Privacy statement of the Yarrah Website
Introduction
Welcome to the privacy statement of Yarrah Organic Petfood B.V. ("Yarrah", "we" or "us"). The website https://www.yarrah.com (including subdomains) (“Website”) and the products on the Website are offered by Premium Petfood Brands B.V. Chamber of Commerce number 08145768 and VAT number NL815985216B01 (“PPB”).
PPB: legal entity that markets the products
Yarrah Organic Petfood: brand name of PPB
Website: the Yarrah Organic Petfood website at https://www.yarrah.com, including sub domains.
PPB respects your privacy and makes every effort to protect your personal data. This privacy statement informs you about how we handle your personal data when you visit our website www.yarrah.com (including subdomains) ("Website") (regardless of where you access it from) and explains to you about your privacy rights and how the law protects you.
This privacy statement is displayed in a layered format, allowing you to click to be taken to the specific sections indicated below. [You can also download a PDF version of this privacy statement: download. You can use the Glossary to understand the meaning of some terms used in this privacy statement.
- IMPORTANT INFORMATION AND WHO WE ARE
- WHAT PERSONAL DATA DO WE COLLECT?
- HOW DO WE COLLECT YOUR PERSONAL DATA?
- HOW DO WE USE YOUR PERSONAL DATA?
- HOW DO WE SHARE YOUR PERSONAL DATA?
- INTERNATIONAL TRANSFERS
- DATA SECURITY
- DATA RETENTION
- YOUR LEGAL RIGHTS
- GLOSSARY
- PERSONAL DATA AUTHORITY
- OTHER INFORMATION
1. Important information and who we are
PPB is the controller of this Website and responsible for processing your personal data.
As part of our services, we collect personal data from visitors to our Website. This personal data may be requested when subscribing to the newsletter, leaving a review, entering a competition or placing an order. Yarrah is responsible for storing and processing this personal data.
Contact Data
We have appointed a privacy manager. If you have any questions about this privacy statement or our data protection activities, please contact our privacy manager at:
Premium Petfood Brands B.V.
Daniëlle van de Kaapo
Correspondence address:
Putterweg 5, 3851 GA in Ermelo, Netherlands.
Tel: +31 (0) 341 43 98 50 or 00 800 34 44 38 88 (free, available from 09:00 to 16:00)
Email: info@yarrah.com
Amendments to the privacy statement and your obligation to inform us of changes
Our privacy statement is updated regularly. This version was last updated on 8-3-2024. Earlier versions can be requested from us by contacting us.
It is important that the personal data we hold about you is accurate and up to date. Therefore, please keep us informed of any changes to your personal data during your relationship with us.
Links and third-party links
This Website may contain links to third-party websites and third-party plug-ins and applications. By clicking on such links or allowing such links, these third parties may collect or share data about you. We have no control over these third-party websites and are not responsible for their privacy policies. If you leave our Website, we encourage you to read the privacy policy of any website you visit.
2. What personal data do we collect?
Personal data or personal information refers to any information about a person from which that person can be identified. This does not include data that is anonymised.
We may collect, use, store and transfer different types of personal data about you, which we have grouped in the following way:
- Identity Data consisting of first and last name, username or similar designation.
- Contact Data consisting of billing address, delivery address, email address and (mobile) phone number(s). This does not include data that is anonymised.
- Transaction Data consisting of data on payments to and from you and other data on products and services you have bought or ordered from us.
- Technical Data consisting of internet protocol (IP) address, your login details, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other software on the devices you use to access this Website.
- Profile Data consisting of your username and password, purchases and orders made by you, your interests, preferences, feedback and survey responses.
- Usage Data consisting of information about how you use our Website, products and services.
- Marketing and Communication Data consisting of your preferences about receiving marketing messages from us and our partners and your communication preferences.
We also collect, use and share aggregated data, such as statistical or demographic data, for any purpose. Aggregated data can be derived from your personal data, but are not legally considered personal data, as they do not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users using a specific website feature. However, if we combine or link aggregated data with your personal data so that it can directly or indirectly identify you, we will treat the combined data as personal data that will be used in accordance with this privacy statement.
We do not collect special categories of personal data about you (consisting of data about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). We also do not collect information on criminal convictions and offences.
If you do not provide personal data
If we are required to collect personal data by law or agreement with you and you do not provide this data when requested, we may not be able to perform the agreement we have or are trying to conclude with you (e.g. to provide you with products or services). In that case, we may have to cancel a product or service you purchase from us or have ordered from us, but we will notify you at that time.
3. How do we collect your personal data?
We use various ways to collect data from you and about you, including through:
Direct interactions. You may provide us with your Identity, Contact and Financial Data by filling in forms or by corresponding with us by post, telephone, email or otherwise. This includes personal data you provide when you:
- Order or request our products or services.
- Create an account on our Website.
- Subscribe to our services or publications.
- Request marketing messages to be sent to you.
- Enter or participate in a competition, contest, promotion or survey.
- Give us feedback or contact us.
Automated technologies or interactions. During your interaction with our Website, we automatically collect Technical Data about your devices, browsing behaviour and patterns. We collect this personal data by using cookies, server logs, pixels and other similar technologies. See our cookie policy for more information.
4. How do we use your personal data?
In most cases, we use your personal data in the following situations:
- As necessary to fulfil our obligations arising from agreements we have entered into with you, as well as for billing and delivery purposes.
- If it is necessary for the protection of our legitimate interests (or those of a third party) and where your interests, fundamental rights or freedoms do not outweigh those interests-
- If necessary to comply with a legal obligation.
Click here for more information on the types of legal grounds on which we rely to process your personal data.
Purposes for which we use your personal data
We have provided a table below with a description of all the ways in which we intend to use your personal data and which legal bases we rely on to do so. Where necessary, we have also indicated what our legitimate interests are.
We may rely on more than one legal basis for processing your personal data, depending on the specific purpose for which we use your data. Please contact us if you would like more details on the specific legal basis we rely on to process your personal data when more than one basis is listed in the table below.
| Purpose / Activity | Category Data | Legal basis for processing, including basis of our legitimate interest |
|---|---|---|
| To register as a new customer |
| Execution of an agreement with you |
To process and deliver your order, including:
|
|
|
To manage our relationship with you, including:
|
|
|
| To enable you to participate in a competition or contest or complete a survey |
|
|
| To manage and protect our business and this Website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data) |
|
|
| To manage and protect our business and this Website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data) |
|
|
| To provide you with relevant Website content and advertisements and to measure and understand the effectiveness of the advertisements we provide to you |
| Necessary for our legitimate interest (to study how customers use our products/services, to develop them, to grow our business and to determine our marketing strategy) |
| To use data analytics to improve our Website, products/services, marketing, customer relationships and experiences |
| Necessary for our legitimate interest (to determine the type of customers for our products and services, to keep our Website up-to-date and relevant, to grow our business and to determine our marketing strategy) |
| To provide you with suggestions and recommendations on products and services that may be of interest to you |
| Necessary for our legitimate interest (to develop our products/services and grow our business) |
Marketing
We aim to provide you with choices regarding the use of certain personal data, particularly around marketing and advertising.
Promotional offers from us
If you have given us your consent, we may use your Identity, Contact, Technical, Usage and Profile Data to give us an idea of what we think you want or need, or what might be of interest to you. This is how we determine which products, services and offers may be relevant to you (we call this marketing). You will receive marketing messages from us if you have asked us to send such messages or purchased products or services from us and you have not opted out of receiving those marketing messages.
Third-party marketing
We will ask for your explicit consent before sharing your personal data with third parties for marketing purposes. For more information on sharing your personal data with ad networks, see below How do we share your personal data?
.Unsubscribe
You can ask us or third parties to stop sending you marketing messages at any time by following the opt-out links in any marketing message sent to you. If you unsubscribe from receiving marketing messages, this will result in you no longer receiving information you might be interested in.
If you opt out of receiving these marketing messages, this does not apply to the processing of personal data for other purposes or receiving other (information) messages.
Cookies
You can set your browser to refuse all or some browser cookies, or to alert you when websites set or use cookies. You can also refuse certain cookies when you visit our Website. If you disable or reject cookies, some parts of this Website may not be accessible or may not work properly. See our cookie policy for more information on cookies and similar technologies we use.
Change of purpose
We will only use your personal data for the purposes for which we collected it, unless we reasonably believe that we need to use it for another reason and that reason is compatible with the original purpose. If you would like an explanation of how processing for the new purpose is compatible with the original purpose, please contact us.
If we need to use your personal data for a non-compatible purpose, we will notify you and explain on what legal basis we may do so and, if required, ask for your consent to do so.
We may process your personal data without your knowledge or consent, in accordance with the above rules, where required or permitted by law.
5. How do we share your personal data?
We may share your personal data with the parties listed below for the purposes set out in the table above.
- Internal Third Parties, as indicated in the Glossary.
- External Third Parties, as indicated in the Glossary.
In addition, we would like to show you online ads and we use your personal data to do so. We collect this data by setting cookies. See our cookie policy for more information about cookies on our Website. If you give us your consent, we will share your [insert which personal data by categories] with the ad networks Google, META and Microsoft Bing, which help us to advertise effectively and show you relevant ads and measure the effectiveness of previous ads. We have a legitimate interest to measure and optimise the effectiveness of our ads on an aggregate level. We only carry out further processing of your personal data in this context if you have given us permission to do so (see table above). The use of your personal data by the aforementioned ad networks is subject to their own privacy policies, which describe how and for what purposes they use your personal data:
We may share your personal information with parties to whom we sell, transfer or merge parts of our business or assets. We can also acquire other companies or merge with them. If our company changes in such a way, the new owners may use your personal data in the same way as set out in this privacy statement. We have a legitimate interest in enabling such a change. We will notify you of such changes.
We require all third parties to respect the security of your personal data and treat it in accordance with laws and regulations. We do not allow our external service providers to use your personal data for their own purposes and only allow them to process your personal data for specific purposes and in accordance with our instructions.
6. International transfers
We may transfer your personal data outside the European Economic Area (EU, Iceland, Liechtenstein and Norway, "EEA"), for example if a supplier of ours or an ad network we work with is located outside the EEA. Their processing of your personal data involves a data transfer outside the EEA.
In cases where we transfer your personal data to a third party outside the EEA, we will ensure a similar level of protection for your data by ensuring that it is only transferred to entities in countries that the European Commission has determined to adequately protect personal data [(e.g. if we share personal data with Yarrah UK LTD, an Internal Third Party, or DotDigital, an External Third Party, both in the UK, based on the European Commission's adequacy decisions of 28 June 2021)] or by using standard model contractual clauses approved by the European Commission on the basis of which personal data is protected in the same way as in the EEA.
You can contact us at info@yarrah.com if you would like more information on the specific arrangements under which we transfer your personal data to third parties outside the EEA or request a copy.
7. Data security
We have taken appropriate security measures to prevent your personal data from being accidentally lost, used in an unauthorised manner or accessed, modified or disclosed. Moreover, we restrict access to your personal data to employees, agents, suppliers and other third parties who have a business need to use that data. They process your personal data only on our instructions and have a duty of confidentiality.
We have procedures in place to adequately respond to any data breach and will notify you and any relevant authority of a data breach when we are legally required to do so.
8. Data retention
How long do we keep your personal data?
We keep your personal data only for as long as reasonably necessary for the purposes for which we collected it, including complying with legal, regulatory, tax and accounting and reporting requirements. We may keep your personal data for longer in the event of a complaint or if we reasonably believe that there is likely to be legal proceedings concerning our relationship with you.
In order to determine the appropriate retention period for your personal data, we take into account the amount, nature and sensitivity of the personal data concerned, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve these purposes by other means, and applicable legal, regulatory, tax and accounting or other requirements.
More detailed information on the retention periods of your personal data can be obtained by contacting us at info@yarrah.com.
Purposes for which we use your personal data.
Under the law, we must keep basic information about our customers (including Contact, Identity, Financial and Transaction Data] for at least seven years after they are no longer customers for tax purposes.
In certain situations, you can ask us to delete your data: see Your legal right below for information on this.
In certain situations, we will anonymise your personal data (so that it can no longer be associated with you) for research and statistical purposes, in which case we may use this information indefinitely without further notice to you.
9. Your legal rights
In certain situations, you have rights in relation to your personal data under the General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR"). Click on the links below for more information on these rights:
- Requesting access to your personal data
- Requesting rectification of your personal data
- Requesting deletion of your personal data
- Object to the processing of your personal data
- Requesting restriction on the processing of your personal data
- Requesting transfer of your personal data
- Withdrawing consent
If you wish to exercise any of the rights listed above, please send an email containing your request to info@yarrah.com.
In principle, no costs involved
There is no charge for being able to view your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is manifestly unfounded, repetitive or otherwise excessive. We may also choose not to act on your request in those circumstances.
What we need from you
We may need to ask you for specific information to help us confirm your identity and to ensure your right to access your personal data (or exercise your other rights). This is a security measure to ensure that personal data is not disclosed to people who have no right to receive it. We may also contact you to request further information regarding your request in order to respond to your request faster.
Response time
We try to respond to all justified requests within one month. Sometimes it may take longer than one month if your request is particularly complex or if you have made multiple requests. In that case, we will inform you of this within the first month and keep you updated on progress.
10. Glossary
LEGAL BASIS
Justified interest means our company's interest in managing and operating our business to provide you with the best service and products and the best and most secure experience. We ensure that we consider and weigh all possible consequences for you (both positive and negative) and your rights before processing your personal data for our legitimate interests. We will not use your personal data for activities in which our interests do not outweigh the impact on you (unless we have your consent or it is otherwise required or permitted by law). You can receive more information about how we balance our legitimate interests against possible consequences for you in relation to specific activities by contacting us.
Execution of a contract means the processing of your data when this is necessary for the execution of a contract to which you are a party or to take steps at your request prior to the conclusion of such a contract.
Fulfilling a legal obligation means processing your personal data when necessary to comply with a legal obligation applicable to us.
THIRD PARTIES
Internal Third Parties
Other entities within Premium Petfood Brands B.V. (which may act as joint controllers or processors) and are based in the United Kingdom and provide sales services
External Third Parties
- Service providers, acting as processors, based in the Netherlands and the United Kingdom providing IT and system management services and fulfilment.
- Professional advisers, who may act as processors or joint processors, including lawyers, bankers, accountants and insurers, based in the Netherlands, Germany, France, United Kingdom and Belgium who provide advisory, banking, legal, insurance and accounting services.
- Regulatory bodies and other authorities, which may act as processors or joint processors, requiring reporting or other processing activities in certain circumstances.
- Advertising networks, acting as processors or independent processors, such as Google, Facebook, based in America and Ireland respectively.
YOUR LEGAL RIGHTS
You have the right to:
Request access to your personal data (commonly known as "data subject's right of inspection"). You can get a copy of the personal data we hold on you and check whether we process it lawfully.
Request rectification of your personal data that we hold about you. This allows you to have incomplete or incorrect data we hold about you corrected. We may need to verify the accuracy of the new data you leave us.
Request deletion of your personal data. You can ask us to remove or delete personal data when we do not have a good reason to continue processing it. You also have the right to ask us to delete your personal data if you have exercised your right to object to processing (see below), if you withdraw your consent on the basis of which we process the data in question, if we may have processed your data unlawfully or if we need to delete your personal data to comply with a legal obligation. However, we may not always be able to comply with your deletion request for specific legal reasons which, if applicable, will be communicated to you upon your request.
Object to the processing of your personal data when we invoke a legitimate interest (or that of a third party) and you wish to object to the processing of your personal data for reasons relating to your particular situation, because you consider that it adversely affects your interests, fundamental rights or freedoms. You also have the right to object when we process your personal data for direct marketing purposes. In some cases, we may be able to demonstrate that we have compelling legitimate grounds for processing your information, which outweigh your interests, rights and freedoms.
Request restriction on the processing of your personal data. You can ask us to suspend processing of your personal data in the following situations:
- If you want to check the accuracy of your data.
- If our use of your data is unlawful, but you do not want us to delete it.
- When you want us to keep your data even though we no longer need it, because you need it for the establishment, exercise or substantiation of a legal claim.
- Where you have objected to our use of your data, but we need to verify that we have compelling legitimate grounds to use it.
Request transfer of your personal data to you or a third party. We will provide you, or a third party you have designated, with your personal data in a structured, common and machine-readable form. This right only applies to data processed through automated processes for which you have given us permission to use or which we use to perform a contract with you.
Withdraw consent at any time when we base the processing of your personal data on consent. However, this does not affect the lawfulness of the processing that took place before you withdrew your consent. If you withdraw your consent, we may no longer be able to provide certain products or services to you. We will inform you of this at the time you withdraw your consent.
11. Dutch Personal Data Authority
Of course, we are happy to help you if you have complaints about the processing of your personal data. Under the GDPR, you also have the right to lodge a complaint with the Dutch Personal Data Authority regarding the processing of your personal data. You can contact the Dutch Personal Data Authority.
12. Other information
We have the right to amend and modify this privacy statement.
If you have any questions, contact us at:
Email: info@yarrah.com
Tel: +31 (0) 341 43 98 50
Tel: 00 800 34 44 38 88 (free of charge)
We devote attention to the content of this site and this is handled with care. However, we cannot guarantee that the information displayed is 100% correct.
This privacy statement was last amended on 18-11-2024.