Application and scope of this Privacy Policy

This Privacy Policy applies to the personal data of all of our external contacts.

Organizations covered by this Privacy Policy

This Privacy Policy applies to Refresco, its parent company and its subsidiaries and other affiliated entities. All references in this Privacy Policy to Refresco”, “we”, “us”, “our” and like terms should be interpreted accordingly.

It is Refresco’s policy to comply with the privacy legislation within each jurisdiction in which we operate. Sometimes the privacy legislation and / or an individual’s right to privacy are different from one jurisdiction to another. If you are unsure if or how this Privacy Policy applies to you, please contact HR.

What is personal data?

Personal data is any information about an identifiable individual. Personal information does not include anonymous or non-personal information (i.e., information that cannot be associated with or tracked back to a specific individual).

What personal data do we process?

In our business operation we process different types of personal data of our external contacts, including, but not limited to, the personal data contained in:

• completed contact forms;
• submitted complaints;
• communications, via post, e-mail, phone, websites or social media platforms;
• job application letters;
• the books in which names and signatures of visitors of our factories are recorded;
• public sources (such as the Commercial Trade Registers);
• databases from third parties, including recruitment agencies;
• supplier and/or customer events organized by Refresco.

In addition to the examples listed above, personal data also includes information such as gender, date of birth, education and/or training details, bank details and any other information necessary to achieve Refresco’s business purposes, which is disclosed in the context of having contact or doing business with, or applying for a job at, Refresco.

Furthermore, in addition to the examples listed above personal data can also be processed in case Refresco’s Speak Up Policy is used. For further information about our Speak Up Policy and what concerns are covered by this policy, we refer to the Speak Up Policy. 

As a general rule, Refresco processes personal data directly provided by external contacts. From time to time, we may utilize the services of third parties in our business and may also receive personal data collected by those third parties in the course of the performance of their services for us or otherwise. Where this is applicable, we will take reasonable steps to ensure that such third parties have represented to us that they have the right to disclose the personal data of external contacts to us.

Where permitted or required by applicable law or regulatory requirements, we may process information about external contacts without their knowledge or consent.

Why do we collect personal data?

Refresco processes personal data of external contacts for its business purposes only. We can inter alia process personal data of external contacts for the following purposes:

• the entering and execution of an agreement in respect of the products and/or services we deliver;
• the entering and execution of an agreement in respect of the products and/or services external contacts deliver;
• to offer products and/or services from us and to adapt them to the needs and wishes of external contacts;
• to be able to review the products and services that we obtain from you so that we may work with you and so that you may understand our requirements for such products and services;
• to be able to contact external contacts via applicable media;
• to be able to handle complaints;
• to be able to handle job application letters;
• to be able to guarantee the safety of visitors and employees of our factories;
• to protect us against error, fraud, theft and damage to our goods and property, including to verify your identity;
• in case the external contact has given unambiguous consent: to send press releases (with information about our company organization;
• in case the external contact has given unambiguous consent: to show ads (e.g. on social media);
• to send the external contact user information and service messages;
• to analyze, maintain, secure and optimize our websites and associated technologies;
• for compiling user statics of our websites;
• to comply with relevant laws and regulations;
• organizing events and use on social media;
• such other purposes as are reasonably required by Refresco.

Please note that personal data of external contacts may be exchanged with, or made available to our subsidiaries for the aforementioned purposes.

Recruitment

In connection with your application to for work with us, we will use the personal data we collect about you to:

• assess your skills, qualification, and suitability for the role;
• carry out background and reference checks, where applicable;
• communicate with you about the recruitment process;
• keep records related to our hiring process;
• comply with legal or regulatory requirements.

We need to process your personal data to decide whether to enter into a contract of employment with you. Having received your CV, cover letter and  your application form and the results from the test, which you took, if applicable, we will then process that information to decide whether you meet the basic requirements to be shortlisted for the role.

Should we decide to invite you to a job interview, we will use the information you provide to us during  this  interview, to decide whether to consider you for the position.

If we decide to offer you the role, we might than take up references before confirming your appointment. We will always ask for your consent before taking up a reference.

When we do not employ you: if Refresco does not employ you, Refresco will nevertheless continue to retain and use your information which may include personal data in order to consider you for new positions. Refresco may refer back to an earlier application in case you submit a new application in the future. In this respect Refresco will retain your personal data for a period of one year following rejection of the job application procedure, unless otherwise required by applicable law. Furthermore, if you created an account on the Refresco career opportunities website, your account information will be retained for as long as you maintain an active account. Your account will be deemed inactive, and your account information will be automatically deleted, after one year of inactivity.

Please contact the local HR department if you do not wish to be contacted anymore by Refresco for new job vacancies.

If you fail to provide information when requested, which is necessary for us to consider your application, we will not be able to process your application successfully.

Cookies

We use cookies to help us gather and store information about visitors to our website. For further information about the types of Cookies we use, why and how you can control cookies, please see our Cookie Policy. The Cookie Policy is displayed on our website and a link can be found in the footer of the website.

How do we use your personal data?

We may use your personal data:

• for the purposes described in this Privacy Policy; or
• for any additional purposes that we advise you of and where your consent is required by law and have obtained your consent in respect of the use or disclosure of your personal data.

We may use your personal data without your knowledge or consent where we are permitted or required by applicable law or regulatory requirements to do so.

When do we disclose your personal data

As a principle, we do not disclose personal data to third parties. However, disclosing personal data of external contacts to third parties might be necessary in the performance of an agreement between Refresco and the external contact. At all times, any third party must act on the instructions of Refresco and ensure personal data is adequately protected.

How is personal data protected?

Refresco will take all reasonable precautions to keep your personal information secure, appropriate to our business and the amount of personal data that we own or maintain and identified risks.

How long is personal data retained?

Refresco’s data retention policy applies in this respect.

We may, instead of destroying or erasing your personal data, make it anonymous such that it cannot be associated with or tracked back to you.

Links to third party websites

Our website(s) may contain hyperlinks to third party websites and social media platforms. Once you have used these links to leave our site, you should note that we do not have any control over that other website or social media platform. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this Privacy Policy.

You should exercise caution and look at the privacy statement applicable to the website in question. Moreover, we are not responsible nor liable for the content of third party websites or platforms.

Access to your personal data

It is important that all personal data in our records is both accurate and up-to-date. You can exercise your rights with respect to your personal data, such as the right of access, rectification, erasure and objection through Refresco’s data subject rights request. We strive to respond to your request within four (4) weeks. Occasionally it may takes us longer than four (4) weeks if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

Other Refresco privacy policies

Besides this Privacy Policy, specific campaigns or promotions may be governed by additional privacy terms. Please take a moment to familiarize yourself with such terms before participating in any such campaigns or promotions.

Inquiries or concerns?

If you have any questions about this Privacy Policy or concerns about how we process and manage personal data of our external contacts, please contact [name department and/or contact person], in writing or by e-mail. We will endeavor to answer your questions and advise you of any steps taken to address the issues raised by you.

We have appointed HR to oversee compliance with this Privacy Policy.

Revisions to this Privacy Policy

Refresco may from time to time make changes to this Privacy Policy to reflect changes in its legal or regulatory obligations or in the manner in which we deal with the personal data of external contacts. We will communicate any revised version of this Privacy Policy via our website(s). Any changes to this Privacy Policy will be effective from the time they are communicated. This Privacy Policy was last reviewed on 19 April 2022. 

Interpretation of this Privacy Policy

Any interpretation associated with this Privacy Policy will be made in accordance with Dutch law. This Privacy Policy includes examples but is not intended to be restricted in its application to such examples, therefore where the word ‘including’ is used, it shall mean ‘including without limitation. This Privacy Policy does not create or confer upon any individual any rights, or impose upon Refresco any rights or obligations outside of, or in addition to, any rights or obligations imposed by the privacy laws applicable to such individual’s personal data. Should there be, in a specific case, any inconsistency between this Privacy Policy and such privacy laws, this Privacy Policy shall be interpreted, in respect of that case, to give effect to, and comply with, such privacy laws.