Last Refreshed: 12/21/2024 11:34:19 AM
Last Refreshed: 12/21/2024 11:34:19 AM

This privacy notice explains how Koninklijke Ahold Delhaize N.V. (“Ahold Delhaize”, “we”, “us” and “our”) collects and uses your personal data when you visit our website www.aholddelhaize.com.  

We recommend that you read this notice carefully to understand what personal data we collect and how we use your personal data. If you have any questions after reading this notice, please contact us at privacy@aholddelhaize.com.  

We may update this notice from time to time. This version was published on November 26, 2024. 

What types of personal data do we use, and for what purposes do we use your personal data? 

Webcasts 

We host various webcasts on our website. When you register and participate in one or more webcasts, we may process the following information:

  • Full Name.
  • Email address.
  • Company Name.
  • Job Title.
  • Country.
  • Type of participants (analyst, investor, media, etc).

We process this data for our legitimate interests to allow you access to the webcast(s) and to communicate with you about these webcasts. 

Press releases  

When you sign up for our press releases, we process the following information:  

  • Full Name.
  • Email address.
  • Company/organization.
  • Function preference (media, analyst, investor, retail, private investor, etc).

We only process this data with your consent. You may unsubscribe at any given time.  

Wall of Fame  

As part of our responsible disclosure program, we have a Wall of Fame containing the names of persons who have discovered and responsibly reported potential security vulnerabilities to us. If you have done so and have expressed your agreement to being included on our Wall of Fame, we process the following information: 

  • Full name.
  • Nickname. 
  • Link to your social media account(s)/personal website.

We only process this data when you have shared this with us and have given your consent for publication on the Wall of Fame. You may withdraw your consent at any given time, after which we will remove your data from the Wall of Fame. 

Cookies

We use cookies and similar techniques on this website to ensure that this website properly functions, but also so we can measure how our website is used and where we can improve and make it more relevant. Please read our cookie notice for more information. 

Who has access to your personal data? 

Your personal data may be accessed by or shared with:  

  • Associates in departments engaged with the service(s) mentioned above, but only if it is strictly necessary for the performance of their task. In such a case, access will be granted on a need to know basis and only if the associate is bound by an obligation of confidentiality. 
  • Third parties acting on our behalf (processors). In such cases, these third parties may only use your personal data for the purposes referred to above and only in accordance with our instructions. 
  • If required to do so by law or court order, for example with law enforcement agencies or other governmental agencies.  

For how long will we keep your personal data? 

We retain your personal data for a limited amount of time and we will delete or anonymize this information after it is no longer necessary for the purposes of the processing. 

  • Webcasts: Data will be kept for a period of 2 years after which it will be deleted. 
  • Press releases: until you unsubscribe from receiving press releases.  
  • Wall of Fame: for as long as we retain the Wall of Fame page, unless you withdraw your consent in which case we will delete your data from this page.  
  • Cookies: see details in cookie notice for maximum storage duration of each cookie.

How do we secure your personal data? 

We have taken appropriate technical and organizational measures to protect your personal data against accidental or unlawful processing. For example, we store your personal data on limited access servers and we protect your personal data through encryption both in transit and in rest. 

Where do we process your personal data? 

Ahold Delhaize is a global organization with headquarters in the Netherlands. Your personal data may be stored and processed in any country where we have facilities or in which we engage service providers.  

In some cases, your personal data may be transferred to a country outside the European Economic Area (“EEA”).  

Some of the non-EEA countries are recognized by the European Commission as providing an adequate level of data protection according to EEA standards (the full list of these countries is available here). For transfers from the EEA to countries not considered adequate by the European Commission, we have put in place adequate measures, such as contractual measures (Standard Contractual Clauses) to safeguard the protection of your personal data. The templates for these Standard Contractual Clauses are issued by the European Commission and are available here. Alternatively, you can contact privacy@aholddelhaize.com to obtain a copy of these Standard Contractual Clauses. 

How to exercise your rights 

You can request to access, rectify, erase or restrict personal data that you have previously provided to us. You can also object to our use of your personal data or, where we process personal data based on consent, withdraw your consent. Furthermore, in certain circumstances you can request to receive an electronic copy of your personal data for the purposes of transmitting it to another company (data portability). We explain each of these requests below. In each case, please send an email to privacy@aholddelhaize.com if you would like to exercise any of your rights. We will respond to your request consistent with applicable law.

Access 

You are entitled to request access to the personal data we hold about you and to learn details about what data we collect and for what purpose we use it. 

Rectification 

We take reasonable steps to ensure that the information we hold about you is accurate and complete. However, if you do not believe this is the case, you can ask us to update or amend it. 

Deletion

In certain circumstances, you have the right to ask us to delete your personal data, for example where the personal data we collected is no longer necessary for the original purpose or where you withdraw your consent. However, this will need to be balanced against other factors. For example, we may not be able comply with your request due to certain legal or regulatory obligations. 

Restriction of processing 

In certain circumstances, you are entitled to ask us to temporarily stop using your personal data, for example where you think that the personal data we hold about you may be inaccurate or where you think that we no longer need to use your personal data.  

Data portability 

In certain circumstances, you have the right to ask that we transfer personal data that you have provided to us, to you or to a third party of your choice. 

Objection 

You have the right to object to processing, on grounds particular to your situation and where the processing is based on our legitimate interests. Unless we have a compelling legitimate ground for the processing, we will no longer process the personal data on that basis when you file an objection. Note, however, that we may not be able to provide certain services or benefits if we are unable to process the necessary personal data for that purpose. 

Withdraw consent 

We may ask for your consent to process your personal data in specific cases. When we do this, you have the right to withdraw your consent at any time. 

What if you have other questions? 

If you would like to contact us about the processing of your personal data, please send an email to privacy@aholddelhaize.com. Alternatively, you have the right to lodge a complaint with a data protection authority for your country or region, or where an alleged infringement of applicable data protection law occurs.