Danone Privacy Statement
Danone knows that you care how your personal data is used and we recognize the importance of protecting your privacy.
This Privacy Statement explains how Danone S.A. and all its subsidiaries (“Danone”) acting as the Data Controller collect and manage the personal data on the Danone Nations Club Platform (“Platform”) in the context of the Danone Nations Club (“the Club”). It contains information on which data we collect, how we use it, why we need it and how it can benefit the Participants or their Legal Guardians.
In this Privacy Statement, “Participant” shall mean any minor between 10 to 15 years old participating in the Club and “Legal Guardians” shall mean the legal guardians of the Participants. The terms “You” and “Your” shall refer to the Participants and/or the Legal Guardians where applicable.
If you want to know more about DANONE S.A and its subsidiaries (“DANONE”), please visit www.danone.com/
The Club is dedicated to minors from 10 to 15 years old and Danone therefore pays particular attention to the processing of their personal data.
For this reason, the Legal Guardians are asked to accept this Privacy Statement. Without this acceptation, Participants won’t be able to create a User Account and consequently to participate in the Club.
Basic principles and our privacy commitment
At Danone we are committed to protecting your right to privacy. We aim to protect any personal data we hold, to manage your personal data in a responsible way and to be transparent in our practices. Your trust is important to us. We have therefore committed ourselves to the following basic principles:
You have no obligation to provide any personal data requested by us. However, if you choose not to, we may not be able to provide you with some services. In particular, you are aware that the participation in the Club involves the processing of your personal data;
We only collect and process your data for the purposes set out in this Privacy Statement or for specific purposes that we share with you and/or that you have consented to;
We aim to collect, process and use as little personal data as possible;
When we do collect your personal data, we aim to keep it as accurate and up to date as possible;
If the personal data we collect is no longer needed for any purposes and we are not required by law to retain it, we will do what we can to delete, destroy or permanently de-identify it;
We educate and train our personnel to data protection issues;
Your personal data will not be shared, sold, rented or disclosed other than as described in this Privacy Statement;
We undertake to notify the competent control authority of any security breach presenting a high risk for the rights and freedoms within seventy-two (72) hours of the discovery of the breach.
What personal data do we collect?
By personal data, we refer to any information about a person from which that person can be identified. This does not include data for which the identity has been deleted and cannot identify a person (anonymous data).
The personal data we collect varies depending upon the purpose of the collection.
Generally, we may collect the following types of personal data from you directly:
Personal contact details:
the Participant name and
first name, the Participant age, the Legal Guardians name and first name, the Legal Guardians email addresses, the Participant email address, the country of residence of the Participant, the Participant postal address in the event the Participant wins a prize and the Participant identifiers (username, login and password)
in order to create a User Account on the Platform to participate in the Club. We might also collect a copy of (i)
the Legal Guardians identity document in order to verify that they accepted the participation of the Participant in the Club
(ii) the Participant identity document to verify his/her age and/or (iii) both identity documents (Participants and Legal Guardians) if the Participants wins the right to participate to the Football camp. Finally, we can also collect the football club in which the Participant is affiliated and the football club of which the Participant is a supporter
image if his/her Legal Guardians provided consent to Danone to use your content on our associated social media account(s) on Facebook (https://www.facebook.com/danonenationscup/), Instagram (https://www.instagram.com/danonenationscup/), Youtube (https://www.youtube.com/c/DanoneNationsCupOfficial/) and Twitch (https://www.twitch.tv/danonenationscup)
Browser history, such as pages accessed, date of access, location when accessed, and IP address.
You undertake to communicate only accurate, complete and regularly updated data concerning your identity, content and more generally information. Danone shall not be held liable in the event of the communication of illicit data or data contrary to public order.
Danone processing activities do not normally lead to the collection of sensitive data through the Platform or by other means. However, in the event that Danone does collect and process sensitive data, it will do so in accordance with legal requirements.
Why do we collect and use your personal data?
We collect your personal data so we can provide you with the best online experience. In particular, we may collect, hold, use and disclose your personal data for the following purposes and based on the following legal basis:
To enable you to access and use the Platform;
To enable to proceed to User Account registration in order to participate in the Club;
To register and manage the participation in the Club;
To send the prizes that the Participant could possibly win in the framework of the Club.
The performance of an agreement (the Terms and Conditions and/or Club Rules).
To develop and improve our services, communication methods and the functionality of the Platform.
Danone’s legitimate interest*.
*We believe the risk to your data protection rights in connection with personal data that we process on the basis of our legitimate interests is not excessive or overly intrusive. We have also put in place protections for your rights by ensuring proper retention periods and security controls.
To improve the safety and security of the Platform and to verify your identity and prevent fraud or any other illegal or unauthorized activities, and to comply with other legal obligations especially when the authorization of the legal guardians is required by law.
The respect of a legal obligation
To understand and assess the interests, wants, and changing needs of visitors;
Where appropriate, we will ask for the Legal Guardians consent to process Participant personal data to send you our newsletters and/or notifications;
Where appropriate, we will ask for the Legal Guardians consent to place cookies on your terminal;
Where appropriate, we will also ask for the Legal Guardians consent for Danone to use the image of the Participant in order to use it on Our Social Media Accounts.
* Where you have given consent for processing activities, you have the right to withdraw your consent at any time.
When we collect and use your personal data for purposes mentioned above or for other purposes, we will inform you before or at the time of collection.
If in accordance with the applicable regulation of your country of residence consent is needed to collect and process your personal data, you agree and accept that by registering to the Platform in order to participate to the Club, you provide us with the necessary consent. In these cases, we may also process your personal information, without your consent, but always as permitted by and in compliance with the applicable laws.
Where we process your personal data, according to applicable legislation, you might be entitled to a number of rights and, when applicable, you can exercise these rights at any point. We have provided an overview of these rights below together with what this entails for you.
You can exercise your rights, when eligible to, directly in your User Account; via the email address indicated at the end of this document or through the contact form available here.
In the context of the participation in the Club, if the Participant decide to delete his/her User Account, Danone will be unable to manage his/her participation, which will result in the cancellation of his/her participation.
Specifically, the rights you might be entitled to are the following:
The right to access your personal data and correction
You may have the right to access, correct or update your personal data at any time.
The right to deletion of your personal data
You may have right to request that we delete your data if:
your personal data is no longer necessary in relation to the purposes for which we collected it; or
Legal Guardians withdraw the consent that they had previously given us to process your personal data, and there is no other legal ground to process that personal data; or
you object to us processing your personal data for direct marketing purposes; or
you object to us processing your personal data for Danone’s legitimate interests (such as improving overall user experience on websites);
the personal data is not being processed lawfully; or
your personal data needs to be deleted to comply with the law.
In any case, you may ask Danone to delete your personal data.
In the context of your participation in the Club, if you ask for the deletion of your personal data, Danone may be unable to process your participation in the Club, which might result in the cancellation of your participation.
The right to rectification
You have the right to obtain from Danone without undue delay the rectification of your inaccurate personal data.
The right to withdraw your consent
When we process your personal data on the basis of your Legal Guardians’ consent, the Legal Guardians may have the right to withdraw their consent at any time. However, such withdrawal does not affect the lawfulness of the processing that took place prior to this withdrawal.
Please note that if the Legal Guardians withdraw their consent, the Participant may not be able to use and access certain sections of the Platform anymore, nor receive newsletters you subscribed for.
The right to restriction of processing
You may have the right to restrict the processing of your personal data if:
you do not believe the personal data we have about you is accurate; or
the personal data is not being processed lawfully, but instead of deleting the personal data, you would prefer us to restrict processing instead; or
we no longer need your personal data for the purposes we collected it, but you require the data in order to establish, exercise or defend legal claims; or
you have objected to the processing of your personal data and are awaiting verification on whether your interests related to that objection outweigh the legitimate grounds for processing your data.
The right to object to processing
You may have the right to object to the processing of your personal data at any time.
The right to data portability
Your personal data may be portable. This means it may be moved, copied or transmitted electronically. However, this right only applies where:
a) The processing is based on your legal guardians’ consent;
b) The processing takes place for the performance of a contract;
c) The processing takes place by automated means.
The right to lodge a complaint with a supervisory authority
You may have the right to lodge a complaint directly with supervisory authority about how we process your personal data.
The competent European supervisory authorities are listed on the following link: https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm
In some other countries and in accordance to local laws and regulation you might have additional rights such as provide us with instructions on the use of your personal data after your death.
In all cases, if the personal data we collect is no longer needed for any purposes and we are not required by law to retain it, we will do what we can to delete, destroy or permanently de-identify it.
How we protect your personal data
We understand that the security of your personal data is important. We make our best efforts to protect your personal data from misuse, interference, loss, unauthorized access, modification or disclosure. We have implemented a number of security measures to help protect your personal data and we asked our processors to implement equivalent security measures. For example, we implement access controls, use firewalls and secure servers, and we encrypt personal data. Please note however that where you are transmitting information to us over the internet this can never be guaranteed to be 100% secure.
Sharing of your personal data
When we share your personal data with our affiliates, other organizations or trusted third parties, we make sure we only do so with organizations that safeguard and protect your personal data and comply with applicable privacy laws in the same or similar way that we do.
Trusted third parties may assist us in providing IT services, such as platform providers, hosting services, maintenance and support on our databases as well as on our software and applications that may contain data about you or to perform on our behalf the statistical analyses associated with the use of the career website.
Depending on your participation on different activities or contests, some of your personal data may be shared with our partners if needed to redeem the prize (i.e., your name and clothing and shoe size), or your image to be shared in our partners platforms or social networks.
Your personal data will not be shared, sold, rented or disclosed other than as described in this Privacy Statement. We may, however, share your data when required by law and/or government authorities.
Sharing data internationally
Our servers are located within the European union and we do not transfer your personal data outside the European Economic Area.
However, if Danone were to transfer your data outside the European Economic Area (EEA) or outside your country of residence if you are located outside of the EEA, it would take appropriate measures to ensure that your personal data is adequately protected in the destination country. In this case, we put in place contractual measures and controls regarding technical and organizational measures in accordance with the regulations to ensure that personal data is processed with the same level of security as required by the European regulations.
Therefore, you agree and accept that if you provide us with your personal data, you consent on the transfer of your personal data as described herein.
Personal Data retention period
We will only retain your personal data for the time necessary to achieve the purposes for which we collected it, including to comply with any legal or accounting requirement.
To determine the appropriate retention period for personal data, we take into account the quantity, nature and sensitivity of personal data, the potential risk of harm resulting from the unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and the possibility of attaining those purposes by other means, as well as the applicable legal requirements.
After the established deadlines, the data is either deleted or retained after being anonymized, especially for statistical purposes. It may be retained in case of pre-litigation and litigation. It should be noted that deletion or anonymization are irreversible operations, and that Danone is no longer able, thereafter, to restore this data.
Cookies and other technologies
a) Information about your device browser and operating system;
b) The IP address of the device you are using;
c) Web pages of ours that you view;
d) Links that you click while interactive with our services.
Through the Platform, in addition to the strictly necessary cookies, only functional or performance cookies may be placed on your terminal.
Please see our Cookie Statement for more information on this regard.
How to contact us
If you have any questions, comments or complaints regarding this Privacy Statement or the processing of your personal data, or if you want to make a request regarding any of your data subject rights, please contact us at the following email address email@example.com
You can also contact our Data Protection Officer using the following email address: firstname.lastname@example.org
Data Protection officer
17 boulevard Haussmann
Changes to this Privacy Statement
Danone is free to modify this Privacy Statement periodically to reflect the evolution of our practices in this area. When we modify this Privacy Statement, we also change the "Last Updated" date at the top of the first page. We encourage you to periodically review this Privacy Statement to be updated on how Danone protects your data.
This privacy statement was last updated on 16/07/2021