II. Privacy Notice

General

Coca-Cola European Partners plc and its subsidiaries and affiliates (“CCEP”, “we”) are committed to respecting your privacy and to manage your personal data fairly and safely. With this Privacy Notice, we want to inform you why and how we may process your personal data when you visit this site (www.infineo-economiecirculaire.com) or when you have a business relationship with us.

CCEP is a large organization and we process personal data in different contexts. For certain uses, we have specific privacy notices. For example, a Careers Privacy Notice is available on our career website at www.ccep.jobs, and if you are an employee of CCEP, you can find a specific Employee Privacy Notice posted on the CCEP intranet. Coca-Cola European Partners plc is the entity responsible or “data controller” for the processing of personal data in the context of our website at www.infineo-economiecirculaire.com. For other processing related to our business relationship with you, the CCEP company you interact with is the data controller. For more information about how to identify and contact the relevant data controller, please see how to contact us below.

Personal data we collect

We may collect personal data about you directly from you, from third parties, from public sources such as information available on the internet, as well as automatically, such as through your use of CCEP websites. In this Privacy Notice, “personal data” means any information relating to an identified or identifiable individual. Examples of personal data include name, email address, IP address, and phone number. We collect the following personal data:

Contact details, such as name, address, phone number, email address, country of residence, emergency contact details, as well as professional contact details, such as company, and job title.

Correspondence, such as the content, date and time of emails, chats, social media messages, and other communications with you.

Login credentials, such as your username and (hashed) password, recovery email address, secret questions, and security logs.

Payment information, such as your (company) bank account number, invoices, and other information necessary to make or receive payments.

Personal characteristics, such as age, gender, date of birth, place of birth, civil status, and nationality.

Preferences, such as your personal preferences for our products and services,lifestyle and social circumstances, family circumstances (for example, your marital status and dependents), languages, and marketing preferences.

Transaction information, such as your purchases, customer account information, order and contract information, delivery details, billing and financial data, creditworthiness, and transaction history.

User-generated content, such as your postings on any blogs, forums, wikis and any other social media applications and services that we provide.

Vendor screening information, such as professional qualifications, licenses and certificates, work permits, government identification documents, potential conflicts of interest, and ultimate beneficial ownership, each as permitted or required by applicable law.

Website and service usage information, such as the host name and IP address of your device, your browser type and version, your operating system, the pages you visit, the time and duration of your visit, and the website that referred you to us.

Cookies are small data files that are placed on your computer or mobile device when you visit a website or use an online service. We may use cookies and similar technologies on our websites and other services. For more information about our use of cookies, please see our Cookie Notice.

Where applicable, we indicate whether and why you must provide us with your personal data, as well as the consequences of failing to do so. For example, if certain personal data is necessary to provide services you have requested, or if we are legally required to collect it, and you decline to provide us with that personal data, then we cannot provide you with the services you have requested.

Purposes and legal grounds

We use information held about you for the following purposes:

Providing the services. To operate, maintain, enhance and provide all features of the website and other services.

Communicating with you. To respond to your inquiries and comments, to provide you with information you have requested.

Fulfilling your orders. To fulfil orders for products or services and related activities, such as product and service delivery, customer service, account and billing management, and support and to provide other services related to your orders.

Managing our relationship with you. To manage your ongoing relationship with us, including managing contractual or other obligations, interacting with you, informing you about our products or services, as well as special offers and promotions.

Marketing. For marketing and market research purposes, such as contacting you with our newsletters, surveys and other marketing or promotional materials, analyzing and maintaining our activities, internal management, and forecasting, auditing, developing new products, improving our websites, products and services, identifying trends, conducting market research, evaluating the effectiveness of our marketing campaigns, measuring customer satisfaction and improving our customer service.

Vendor screening. To evaluate prospective vendors and business partners to ensure their compliance with applicable legal requirements, industry standards and our policies.

Operating our business. Managing our everyday business needs, such as payment processing and financial account management, product development, contract management, website administration, fulfillment, corporate governance, audit, reporting and legal compliance.

Protecting CCEP. To ensure the security of our websites, networks and systems, and premises, as well as protecting us against fraud.

Compliance. To comply with applicable legal requirements, industry standards and our policies, to conduct audits and investigations.

We only process your personal data based on a valid legal ground, including when:

You have consented to the use of your personal data, for example when you consent to our use of cookies on a CCEP website, or to receive marketing communications from us;

We need your personal data to enter into, or perform an agreement with you, for example to process orders you place;

We have a legal obligation to use your personal data, for example to comply with tax and accounting obligations; or

We have a legitimate interest in using your personal data. For example, CCEP has a legitimate interest in using personal data to conduct market research, product development and internal analytics, and otherwise to improve the safety, security, and performance of our services. We only rely on our or a third party’s legitimate interests to process your personal data when these interests are not overridden by your rights and interests.

How we disclose Personal Data

We may disclose information to third parties with your consent, as well as in the following circumstances:

CCEP Group companies. We may disclose personal data about you to other members of the CCEP Group of companies.

Service providers. We may disclose your personal data to third party service providers who provide us with application development, hosting, maintenance, and other services. These third parties may have access to or process personal data about you as part of providing those services for us. We limit the personal data provided to these service providers to that which is reasonably necessary for them to perform their functions, and we require them to agree to maintain the confidentiality of such information.

Compliance with laws and law enforcement. We may disclose your personal data as required by law or when we believe that disclosure is necessary to protect the security or integrity of our services, or to protect the legitimate interests, rights, property, or safety of CCEP, its employees, users, or others, or to comply with a judicial proceeding, court order, or governmental or regulatory request or any other legal process served on us.

Business transfers. We may disclose personal data to an acquirer, successor, or assignee of our company as part of any merger, acquisition, debt financing, sale of assets, or similar transaction, or in the event of an insolvency, bankruptcy, or receivership in which information is transferred to one or more third parties as one of our business assets.

Advertising partners. With your consent, we may transfer your personal data to third party advertisers or sponsors for direct marketing purposes, including targeted advertising, for example to reach a particular audience.

Aggregated data. We may pass aggregated information to third parties but this will not include information that could be used to identify you.

International data transfers

We may transfer your personal data to recipients in countries outside of the European Union whose laws may not provide the same level of data protection. When we do so, we will ensure that there are adequate safeguards in place to protect your personal data that comply with our legal obligations. The adequate safeguard might be a data transfer agreement with the recipient based on standard contractual clauses approved by the European Commission for transfers of personal data to third countries.

Retention periods

We take measures to delete your personal data or keep it in a form that does not permit identifying you when this information is no longer necessary for the purposes for which we process it, unless we are required by law to keep this data for a longer period. When determining the retention period, we take into account various criteria, such as the type of services we provide to you, or that you provide to us, the nature and length of our relationship with you, possible re-enrollment with our services, the impact on our services if we delete some information from or about you, mandatory retention periods provided by law and the relevant statute of limitations.

Your rights and choices

You can contact us at any time for assistance regarding the processing of your personal data. Furthermore, you have the right at any time to:

Obtain confirmation that we are processing your personal data and request a copy of the personal data we hold about you;

Ask that we update the personal data we hold about you, or correct such personal data that you think is incorrect or incomplete;

Ask that we delete personal data that we hold about you, or restrict the way in which we use such personal data if you believe that there is no (longer a) lawful ground for us to process it;

Withdraw consent to our processing of your personal data (to the extent such processing is based on consent);

Receive a copy of the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and to transmit such personal data to another party (to the extent the processing is based on consent or a contract);

Object to our processing of your personal data for which we use legitimate interest as a legal basis, in which case we will cease the processing unless we have compelling legitimate grounds for the processing; and

You have also the right to object at any time to the processing of personal data for direct marketing. If you do not want to continue receiving any direct marketing from us, you can contact us or click on the unsubscribe function in any such communication.

In order to exercise your rights, you can send us a request, indicating the right you wish to exercise by contacting us as indicating at the bottom of this Privacy Notice. However, there are exceptions and limitations to each of these rights. We may, for example, charge a reasonable fee or refuse to act on a request if it is manifestly unfounded or excessive, in particular because of its repetitive character. In some situations, we may refuse to act or may impose limitations on your rights if, for instance, your request is likely to adversely affect the rights and freedoms of others, prejudice the execution or enforcement of the law, interfere with pending or future litigation, or infringe applicable law. In all cases, you have a right to file a complaint with a data protection authority.

Changes to this Privacy notice

We may modify or amend this Privacy Notice from time to time. Any changes we may make to this Privacy Notice in the future will be posted on this page. To let you know when we make changes to this Privacy Notice, we will amend the revision date at the top of this page. The new modified or amended Privacy Notice will apply from that revision date. Please check back periodically to see changes and additions.

III. CCEP Cookie Notice

Coca-Cola European Partners plc and its subsidiaries and affiliates (“CCEP”, “we”) are committed to respecting your privacy and to manage your personal data fairly and safely. With this Cookie Notice, we want to inform you why and how we may use cookies and similar technologies on our websites. This Cookie Notice explains what cookies are and which types of cookies we use. This Cookie Notice complements our Cookie Preference Center, which provides more detailed information about each cookie we use, and where you can manage your cookie preferences.

What is a Cookie

Cookies are small text files that are stored by your browser onto your computer or mobile device when you visit a website. Cookies are used to provide you with a good experience when you browse our websites. They can also be used to personalize the content of a website based on your previous browsing behavior and to gather statistics in order to improve the website.

Cookies can do this because websites can read and write these files, enabling them to recognize you and remember important information that will make it possible to make the website more convenient and adapted to your needs (e.g. by remembering your user preferences such as language preferences and to prefill name and email fields on landing pages). This can be achieved using cookies or similar technologies, which in this Cookie Notice are collectively referred to as “cookies”.

Cookies can be categorized according to the following characteristics:

Session cookies and persistent cookies

A session cookie is used each time you visit our website to assign a session ID. We use this type of cookie to link your actions on our website and each session cookie will only last for a browser session, at the end of which it will expire. A browser session starts when you open your browser window and finishes when you close your browser window. After your visit to our website all session cookies are deleted. Each time you visit our website you will have a different session ID.

A persistent cookie allows the preferences or actions of the user of a website to be remembered. It has a longer lifespan than a session cookie and lasts for the period of time specified in the cookie (this will vary from cookie to cookie). This type of cookie will not be deleted when you close your browser window and will be stored on your computer or mobile device. It will be activated every time you visit a website which created that particular persistent cookie. The cookie will be deleted when the period set by the cookie expires.

First-party cookies and third-party cookies

A first-party cookie is a cookie set by CCEP or any party doing so upon specific instruction of CCEP (also named a “processor”). A third-party cookie is a cookie set by a data controller that does not operate this site (e.g. Like-button cookies of Facebook, Inc.).

Please note that we do not have access or control over the cookies placed on our websites by third parties and use of their cookies is subject to their own privacy policies. We recommend that you review the privacy policies of each of our third parties, which you can find in the Cookie Preferences Center.

Cookies we use

To help you understand the cookies we use, we have classified each cookie as one of the following: strictly necessary cookies; performance cookies; functional cookies; targeting cookies; and social media cookies.

Strictly necessary cookies

These cookies are necessary for the website to function, and cannot be switched off in our systems. They are usually only set in response to actions made by you, which amount to a request for services, such as setting your privacy preferences, logging in, or filling forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work.

Performance cookies

These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is de-identified. If you do not allow these cookies, we will not know when you have visited our site and will not be able to monitor its performance.

Functional cookies

These cookies enable the website to provide enhanced functionality and customization. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly.

Targeting cookies

These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.

Social media cookies

These cookies are set by a range of social media services that we have added to the site to enable you to share our content with your friends and networks. They are capable of tracking your browser across other sites and building up a profile of your interests. This may impact the content and messages you see on other websites you visit. If you do not allow these cookies you may not be able to use or see these sharing tools.

More about cookies

To learn more about our use of cookies, including the specific cookies, their purpose, their expiry period, and any third parties involved, please open the preference center.

Managing Cookies

You can enable, disable and/or delete cookies as you wish. You can delete all cookies that are already on your device and you can set most browsers to prevent them from being placed.

Cookie Preferences Center

Upon your first visit to a CCEP website, you will be asked to indicate your preferences with regard to our use of cookies. You may review your preferences, and enable or disable cookies at any time using our Cookie Preferences Center.

Browser settings

Depending on your internet browser, you may also be able to enable, disable, or delete cookies at the browser level. These settings are usually found in the “options” or “preferences” menu of you internet browser. Below is a list of instructions from common browser vendors. If your browser is not listed, you may consult the “Help” function of your browser, or contact the vendor of your browser.

How to contact us

If you have any queries about this Cookie Notice or our privacy practices in general, you can contact us via our contact form, or via post at:

Coca-Cola European Partners Services sprl/bvba

Attn: Privacy Office

Chaussée de Mons 1424

Brussels 1070

Belgium

You may also contact our Data Protection Officer via email at privacy@ccep.com. If your query relates to a local CCEP company, we will make sure that your query is forwarded to the relevant CCEP company. If you would like to contact your local CCEP company directly, please contact your CCEP contact, or consult the list of data controllers.

Last revised : June 2019