Privacy Statement for Business Partners of IKEA Supply AG and IKEA Food Supply AG

The IKEA vision is to create a better everyday life for the many people. That’s a big job, and one that we at IKEA Supply AG and IKEA Food Supply AG take seriously.

Who are the many people? You are! Whether you’re an IKEA Business Partner (i.e. current or potential supplier, service provider, consultant, franchisee etc. or their representative), a job candidate or an IKEA co-worker, the IKEA vision is all about you. So naturally we want to get to know you better.

One way we do that is by collecting your personal data. If you’re reading this, you’re probably curious what data we collect and how we use it. Read on to find out.

Without your data, our job would be a lot harder. So, thanks for sharing! We hope to make your everyday life better in return.

 

1) How We Respect Your Privacy?

Our approach at IKEA Supply AG and IKEA Food Supply AG is to be open and transparent about how we collect and use your personal data.


2) Who We Are, What Data We Collect and Why?

This privacy statement informs you about the processing of personal data by IKEA Supply AG and IKEA Food Supply AG. Each of these companies is the data controller with respect to its own data processing activities. If you are a Business Partner of, co-worker or applying for a job at IKEA Supply AG, this company controls the processing of your personal data. Likewise, if you are a Business Partner of, co-worker or applying for a job at IKEA Food Supply AG, this company controls the processing of your personal data. For any inquiries, you may get in touch with the company with whom you are interacting. You may find the contact information in section 9.

We want to make your IKEA experience great! To do this we might collect several types of data about you. This can be anything from your name and address to your bank account number, depending on the situation. Below, you can find some of the types of personal data that we may collect, as well as the purpose of processing such data and the legal basis of doing so.

a. To do business with you or your employer and to administer and perform projects together.

Types of data: Name, signature, professional contact details (email, phone number, address, title, etc.), along with other work details when relevant, such as what team you are a part of in your organization and the name of your manager, as well as log in details, password, user profile and user ID  when we provide you with access to our systems and networks. Your picture, voice, and comments you may have supplied us with regarding our or your (or your employer’s) business could also be collected.

Legal basis: We process your data based on the legitimate interest of cooperation, management and improvement of our business relationships. In certain situations, where you are a party to a contract with us, where relevant, we process your data on the legal basis of performance of that contract.

b. To enable payment transactions to or from you or your employer.

Types of data: Name, signature, professional contact details (email, phone number, address, title, etc.) as well as other work details when relevant, and financial details when applicable.

Legal basis: We process your data based on the legitimate interest of cooperation, management and improvement of our business relationships. In situations where you are a party to a contract with us, we process your data on the legal basis of performance of that contract.

c. To protect and ensure security of our staff and assets.

Types of data: Your picture in recordings on CCTV when you visit us as well as your name, professional contact details (email, phone number, address, title, etc.), IP address, login details, password, user profile, and user ID when we provide you access to our systems and networks.

Legal basis: We process your data based our legitimate interest to protect our assets, brand, staff and business.

d. To detect and prevent violations of internal policies, IKEA Code of Conduct and IWAY Standard, as well as to control compliance, detect and prevent violations of the applicable laws that apply to us, including but not limited to, fraudulent payments, fraud, harassment, and discrimination.

Types of data: Name, signature, professional contact details (email, phone number, address, title, etc.), as well as financial details and any other data obtained during audits or submitted through our grievance mechanism.

Legal basis: We process your data based on the general requirement to comply with legal obligations as well as our legitimate interest to effectively manage risks and threats both inside and directed towards IKEA Supply AG, IKEA Food Supply AG and their affiliates. In certain situations, where you are a party to a contract with us, where relevant, we process your data on the legal basis of performance of that contract.

e. To identify you in marketing or communication material globally.

Types of data: Your name, professional details including your CV, other work details when relevant, such as what team you are a part of in your organization, as well as your picture, voice, and comments you may have supplied us with regarding our or your (your employer’s) business.

Legal basis: We process your data based on our legitimate interest to promote IKEA products, services, brand and collaborations. In certain situations where you are a party to a contract with us, where relevant, we process your data on the legal basis of performance of that contract.

f. For internal communication across entities operating under the IKEA brand as well as with Business Partners.

Types of data: Your name and picture, your voice, information about your preferences and opinions, quotes, interviews, results from surveys that you may have participated in, comments you may have supplied us with regarding our or your (your employer’s) business, as well as documents and works (in any format, such as video or sound recordings) that you might create and share with us.

Legal basis: We process your data based on our legitimate interest to develop, promote IKEA products, services, business, brand and collaborations, as well as for educational purposes. In certain situations where you are a party to a contract with us, where relevant, we process your data on the legal basis of performance of that contract.

g. For external communication by global and local publishing of different content in different media channels including, but not limited to, publications online, social media, earned media, printed media, paid media.

Types of data: Your name, picture, and voice, along with information about your preferences and opinions, quotes, interviews, and results from surveys that you may have participated in. In addition to this, comments that you may have supplied us with regarding our or your (your employer’s) business may be collected as well as documents and works (in any format, such as video or sound recordings) that you might create and share with us.

Legal basis: We process your data based on our legitimate interest to develop, promote IKEA products, services, business, brand and collaborations. In certain situations where you are a party to a contract with us, where relevant, we process your data on the legal basis of performance of that contract.

h. To conduct internal research or product and service development.

Types of data: Your name, picture, and voice, along with information about your preferences and opinions, quotes, interviews, and results from surveys that you may have participated in. In addition to this, comments that you may have supplied us with regarding our or your (your employer’s) business may be collected as well as documents and works (in any format, such as video or sound recordings) that you might create and share with us.

Legal basis: We process your data on the legal basis of our legitimate interest to develop our products, services and business, and to keep historical references e.g. in order to see trends over time. In certain situations, where you are a party to a contract with us, where relevant, we process your data on the legal basis of performance of that contract.

i. To take appropriate action with reports of intellectual property infringement and inappropriate content.

Types of data: Your name, professional details, other work details when relevant, such as what team you are a part of in your organization, your picture, voice, and comments that you may have supplied us with regarding our or your business, along with documents and works (in any format, such as video or sound recordings) that you might create and share with us.

Legal basis: We process your data based on our legitimate interest to establish, enforce, or defend intellectual property rights. In some cases, we may process this data to defend you (your employer) or us in administrative or legal proceedings. In certain situations where you are a party to a contract with us, where relevant, we process your data on the legal basis of performance of that contract.

j. To keep historical records of our operations and to produce cultural and artistic exhibitions.

Types of data: Your name, picture, and voice, along with information about your preferences and opinions, quotes, interviews, and results from surveys that you may have participated in. In addition to this, comments that you may have supplied us with regarding our or your business may be collected as well as documents and works (in any format, such as video or sound recordings) that you might create and share with us.

Legal basis: We process your data based on our legitimate interest of keeping historical records of our organization, as well as to promote our brand, culture and business.

k. For recruitment purposes

Types of data: Your name, contact details and other details included in your CV, as well as your picture, voice, and comments you may have supplied us with.

Legal basis: We process your data based on our legitimate interest to run the recruitment process. In certain situations, where relevant, we process your data based on your consent.

 

3) Who We Share Your Data With?

We do not sell or trade your data to third parties, but we share it with others who can help us achieve the IKEA vision. We’re all committed to keep your data safe and secure.

We may share personal data with the following types of third parties:

  • Within Inter IKEA Group (which IKEA Supply AG and IKEA Food Supply AG are a part of): we may share your data with other companies owned and/or controlled directly or indirectly by Inter IKEA Holding B.V.
  • With other companies operating under the IKEA brand, e.g. IKEA franchisees.
  • With Business Partners, as defined above.

 

4) How We Keep Your Personal Data Safe?

We endeavor to protect your personal data from threats: destruction, loss, alteration, unauthorized disclosure, and access. We do this in a variety of ways depending on where we store and use it.

 

5) How We Transfer Your Personal Data Internationally?

Recipients with whom we share your personal data may be located abroad, outside of Switzerland. When we share your personal data with recipients abroad, we will make sure to comply with applicable data protection law. We only transfer your personal data to another country when we can ensure an adequate level of protection of your personal data. Countries to where we may transfer your personal data may include in particular EU/EEA member states and such other countries around the world, where Inter IKEA Companies, companies operating under IKEA brand or Business Partners to whom we may disclose your personal data are located or maintain operations. Insofar as the country is located in a non-whitelisted country, we rely on the EU Standard Contractual Clauses adopted by the EU Commission for the transfer of your personal data, or we may rely on an exception provided for in the Swiss DPA and/or the GDPR, as may be applicable (e.g., the performance of a contract; the establishment, exercise of enforcement of legal claims; overriding public interests; or your consent).

 

6) How Long We Keep Your Personal Data?

We delete personal data when it is no longer necessary to us unless legislation requires us to keep the data for a longer time; or if other special circumstances apply. Special circumstances include when the original purpose is still valid for an extended time. Then, we process the data until the original purpose for which we collected the data has been fulfilled. Examples of special circumstances are:

  • If you have created documents or other works they may be kept indefinitely depending on their purpose. If they concern an IKEA product, the document or works may be relevant for us to keep for as long as the product is a part of the IKEA range;
  • If you, for example, have participated in an audio or video recording, this material will be kept if it is still relevant for educational purposes;
  • If you, for example, have participated in contract negotiations via emails, the emails may be relevant to keep beyond the term of the agreement.

 

7) Which are Your Privacy Rights?

You have many rights regarding your personal data. Read more about them below. If you would like to exercise them or learn more, feel free to contact us! You can find contact details at the end of this privacy statement. Please note that some of the rights may not be applicable to your situation.

Right of access
You have the right to know what personal data we process and why. That’s why we inform you in advance about our processing activities via this privacy statement. If you have any questions, or you would like to learn more about what data we process concerning you, you are always welcome to contact us, and we will provide you with further information.

Right to rectification
If you believe we store the incorrect data about you, such as the wrong name or address of yours, you can ask us to correct this.

Right to erasure/right to be forgotten
In certain situations, you have the right to tell us to permanently erase your personal data from our records. You can do this for example if you believe there’s no longer any need for us to keep it. Or, if you have previously given your permission, you can just decide to withdraw it.

Right to restrict the processing activities
You have the right to restrict our processing activities in certain situations. This means we will continue to store your data, but we will temporarily stop any other processing. Why would you want to do this? For example, if you’ve asked us to fix incorrect data. In this situation, you may want us to stop the processing until the data is correct.

Right to data portability
In certain situations, you have the right to ask us to send your personal data in digital form to you, so that you can forward it to someone else.

Right to object
In certain situations, you have the right to object to the processing of your data, even when we have a legitimate legal reason to process it. You can do this when we process your data on the basis of our legitimate interest, and you believe that your personal interest outweighs our interests. If you do not want us to use your data for direct marketing purposes, including profiling, we will comply in every case.

Right to lodge a complaint with a supervisory authority
If you aren’t satisfied with the way we handle your personal data, you have the right to lodge a complaint about this to the national supervisory authority.

 

8) Privacy Statement Updating Process

We want to give you the best possible experience regarding how we take care of your personal data, adapt to new laws, regulations, and best practices as they appear. This means that we will amend this privacy statement from time to time when required by law or otherwise needed. Please make sure to revisit this privacy statement regularly to ensure that you are always up to date with how we process your personal data. If you have any questions, please do not hesitate to reach out to us!

 

9) Who To Contact?

If you have a request regarding your personal data, please feel free to fill in this form and we will take care of it!

IKEA Supply AG
Grüssenweg 15
CH-4133 Pratteln
Switzerland

IKEA Food Supply AG
Grüssenweg 15
CH-4133 Pratteln
Switzerland