Privacy Notice EU Supplement

In accordance with the General Data Protection Regulation (GDPR), residents in the European Union have additional rights with respect to their personal information. Please see the below, as a supplement to our Privacy Policy, to learn more about your rights, and how Jelly Belly collects, uses, shares, and protects your personal information.

1. Your Rights

   Under the GDPR, EU residents have the following rights:

   • Access. You have the right to request a copy of the personal information we are processing about you, which we will provide to you in electronic form.
   • Rectification. You have the right to require that any incomplete or inaccurate personal information that we process about you is amended.
   • Deletion. You have the right to request that we delete personal information that we process about you, unless, for example, we are required to retain such data in order to comply with a legal obligation or to establish, exercise or defend legal claims.
   • Restriction. You have the right to request that we restrict our processing of your personal information where: (i) you believe such data to be inaccurate; (ii) our processing is unlawful; or (iii) we no longer need to process such data for a particular purpose, but where we are not able to delete the data due to a legal or other obligation or because you do not want us to delete it.
   • Portability. You have the right to request that we transmit the personal information we hold with respect to you to another data controller.You have the right to request that we transmit the personal information we hold with respect to you to another data controller.
   • Objection. Where the legal justification for our processing of your personal information is our legitimate interest, you have the right to object to such processing on grounds relating to your situation (e.g., direct marketing). We will abide by your request unless we have compelling legitimate grounds for the processing which override your interests and rights, or if we need to continue to process the data for the establishment, exercise or defense of a legal claim.
   • Withdrawing Consent. If you have consented to our processing of your personal information, you have the right to withdraw your consent at any time, free of charge. Please note that if you withdraw your consent, this will not affect the lawfulness of our use and processing of your information on the basis of your consent before the point in time when you withdraw your consent.

   Some rights may be limited, and we may need to retain certain personal information, as required or permitted by applicable law. To inquire about or exercise the rights listed above, at any time, contact us using the email address below. We will respond to your request consistent with applicable law.

   
   

   If you feel that your request or concern was not satisfactorily resolved by us, you have the right to lodge a complaint with your local data protection authority.

2. Voluntary Disclosure

   As noted in the Privacy Policy, we may collect personal information from you when you contact us or use our Site. You are not required to provide all personal information identified in the Privacy Policy to use our Site or to interact with us, but certain functionality will not be available if you do not provide certain personal information. For example, if you do not provide certain personal information, we may not be able to respond to your requests.

3. Lawful Basis of Processing

   Where required, we have several different legal grounds on which we collect and process your personal information for the purposes set out in the Privacy Policy (How We Use Your Personal Information), including: (i) as may be necessary to perform a contract (such as when you have questions for us about Jelly Belly products); (ii) as necessary to comply with a legal obligation (such as when we use personal information for recordkeeping); (iii) consent (where you have provided consent as appropriate under applicable law, such as for certain cookies); and (iv) as necessary for our legitimate interests (such as when we act to maintain our business generally, including maintaining the safety and security of the Site).

4. International Transfers

   We take steps to ensure that we handle your personal information subject to appropriate safeguards. As a US company, most of our operations are conducted in the United States and in order to provide the Site, personal information will be processed in the United States, where laws regarding processing of personal information may be less stringent than the laws in your country. We provide appropriate protections for cross-border transfers as required by applicable law for international data transfers. With respect to transfers originating from the European Economic Area we implement the standard contractual clauses approved by the European Commission. Where required by such laws, you may request a copy of the suitable mechanisms we have in place by contacting us as detailed below.

5. Data Retention

   We typically retain personal information [related to marketing activities for as long as you accept marketing communications from us, and] no longer than [x] years from your last contact with us. In any event, upon request, we will securely delete such data in accordance with applicable law. For personal information that we collect and process for other purposes, as described in our Privacy Policy, we typically retain such personal information for no longer than the period necessary to fulfill the purposes outlined in the Privacy Policy, and as otherwise needed to address legal rights and obligations.

6. Automated Decision-Making

   We do not use automated decision-making without human intervention, including profiling, in a way that produces legal effects concerning you or that otherwise significantly affects you.

7. Contact Us

   If you have any questions or comments related to our processing of your personal information, please send an e-mail to privacy@jellybelly.com.