SAVANNA Ingredients
ENDE
Press
ENDE

Legal

Privacy Policy

General

In the below statement we would like to inform you about when, how and which personal data we collect and how we handle the collected data. You can use the navigation menu to quickly and easily find the information you are looking for. We collect and process your personal data in accordance with national and European laws, in particular the German Federal Data Protection Act (BDSG) and the EU General Data Protection Regulation (EU-GDPR) as well as the Telecommunications Digital Services Data Protection Act (TDDDG). If you have any further questions about data protection at SAVANNA Ingredients, please contact us at one of the telephone numbers, fax numbers or e-mail addresses listed below.

Entity responsibility for data processing

SAVANNA Ingredients GmbH & Co. KG
Duerener Strasse 67
50189 Elsdorf
Germany

Phone: +49 (0) 2274 701-400
e-mail: info@savanna-ingredients.com

Our data protection officer

2B Advice GmbH, savanna-ingredients@2b-advice.com

Websites

In this section you will find information on data collection, data processing, data deletion, data security and involvement of third-party providers in connection with your visit to our website www.savanna-ingredients.com.

1. Server log files

Your browser automatically transmits access data (so-called „server log files“) to our server each time you visit one of our websites. The server log files contain the following information:

  • the time of your visit,
  • the page from which you visit us (referrer URL),
  • the subpages visited,
  • the names of the requested files,
  • your IP address,
  • the data volume,
  • the browser you are using and

We need the aforementioned information to ensure system security and to compile usage statistics. Both purposes are in our overriding legitimate interest (Art. 6 I 1 f EU-GDPR). The respective data record will be deleted immediately after the respective purpose ceases to apply, but no later than 90 days after its collection.

2. Newsletter

On our website we offer you to register for our newsletter. In the course of registration, we request your e-mail address in order to be able to send you the newsletter. If you enter this in the registration form and send it, we record, in addition to your e-mail address, the time of sending, the associated IP address and on which of our pages exactly you have registered.
To ensure that you want to subscribe to the newsletter yourself, we use the so-called double opt-in procedure to verify your e-mail address: After you have registered as a subscriber on our website, we will send you a confirmation e-mail. Only if you confirm that you actually wish to receive our newsletter by clicking on the link contained in this e-mail, will the address be actively added to the distribution list. We record the time of your confirmation. If you do not click the confirmation link, we will delete the data collected during registration after seven days.

The collection and processing of your e-mail address is based on your consent (Art. 6 I 1 a EU-GDPR). The legal basis for the proof of your consent (times, IP address, registration website) is our legitimate interest (Art. 6 I 1 f EU-GDPR). The data is processed solely for the purpose of delivering the subscribed newsletter.

We use the external service provider HubSpot to send our newsletters. Further information on the processing of personal data by HubSpot, the processing carried out on our behalf, and any transfers to third countries can be found in Section 4, “Use of HubSpot”.

You can revoke your consent at any time by unsubscribing from the newsletter you have subscribed to. We process your data for sending the newsletter as long as you have not revoked your consent. In addition, we process your data for the purpose of proving that you have given your consent until the expiry of all periods of limitation and complaint periods, generally up to three years after revocation of your consent (§ 31 OWiG), unless there are longer-term statutory retention obligations.

3. Cookies and Consent Management

Our website uses cookies and similar technologies (e.g. pixels and LocalStorage). Cookies are small text files that are stored on your end device and may also be used to process personal data.

Technically necessary cookies are required for the operation and security of the website. Their use is permitted without consent pursuant to Section 25(2) TDDDG. We base the processing of personal data associated with such cookies on our legitimate interest in providing a secure and functional website (Article 6(1)(f) EU GDPR).

All other cookies — in particular analytics/statistics and marketing cookies, including those used by HubSpot — are used only with your prior express consent (Section 25(1) TDDDG in conjunction with Article 6(1)(a) EU GDPR). Before you give your consent, no non-essential cookies are set and no corresponding services are loaded.

Consent and withdrawal. You can make your selection via our cookie banner. There, you can enable or reject individual categories and change or withdraw your consent at any time with effect for the future, for example via the permanently accessible “Cookie Settings” link.

Categories. We use the following categories: necessary, functional, statistics/analytics and marketing. An overview of the cookies used, including the provider, purpose and storage period, can be found in our cookie policy or in the cookie banner under “Cookie Settings”.

Google reCAPTCHA. We use Google reCAPTCHA, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to protect our forms against spam, misuse and automated submissions. In this context, your IP address and browser, device and usage information may be processed.

The processing is based on our legitimate interest in ensuring the security and functionality of our forms pursuant to Article 6(1)(f) EU GDPR. Where reCAPTCHA accesses or stores information on your end device, this is carried out pursuant to Section 25(2) no. 2 TDDDG.

Processing by Google LLC in the United States cannot be ruled out. Further information can be found in Google’s privacy policy.

HubSpot tracking. Where we use HubSpot tracking, web analytics or marketing functions on our website, the cookies and similar technologies required for these purposes are set or accessed only after you have given your prior consent. Without your consent, we do not load any non-essential HubSpot tracking functions.

Depending on the function used, HubSpot cookies such as __hstc, hubspotutk, __hssc and __hssrc may be used. If chat functions are used, messagesUtk may also be used. Detailed information on the purpose and storage period of the cookies used can be found in our Cookie Settings.

4. Use of HubSpot

We use HubSpot, a service provided by the HubSpot group, in particular HubSpot Ireland Limited, HubSpot House, One Sir John Rogerson’s Quay, Dublin 2, Ireland, and HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141, USA (“HubSpot”). Depending on the contractual arrangement, HubSpot Germany GmbH, Am Postbahnhof 17, 10243 Berlin, Germany, may also act as the contractual point of contact for customers in the DACH region.

We use HubSpot to provide forms and landing pages, to make available and send requested content such as whitepapers, brochures and product information, to process contact enquiries, to manage contacts and leads in our CRM, to enable newsletter registration and distribution, to carry out lead-nurturing and marketing-automation activities, to measure form conversions and, where you have given your consent, to measure reach, conduct web analytics and track openings and clicks relating to marketing emails.

The following categories of data may be processed in particular: master data and contact details such as name, company, position/function, email address and country; content data provided in forms and enquiries; information about requested content; communication and interaction data, such as email openings, clicks and form conversions; usage data relating to your behaviour on our website; IP address; timestamps; browser and device information; and cookie IDs.

Depending on the specific processing activity, the processing is based on Article 6(1)(b) EU GDPR where it is necessary to process your enquiry or take steps prior to entering into a contract, on Article 6(1)(f) EU GDPR for the efficient management of prospect, customer and communication data, and on your consent pursuant to Article 6(1)(a) EU GDPR and Section 25(1) TDDDG where HubSpot is used for web analytics, tracking, cookie-based reach measurement, marketing email tracking, lead nurturing or marketing automation.

Where HubSpot acts as a processor on our behalf, we have entered into a data processing agreement with HubSpot. In its current documentation, HubSpot refers both to its participation in the EU-U.S. Data Privacy Framework and to the use of Standard Contractual Clauses for restricted transfers. HubSpot provides a list of the subprocessors it uses in its subprocessor documentation.

A transfer of personal data to the United States or other third countries cannot be completely ruled out, in particular in connection with intra-group processing, support services or the use of subprocessors. Where no adequacy decision applies, HubSpot states in its documentation that it relies on Standard Contractual Clauses.

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. You can withdraw your consent to cookies and tracking through our Cookie Settings. You can withdraw your consent to newsletters or marketing emails via the unsubscribe link contained in each email or by using the contact details provided in our legal notice.

We delete or anonymise contact, lead and form data processed via HubSpot as soon as they are no longer required for the purposes stated above, unless statutory retention obligations apply or you request deletion at an earlier date. Evidence of consent is retained for the applicable limitation and retention periods.

5. Forwarding to the Responsible Sales Partners/Distributors

Where necessary to process your enquiry, determine the sales partner responsible for your region or provide the information you have requested, we forward your details to the sales partner or distributor responsible for your country or region. The data transferred may include, in particular, your name, company, position/function, email address, country and information concerning your enquiry or interest in specific products.

The data are forwarded for the purpose of processing your enquiry or taking steps prior to entering into a contract on the basis of Article 6(1)(b) EU GDPR. In other cases, the processing is based on our legitimate interest in ensuring that your enquiry is handled appropriately by the sales partner responsible for the relevant region pursuant to Article 6(1)(f) EU GDPR. Where the data are forwarded to enable the sales partner to contact you independently for marketing purposes, we will obtain your prior consent pursuant to Article 6(1)(a) EU GDPR.

Recipients may also include independent sales partners and distributors located in the United States. Where such recipients are certified under the EU-U.S. Data Privacy Framework, the transfer is based on the European Commission’s adequacy decision pursuant to Article 45 EU GDPR. Otherwise, the transfer is based on the European Commission’s Standard Contractual Clauses pursuant to Article 46(2)(c) EU GDPR.

6. Data security

In order to protect your personal data as best as possible when you visit our website, we use SSL encryption (https standard). This also applies to the transmission of data using the contact form. This type of encryption is a risk-appropriate and state-of-the-art technical and organizational security measure.

7. External service providers

For the provision and operation of our website we work with external service providers that we have carefully selected and obligated in accordance with the data protection requirements by means of order processing contracts pursuant to Art. 28 EU-GDPR and whose activities we monitor. These service providers are based in Germany or in the EU.

8. Linking to external content

Insofar as our website link to third-party websites we point out that we are not responsible for the content provided by the other providers and have no influence on the type and scope of data collection and data processing on the corresponding website. Please inform yourself in this regard on the respective website.

Social media

If you publish data or content (for example, comments, videos, images or likes) on our social media presences (Facebook, LinkedIn, XING), these will be used exclusively for the purpose of our public relations work. Processing for the purpose of publicity is in our legitimate interest (Art. 6 I 1 f EU-GDPR). You can delete this data or content in accordance with the respective terms of use of the respective platform. Storage and processing of the personal content outside the respective social media platform does not take place.

We use services of the respective providers to evaluate the use of our company profiles and thereby improve our appearance and the respective offer. These are the following services:

  • XING Brand Manager
  • LinkedIn Analysis
  • Facebook Page Insights

When you visit our company profiles, we process your data collected by means of the respective service as jointly responsible parties together with the respective provider. This data includes information about your visit or your interaction on or with our fan page, which can be related to you and can therefore be personal data. The legal basis for the data processing within the scope of our responsibility is insofar our legitimate interest within the meaning of Art. 6 I 1 f EU-GDPR in opening a platform for exchange with you as well as in the evaluation of who visits our Fanpage in order to be able to align our content accordingly. By actively clicking, you can decide yourself whether personal data will be transmitted to the third-party providers.

The respective provider undertakes to us to fulfill your rights as a data subject under Chapter 3 of the EU-GDPR. You can obtain further information on the processing of your personal data within the scope of the respective services under the following links:

  • facebook.com/legal/terms/information_about_page_insights_data
  • https://www.linkedin.com/legal/privacy-policy?_l=de_DE
  • https://privacy.xing.com/de/datenschutzerklaerung

Cookies may also be set by the provider on the respective company profile. The processing of data collected by means of cookies is not our responsibility. Please note that we have no insight into these types of data processing.

Please also note that the providers Meta and LinkedIn are located outside the EU and your data will therefore probably be transferred to third countries for which an adequate level of data protection is not necessarily ensured. You can obtain further information on the handling of your data from the respective third-party providers:

  • Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, Privacy Policy: https://de-de.facebook.com/about/privacy/, Cookie Notice: https://de-de.facebook.com/policies/cookies
  • LinkedIn, Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, Privacy Policy: https://www.linkedin.com/legal/privacy-policy

In particular, since the parent companies are US companies, information may also be transferred to the USA. In the event of a possible transfer of data to US servers of Meta Platforms (Facebook) and LinkedIn, an appropriate level of data protection is ensured through the widest possible use of standard contractual clauses recognized by the EU Commission. You can request a copy of the standard contractual clauses used by Facebook at the following link: https://www.facebook.com/help/566994660333381/, from LinkedIn at: https://de.linkedin.com/legal/l/dpa. Furthermore, we ask you to use these tools only if you agree to the possible transfer of data to the USA despite a possible inadequate level of data protection there (Art. 49 I 1 a EU-GDPR).

When you apply to us

We are pleased if you send us your application. We collect and process the personal data submitted in the application documents on the basis of your consent (Art. 6 I 1 a EU-GDPR) and for the purpose of deciding whether to establish an employment relationship (Art. 6 I 1 b EU-GDPR). If we contact you following an application, you can find out here how we handle the contents of the communication.

1. Position advertised

If you apply for a specific, advertised position, we will only process your application documents for the purpose of deciding whether to fill the position to which the application relates. In the course of the application process, further personal data may also be collected and processed from you personally, from generally accessible sources or from former employers and trainers (Art. 6 I 1 b EU-GDPR). In addition, we are required by law to subject your person to a so-called „sanctions list check“ or a so-called „anti-terror screening“. In this process, we compare the personal data you have provided with the sanctions lists of the EU and the USA. This check is carried out to fulfill a legal obligation (Art. 6 I 1 c EU-GDPR; VO 2580/2001/EG and VO 881/2002/EG).

If the application process does not lead to your employment, your personal data will be deleted after six months, calculated from the time the position is filled. If the application process leads to your employment, the data collected, including your application documents, will be included in your personnel file (Art. 6 I 1 b EU-GDPR) and will be processed in accordance with our internal requirements.

2. Unsolicited applications

Applications that do not relate to a specific position (unsolicited applications) are processed for the purpose of deciding whether to fill all vacancies that match your qualifications (Art. 6 I 1 a, b EU-GDPR). In the course of the application process, further personal data may also be collected and processed from you personally, from generally accessible sources or from former employers and trainers (Art. 6 I 1 b EU-GDPR). In addition, we are required by law to subject your person to a so-called „sanctions list check“ or a so-called „anti-terror screening“. In this process, we compare the personal data you have provided with the sanctions lists of the EU and the USA. This check is carried out to fulfill a legal obligation (Art. 6 I 1 c EU-GDPR; VO 2580/2001/EC, VO 881/2002/EC and VO 2017/1420/EU).

Your personal data will be deleted after one year, calculated from the date of receipt of your application, unless they are still the subject of ongoing application procedures. If none of the application procedures leads to your employment, your personal data will be deleted after six months, calculated from the date on which the last position for which we considered you was filled. If an application procedure leads to your employment, the data collected, including your application documents, will be included in your personnel file (Art. 6 I 1 b EU-GDPR) and will be processed in accordance with our internal requirements.

3. Disclosure of your applicant data

Personal data that you provide to us in the course of an application and / or that we collect from generally accessible sources or from former employers and trainers will be processed exclusively by us. Data will only be passed on to affiliated companies of the Pfeifer & Langen group of companies if and insofar as you expressly express this wish in your application (Art. 6 I 1 a EU-GDPR).

4. Applications via our career platform

You can apply online via the platform accessible on our website under “Career”.

You are required to provide your first and last name, e-mail, telephone and your application documents with your salary expectations, as we need this data to process your application. You can also voluntarily provide your title, home address and start date, as well as information on whether you are applying internally for an advertised position. This data is recorded electronically via the career platform and transmitted to us. After submitting the application data, you will receive a confirmation e-mail.

In addition, we process your application documents for the internal review and processing of your application electronically in our e-mail system and, if necessary, additionally through the use of printouts or copies (paper form).

For the provision and operation of our career platform, we work together with external service providers that we have carefully selected and obligated in accordance with data protection requirements through order processing contracts pursuant to Art. 28 EU-GDPR and whose activities we monitor. These service providers are based in Germany or in the EU.

5. External career platforms and professional social networks

Insofar as we place job advertisements on external career platforms and you apply via the functions available there, we receive your documents from the operators of the corresponding platform. As soon as we have received your personal data, we process it in the manner just described. No further cooperation will take place. Please note that we have no influence on the data collection and data processing by the provider of the respective career platform. Please inform yourself on the respective platform about the type and scope of the data collection and data processing there.

We also use our accounts on external career platforms and professional social networks to search specifically for suitable candidates and to contact them. When we view your profile and / or contact you via the platform, we only use the existing functions of the platform and take note of the personal data you provide there. If we export your personal data from the platform (for example, via a download function offered on the platform), we process this data in the same way as documents that you have sent us for the purpose of a speculative application.

Contact and cooperation

We are pleased that you are seeking contact with us or working with us as a business partner. In this section you will find information on data collection, data processing, data deletion, data security and involvement of third-party providers in connection with a business contact.

1. Data collection, data processing and data deletion

In the course of business contact, we regularly collect and process the following personal data:

  • Full name
  • Professional contact details (address, telephone, e-mail, position, position in the company)

In addition, we ask you for further information about yourself in individual cases, for example private contact data or dates of birth, although we limit such queries to the absolutely necessary minimum. In particular, we make sure that there is a technical or organizational necessity behind any additional data requested.

If you communicate with us via portals or software applications, the IP address of the device from which you access the portal or software application is also collected. This collection happens automatically and without your intervention. You can find out whether and which cookies such portals or software applications set on your end device via the cookie banner of the respective application.

We process your personal data in particular for the initiation of future or implementation of existing business relationships (Art. 6 I 1 b EU-GDPR) as well as for the implementation of anti-terror checks and sanctions checks of our business customers, suppliers and service providers to the extent required by law (Art. 6 I 1 c EU-GDPR, VO 2580/2001/EC, VO 882/2002/EC, VO 2017/1420/EU). Other purposes may be added depending on the individual case.

Your personal data will be deleted without delay as soon as the processing purpose for which it was collected has ceased to exist. Insofar as data is subject to statutory retention obligations in individual cases, it will remain stored until the expiry of the respective retention period and will then be deleted.

2. Sharing your data

Data is only exchanged with other companies of the Pfeifer & Langen Group to the extent that we use them to fulfill obligations arising from contracts concluded with you (Art. 6 I 1 b EU-GDPR) or if this is in our overriding, legitimate interest in an individual case (Art. 6 I 1 f EU-GDPR).

Your personal data may be disclosed to authorities and courts as well as to lawyers, auditors, tax consultants, management consultants and similar service providers who are bound by legal secrecy.

3. External service providers

Your personal data is stored in our IT systems. Insofar as we use external service providers to provide our IT infrastructure, individual IT applications and / or data processing, we select them carefully, monitor their activities and oblige them in accordance with the data protection requirements by means of order processing contracts pursuant to Art. 28 EU-GDPR. A transfer to countries outside the EU usually does not take place. Should this occur in individual cases, we ensure an appropriate level of data protection in accordance with Art. 44 et seq. EU-GDPR at the recipient.

Your right vis-à-vis SAVANNA Ingredients

In this section, you will learn what rights you have when and to the extent that we collect and process your personal data. Please note that we will comply with your legitimate requests as soon as possible and that there is no charge or fee for doing so. Please exercise your rights at the following address: datenschutz@savanna-ingredients.com

According to Art. 15 EU-GDPR, you can request information from us about the data stored about you and its origin, the recipients or categories of recipients to whom we pass on data, and the purpose of the processing.

According to Art. 16 – 18 EU-GDPR, you may have a right to rectification, erasure or restriction of the processing of your personal data in individual cases. In addition, according to Art. 20 EU-GDPR, you may request the transfer of the data to another controller.

In addition, you may have a separate right to object to the processing of your data pursuant to Art. 21 EU-GDPR if and to the extent that we base this processing exclusively on an overriding legitimate interest (Art. 6 I 1 f EU-GDPR); if we process your data for direct marketing purposes, you have a right to object at any time. In the event of an objection, we will no longer process your personal data from receipt during the subsequent review and delete it after completion of the review – in the event of a justified objection (Art. 21 EU-GDPR).

You can revoke your consent to data collection and data processing (Art. 6 I 1 a EU-GDPR) at any time. In this case, we will not further process your personal data unless such further processing is permitted or required by law.

The aforementioned objections or revocations are effective only for the future and do not render the data collection and data processing in the past inadmissible.

Finally, according to Art. 77 EU-GDPR, you have the right to complain to the competent data protection supervisory authority. The competent authority for us is the LDI NRW, Kavalleriestr. 2-4, 40213 Düsseldorf, www.ldi.nrw.de.

Status of this privacy policy: September 2026