Effective Date: 10/01/2020
In short, we collect and process information when you navigate to our website, when you call in or otherwise submit a query, when you apply for a job with us, or when you visit our facilities. We also provide you the opportunity to enhance your visit to our site by providing additional personal information to enable certain features, such as The Culinary Club, contests, and surveys. If you represent a company, we collect and process the information necessary to take and fulfill your order.
[TABLE OF CONTENTS]
- Identity of the controller
- Personal Information we collect
- For California residents
- Do not track
- Disclosure of Personal Information to Third Parties
- Children’s data
- Links to other sites
- Data retention
- Your rights
- What we may need from you
- How to submit a rights request
- Changes to this Privacy Statement
- Contact us
Identity of the controller
To the extent the GDPR applies, and for other data privacy laws with a data controller requirement, Summit Hill Foods and its affiliates are the data controller that direct the purposes for which your personal data is processed. For a list of Summit Hill Foods affiliates for which this policy applies, see below:
Summit Hill Foods
333 Old Lindale Road Rome, GA 30161
(800) 334-4468 x6561
Personal Information we collect
“Personal information” (also referred to as “personal data” or “personally identifiable information” in some jurisdictions/regions) means any information from which a person is identifiable or from which that person can be identified. It does not include data where the person’s identity has been removed (anonymous or de-identified data), unless it still possible to identify the person from that data in combination with other data held by the data controller. Examples of non-personal information that we collect include: language, zip code, area code, cooking preferences, location, and time zone so that we can better understand customer behavior and improve our products, services, and advertising.
The table below describes all the ways we may use your personal information, and (to the extent the GDPR applies) the legal bases we rely on to do so.
|Information we collect||Why we collect it||Lawful basis for the processing|
|If you, as a representative of a company, place an order with us, we will collect the following information: your name, shipping and billing address, email address, telephone number, and payment information.||This information is necessary to provide your company with the product you ordered, or to take steps at your request prior to providing you with the product.||This information is necessary to enter into or perform on a contract. It is also in our legitimate interests of taking and fulfilling orders from companies (which does not unfairly cause you prejudice or affect your fundamental rights and liberties because it is used to complete the purchase you have requested).|
|If you request or agree to receive electronic communications or mailings from us (or if you enter into one of our contests), we may collect your name, email, phone number, or physical address. We may also collect products you purchase, the types of recipes you are interested in receiving from us, and information about your cooking habits.||This information is necessary to send you the information you have requested or to enter you in our contest.||Consent.|
|If you visit our website or interact with our electronic communications, we collect your IP address as well as electronic activity information about your use and interaction with our website or communications, and geolocation data. You can find more information on how we collect information in the Cookies section of this policy.||This data is necessary for us to ensure the security and functionality of our website and related systems. Furthermore, this data is used to offer products and services that may be of interest to you (or the company whom you represent).||This is necessary for our legitimate interest of ensuring that our websites function and are secure for you to use (which does not unfairly cause you prejudice or affect your fundamental rights and liberties because it provides you with a functional and secure website). With respect to using this data to offer products and services that may be of interest to you: when you are using the website on your own behalf: consent.When you are using the website as a representative of a company (e.g. your employer): necessary for our legitimate interests of promoting our products/services to the company which you represent (which does not cause you unfair prejudice because it relates to offering goods/services to your company rather than to you as an individual)|
|If you apply for a job with us through our website, we will collect your name, address, telephone number, Social Security Number or other government identification, email address, employment and educational history, race, gender identity, veteran status, ancestry, and disability information.||This data is necessary to determine whether to extend an offer of employment. This data is also necessary to comply with our legal obligations (such as verifying the right to work).||Necessary in order to take steps prior to entering into an employment contract (or consent, if required for compliance with applicable data privacy laws). Necessary to comply with our legal obligations.|
|If you receive a conditional offer of employment from us, we may conduct a credit, drug and/or criminal history check, in accordance with and/or where permitted by local law.||This data is necessary to determine whether to confirm an employment offer.||Consent.|
Where we rely on consent, depending on the applicable data protection/privacy law which applies, you have the right to withdraw your consent at any time by contacting us or by clicking on the “unsubscribe” link in marketing emails or text messages. Withdrawing consent will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you.
In cases where we need to collect personal information by law, or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you or the company whom you represent (for example, to provide you or the company whom you represent with the goods). In such cases, we may have to cancel a product or service you or the company whom you represent have with us, but we will notify you at the time when this occurs.
Furthermore, where our processing of personal information is necessary for our legitimate interests, depending on the applicable data protection/privacy law which applies, you may be able to object to this processing at any time. If you do this, we will need to show either a compelling reason why our processing should continue, which overrides your interests, rights and freedoms or that the processing is necessary for us to establish, exercise or defend a legal claim.
For California residents
The personal information about you that we collect includes information within the below categories of data. These categories also represent the categories of personal information that we have collected over the past 12 months. Note that the categories listed below are defined by California state law. Inclusion of a category in the list below indicates only that, depending on the services and products we provide you, we may collect some information within that category. It does not necessarily mean that we collect all information listed in a particular category for all our customers, nor does it imply that California law applies to all data within the categories below.
We do not and will not sell personal information about you, as defined under California state law. We also have not done so for the last 12 months. The categories of personal information we collect and the basis of processing are detailed below.
Note that we share all the below categories of information with our affiliates and service providers (see Disclosure of Personal Information to Third Parties below).
|Category||Purpose of processing|
|Identifiers such as a real name, alias, postal address, unique personal identifier, online identifier Internet Protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers.||A subset of this data is processed in order to take and deliver orders. It may also be used for surveys and marketing purposes, including offering you products that may interest you.|
|Information that identifies, relates to, describes, or is capable of being associated with, a particular individual, including, but not limited to, your name, signature, social security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information.||A subset of this data is processed in order to take and deliver orders. It may also be used for surveys and marketing purposes, including offering you products that may interest you.|
|Characteristics of classes protected under federal or California law, including: familial status, disability, sex, national origin, religion, color, race, sexual orientation, gender identity and gender expression, marital status, veteran status, medical condition, ancestry, source of income, age, or genetic information.||A subset of this information is collected and processed where required by law or, if you are an applicant, to provide you with specific benefits or accommodations you may elect to receive.|
|Commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.||A subset of this information is processed in order to take and deliver orders, and if you choose to submit this information on the Get in Touch section on our website. It may also be used for surveys and marketing purposes, including offering you products that may interest you.|
|Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement.||This data is processed in order to optimize performance of our websites. It is also processed to detect security incidents, protect against malicious, deceptive, fraudulent or illegal activity, and for data analytics.|
|Geolocation data.||This data may be collected when you click on the Where to Buy section on our website.|
|Audio, electronic, visual, thermal, olfactory, or similar information.||This data is processed in connection with a number of our operational functions, including recording sales calls and other calls.|
|Professional or employment-related information.||A subset of this data is processed in order to take and deliver order. It may also be used for marketing purposes, including offering you products that may interest you.|
Like other websites, Summit Hill Foods uses ‘cookies’. Cookies are small pieces of information that our server places on a visitor’s computer hard drive to optimize the users’ experience by enabling that person to more easily communicate and interact with the Website and to provide us with important information on how visitors use the Website. Many web browsers are automatically set up to accept cookies.
When you visit our website, cookies collect technical information about the page and services you use, and how you use them. This may include device-specific information, your navigation throughout the site, and other technical and browsing preferences. Additional personal information may be collected when you choose to submit an application or other inquiry that includes personal information.
We use first-party and third-party cookies, as well as session and persistent cookies. These cookies are categorized as either analytics, advertising, performance, or strictly necessary.
- belong to and are managed by other parties. These cookies may be required to allow for some advertising outside of our website.
- are temporary cookies that are used to remember you during the course of your visit to the website, and they expire when you close the web browser.
- are used to remember your preferences within the website and remain on your desktop or mobile device even after you close your browser or restart your computer. The persistent cookies we use are for analytics and advertising.
- cookies help us analyze user behavior so we can improve our website functionality.
- cookies allow us to serve you with targeted advertising and measure the effectiveness of our site functionality and advertising.
- e cookies collect information about how visitors use a website, for instance which pages visitors go to most often, and if they get error messages from web pages. Performance cookies do not collect information that identifies a visitor.
- cookies are essential for you to browse the website and use its features, such as accessing secure areas of the site
The following is a list of all the cookies on our website:
Do not track
Some browsers have incorporated “Do Not Track” (DNT) features that can send a signal to the websites you visit indicating you do not wish to be tracked. Because there is not yet a common standard for of how to receive and interpret the various DNT signals provided by browsers, our services do not currently respond to browser DNT signals. For more information on DNT, see https://allaboutdnt.com/.
Disclosure of Personal Information to Third Parties
We may disclose your personal information to our affiliated companies, when required by law, or to our service providers (e.g., when necessary for the administration and maintenance of our IT systems). We do not provide personal information to third parties for their direct marketing purposes. Where you have provided us with your personal information in your capacity as a representative of a company, we may disclose your personal information to that company. We endeavor to require our service providers to provide written assurances regarding the security and privacy protections they have in place to protect any personal information transferred or disclosed to them, as well as their compliance with our security requirements and any applicable laws and regulations.
The third parties we may share your personal information with include:
- third-party service providers (for example, administration and maintenance of IT systems, payments providers, email marketing services providers) ;
- regulatory authorities;
- other companies in relation to managing the proposed sale, restructuring, transfer or merging of any or all part(s) of our business, including to respond to queries from the prospective buyer or merging organization; and
- our auditors and legal advisors.
Summit Hill Foods website employs security measures designed to prevent the loss, misuse, unauthorized access, disclosure, alteration or destruction of personal information.
We do not knowingly collect personal information from children under the age of 18. We encourage parents and guardians to observe, participate in, and/or monitor and guide their online activity. If you are under the age of 18, please do not use this site.
If a parent believes their child has provided this kind of information on our website, we strongly encourage them to contact us immediately and we will promptly have information related to their children deleted from our database and refuse to permit further collection or use of the child’s information.
Links to other sites
We will only retain your personal information for as long as is reasonably necessary to fulfill the purposes that we process it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. We may retain your personal information for a longer period in the event of a complaint, or if we reasonably believe there is a prospect of litigation with respect to our relationship with you.
To determine the appropriate retention period for personal information, we consider the amount, nature and sensitivity of the personal information, the potential risk of harm from the unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting, or other requirements.
In some circumstances, we will anonymize your personal information (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without providing further notice to you.
In certain circumstances, the following rights may be available to you, depending on your jurisdiction or depending on the jurisdiction in which the data was collected, including the right to:
- Request access to your personal information. This enables you to receive a copy of the personal information we hold about you.
- Request the correction of the personal information that we hold about you. This enables you to have any incomplete, out-of-date, irrelevant, misleading, or inaccurate data we hold about you corrected.
- Request to delete your personal information. This enables you to ask us to erase (or de-identify) personal information. Note, however, that we may not always be able to comply with your request (for example, we cannot erase information if we are required to keep it for regulatory purposes or to fulfill an order).
- Restrict or object to the processing of your personal information when we are relying on a legitimate interest, and there is something about your particular situation which makes you want to object to the processing on this ground as you feel it impacts on your fundamental rights and freedoms. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
- Data portability. In some instances, you may have the right to receive the information about you in a portable and readily usable format.
- Withdraw your consent.
You will not have to pay a fee to access your personal information (or to exercise any of your other rights). However, where permitted under applicable privacy laws, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in these circumstances. If we refuse to give you access to your personal information, we will give you a written notice (if required to do so by applicable privacy laws) setting out the reasons for our decision (except where it would be unreasonable for us to do so) and any mechanisms that are available to you to complain about the refusal.
We will not discriminate against you in any way for exercising your rights.
Please note that under California law, we are only obligated to respond to personal information requests from the same consumer up to two times in a 12-month period. In addition, under California law, and for the protection of your personal information, we may be limited in what personal information we can disclose. Furthermore, if you are a representative of a commercial entity, you may be entitled to these rights effective January 1, 2021.
Depending on the applicable data protection/privacy law which applies, you may also have the right to lodge a complaint with local state regulators/data protection authorities.
Where required to do so by applicable privacy laws, we will inform (promptly) the entities with whom we have a shared use of your data about the correction, deletion, anonymization or blocking of your personal information, so that they may repeat the same procedures, except in cases where this communication is demonstrably impossible or involves disproportionate effort.
What we may need from you
We may need to request specific information from you to help us verify your identity and ensure your right to access your personal information (or to exercise any of your other rights). Where applicable, this is a security measure to ensure that the personal information is not disclosed to any person who has no right to receive it. For example, we may verify the email address we have on file with the email address from which you are sending a request. We may also ask you to verify certain past orders, or to confirm your last four digits on a card you recently used to place an order. If you have an account with us, we may ask you to verify yourself by logging in. We may also contact you to ask you for further information in relation to your request, in order to speed up our response.
If you would like to appoint an authorized agent to make a request on your behalf, you must provide the agent with written, signed permission to submit privacy right requests on your behalf, or provide a letter from your attorney. The agent or attorney must provide this authorization at the time of request. Note that we may require you to verify your identity with us directly before we provide any requested information to your approved agent.
Information collected for purposes of verifying your request will only be used for verification.
How to submit a rights request
If you would like to request access to your personal information, have us delete personal information, or exercise any other applicable rights, please submit the request through our webform, or contact us via the methods indicated below.
Changes to this Privacy Statement
Summit Hill Foods
333 Old Lindale Road
Rome, GA 30161
Copyright © 2020 Summit Hill Foods All Rights Reserved.