This privacy notice explains how Koninklijke Ahold Delhaize N.V. (“Ahold Delhaize”, “we”, “us” and “our”) collects and uses your personal data when you visit our website www.aholddelhaize.com.
We recommend that you read this notice carefully to understand what personal data we collect and how we use your personal data. If you have any questions after reading this notice, please contact us at privacy@aholddelhaize.com.
We may update this notice from time to time. This version was published on November 26, 2024.
What types of personal data do we use, and for what purposes do we use your personal data?
We host various webcasts on our website. When you register and participate in one or more webcasts, we may process the following information:
We process this data for our legitimate interests to allow you access to the webcast(s) and to communicate with you about these webcasts.
When you sign up for our press releases, we process the following information:
We only process this data with your consent. You may unsubscribe at any given time.
As part of our responsible disclosure program, we have a Wall of Fame containing the names of persons who have discovered and responsibly reported potential security vulnerabilities to us. If you have done so and have expressed your agreement to being included on our Wall of Fame, we process the following information:
We only process this data when you have shared this with us and have given your consent for publication on the Wall of Fame. You may withdraw your consent at any given time, after which we will remove your data from the Wall of Fame.
Cookies
We use cookies and similar techniques on this website to ensure that this website properly functions, but also so we can measure how our website is used and where we can improve and make it more relevant. Please read our cookie notice for more information.
Who has access to your personal data?
Your personal data may be accessed by or shared with:
For how long will we keep your personal data?
We retain your personal data for a limited amount of time and we will delete or anonymize this information after it is no longer necessary for the purposes of the processing.
How do we secure your personal data?
We have taken appropriate technical and organizational measures to protect your personal data against accidental or unlawful processing. For example, we store your personal data on limited access servers and we protect your personal data through encryption both in transit and in rest.
Where do we process your personal data?
Ahold Delhaize is a global organization with headquarters in the Netherlands. Your personal data may be stored and processed in any country where we have facilities or in which we engage service providers.
In some cases, your personal data may be transferred to a country outside the European Economic Area (“EEA”).
Some of the non-EEA countries are recognized by the European Commission as providing an adequate level of data protection according to EEA standards (the full list of these countries is available here). For transfers from the EEA to countries not considered adequate by the European Commission, we have put in place adequate measures, such as contractual measures (Standard Contractual Clauses) to safeguard the protection of your personal data. The templates for these Standard Contractual Clauses are issued by the European Commission and are available here. Alternatively, you can contact privacy@aholddelhaize.com to obtain a copy of these Standard Contractual Clauses.
How to exercise your rights
You can request to access, rectify, erase or restrict personal data that you have previously provided to us. You can also object to our use of your personal data or, where we process personal data based on consent, withdraw your consent. Furthermore, in certain circumstances you can request to receive an electronic copy of your personal data for the purposes of transmitting it to another company (data portability). We explain each of these requests below. In each case, please send an email to privacy@aholddelhaize.com if you would like to exercise any of your rights. We will respond to your request consistent with applicable law.
You are entitled to request access to the personal data we hold about you and to learn details about what data we collect and for what purpose we use it.
We take reasonable steps to ensure that the information we hold about you is accurate and complete. However, if you do not believe this is the case, you can ask us to update or amend it.
In certain circumstances, you have the right to ask us to delete your personal data, for example where the personal data we collected is no longer necessary for the original purpose or where you withdraw your consent. However, this will need to be balanced against other factors. For example, we may not be able comply with your request due to certain legal or regulatory obligations.
In certain circumstances, you are entitled to ask us to temporarily stop using your personal data, for example where you think that the personal data we hold about you may be inaccurate or where you think that we no longer need to use your personal data.
In certain circumstances, you have the right to ask that we transfer personal data that you have provided to us, to you or to a third party of your choice.
You have the right to object to processing, on grounds particular to your situation and where the processing is based on our legitimate interests. Unless we have a compelling legitimate ground for the processing, we will no longer process the personal data on that basis when you file an objection. Note, however, that we may not be able to provide certain services or benefits if we are unable to process the necessary personal data for that purpose.
We may ask for your consent to process your personal data in specific cases. When we do this, you have the right to withdraw your consent at any time.
If you would like to contact us about the processing of your personal data, please send an email to privacy@aholddelhaize.com. Alternatively, you have the right to lodge a complaint with a data protection authority for your country or region, or where an alleged infringement of applicable data protection law occurs.