONAL DATA AND PURPOSES

2.1 Below we have tabulated a description of all the ways in which we process your Personal Data and the legal basis on which we rely on when we do so. In cases where the legal basis consists of a legitimate interest, we have also stated what our legitimate interest is.

2.2 Please note that we cannot provide the Service to you if you do not provide us with the personal information as shown below. If you choose not to provide us with personal information regarding your Device ID and activity data by not accepting this Personal Information Policy, the Service will not work. If you choose not to accept that we save your email address, we cannot send you newsletters, offers or other information.

3. CONSENT

3.1 By agreeing to the mailing of newsletters, you agree that we process your email address to send out newsletters in accordance with this Privacy Policy. You have the right to withdraw your consent. Withdrawal of your consent does not affect the legality of prior processing before the consent was withdrawn, and based on other legal grounds, we may continue processing your personal data, except for direct marketing purposes.

4. TRANSFER OF PERSONAL DATA

4.1 We may share and transfer your personal data to suppliers of IT systems and IT services, systems management and business partners, as well as to auditors, advisors, legal representatives or similar recipients when required by law, administrative laws, government decisions, court decisions, or to protect our rights.

4.2 We may transfer your personal data to third countries, i.e. outside the EU/EEA, for example by using IT service providers to keep statistics and administer newsletters in third countries. We will make sure to enter into agreements and take other measures to protect your personal information in accordance with applicable legal requirements for the data transfers to this/these recipients. You may obtain further information about these transfers by contacting us via the contact information

provided in paragraph 9.1.

4.3 When you use the Service, you may be referred to external websites where their collection of personal data is beyond our control. The personal data policy on these websites will govern the handling of the information collected from you.

5. LEGAL INQUIRIES AND PREVENTION OF DAMAGE

In addition to what is described above, we may, in some cases, process your personal data if we are obliged by law, at the request of an authority or in response to legal inquiries (such as house searches, court decisions, lawsuits or similar). The legal basis for the processing is then that the processing is necessary for the fulfillment of a legal obligation and we then store the data for as long as we are obliged to store it.

We may also process your personal data when necessary to protect ourselves, you and other users, including as part of an investigation if we believe in good faith that this is required by applicable law or when it is in our legitimate interest to establish, assert or defend our legal claims. In these cases, we store the data for as long as is necessary to achieve the purpose of the processing.

6. STORAGE

We will store your email address until you unsubscribe from our newsletter and/or other emails you may have given your consent to. We store your Device ID and Activity Data for statistical purposes as long as you use the Service and automatically delete it after a certain time period after you have terminated the Service.

7. CHILDREN

The service does not target persons under the age of thirteen (13). If you are the parent or guardian of a person under the age of 13 and are aware that the child has provided us with personal data without your consent, please contact us via the contact information in paragraph 9.1 below to exercise your right of access, rectification, deletion, restriction of processing and opposition.

8. YOUR RIGHTS

8.1 You have the right to request access to additional information regarding the processing of your personal data, or request that we correct, rectify, complete, delete or limit the processing of your personal data. You normally have a right to access your personal data free of charge, but in case of manifestly unfounded, repetitive or unreasonable requests, we may charge a reasonable fee or refuse to comply with your request.

8.2 If the processing is based on the legal basis of consent or performance of contract, you are entitled to the right to data portability. Data portability means that you may obtain the personal data you have provided to us in a structured, widely used and machine-readable format and have the right to transfer such personal data to another personal data controller.

9. CONTACT INFORMATION

9.1 To exercise your rights or if you have questions about our processing of your personal data, please contact our Data Protection Officer Erik Strandin Pers at the following address: erik@foodfacts.se or at the address details under paragraph 1.1 above. Please enter your full name, and “Data protection request” in the subject line. Please note that you may need to verify your identity before your request can be processed.

9.2 If you have any complaints regarding our processing of your personal data, you may contact us on the information above. You also always have a right to submit a complaint to the relevant data protection supervisory authority. For more information about local data protection authorities, click

on this link.

10. CHANGE IN OWNERSHIP

If the ownership of our business changes, we may transfer your information to the new owners so that they can continue to provide the Service. The new owners shall continue to comply with the commitments we have made in this Privacy Policy.

11. NOTIFICATION OF CHANGES

If we make changes to this Privacy Policy, we will inform you by updating our Privacy Policy available in the Service. If the changes are substantial, we will in addition notify you in an appropriate manner and, if required by applicable law, ask for your consent.