COCA‑COLA PRIVACY NOTICE

We collect your Personal Data as follows: 

• Through the Sites:  We collect Personal Data through the Sites.
• Offline:  We collect Personal Data from you offline, such as when you contact customer service;

Using cookies: we collect your Personal Data when you browse the Sites, by using cookies. Our collection and processing of your Personal Data via cookies are governed by the Cookie Policy, that you should read carefully. You can accept or reject cookies (except Strictly Necessary Cookies defined in the Cookie Policy), by setting or de-setting the relevant tick-boxes in the Cookie Preference Center available here https://id.coke.com/

• The Personal Data you provide through the Sites is combined with Personal Data and other Information that you provide to us (via online or offline means), or that we otherwise obtain online or offline.

We use your Personal Data for the following purposes:

1. Respond to your requests / Administrative interactions
    

1. 
   
   • To respond to your inquiries, questions and comments and fulfil your requests.
     
     Legal basis for processing: our legitimate interests to answer your queries.
     
     
   • To send administrative information to you, such as for example information regarding the Sites, changes to our terms and conditions, and changes to this Privacy Notice. 
     
     Legal basis for processing: our legitimate interests to inform you about the evolution of our Sites, the changes to our terms and conditions, and the changes to this Privacy Notice, in a timely manner.
     
     

1. Data analytics pertaining to your activity on the Sites

1.  
   • We collect your Personal Data, including location data, to measure your engagement with the Sites (e.g. to know how you use our Sites, when do you use them, how often, using what device, how long you stay on them, on what items you click), and derive consumption trends and patterns from this analysis. This helps us to know the Sites' users better, and adapt our Sites to the identified preferences of the users, but also more generally improve Coca‑Cola products and services.
     
     Legal basis for processing: your consent

1.  
   • You have the opportunity to accept or refuse this collection and use of your Personal Data pertaining to your activity on the Sites for the purpose of performing data analytics to derive trends and improve our Sites and more generally Coca‑Cola products and services, by contacting our services via https://id.coke.com/ to request changes to your privacy settings. You can also let us know that you wish to withdraw your consent by email, by calling us or writing to us using the contact information listed in section 9 of this Privacy Notice. Once you withdraw your consent, we will stop the processing for the concerned purpose.

1. Storing and sharing of the contents that you publish on the Social Media

1.  
   • You can share content on our Social Media, such as pictures of yourself, texts, hashtags, videos and recordings. When you communicate such content on our Social Media, we can decide to share some of this content (and your Social Media public profile) on our Sites, in the context of marketing campaigns, and more generally to present and highlight our Sites, Coca‑Cola products and Coca‑Cola services.
     
     

Legal basis for processing: your consent

You have the opportunity to accept or refuse this collection and use of your Personal Data for the abovementioned purposeby contacting our services via https://id.coke.com/ to request changes to your privacy settings

You can also let us know that you wish to withdraw your consent by email, by calling us or writing to us using the contact information listed in section 9 of this Privacy Notice. Once you withdraw your consent, we will stop the processing for the concerned purpose.

1. IT administration
   • We use your Personal Data to diagnose server problems, administer the Sites and check that they function properly.
     
     Legal basis for processing: our legitimate interests to administer our IT systems and networks, to ensure the proper functioning of the Sites.

1. Compliance with our legal obligations
2. • To comply with our legal obligations, legal proceedings or government authorities' orders which can include orders from government authorities outside your country of residence, when we reasonably believe that we are legally required to do so and when disclosing your Personal Data is strictly necessary to comply with the said legal obligations, proceedings or government orders.
     
   • 
     Legal basis for processing: compliance with our legal obligations.

1. Lawful protection of our interests

1.  
   • To lawfully enforce our terms and conditions, protect our operations or those of any of our affiliates, protect our rights, privacy, safety or property, and/or that of our affiliates, and allow us to pursue available legal remedies or limit the damages that we may sustain.
     
     Legal basis for processing: our legitimate interests to lawfully protect our organization.
     
     

1. Corporate / M&A operation

1. 
   
   • To perform any reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock (including in connection with any bankruptcy or similar proceedings).
     
     Legal basis for processing: our legitimate interests to conduct our corporate strategy.

Your Personal Data is disclosed to the following recipients:

• local entity
• Adobe Managed Services, which hosts our IT systems and provides system support;   
• APIGEE Edge Platform, which hosts our IT systems and provides system support;
• Amazon Web Services (AWS) EC2, which hosts our IT systems and provides system support;
• CI&T, which hosts our IT systems and provides system support (the agency which provides and maintains GO!Progressive);
• DMeX, which hosts our IT systems and provides system support;
• Gigya, which hosts our IT systems and provides system support;
• Google, which supports our IT system and performs data analytics for the purposes described in the Privacy Notice;
• ICP (provides content management services for DMeX);
• Livefyre, which hosts our IT systems and provides system support;
• Janrain, which hosts our IT systems and provides system support;
• MicroStrategy, which hosts our IT systems and provides system support;
• MRM-McCann, which hosts our IT systems and provides system support; (manages the entire Journey platform) ;
• Qualtrics, which hosts our IT systems and provides system support;
• SalesForce, which hosts our IT systems and provides system support;
• SessionM, which hosts our IT systems and provides system support;
• Wayin DB ;
• WordPress, which hosts our IT systems and provides system support;
• As we believe to be necessary or appropriate, relevant authorities, affiliates and third parties: (a) to comply with our legal obligations; (b) to respond to requests from public and government authorities which can include public and government authorities outside your country of residence; (c) to enforce our terms and conditions; (d) to protect our operations or those of any of our affiliates; (e) to protect our rights, privacy, safety or property, and/or that of our affiliates; and (f) to allow us to pursue available remedies or limit the damages that we may sustain.

This Privacy Notice does not address, and we are not responsible for, the processing and data protection practices of any third parties, including any third party operating any site to which these Sites contain a link. The inclusion of a link on the Sites does not imply endorsement of the linked site by us or by our affiliates. 

In particular, please note that the Sites can contain a link to e-commerce websites, including some e-commerce websites that are Coca‑Cola branded.  This Privacy Notice does not govern any e-commerce websites to which the Sites can contain a link.  Any Personal Data that you provide through the e-commerce website will be subject to the privacy notice of the e-commerce site, and not this Privacy Notice.  We have no control over, and shall not be responsible for, the use of information collected through the e-commerce site.

In some cases, we may use a third party payment service  to process purchases and/or collect donations made through the Sites.  In these cases, your Personal Data may be collected by this third party and not by us, and will be subject to the third party’s privacy notice, rather than this Privacy Notice. We have no control over, and are not responsible for, this third party’s use or disclosure of your Personal Data and we do not endorse those third parties or their websites.  We do not make any representation as to the accuracy, completeness, timeliness or suitability of information in those third parties’ own privacy policies. It is your responsibility to read the privacy policies on third party websites carefully before you use them.

Please note that our online and email advertising-related vendors may use pixel tags, web beacons, clear GIFs or other similar technologies in connection with the Sites to help manage our online and email advertising campaigns and strengthen the effectiveness of such campaigns.  For example, if a vendor has placed a unique cookie on your computer, the vendor may use pixel tags, web beacons, clear GIFs or other similar technologies to recognize the cookie during your visit to the Sites and to learn which of our online advertisements may have brought you to our Sites, and the vendor may provide us with such other information for our use.  Please note we may link such other information provided to us by our vendors to Personal Data about you that we have previously collected.

We may use third-party advertising companies to serve advertisements on our Sites.  These companies may use information (not including your name, address, email address or telephone number) about your visits to the Sites in order to provide advertisements about goods and services of interest to you.  If you would like more information about this practice, please visit http://evidon.com, and to know your choices about not having this information collected or used by these companies, please visit http://www.evidon.com/consumers/profile_manager#tab3.

1. Your rights with regards to the processing of your Personal Data
   
   You have the right:
   • to be provided with a copy of any Personal Data that we hold about you;
   • to request us to update or correct any inaccurate Personal Data, or complete any incomplete Personal Data;
   • to request that we stop processing your Personal Data for direct marketing purposes.
   You also have the right, in certain circumstances:
   • to object to the processing of your Personal Data;
   • to request us to delete your Personal Data;
   • to restrict our processing of your Personal Data; and
   • to request us to transmit certain of your Personal Data to you or to transfer or have them transferred to another data controller.
2. The exercise of your rights
   
   If you wish to exercise any of your above rights, you can contact us using one of the options below.
   • You can send us an email to the following address: coca-colabe@coca-cola.com
   • You can raise your request filling the form available at
   • You can call us on: + 32 (0)78 15 61 56
   • You can write to the following postal address:
     

     Coca‑Cola Services SA/NV , Service Consommateurs,
     Chaussée de Mons 1424 ,
     1070 Brussels
     Belgium

3. Right to lodge a complaint to the competent data protection authority
   
   You have a right to lodge a complaint with the relevant supervisory authority (in particular in the Member State of your habitual residence, place of work or place of the alleged infringement), if you are of the opinion that any of your Personal Data is processed in a manner constituting an infringement of the EU General Data Protection Regulation n°2016 / 679 dated 27 April 2016.
4. Our Data Protection Officer (DPO) contact details
   
   You can contact our Data Protection Officer (DPO) at the following email address:DPO-Europe@coca-cola.com

1. We intend to keep your Personal Data accurate and up-to-date. We will delete the Personal Data that we hold about you when we no longer need it.
2. We keep your Personal Data that we use for the purposes described in this Privacy Notice for a period of 2 years maximum, except where legal requirements imposing that we keep your Personal Data longer or less longer apply.
3. To know how long we keep cookies in your terminal equipment, please refer to our Cookie Policy

1. The Sites are directed to individuals who are 13 years and above with parents’ consent until 16 years old. We request that other individuals under 13 do not provide Personal Data through the Sites.  We reserve the right to request evidence of parental consent at any time to permit the processing of Personal Data relating to minors.
2. For some Sites, there may be age restrictions, based on what is appropriate viewing for certain ages or what is legally permitted by law.  Where specific age restrictions apply, it will be clearly marked on the relevant Site and we may ask questions to verify your age before proceeding.

To achieve the purposes described in this Privacy Notice, we transfer your Personal Data to countries outside the European Economic Area ("Third countries") that are deemed to ensure an adequate level of protection under article 45 of the GDPR.

We may also transfer your Personal Data to Third countries that do not ensure an adequate level of protection. In that case, our data transfers are subject to the following appropriate safeguards in accordance with the GDPR, to guarantee that your Personal Data are adequately protected:
 

• Standard data protection clauses adopted by the EU Commission under article 46 paragraph 2 of the GDPR (click here to access the EU Commission's decision on standard contractual clauses for transfers to processors established in Third countries); and
• EU-U.S. Privacy Shield for transfers to entities located in the United States (click here to access to the EU Commission's decision pertaining to the EU-U.S. Privacy Shield).

To obtain any relevant information regarding any transfers of your Personal Data to Third countries (including the relevant transfer mechanisms), please contact us at this address set out below: privacy@coca-cola.com

This Privacy Notice is governed by and shall be construed in accordance with the laws of Belgium and any other mandatory provisions of applicable laws in the European Union.

1. You can find out when this Privacy Notice was last amended by checking "LAST REVISED" at the top of this page.
    

1. All considered changes to this Privacy Notice will be communicated to you well in advance of the changes actually taking