Privacy Policy

Skip to content

Header

You are on the main content

Consumer Privacy Notice

Nestlé Privacy Notice

Effective: September 2023

SCOPE OF THIS NOTICE

Please read this privacy notice (“Notice”) carefully to understand our policies and practices regarding your Personal Data and how we will treat it according to the General Data Protection Regulation (Regulation 2016/679 of the European Parliament and the Council, “GDPR”). This Notice applies to individuals who interact with Nestlé Nespresso business services of Nestlé Hungária Kft. as consumers (“you”). This Notice explains how your Personal Data are collected, used, and disclosed by Nestlé Hungária Kft. and Nestlé Nespresso SA as joint data controllers (“Nespresso”, “We”), and for certain data processing purposes Nestlé Hungária Kft. and Nestlé Nespresso SA as joint data controllers (hereinafter all two collectively: “Data Controllers”). It also tells you about your rights as a data subject concerning your Personal Data.

This Notice covers both our online and offline data collection activities, including Personal Data that Nespresso collects through its various channels such as websites, apps, third party social networks, Nespresso Customer Relationship Centres, Nespresso Boutiques, other points of sale and events. Please note that We may combine Personal Data that We collect from various sources (e.g., a Nespresso website, offline event) with Personal Data collected by other companies or partners of the Nestlé Group.

If you do not provide necessary Personal Data to us (We will indicate to you when this is the case, for example, by making this information clear in our registration forms), We may not be able to provide you with our goods and/or services.

This Notice provides important information in the following areas:

  1. DATA CONTROLLERS & CONTACT
  2. THE SOURCES WE COLLECT YOUR PERSONAL DATA FROM AND THE METHOD OF COLLECTION
  3. SCOPE OF PERSONAL DATA PROCESSED
  4. SENSITIVE PERSONAL DATA
  5. PERSONAL DATA OF CHILDREN
  6. PURPOSE AND LEGAL BASIS OF PROCESSING PERSONAL DATA
  7. RECIPIENTS OF PERSONAL DATA
  8. DATA TRANSFER ABROAD
  9. WHO CAN ACCESS YOUR PERSONAL DATA AT NESTLÉ AND THE JOINT DATA CONTROLLER?
  10. YOUR RIGHTS
  11. YOUR CHOICES ABOUT HOW WE USE AND DISCLOSE YOUR PERSONAL DATA
  12. SECURITY MEASURES
  13. COOKIES/SIMILAR TECHNOLOGIES, LOG FILES AND WEB BEACONS
  14. CHANGES TO THIS NOTICE

  1. DATA CONTROLLERS & CONTACT

1.1. Data controllers, information on joint data processing

Nestlé Hungária Kft. and Nestlé Nespresso SA are joint data controllers with respect to all data processing purposes described in this Notice, because they set the purposes of data processing together. For certain data processing purposes (cf. Section 6 in detail), however, Nestlé Hungária Kft. and Nestlé Nespresso SA determine the purpose and means of data processing collectively, therefore, the two companies are the joint data controllers for such purposes.

Please, note that on the basis of the GDPR, a Data Protection Officer is appointed for the Nestlé Group. The Data Protection Officer performs his/her duties with the assistance of a dedicated contact team available at the markets where Nestlé Groups pursues operations.

Contact details of the Data Protection Officer:

postal address: Data Protection Officer Nestlé S.A. Avenue Nestlé 55 1800 Vevey Switzerland

e-mail address: DataProtectionOffice@nestle.com

phone: +41 21 924 1111

To ask questions or make comments on or a complaint about our privacy practices, please contact Us at: Nestlé Hungária Kft. 1095 Budapest, Lechner Ödön fasor 7., or write an email to info@hu.nestle.com, or call our CES on 0680-442-881.

Data controllers

Nestlé Nespresso SA

  • Address: Chaussée de la Guinguette 10, 1800 Vevey, Switzerland
  • Responsible for: All activities (purpose of data processing)

Nestlé Hungária Kft.

  • Address: 1095 Budapest, Lechner Ödön fasor 7.
  • Responsible for: All activities (purpose of data processing)

  1. THE SOURCES WE COLLECT YOUR PERSONAL DATA FROM AND THE METHOD OF COLLECTION

2.1. Data collected from you and the method of data collection.

Websites: Consumer-directed websites operated by or for Nespresso, including sites that We operate under our own domains/URLs and mini-sites that We run on third party social networks such as Facebook (“Websites”).

Nespresso mobile sites/apps: Consumer-directed mobile sites or applications operated by or for Nespresso, such as apps run on smartphones, tablets and other devices.

E-mail, text and other electronic messages: Interactions with electronic communications between you and Nespresso. We analyse your interactions with our content (e.g., click through, opening of email) to provide you with personalised information based on your interests and preferences.

Nespresso CRC: Calls to Nespresso Customer Relationship Centers (“CRC”).

Nespresso Boutique: Stores managed by Nespresso.

Offline registration forms: Printed or digital registration and similar forms that We collect via, for example, postal mail, in-store demos, contests and other promotions, or events.

Other points of sale: Points of sale where third parties engaged by Nespresso – therefore, typically agencies – pursue registration and order taking involving data processing.

Telemetric data: we may also collect certain data through some Nespresso coffee machines with a Wi-Fi connection, such as your machine's serial number, machine warning and error messages, information about machine malfunctions, the type of coffee you make, and date and time data related to the above.

2.2. Data from other sources:

Third party social networks (e.g., such as Facebook, Google), market research (if feedback not provided on an anonymous basis), third party data aggregators, Nespresso promotional partners, public sources and data received when we acquire other companies.

  1. SCOPE OF PERSONAL DATA PROCESSED

3.1. Consumer-generated content

This refers to any content that you create and then share with Us on third party social networks or by uploading it to one of our websites or apps, including the use of third-party social network apps such as Facebook. Examples include photos, videos, personal stories, or other similar media or content and posts or PM you can leave on Nespresso social media pages. Where permitted, we collect and publish consumer-generated content in connection with a variety of activities, including contests and other promotions, website community features, consumer engagement, and third-party social networking”.

Depending on how you interact with Nespresso (online, offline, over the phone, etc.), We collect various types of Personal Data from you, as described below. The personal data categories are referred in Section 6 for the purposes of data processing with their names used herein.

3.1.1. Personal contact information. This includes any information you provide to Us that would allow Us to contact you, such as your name, postal address, e-mail address, social network contact details, or phone number.

3.1.2. Account login information. Any information that is required to give you access to your specific account profile. Examples include your login ID/email address, screen name, password, and/or security question and answer in a form others cannot guess.

3.1.3. Demographic information & interests. Any information that describes your demographic or behavioural characteristics. Examples include your date of birth, age or age range, gender, geographic location (e.g., postcode/zip code), favourite products, hobbies and interests, and household or lifestyle information.

3.1.4. Information from computer/mobile device. Any information about the computer system or other technological device that you use to access one of our websites or apps, such as the Internet protocol (IP) address used to connect your computer or device to the Internet, operating system type, and web browser type and version. If you access a Nespresso website or app via a mobile device such as a smartphone, the collected information will also include, where permitted, your phone’s unique device ID, advertising ID, geo-location, and other similar mobile device data.

3.1.5. Websites/communication usage information. As you navigate through and interact with our websites or newsletters, we use automatic data collection technologies to collect certain information about your actions. This includes information such as which links you click on, which pages or content you view and for how long, and other similar information and statistics about your interactions, such as content response times [the amount of time a specific content is downloaded], download errors and length of visits to certain pages. This information is captured using automated technologies such as cookies and web beacons and is also collected through the use of third-party tracking for analytics and advertising purposes.

3.1.6. Market research & consumer feedback. Any information that you voluntarily share with Us about your experience of using our products and services.

3.1.7. Consumer-generated content. Any content that you create and then share with Us on third party social networks or by uploading it to one of our websites or apps, including the use of third-party social network apps such as Facebook. Examples include photos, videos, personal stories, or other similar media or content. Where permitted, we collect and publish consumer-generated content in connection with a variety of activities, including contests and other promotions, website community features, consumer engagement, and third-party social networking.

3.1.8. Third party social network information. Any information that you share publicly on a third-party social network or information that is part of your profile on a third-party social network (such as Facebook) and that you allow the third-party social network to share with Us. Examples include your basic account information (e.g., name, email address, gender, birthday, current city, profile picture, user ID, list of friends, etc.) and any other additional information or activities that you permit the third-party social network to share. We receive your third party social network profile information (or parts of it) every time you download or interact with a Nespresso web application on a third party social network such as Facebook, every time you use a social networking feature that is integrated within a Nespresso site (such as Facebook Connect) or every time you interact with Us through a third party social network. To learn more about how your information from a third-party social network is obtained by Nespresso, or to opt-out of sharing such social network information, please visit the website of the relevant third-party social network.

3.1.9. Payment and Financial information. Any information that the Data Controllers need in order to fulfil an order, or that you use to make a purchase, such as your debit or credit card details (cardholder name, card number, expiration date, etc.) or other forms of payment (if such are made available). In any case, the Data Controllers or the payment processing provider(s) handle payment and financial information in a manner compliant with applicable laws, regulations and security standards such as PCI DSS. Payment card details are not recorded.

3.1.10. Telephone conversations with Nespresso Customer Service. In accordance with the applicable laws, the conversation with our Customer Service will be kept for 2 months for the purpose of handling complaints, improving our customer service processes, checking the satisfaction of our customers, and training the customer service staff, or until the final conclusion of the legal dispute for the purpose of asserting and protecting legal claims. We do not record the details of your card used for payment. At the beginning of the call, we inform you about the recording of the call.

3.1.11 Presentation of an ID suitable for personal identification. In order to protect Nespresso's financial interests and to prevent possible abuse and fraud with the personal data of third parties, before registering to use the Nespresso Bonus Program service, our staff will check your identity by presenting an identification document (identity card, passport, driver's license) in order to prove that the person entering into the contract, who is registering into the Bonus Program is the same person who is registered in Nespresso's systems as a user of the service and as a contracting party. During the verification of identity, the presented ID document will not be copied or recorded in any other way. The name on the identification document is recorded and stored in the Nessoft system.

  1. SENSITIVE PERSONAL DATA

We do not seek to collect or otherwise process sensitive personal data in the ordinary course of our business. These include among others personal data on racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation. Where it becomes necessary to process your sensitive personal data for any reason, we rely on your prior express consent for any processing which is voluntary (e.g., to fulfil our diversity reporting). If We process your sensitive personal data for other purposes, we rely on the following legal bases: (i) establishment, exercise or defence of legal claims such as the detection and prevention of criminal offences (therefore, the prevention of fraud and abuse).

  1. PERSONAL DATA OF CHILDREN

We do not knowingly solicit or collect personal data from children below the age of [13]. If we discover that we have unintentionally collected personal data from a child below [13], we will erase that child’s personal data promptly. Nevertheless, Nespresso may collect personal data of children under 16 – or under 18 in non-online environment – with the consent of the person exercising parental rights of custody. In this case, Nespresso makes reasonable efforts to verify that the consent was actually given or authorized by the person exercising parental rights of custody over the child.

  1. PURPOSE AND LEGAL BASIS OF PROCESSING PERSONAL DATA

The following paragraphs describe the various purposes for which We collect and use your Personal Data, and how long we store the different types of Personal Data that are collected for each purpose. Please note that not all of the data processing purposes below will be relevant to every individual.

What We use your Personal Data for:

6.1.1. Consumer service. We use your Personal Data for consumer service purposes, including responding to your enquiries sent to Nespresso. This typically requires the use of certain personal contact information and information regarding the reason for your inquiry (e.g., order status, technical issue, product question/complaint (relayed via our communication channels or social media for instance), general question, etc.).

Legal basis of data processing:

  • Fulfilling contractual obligations
  • Fulfilling legal obligations: Section 17/A of Act CLV of 1997 on consumer protection
  • Nestlé retains all information not qualified as consumer complaint based on its legitimate interests.

Our legitimate interest

  • Improving and developing new products and services; being more efficient.

Audio recordings made during the conversation with Customer Service

We will keep the conversation with our Customer Service for 2 months for the purpose of handling complaints, improving our customer service processes, checking the satisfaction of our customers, and training the customer service staff, or until the legal dispute is finally closed for the purpose of asserting and defending legal claims. The legal basis for data management is the legitimate interest of Nestlé.

6.1.2. Contests, marketing and other promotions. Our campaigns and promotions are run on our or on third party websites and/or social networks. For more information about our contests and other promotions, please see the official rules or details posted with each contest/promotion.

Legal basis of data processing

  • Your voluntary unambiguous consent based on specific information.
  • Fulfilling contractual obligations
  • Retained based on the legitimate interest of Nespresso.

Our legitimate interest

  • Improving and developing new products and services; being more efficient

6.1.3. Third party social networks: We use your Personal Data when you interact with third party social networking features, such as “Like” functions, to serve you with advertisements and engage with you on third party social networks. You can learn more about how these features work, the profile data that We obtain about you, and find out how to opt out by reviewing the privacy notices of the relevant third-party social networks.

Legal basis of data processing

  • With your voluntary unambiguous consent based on specific information
  • based on the legitimate interests of Nestlé

Our legitimate interest

  • Working out which of our products and services may interest you and telling you about them.
  • Defining types of consumers for new products or services

6.1.4. Direct marketing communication. We may also use your Personal Data in providing information about products and services. This can be done via means such as email, ads, SMS, phone calls and postal mailings to the extent permitted by applicable laws.

Legal basis of data processing

  • Your voluntary unambiguous consent based on specific information.
  • You may object to this data processing at any time (for further details please see Section 10)

6.1.5. Personalisation (offline and online). We use your personal data for some or all of the following purposes: (i) to analyse your preferences and habits, (ii) to anticipate your needs based on our analysis of your profile, (iii) to improve and personalise your experience on our Websites and apps; (iv) to ensure that content from our Websites/apps is optimised for you and for your computer or device; (v) to provide you with targeted advertising and content, and (vi) to allow you to participate in interactive features, when you choose to do so. For example, we remember your login ID/email address or screen name so that you can quickly login the next time you visit our site or so that you can easily retrieve the items you previously placed in your shopping cart. Based on this type of information, and with your consent, we also show you specific Nespresso content or promotions that are tailored to your interests.

Legal basis of data processing

  • Your voluntary unambiguous consent based on specific information.
  • The legitimate interests of Nestlé
  • Improving and developing new products and services; being more efficient, protection of our systems, networks and staff

Our legitimate interest

  • Improving and developing new products and services; being more efficient, protection of our systems, networks and staff

6.1.6. Order fulfilment. We use your Personal Data to process and ship your orders, inform you about the status of your orders, correct addresses and conduct identity verification and other fraud detection activities. This involves the use of personal contact data, as well as payment and financial information. For this data processing purpose the Data Controllers (that is Nestlé Hungária Kft. and Nestlé Nespresso SA) may be considered joint data controllers.

Legal basis of data processing

  • Required for the fulfilment of the contract between you and the joint data controllers.
  • The legitimate interests of Nestlé

Our legitimate interest

  • detect fraud and ensure the lawful operation of Nestlé.

6.1.7. Internal or market research. In accordance with applicable laws, we use your Personal Data for other general business purposes, therefore, conducting internal or market research and measuring the effectiveness of advertising campaigns. We reserve the right that if you have multiple Nespresso accounts to consolidate them into a single account, however, we shall always seek your consent in each case.

Legal basis of data processing

  • Your voluntary unambiguous consent based on specific information.

6.1.8. Analyses, security. We also use your Personal Data for the maintenance of your account during the management and operation of our communications, IT and security systems.

Legal basis of data processing

  • Required for the fulfilment of the contract between you and Nestlé.

In order to protect Nespresso's financial interests and to prevent possible abuse and fraud of the personal data of third parties, before registering to use the Nespresso Bonus Program service, our staff will check your identity by presenting an identification card (identity card, passport, driver's license) in order to prove that the person entering into the contract is , who is registering into the Bonus Program is the same person who is registered in Nespresso's systems as a user of the service and as a contracting party. During the verification of identity, the presented ID document will not be copied or recorded in any other way. The name on the identification document is recorded and stored in the Nessoft system.

Legal basis of data processing

  • Legitimate interests of Nestlé and third parties.

  1. RECIPIENTS OF PERSONAL DATA

7.1. Nestlé / Nespresso Group members:

We may transmit your Personal Data for the data processing purposes in this Notice to the following members of the Nestlé Group for them to perform the activities specified below. We conclude[d] a data processing contract with the members of Nestlé Group granting appropriate safeguards for the processing of Personal Data.

All the following Nestlé entities:

Nestlé Ukraine Limited Liability Company, 79034 Ukraine Lviv, Ugorska str. 14

  • All activities
  • Adequacy decision of the European Commission: Commission Decision C(2010)593
  • Standard Contractual Clauses

Globe Center Europe GmbH, Lyoner Straße 23, 60528 Frankfurt am Main, Germany

  • All activities

7.2. Third party recipients outside the Nestlé Group

  • Service providers (data processors). These are companies outside the Group that We use to help Us run our business (e.g., order fulfilment, payment processing, fraud detection and identity verification, website operation, market research companies, support services, promotions, website development, data analysis, CRC, etc.). Service providers, and their selected staff, are only allowed to access and use your Personal Data on Our behalf for the specific tasks that they have been requested to carry out, based on our instructions, and are required to keep your Personal Data confidential and secure. Please, contact the data processors engaged by Nespresso to gain information about them and the categories of Personal Data transmitted to them.
  • Credit reporting agencies. To the extent permitted by applicable law, credit reporting agencies and are external companies that We use to help Us to verify your creditworthiness (in particular for orders with invoice).
  • Claims management. If you have overdue and unpaid liabilities to Us, we may engage a claims management company (e.g., factoring service provider) to collect such receivables. In such cases, the legitimate interest of Nespresso is to share the data required to collect the claims with the claims management company.
  • Third party companies using Personal Data for their own marketing purposes. Except in situations where you have given your consent, we do not license or sell your Personal Data to third party companies for their own marketing purposes. Their identity will be disclosed at the time your separate consent is sought.
  • Third party recipients using Personal Data for legal reasons or due to merger/acquisition. In the event that the Data Controllers or their assets are acquired by, or any of the Data Controllers is merged with, another company, we will share your Personal Data with any of our legal successors.

We may also disclose your Personal Data to third parties in the following cases: (i) when required by applicable law; (ii) in response to legal proceedings; (iii) in response to a request from a competent law enforcement agency, authority or court; (iv) to protect our rights, privacy, safety or property, or the public and public interest; or (v) to enforce the terms of any agreement or the terms of our Website, and the rights and obligations therein.

  1. DATA TRANSFER ABROAD

Transfer of your Personal Data. Since Nestlé is an international group, it pursues its operations internationally, therefore, we may disclose your Personal Data with a member of the Nestlé Group to achieve the purposes specified in this Notice. For this reason, we may transfer your personal data to other countries that may have different laws and data protection compliance requirements to those that apply in the country in which you are located. In such cases data transmission is affected only by ensuring the measures set forth in Articles 44-49 of the GDPR.

  1. WHO CAN ACCESS YOUR PERSONAL DATA AT NESTLÉ AND THE JOINT DATA CONTROLLERS?

Your Personal Data will be processed by our authorised staff or agents, on a need-to-know basis, depending on the specific purposes for which your Personal Data have been collected (e.g., our staff in charge of consumer care matters will have access to your consumer record).

  1. YOUR RIGHTS

You are entitled with respect to your Personal Data processed by the Data Controller to

  • access to your Personal Data.
  • request the rectification of your Personal Data.
  • request the deletion of your Personal Data;
  • request the restriction of the processing of your Personal Data;
  • object to the processing of your Personal Data;
  • receive your Personal Data and transmit them to another data controller if the legal prerequisites prevail (right to data portability);
  • withdraw your consent at any time if your Personal Data are processed based on your consent;
  • object to data processing if processing your Personal Data if required to enforce the legitimate interest of the data controller or a third party.

You may exercise your rights provided by the applicable law, therefore particularly by GDPR with respect to any Data Controller.

You may send your request for exercising the above rights to the contacts in Section 1. of this Notice.

Any of the Data Controllers informs you about the measures taken in response to your request without undue delay, but usually within 1 month of receiving your request. If none of the Data Controller takes measures, it informs you without delay, but not later than 1 month of receiving your request about the reasons for not taking action. You have opportunities for legal remedy if you do not agree with the answer or the measure taken.

Information is essentially free of charge, however, if you contact any of the Data Controllers with clearly unfounded or – particularly due to their repetitive nature – excessive requests, we may charge a fee based on the administrative costs or we may refuse to proceed with your request.

We inform all recipients of all rectifications or deletion of Personal Data, or restriction of data processing whom such Personal Data are disclosed unless this proves impossible or requires a disproportionate effort. We inform you about the recipients.

10.1. Access to Personal Data.

You have the right to access, review and request a physical or electronic copy of information held about you. You also have the right to request information on the source of your Personal Data.

You may exercise the above rights by completing and submitting the form at https://www.nespresso.com/hu/hu/kapcsolat or by mail addressed to Nespresso Club 1461 Budapest P.O. box (Pf.) 400.

10.2. Right to rectification

You have the right to have your inaccurate Personal Data rectified without delay at your request, and to request your incomplete Personal Data to be completed. You may partly exercise this right by changing the relevant settings in your account.

10.3. Right to erasure (“right to be forgotten”)

You have the right to request the deletion of your Personal Data without undue delay at your request where one of the following grounds prevails:

  • the Personal Data are no longer necessary.
  • the consent for data processing is withdrawn and there is no longer legal ground for processing.
  • you object to data processing and (i) no overriding legitimate reason for processing exists, or (ii) We have no discretionary opportunity.
  • the Personal Data have been unlawfully processed.

Personal Data must be erased based on law.

Please note that, in certain circumstances, we will not be able to delete your Personal Data without also deleting your user account.

We do not delete Personal Data if data processing is required for any of the following reasons: (i) for exercising the right of freedom of expression and information; (ii) for compliance with a legal obligation which requires processing; or (iii) for the establishment, exercise or defence of legal claims.

10.4. Right to restriction of processing

You have the right to request Us to restrict data processing if any of the following prevails:

  • you contest the accuracy of the personal data, in which cases restriction applies to a period enabling Us to verify the accuracy of the personal data.
  • the processing is unlawful, and you oppose the erasure of the Personal Data and request the restriction of their use instead.
  • We no longer need the personal data for the purposes of the processing, but you require them for the establishment, exercise or defence of legal claims.
  • you have objected to processing, in which case restriction applies to a period enabling the verification whether the legitimate grounds of the data controller override those of the data subject.

Where processing has been restricted, such personal data may, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or of a Member State. We inform you in advance about lifting the restriction.

10.5. Right to object

You have the right to object, at any time on grounds relating to your particular situation to processing by the Data Controllers based on their legitimate interests and particularly to data processing for the purpose of direct marketing. In this case We can no longer process the Personal Data unless the data controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.

10.6. Right to data portability

Unless it infringes others’ rights and freedoms, you have the right to receive your Personal Data in a structured, commonly used and machine-readable format. You also have the right to have Us transmit those data to another controller directly, where:

  • data processing is based on your consent or is required to fulfil a contract which you are a party to, or is required to take steps at your request prior to concluding such contract; and
  • the processing is carried out by automated means, which is your Personal Data are processed in an IT system and not on paper.

Both of the above two criteria must be met, that is you may exercise your right to data portability only if you consented to the processing of your data (i.e. consent is the legal basis of processing) or if processing is based on a contract and is carried out in an IT system without human intervention.

  1. YOUR ADDITIONAL CHOICES ABOUT HOW WE USE AND DISCLOSE YOUR PERSONAL DATA

We strive to provide you with choices regarding the Personal Data that you provide to Us. The following mechanisms give you the following control over your Personal Data while exercising your rights:

Cookies/Similar Technologies. You manage your consent via (i) our consent management solution or (ii) your browser so as to refuse all or some cookies/similar technologies, or to alert you when they are being used. Please, see our Cookie notice.

Advertising, marketing and promotions. You can consent for your Personal Data to be used by Nespresso to promote its products or services through tick-box(es) located on the registration forms or by answering the question(s) presented by our CRC representatives. If you decide that you no longer wish to receive such communications, you can subsequently unsubscribe from receiving marketing-related communications at any time, by following the instructions provided in each such communication. To unsubscribe from marketing communications sent by any medium, including third party social networks, you can opt-out at any time by unsubscribing through links available in our communications, logging into the Websites/apps or third party social networks and adjusting your user preferences in your account profile by unchecking the relevant boxes or by calling our CRC. Please note that, even if you opt-out from receiving marketing communications, you will still receive administrative communications from Us, such as order or other transaction confirmations, notifications about your account activities (e.g., account confirmations, password changes, etc.), and other important non marketing related announcements.

Personalisation (offline and online): if you wish to have your Personal Data used by Nespresso to provide you with a personalized experience/targeted advertising & content, you can indicate so through the relevant tick-box(es) located on the registration form or by answering the question(s) presented by our CRC representatives (where provided by law). If you decide that you no longer wish to benefit from this personalization, you can opt-out at any time by logging into the Websites/apps and adjusting your user preferences in your account profile by unchecking the relevant boxes or by calling our CRC.

Targeted Advertising. We partner with ad networks and other ad serving providers (“Advertising Providers”) that serve advertising on behalf of Us and other non-affiliated companies on the Internet. Some of those advertisements are tailored to your interests based on information collected on Nestlé sites or on non-affiliated websites over time. You can visit www.aboutads.info/choices to learn more about this type of advertising, as well as about how to opt-out of interest-based advertising practices from companies that participate in the Digital Advertising Alliance’s (“DAA”) self-regulatory program. Additionally, you can opt-out of this type of advertising in mobile applications from companies that participate in the DAA’s AppChoices app by downloading the app from the iOS or Android app store. You can also stop the collection of precise location data from a mobile device by accessing your device location service settings.

  1. SECURITY MEASURES

We use appropriate measures (described below) to keep your Personal Data confidential and secure. Please note, however, that these protections do not apply to information you choose to share in public areas such as third-party social networks. The privacy notice of the relevant website applies to such sharing and similar activities.

We store your Personal Data in operating environments that use reasonable security measures in proportion to the potential risks associated with data processing to prevent unauthorised access.

Measures We expect you to take. It is important that you also play a role in keeping your Personal Data safe and secure. When signing up for an online account, please be sure to choose an account password that would be difficult for others to guess and never reveal your password to anyone else. Please, keep your password secret and use your Nespresso account responsibly. If you use a shared or public computer, never choose to have your login ID/email address or password remembered and make sure to log out of your account every time you leave the computer. You should also make use of any privacy settings or controls We provide you in our website/app.

  1. COOKIES/SIMILAR TECHNOLOGIES, LOG FILES AND WEB BEACONS

Cookies/Similar Technologies. Please see our Cookie Notice to learn how you can manage your cookie settings and for detailed information on the cookies We use and the purposes for which We use them.

Log Files. We collect information in the form of log files that record website activity and gather statistics about your browsing habits. These entries are generated automatically, and help Us to troubleshoot errors, improve performance and maintain the security of our websites.

Web Beacons. Web beacons (also known as “web bugs”) are small strings of code that deliver a graphic image on a web page or in an email for the purpose of transferring data back to Us. The information collected via web beacons will include information such as IP address, as well as information about how you respond to an email campaign (e.g., at what time the email was opened, which links you click on in the email, etc.). We will use web beacons on our websites or include them in e-mails that We send to you. We use web beacon information for a variety of purposes, including but not limited to, site traffic reporting, unique visitor counts, advertising, email auditing and reporting, and personalisation.

  1. CHANGES TO THIS NOTICE

If We change the way We handle your Personal Data, we will update this Notice. We reserve the right to make changes to our practices and this Notice at any time, please check back frequently to see any updates or changes to our Notice. Nespresso informs you appropriately about any substantial changes to this Notice.