Privacy policy

Südzucker AG places great importance to the protection of your privacy and your personal data as well as the necessary data security and therefore collects, processes and uses your personal data exclusively in accordance with the principles described below as well as the requirements of the EU General Data Protection Regulation (GDPR) and the national data protection laws applicable to Südzucker AG (German Federal Data Protection Act [BDSG], Telecommunications Telemedia Data Protection Act [TTDSG]).

I. Controller

Controller as defined by the GDPR and other national data protection laws of the EU member states as well as other applicable data protection regulations for the operation of the website www.suedzuckergroup.com (hereinafter "website") is:

Südzucker AG
Maximilianstraße 10
68165 Mannheim
Phone: +49 621 421-0
Fax: +49 621 421-425
E-mail: [email protected]
Website: www.suedzuckergroup.com

Chairman of the supervisory board: Dr. Stefan Streng
Executive Board: Dr. Niels Pörksen (CEO), Stephan Büttner, Hans-Peter Gai, Thomas Kölbl, Dr. Stephan Meeder
Registration court: Magistrates Court Mannheim, Nr. HRB 0042

(hereinafter referred to as "Südzucker", "us" or "we")

If you wish to object to the collection, processing or use of your data by us in accordance with this privacy policy as a whole or for individual measures, you can send your objection by e-mail, fax or letter to the aforementioned contact data or to our data protection officer. You may also receive information on your personal data at any time and free of charge under the contact details mentioned.

II. Data Protection Officer

The data protection officer of the Controller is available at:
Südzucker AG
Data Protection Officer
Maximilianstraße 10
68165 Mannheim
E-mail: [email protected]

III. Your personal data

Personal data is any information relating to an identified or identifiable natural person (hereinafter "data subject"). When visiting our website, it is not necessary for you to provide us with personal data. We only collect personal data, such as your name, postal and e-mail address, telephone number or date of birth, if you provide it to us voluntarily or if you have consented to its collection. For the technically required data, we refer to the execution under "Provision of the website and creation of log files / log files" and "Use of cookies".

IV. General information on data processing

1. Scope of the processing of personal data
We process personal data (hereinafter also referred to as "data") of data subjects, i.e. visitors to the website, via this website to the extent that this is necessary for the provision of a functional website and our content and services. The processing of personal data of our users is regularly carried out only after the user has consented to the processing. An exception applies in those cases where processing of the data is permitted by legal regulations, required for the fulfillment of a contract or technically necessary.

2. Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a GDPR serves as the legal basis.
In case of the processing of personal data required for the performance of a contract of which the data subject is a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
Insofar as the processing of personal data is required to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as a legal basis.
If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for processing.
The storage of information in terminal devices of a data subject or the access to information which is already stored in the terminal device shall only take place on the basis of the data subject's consent pursuant to Section 25 (1) TTDSG, unless the storage of information in the terminal device of the data subject or the access to information already stored in the terminal device by us is absolutely necessary (Section 25 (2) TTDSG) in order to provide the desired telemedia service to the data subject.

3. Data erasure and storage time
The personal data of the person concerned will be deleted as soon as the purpose of storage ceases to apply. Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the Controller is subject. The data will be deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.

V. Provision of the website and creation of log files

1. Description and scope of data processing
During the mere informational use of the website, we only collect the personal data that your browser transmits to our server or provider and that is technically necessary for the purpose of displaying our website to you and ensuring its stability and security.

We have contracted the company trio-group communication & marketing GmbH, Carl-Reuther-Straße 1, 68305 Mannheim, Germany (hereinafter "trio-group") for the hosting and technical provision of our website. We have concluded with trio-group the required data protection agreement for commissioned processing in accordance with Art. 28 DSGVO. According to this agreement, trio-group undertakes to ensure the necessary protection of your data and to process it in accordance with the applicable data protection regulations exclusively on our behalf and in accordance with our instructions. For more information about trio-group, please visit the website https://www.trio-group.de/de. 

The following data in log files or log files are processed by trio-group for the hosting of the website:
(1) Information about the browser type and version used
(2) The user's operating system
(3) The IP address of the user
(4) Date and time of access
(5) Websites from which the user's system reaches our website
(6) Websites accessed by the user's system via our website
(7) The Internet service provider of the user
(8) The time spent on the website
(9) The amount of data sent/transmitted
(10) The geographical origin of the visit

Trio-group also uses the Cloudflare service of the provider Cloudflare Germany GmbH, Rosental 7, C/O Mindspace, 80331 Munich, Germany (hereinafter "Cloudflare") to ensure the security and delivery of our website. Trio-group uses the "Content Delivery Network" (CDN), in particular to significantly reduce the loading time of web content by sending our video and photo files from a faster server compared to the web server, it also serves the stability as well as the accessibility of our website. For these purposes, the information may also be processed in log files by Cloudflare. Trio-group has taken the necessary data protection agreements and security measures. Trio-group uses the information ((1)-(10)) and the sub-service providers used for the specified purpose on our behalf. An independent use of the data by trio-group as well as an unauthorized transfer to third parties does not take place. A storage of this data together with other personal data of the user does not take place.

2. Legal basis for data processing
The legal basis for the temporary storage of the data and the log files as well as the involvement of technical hosting providers is Art. 6 para. 1 lit. f GDPR.

3. Purpose of data processing
The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this the IP address of the user must remain stored for the duration of the session.
The data is stored in log files to ensure the functionality of the website. In addition, the data serves us to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
Our legitimate interest in data processing pursuant to Art. 6 para. 1 lit. f GDPR also lies in these aforementioned purposes.

4. Duration of storage
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
If the data is stored in log files, this is the case after 30 days at the latest. Further storage is possible. In this case, the IP addresses of the users are deleted or distorted, so that an assignment of the calling client is no longer possible.

5. Possibility of objection and/or erasure
In principle, the user has the possibility to object to the processing of personal data under the conditions of Art. 21 GDPR. The objection can be made at any time via the contact details under I. and II. as well as at the following e-mail address [email protected]. See also point XV. The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. 

VI. Use of cookies

1. Description and scope of data processing
We use cookies to make your visit to our website more attractive. Cookies are small text files that are stored on your terminal device and enable us to recognize your browser, among other things. Cookies enable us to improve the comfort and quality of the services provided on the website. Cookies are also used to analyze the use of the website in anonymized form.

Some of the cookies we use are deleted after the end of your browser session, i.e. after you close your browser (so-called "session cookies"). Other cookies remain on your terminal device during their respective validity period (see below) and enable us to recognize your browser on your next visit.

When calling up our website, we inform users by means of an info banner about the use of cookies (technically necessary cookies, statistics cookies and personalization cookies) and have technically set up the consent required under data protection law for the setting of cookies for which consent is necessary. Except for the technically necessary cookies, consent must always be given in advance for cookies to be set on the user's terminal device. Via the info banner, the user is also made aware of this privacy policy.

In the following, we provide you with an overview of the cookies used, their validity period and the respective opt-out options. In addition, we would like to point out that you can adjust your cookie settings at any time and revoke your consent at any time for the future.

Technically necessary cookies (essential):
We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change.

The following technically necessary cookies are set when visiting our website:

These cookies are transmitted to us each time a page is accessed, do not contain any personal data and are therefore not used for personal identification

Statistics cookies:
We use cookies on our website that allow us to analyze the browsing behavior of our users. In this way, we can provide aggregated statistics on the frequency of page views, average time spent on the site, bounce rate or the use of website functions. The user data collected in this way is anonymized during collection by a technical precaution that has been set up. Therefore, an assignment of the data to the visiting user of the website is no longer possible. This anonymized data is not stored together with personal data of the users.

The use of statistics cookies is for the purpose of improving the quality of our website and its content. Through the statistics cookies, we learn how our website is used and can thus constantly optimize our services for our users. For a description of the cookies, how they work, their purpose and the options for objecting to them, please refer to "VIII. Analysis of usage data with etracker".

Functional cookies:
In addition, third-party providers may set so-called third-party cookies on your terminal device due to the use of various plugins on our website. We implement all plugins used, e.g. for the integration of a Google Maps map or a YouTube video with a consent solution, i.e. the third-party provider can only set cookies or receive information about your visit to our website if you have actively clicked on the respective plugin or have consented to the display of third-party integrations or the integrated Google Maps maps or YouTube video via our cookie banner. For a description of the cookies, how they work, their purpose and the options to object, please refer to the explanations under "XIII. Use of Google Maps" and “XIV. Use of YouTube”.

2. Legal basis for the data processing 
The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 p. 1 lit. f) GDPR in conjunction with Section 25 para. 2 (2) TTDSG. The legal basis for the processing of personal data using cookies for statistical purposes (statistics cookies) and for personalization is based on your consent granted Art. 6 para. 1 p. 1 lit. a) GDPR in conjunction with Section 25 para. 1 TTDSG.

3. Purpose of data processing
The purpose of using technically necessary cookies is to enable the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these it is necessary that the browser is recognized even after a page change.
The user data collected by technically necessary cookies is not used to create user profiles.
The use of the statistics and personalization cookies is for the purpose of improving the quality of our website and its content based on your given consent. Through the cookies, we learn how the website is used and can thus constantly optimize our services. We refer to "VIII. Analysis of usage data with etracker" and "XIII. Use of Google Maps".

4. Duration of storage, possibility of objection and removal
Cookies are stored on the user's end device used in each case and are transmitted from this device to our site. Therefore you as a user have full control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or restrict the transmission of cookies. Cookies already stored can be deleted at any time. This can also be done automatically. In addition, we offer you a possibility to change the settings made via our cookie banner at any time or to revoke your given consent for the future via the link to the cookie settings ("Cookie Settings") on our website. It is also possible to use our website without cookies. However, this may lead to certain restrictions in the functions and user-friendliness of our services on the website.

VII. Privacy setting with Usercentrics Consent Management Platform

1. Description and scope of data processing
The website uses the services of Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany (hereinafter "Usercentrics") for the provision of a consent management platform (in short: "CMP") or a cookie banner, i.e. a system that manages the use of third-party providers, technical measures as well as cookies via granted or rejected consent.

We, specifically our service provider trio-group, have concluded the required data protection agreement with Usercentrics for commissioned processing in accordance with Art. 28 DSGVO. According to this agreement, Usercentrics undertakes to ensure the necessary protection of your data and to process it in accordance with the applicable data protection regulations exclusively on our behalf and in accordance with our instructions. For more information about Usercentrics, please visit the website: https://usercentrics.com/de/. 

Usercentrics processes the following data to provide and manage the CMP:
-    Your IP address, anonymized when collected by Usercentrics, and other information about the terminal device used,
-    Date and time of your visit to our website or the time of your consent
-    Information on the browser used and the browser version,
-    Information about the accessed website (Refferer URL),
-    Your given consents or individual privacy settings (opt-in and opt-out data, banner language, template version, consent type) incl. a randomly chosen anonymous ID (Consent ID).

and uses both the local storage on your end device and the setting of cookies to store this information locally in your browser. The data is also stored on cloud servers hosted by Usercentrics in the European Economic Area (Frankfurt am Main and Brussels). The retention period is the time period during which the data processed by the CMP is stored for the purpose of consent management. The consent data (granted consent and revocation of consent) is kept for three years. Within this period, no renewed consent is required, unless new systems are introduced or due to legal or regulatory frameworks, it is necessary to obtain renewed consent.
For more information about Usercentrics' data processing, please see Usercentrics' privacy policy at https://usercentrics.com/privacy-policy/.

2. Purpose and legal basis for data processing
The purpose of the data processing by Usercentrics is the provision as well as the management of the consents granted by our website visitors in order to comply with a data protection compliant consent management. The use of Usercentrics serves the purpose of providing evidence of granted and non-granted consents as well as managing the individual data protection settings of our website visitors. The processing is carried out for the purpose of obtaining the website visitor's consent, providing revocation and objection options, providing evidence of the consent received (time of consent, end device used) as well as identifying the user for the management of their individual data protection settings.

The use of a consent management platform as well as the management and storage of your consents to the processing of your personal data is based on our legal obligation to provide a website that complies with data protection law (Art. 6 para. 1 lit. c GDPR in conjunction with Section 26 TTDSG). The legal basis for the use of the service provider Usercentrics is also Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the legally secure documentation and verifiability of consent as well as the control of our analysis campaigns on the basis of your consent through the use of specialized processors and the associated technical implementation.

3. Possibility of objection and/or erasure
The processing of data for the provision of a CMP solution is mandatory for the operation of the website. There is no possibility for the user to object as long as we have a legal obligation to obtain the user's consent to certain data processing operations.

VIII. Analysis of usage data with etracker

1. Description and scope of data processing
On our website, we have integrated functions of the web analysis service etracker of etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg, Germany ("etracker") to analyze usage data. etracker uses so-called "cookies" for the analysis. These are text files that are stored on your computer or the terminal device you are using (tablet, smartphone, etc.) and enable an analysis of your use of our website (see "VI. Use of cookies").

The statistics cookies set due to the use of etracker can be found at any time in the list in our consent banner. There you will also find information about the purpose and the validity period of the cookies used.

We have concluded the commissioned processing agreement required under data protection law (as defined in Article 28 GDPR) with etracker, in which etracker undertakes to protect the data of our users and to process it exclusively on our behalf in accordance with the applicable data protection provisions.

Since the privacy of our visitors is important to us, the data that may allow a reference to an individual person, such as the IP address, login or device identifiers, are anonymized or pseudonymized as soon as possible. Any other use, merging with other data or disclosure to third parties does not take place.

The data generated with etracker is processed and stored by etracker on our behalf exclusively in Germany and is therefore subject to strict German and European data protection laws and standards. etracker has been independently audited and certified in this regard and awarded the ePrivacyseal data protection seal of approval. For more information, visit https://www.eprivacy.eu/kunden/vergebene-siegel/firma/etracker-gmbh/.

For more information on how etracker handles data, please see etracker's privacy policy at https://www.etracker.com/datenschutz/.  

2. Purpose and legal basis for data processing
The legal basis for the processing of personal data for statistical purposes with the help of etracker is Art. 6 (1) lit. a GDPR. Our concern is the optimization of our online services and our web presence. The information obtained through the use of etracker is used in particular to better understand the use of our website and to improve its content, functionality and findability. We, as the operator of the website, have an interest in analyzing your user behavior in order to improve both our offer and its performance.

3. Possibility of objection and/or erasure
You can revoke your consent to data processing by etracker at any time for the future via the cookie banner provided by us. By changing the check mark at etracker under "Statistics" in the cookie banner, you prevent technical measures from being carried out as well as cookies from being set. The cookie settings can be accessed at any time via the link ("Cookie Settings") in the footer of each sub-page.
 

IX. E-mail contact and contact form

1. Description and scope of data processing
On our website, it is possible to contact us via a provided e-mail address or a contact form, which can be used for electronic contact. The scope of the processed personal data as well as which personal date is processed in each individual case may vary depending on the form or contact. This includes in particular the following data:

- Your first and last name;
- Your address data (address, postal code, city, country);
- Your contact data (e-mail address, telephone number, fax);
- resulting correspondence (subject, message).

Your data or the resulting correspondence will be processed exclusively by us. Beyond that, the data will not be passed on to third parties. The data will be used exclusively for the conversation started by the user to contact you by phone, mail or e-mail regarding your request. Mandatory data (*) and voluntary data are identified in the contact forms.

2. Legal basis for data processing
The legal basis for the processing of data transmitted in the course of sending an e-mail or via contact form is Art. 6 para. 1 lit. a GDPR. If the e-mail contact aims at the conclusion of a contract, then additional legal basis for the processing is Art. 6 para 1 lit. b GDPR.

3. Purpose of data processing
The processing of the voluntarily provided personal data by e-mail or via the input mask serves us solely for the purpose of processing the establishment of contact or any other necessary measures resulting from this.

4. Duration of storage
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. For the personal data sent by e-mail or via contact form this is the case when the conversation with the user is finished. The conversation is terminated when it can be inferred from the circumstances that the facts in question have been finally clarified.

5. Possibility of objection and/or erasure
The user has the possibility to revoke his consent to the processing of personal data at any time. In such a case, the conversation cannot continue. The revocation can be made at any time via the contact data under I. and II. as well as under the following e-mail address [email protected]. See also point XIV.
All personal data stored in the course of contacting us will be deleted in this case.

X. Newsletter

1. Description and scope of data processing
On our website it is possible to apply for an e-mail newsletter (e.g. Südzucker press and IR distribution list). If you register for our newsletter, we will use the data required for this purpose or data provided separately by you to send you our e-mail newsletter in accordance with your consent.
We regularly send our financial reports to our subscribers of the IR distribution list, as well as press releases related to specific events to our press distribution list.  

When you subscribe to an electronic newsletter, we process the following data in particular: 
- your e-mail address,
- your first and last name,
- the information as to whether you have consented or objected to receiving such communications, including the date and time. 

For the technical implementation of the mailing, your personal data will be forwarded to our service provider trio-group, which uses the service of the company CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany (hereinafter "CleverReach"). Your data provided will be processed for us by trio-group or CleverReach as a contractor within the meaning of Art. 28 GDPR in compliance with the necessary data security measures. The agreement required by data protection law has been concluded with trio-group. 

The registration for the e-mail newsletter takes place via a double-opt-in procedure set up by the system. This means that after providing your data, you will receive an e-mail with a confirmation link. This confirmation e-mail serves to authorize the receipt of the newsletter by the owner of the specified e-mail address. Only after successful confirmation, the e-mail address will be included in the distribution list. Stored are: Registration data, registration, confirmation, unsubscription time as well as IP address. The collection of this data is necessary in order to be able to trace any misuse of the e-mail address of the persons concerned and to safeguard the data controller. This data is only processed for the purpose stated here. 

The newsletters contain a so-called "web-beacon", through which technical information, such as information about the browser and your system, as well as your IP address and the time of retrieval, is collected when the newsletter is opened. This information is used for the technical improvement of our newsletter and shows us the reading habits of our users in order to meet both your expectations and our business interests.

A linking of the ID with your specified data does not take place, a direct personal reference can thus be excluded. We use the information received from the trio-group by means of CleverReach for the statistical evaluation of our newsletters, for the optimization and further development of our newsletter content.   

With the help of so-called conversion tracking, it can also be analyzed whether a predefined action (e.g. linking to an event) has taken place after clicking on the link in the newsletter. For more information on data analysis through CleverReach newsletters, please visit: https://www.cleverreach.com/de/funktionen/reporting-und-tracking/.

2. Legal basis for data processing
The legal basis for the processing of data transmitted in the course of consenting to receive the newsletter, as well as for the temporary storage of data for the evaluation of success, is Art. 6 para. 1 lit. a GDPR.

3. Purpose of data processing
The processing of personal data by us and our service provider trio-group or CleverReach serves us solely to process and send a newsletter and to evaluate the success of a respective newsletter. Anonymized statistics about your use of and reaction to our newsletter help us to better align our offers with the interests of our subscribers.

4. Duration of storage
Your data is stored on certified servers of CleverReach. Trio-group or CleverReach uses this information to send and evaluate the newsletter usage on our behalf, as well as for service optimization. An independent use of the data by our service provider, such as for contacting, as well as a transfer to third parties does not take place. 

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data that you have given us for the purpose of requesting and sending the newsletter, this is the case when the consent to processing is revoked. After unsubscribing from the newsletter, all stored data will be deleted.

5. Possibility of objection and/or erasure
The user has the possibility to revoke his consent to the processing of personal data at any time. It is possible to unsubscribe from the newsletter at any time and can be done either by calling up the corresponding website, sending a message to us ([email protected]) or by using the unsubscription link provided for this purpose in the newsletter.

XI. Career portal

On our website you will find our career portal. The data processing that takes place there is made transparent in the data protection declaration filed in the Careers/Jobs section.

XII. Integration of Investis Share Charts

1. Description and scope of data processing
To display the performance of Südzucker AG shares and bonds, we have integrated the Investis Share Chart service via iFrame and other plugins from Investis Ltd, 53 Tooley Street, London SE1 2QN, United Kingdom (hereinafter referred to as "Investis") into the Investor Relations section of our website. You can recognize the calls by the URL https://secure.flife.de/ir or https://irs.tools.investis.com/.  

When you call up one of our web pages on which a plugin or an iFrame from Investis is integrated, the Internet browser used on your end device will establish a connection to Investis in order to download a representation of the desired content (stock chart, tables, price trends).

For the transmission of the content, your IP address is transmitted to the Investis servers during the active session. Investis itself does not collect any personal data, but requires technical session cookies AWSELB and AWSELBCORS to display the content. Both cookies are set on your end device via your browser and are only valid within the respective session. The cookies are so-called load-balancer cookies, which do not collect any personal data. Investis uses an anonymous user ID to determine the number of times the content is accessed.

For more information about Investis' privacy policy and terms of use, please visit https://www.investisdigital.com/privacy-policy or https://www.investisdigital.com/terms-of-use.    

2. Purpose and legal basis for the data processing
The purpose of the integration is our legitimate interest in being able to present share charts, stock market data and bonds of Südzucker AG on our website. The aforementioned processing purposes and the integration of Investis services are therefore in our legitimate interest (Art. 6 para. 1 lit. f DSGVO in conjunction with Section 25 para. 2 (2) TTDSG). 

3. Possibility of objection and/or erasure
You can prevent the establishment of an automatic connection by your browser at any time by means of a setting in the options of your Internet browser. In addition, cookies are stored on the respective end device used by the user and transmitted from this to our site. Therefore, you as a user also have full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for the website, it may no longer be possible to fully use all functions of the website.

XIII. Use of Google Maps

We have concluded the required data protection agreement with Google for commissioned processing in accordance with Art. 28 GDPR. According to this agreement, Google undertakes to ensure the necessary protection of your data and to process it exclusively on our behalf in accordance with the applicable data protection provisions. Further information on data processing by Google can be found in Google's privacy policy at https://policies.google.com/privacy?hl=de&gl=de/. In addition, Google is certified in accordance with the Data Privacy Framework. You can find proof of this in the list of US companies voluntarily certified in accordance with this.

1. Description and scope of data processing
Our website uses the functions of the Google Maps API, of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin 4, Ireland (hereinafter referred to as Google), to provide geographical information about our worldwide locations to visitors of this website users.
Through the use of Google Maps and your visit to our website, on which the plug-in Google Maps is used, data (including date and time of your visit to our website, location information, URL of the accessed website, search terms) are generally collected, processed and stored. By calling up the Google Maps component on our website, Google independently stores cookies about your browser on your computer or mobile device. In addition, Google may store and evaluate your IP address and our website, as the starting point of your Google Maps request, via an interface. For more information on the processing of data by Google, please refer to Google's privacy policy. We have no influence on the data and data processing operations collected by Google, nor is the full extent of the data collection, the purposes of the processing, the storage periods and the storage location known. There is also no information available on the deletion of the collected data by Google.

For more information and the operator's applicable privacy policy, please visit https://www.google.com/intl/de_de/help/terms_maps.html.

In order to avoid an unauthorized and uncontrolled data flow from the time of your visit to our website, we implement the integration of the plug-in with a so-called consent solution, i.e. Google Maps may only set cookies or receive information about your visit to our website if you have actively clicked on the plug-in to display the map or have consented to the display of Google Maps content via our cookie banner. If you visit our website without confirmation from you using the consent solution, no data is transmitted to Google.

2. Purpose and legal basis for the data processing
The legal basis for the processing of personal data is based on your consent in this regard by voluntarily using or clicking on the provided plugin content or consent via the cookie banner provided by Usercentrics Art. 6 para. 1 p. 1 lit. a GDPR in conjunction with Section 25 (1) TTDSG.
Furthermore, the aforementioned processing purposes are in our legitimate interest (Art. 6 para. 1 p. 1 lit. f GDPR). It is important for the controller to make the career site attractive and to increase the interaction with visitors and customers with the help of the plugin. The use of Google Maps improves the functionality of the website.

3. Possibility of objection and/or erasure
However, you may object to the collection, storage and use of information by Google at any time with effect for the future by installing the deactivation add-on provided by Google or by adjusting your browser settings so that storage of cookies is not possible. 
You can revoke your consent to data processing by Google at any time for the future via the cookie banner provided by us. By changing the check mark at Google Maps under "Functional" in the cookie banner, you prevent technical measures from being executed as well as cookies from being set. The cookie settings can be accessed at any time via the link ("Cookie Settings") in the footer of each sub-page.

XIV. Use of YouTube

We have concluded the required data protection agreement with YouTube for commissioned processing in accordance with Art. 28 GDPR. According to this agreement, YouTube undertakes to ensure the necessary protection of your data and to process it exclusively on our behalf in accordance with the applicable data protection provisions. Further information on data processing by YouTube can be found in Google's privacy policy at https://policies.google.com/privacy?hl=de&gl=de/. In addition, YouTube or Google is certified according to the Data Privacy Framework. You can find proof of this in the list of US companies voluntarily certified in accordance with this.

1. Description and scope of data processing
Our website uses a plug-in from the provider YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA or Google Ireland Limited, Gordon House, 4 Barrow St, Dublin 4, Ireland (hereinafter YouTube or Google) to integrate videos.
The content of the plug-in is transmitted directly from YouTube to your browser through a connection to the YouTube servers, which then integrates it into the website. This transmits your visit to the website to YouTube.
If you are logged in to YouTube with your user account, YouTube can assign the information obtained to your respective account through the use of the plug-in. In this case, the information is transmitted to your personal user account at YouTube and stored there by YouTube. Cookies are set by the following providers:

-    doubleclick.net
-    google.com
-    youtube.com

You can find a detailed list of the cookies set by Google and YouTube, including their purpose and validity period, in our cookie banner. Since YouTube collects data in particular via cookies, we also recommend that you delete all cookies via the security settings of your browser.

Through the use of YouTube and your visit to our website, on which the plug-in for the integration of YouTube content is used, data (including date and time of your visit to our website, location information, URL of the accessed website, search terms) are generally collected, processed and stored. By calling up the YouTube video on our website, YouTube or Google independently stores cookies via your browser on your computer or mobile device. In addition, Google can store and evaluate your IP address and our website, as a starting point, via an interface. For more information on the processing of data by YouTube or Google, we refer to the privacy policy of Google. We have no influence on the data and data processing operations collected by YouTube, nor is the full extent of the data collection, the purposes of processing, the storage periods and the storage location known. There is also no information available on the deletion of the collected data by YouTube.

Further information and the applicable data protection provisions of the operator can be found at https://www.youtube.com/t/terms and https://policies.google.com/privacy?hl=en.      
In order to avoid an unauthorized and uncontrolled flow of data from the time you visit our website, we implement the integration of the plug-in with a so-called consent solution, i.e. YouTube and Google may only set cookies or receive information about your visit to our website if you have actively clicked on the plug-in to play the YouTube video or have consented to the display of YouTube videos via our cookie banner. By visiting our website without confirmation on your part by way of the consent solution, no data is transmitted to YouTube or Google.

By default, we have embedded our YouTube videos with the "extended data protection mode". This means that YouTube or Google cannot set any third-party cookies on your end device via the plugin. We have no influence on the data and data processing operations collected by YouTube or Google, nor is the full extent of the data collection, the purposes of the processing, the storage periods and the storage location known. There is also no information available on the deletion of the collected data by the provider.

2. Purpose and legal basis for the data processing
The legal basis for the processing of personal data is based on your consent in this regard by voluntarily using or clicking on the provided plugin content or consent via the cookie banner provided by Usercentrics Art. 6 para. 1 p. 1 lit. a DSGVO in conjunction with Section 25 (1) TTDSG.
In addition, the aforementioned processing purposes are in our legitimate interest (Art. 6 para. 1 p. 1 lit. f DSGVO). It is important for the controller to make the website attractive and to increase the interaction with visitors and customers with the help of the plugin. The use of YouTube improves the functionality of the website.

3. Possibility of objection and/or erasure
However, you can object to the collection, storage and use of information by YouTube or Google at any time with effect for the future by installing the deactivation add-on provided by Google or by adjusting your browser settings so that cookies cannot be stored.
You can revoke your consent to data processing by YouTube or Google via the cookie banner provided by us at any time for the future. By changing the check mark at YouTube under "Functional" in the cookie banner, you prevent technical measures from being carried out and cookies from being set. The cookie settings can be accessed at any time via the link ("Cookie Settings") in the footer of each subpage

XV. Rights of the data subject

If your personal data are processed, you are the “data subject” within the meaning of the GDPR and you have the following rights vis-à-vis the Controller:

1. Right to information
You can ask the person in charge to confirm whether personal data concerning you will be processed by us.
If such processing has taken place, you can request the following information from the person responsible:
(1) the purposes for which the personal data are processed;
(2) the categories of personal data being processed;
(3) the recipients or categories of recipients to whom the personal data concerning you have been or are still being disclosed;
(4) the planned duration of the storage of the personal data concerning you or, if specific information on this is not possible, criteria for determining the storage period;
(5) the existence of a right to rectification or deletion of personal data concerning you, a right to limitation of the processing by the person responsible or a right to object to such processing;
(6) the existence of a right of appeal to a supervisory authority.
You have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed of the appropriate guarantees in accordance with Art. 46 GDPR in connection with the transmission.
To exercise your right to free information, please contact us directly via the contact details in our imprint or contact our data protection officer (see sections I and II).

2. Right to rectification
You have a right of rectification and/or completion vis-à-vis the Controller if the personal data processed concerning you are incorrect or incomplete. The Controller shall make the correction without delay.

3. Right to limitation of processing
Under the following conditions, you may request that the processing of personal data concerning you be restricted:
(1) if you dispute the accuracy of the personal data concerning you for a period that enables the Controller to verify the accuracy of the personal data;
(2) the processing is unlawful and you refuse to delete the personal data and instead request that the use of the personal data be restricted;
(3) the Controller no longer needs the personal data for the purposes of the processing, but you do need them to assert, exercise or defend legal claims, or
(4) if you have filed an objection against the processing pursuant to Art. 21 para. 1 GDPR and it has not yet been determined whether the legitimate reasons of the person responsible outweigh your reasons.
If the processing of personal data concerning you has been restricted, such data may only be processed - apart from being stored - with your consent or for the purpose of asserting, exercising or defending rights or for the protection of the rights of another natural or legal person or on grounds of an important public interest of the Union or a member state.
If the processing restriction has been restricted according to the above conditions, you will be informed by the Controller before the restriction is lifted.

4. Right to erasure
a) Duty to erase
You may request the Controller to delete the personal data relating to you without delay, and the Controller is obliged to delete this data immediately if one of the following reasons applies:
(1) The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
(2) You revoke your consent, on which the processing pursuant to Art. 6 para. 1 lit. a GDPR is based, and there is no other legal ground for the processing.
(3) You object against the processing pursuant to Art. 21 para. 1 GDPR and there are no overriding legitimate reasons for the processing, or you file an objection against the processing pursuant to Art. 21 para. 2 GDPR.
(4) The personal data concerning you have been processed unlawfully.
(5) The personal data have to be erased for compliance with a legal obligation in Union or member state law to which the Controller is subject.
(6) The personal data concerning you have been collected in relation to the services offered by the Information Society.

b) Information to third parties
If the Controller has made the personal data concerning you public and is obliged to delete it pursuant to Art. 17 para. 1 GDPR, it shall take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform Processors who process the personal data, that you as the data subject have requested the deletion of all links to this personal data or of copies or replications of this personal data.

c) Exceptions
The right to cancellation does not apply insofar as the processing is necessary
(1) for exercising the right of freedom of expression and information;
(2) for compliance with a legal obligation which requires processing by Union or member state law to which the Controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller;
(3) for archiving purposes in the public interest, scientific or historical research purposes or for  statistical purposes in accordance with Art. 89 para 1 GDPR in so far as the right referred to under a) is likely to render impossible or seriously impair the achievement of the objectives of that processing, or
(4) for the establishment, exercise or defence of legal claims.

5. Right to information / notification obligation
If you have exercised your right to have the Controller correct, delete or limit the processing, it is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this correction or deletion of the data or restriction on processing, unless this proves impossible or involves a disproportionate effort.
You as data subject shall have the right to be informed of such recipients.

6. Right to data transferability
You have the right to receive the personal data concerning you that you have provided to Controller in a structured, common and machine-readable format. In addition, you have the right to pass this data on to another Controller without hindrance by the Controller to whom the personal data was provided, provided that
(1) processing is based on consent pursuant to Art. 6 para. 1 lit. a GDPR and
(2) processing is carried out by means of automated methods.
In exercising this right, you also have the right to request that the personal data concerning you be transferred directly from one Controller to another Controller, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this.
The right to transferability shall not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority conferred on the Controller.

7. Right to object
You have the right to object at any time to the processing of your personal data in accordance with Art. 6 para 1 lit. e or f of the GDPR for reasons arising from your particular situation.
The data controller no longer processes the personal data concerning you, unless he can prove compelling reasons worthy of protection for the processing, which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

8. Right to revoke the consent
You have the right to revoke your consent to the data processing at any time. The revocation of consent shall not affect the legality of the processing carried out on the basis of the consent until revocation.

9. Right of appeal to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the member state where you reside, work or suspect of infringement, if you believe that the processing of personal data concerning you is contrary to the GDPR.
The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy under Art. 78 GDPR.
The data protection authority responsible for us is

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg,
official address:
Lautenschlagerstraße 20
70173 Stuttgart
Deutschland
postal address:
Postfach 10 29 32
70025 Stuttgart
Deutschland

Further information to be found at www.baden-wuerttemberg.datenschutz.de.

XVI.  Automated decision making and profiling

As a responsible company, we do not carry out profiling or use automated decision-making.

XVII.  Links to other websites

This declaration on data protection applies exclusively to the web presence of Südzucker. The Internet pages in this website may contain links to the Internet pages of third parties. Our Privacy Policy does not extend to these Internet pages. When you leave the website or e-store, we recommend that you carefully read Privacy Policies of every website that collects personal data.

XVIII. Security

We take the necessary security measures to protect your personal data from unlawful or unintentional access or deletion, alteration or loss as well as against unauthorized disclosure. We encrypt your data during transmission via our website and use so-called SSL connections (Secure Socket Layer). We protect our website and our other systems and personal data through appropriate technical and organizational measures, in particular against loss, destruction, unauthorized access, modification or disclosure to third parties.

XIX. Availability and changes

You can view this privacy policy at www.suedzuckergroup.com/en. You can also save or print out this data protection declaration by using the corresponding functions of your browser.

We reserve the right to change this data protection declaration from time to time or to adapt it to legal requirements and therefore ask you to inform yourself of the current data protection regulations every time you visit our website.

Version: 3.3 [October 2023]