# PRIVACY AND COOKIE STATEMENT ##### Introduction Factor 75 B.V. (hereinafter referred to as "__Factor 75__", “us”, “we”, “our”) believes that it is important that your data is treated with care and transparency. The privacy statement explains what data we use, what we do with it and what your rights are. The cookie statement explains what cookies Factor 75 sets and what they entail. This privacy and cookie statement applies to all information of our (potential) customers, former customers and visitors to our website and application that we collect, store or otherwise use. Data that identifies you or information that belongs to you, such as your name, e-mail address or telephone number, is considered personal data. The collection, storage and use of personal data is also referred to as processing your personal data. If you still have questions regarding Factor 75's use of your personal data, please do not hesitate to contact our customer care service or send an e-mail to privacy@factormeals.se. ### Privacy Statement #### Processing of your personal data Factor 75 can process your personal data when you become a customer or when you place a one-time order for a meal box (including a trial box). We can also process the personal data you share or that we collect, when you receive emails from us, enter a contest or participate in a survey. We may also process your personal data when you ask us a question, request information about our activities or contact us in any other way. Factor 75 processes both the Personal Data you share with us and the Personal Data we collect when you use our website or application. Factor 75 only processes your personal data when there is a purpose and a legal basis for doing so, i.e. when we have a good reason to do so. In most cases, we process personal data, with your permission, to fulfill your order with Factor 75, to comply with a legal obligation or because it is in our interest. We process your personal data at the following times: ##### 1. Creating a Factor 75 account When you create a Factor 75 account, we ask you for some personal information to make it faster and easier for you to place orders and to provide additional services. We also store your personal information such as your account username and password to protect your account from access by third parties. To create an account, we ask you to provide us with your e-mail address and choose a password. The legal basis for the processing is the GDPR article 6(1)(f) - as it is our legitimate interest to create and otherwise administer user access. When you create a Factor 75 account you may have given your consent to receive marketing content from us and also from our partners. You can change this at any time through our Customer Care service. The legal basis for this processing is the GDPR article 6(1)(a) – your consent –. You can withdraw your consent at any time – please refer to the "Your rights" section below with regard to more information on how to do so. ##### 2. Processing your order by Factor 75 Factor 75 processes personal data in order to manage your subscription, to execute your order in accordance with the contract and to deliver the meal box to you. *Manage your subscription*
Once you have created an account (for more information on creating an account, see 1. Creating a Factor 75 Account), we can manage your subscription. The legal basis for the processing is the GDPR article 6(1)(b) – performance of a contract. *Execution and delivery of your meal box*
When you become a Factor 75 customer or order a one-time meal box, we collect your name, address, email address, phone number, date of birth (if any) and payment information as well as other information necessary to deliver your meal box. We also collect information about previous orders and your meal preferences. Before delivery, we process your personal data for the composition of your meal box, for example for the printing of the recipe cards. You must be at least 18 years old to order a meal box from Factor 75. Therefore, we do not collect personal data from minors for the purpose of delivering meal boxes. The legal basis for the processing is the GDPR article 6(1)(b) – performance of a contract. *Payment of your order*
We process your payment data (name and credit card details) through the payment service provider. The payment service provider is also responsible for the proper processing of your personal data in this respect. We may send you an SMS regarding the completion of your payment in the event that your payment has failed, your card is nearing its expiration date, or for any other questions regarding the transaction. The legal basis for the processing is the GDPR article 6(1)(b) – performance of a contract. ##### 3. Marketing activities ###### 3.1. Factor 75’s marketing activities Factor 75 will send you marketing communications when you: (1) have given prior written consent that you wish to receive emails from us; and/or (2) place your order through Factor 75. ###### a. E-mail marketing Your e-mail address can also be processed to keep you informed about our services and activities, for example because you have indicated that you wish to receive e-mails from us. We also check whether you open our e-mails, including our newsletter, and what you click on. Emails may be about company news or include surveys and reviews, kitchen tips and tricks, updates or information about Factor 75 offers and products. If you no longer wish to receive our emails, you can unsubscribe or change your preferences at any time via the link at the bottom of the emails or through our customer care service department. You can also unsubscribe via your account settings. The legal basis for the processing is the GDPR article 6(1)(a) – your consent. You can withdraw your consent at any time – please refer to the "Your rights" section below with regard to more information on how to do so. The legal basis for the processing is the GDPR article 6(1)(f) - because we have a legitimate interest in informing you about similar products we sell that may be of interest to you. ###### b. Mail/Direct Mail Factor 75 may send you a letter to inform you of our actions. We may use your name and address for similar offers for a period of three years after receiving your last meal box. If you no longer wish to receive mailings from Factor 75, you may contact our customer care service department or unsubscribe as indicated on the mailings. If you have indicated that you no longer wish to receive mail, we will process this information and no longer contact you by mail at the address you have provided. The legal basis for the processing is the GDPR article 6(1)(f) – as it is our legitimate interest in sending out marketing material and administering our recipient database. And because we have a legitimate interest in informing you about similar products we sell that may be of interest to you. ###### c. Door to door marketing Only if you gave your prior consent, we can visit you to inform you about our activities or similar products. If you do not wish to do so, you can inform the sales agent directly or by contacting our customer care service. The legal basis for informing you about similar products we sell that may be of interest to you is the GDPR article 6(1)(f) - because we have a legitimate interest to do so. ###### d. Telemarketing Factor 75 uses telemarketing because we don't want you to leave. We will gladly inform you of how we can possibly help you further. In particular, we can use the phone number you have given us for similar offers,if you have consented to receive marketing calls from us, for a period of three years from the date you received your last meal box. Factor 75 also uses telemarketing to find new customers. We will only contact you if you have indicated that you are interested in a one-time offer from us. You are entitled to revoke your consent to receive marketing calls from us at any time via the same media as you consented, You can always let us know that you no longer wish to be called by contacting our customer care service department or by indicating this during or after a call. If you have indicated that you no longer wish to be called, we will process that information and will no longer contact you at the number you have provided for telemarketing purposes. You can ask any questions about how Factor 75 uses telemarketing by emailing us at privacy@factormeals.se. The legal basis for the processing is the GDPR article 6(1)(a) – your consent. You can withdraw your consent at any time – please refer to the "Your rights" section below with regard to more information on how to do so. The legal basis for informing you about similar products we sell that may be of interest to you is the GDPR article 6(1)(f) - because we have a legitimate interest to do so. ###### e. SMS If you have consented,you may receive marketing via SMS. We may use your name and phone number for similar offers for a period of three years from the date you received your last meal box. You can unsubscribe from SMS marketing at any time. The legal basis for the processing is the GDPR article 6(1)(a) – your consent. You can withdraw your consent at any time – please refer to the "Your rights" section below with regard to more information on how to do so. ###### f. Social networks Factor 75 is active on a variety of social networks, including but not limited to Facebook, Pinterest and Instagram. In order to show you only ads that are likely to be of interest to you on these social networks, we use cookies and other similar technologies. Together with the relevant social networks we are responsible for the processing of the various personal data through a so-called joint controllership. You can read more about this as well the relevant social networks below in the "Transfer of personal data" section. Read more about cookies in the "Statement on cookies" below. For example, we use Facebook Custom Audience (targeting service). For this purpose, we transmit pseudonymized e-mail addresses to Facebook. The email addresses are encrypted before they are transmitted to Facebook, i.e., a hash value is created from the email addresses (a combination of different numbers and letters). Facebook can then compare this hashed data with similar hashed data of Facebook users' email addresses. In this way, it is possible to determine whether you are also on Facebook and thus whether or not targeted ads are shown to you when you use Facebook. The legal basis for the processing is the GDPR article 6(1)(a) – your consent. You can withdraw your consent at any time – please refer to the "Your rights" section below with regard to more information on how to do so. Further, when you visit our social networks, we process personal data regarding comments, interactions, likes, shares etc. to our posts on our pages. The legal basis for such processing is the GDPR article 6(1)(f) – as it is our legitimate interest in interacting with our visitors on these pages. With regard to controllership, please refer to the section "Transfer of personal data to social networks" below". You can also send your questions or requests to privacy@factormeals.se See our cookie statement below for more information about why you see certain ads on Factor 75's social networks. ###### g. Refer a friend If you are a Factor 75 customer, you can invite your friends to take out a flexible subscription with Factor 75. You can choose to share a promo code only with your friends which can be used on our website . ##### 3.2.Other companies marketing activities If you have consented, we may share your personal information with other companies in the HelloFresh group and with other companies for marketing purposes. They may contact you by email, phone or app about their own products and services that may be of interest to you. The legal basis for the processing is the GDPR article 6(1)(a) – your consent. You can withdraw your consent at any time – please refer to the "Your rights" section below with regard to more information on how to do so. ##### 4.Use of the Factor 75 website and application Factor 75 may process Personal Data regarding the use of our websites or applications. This includes information about the devices you use, such as your IP address, the version of the operating system you are using, the settings of the device you are using, as well as information about the actual use of our websites, such as when you visit and what you view. We evaluate, analyze and improve our services based on information gathered through the use of and visits to our websites and through questions and notifications to customer care service. In addition, we set cookies when you visit our website. For more information about this, please see the cookie statement below. If you use the Factor 75 mobile application, we will collect your IP address, customer number, email address, first name and device ID, which is the equivalent of a cookie for mobile applications (IDFA for Iphones and AAID for Androids). These personal data are necessary for the proper functioning of our application. Cookies related to the use of the Factor 75 mobile application are stored on your mobile device. We only save cookies that are only necessary when you open a web page from the Factor 75 mobile app. You can find more information on how Factor 75 collects and processes cookies in the cookie statement. The legal basis for necessary (technical) cookies is the GDPR article 6(1)(f) – as it is our legitimate interest in ensuring that our website and app is functioning properly. The legal basis for other cookies is the GDPR article 6(1)(a) – your consent. You can withdraw your consent at any time – please refer to the "Your rights" section below with regard to more information on how to do so. ##### 5.Contact Factor 75 via customer care service We keep track of the time and content of our contacts with you, for example when you ask a question to our customer care service department. We process your name, email address, phone number as well as of when and what we do with you. For example, when you ask our customer care service department a question. If you call our customer care service department or if they call you back, these conversations are recorded for our internal quality evaluation purposes. If you contact our customer care service department, we will inform you of this recording at the beginning of our telephone conversation. The recordings of these telephone conversations are deleted after 3 months, except when we are legally obliged to keep them longer. We retain your personal data to process claims and collections. In some cases, we may have to block your account temporarily or permanently, which may be in our interest in cases of abuse, non-payment or fraud. The legal basis is the GDPR article 6(1)(f) – as it is our legitimate interest in administering our customer relationship. ##### 6. Studies, reviews, surveys and competitions It may be in our interest to use your personal data to process comments and reviews (about our boxes and/or recipes) that you make on the website or app and to conduct other research to improve your experience. If you leave a comment or give us feedback, it may be in our interest to contact you about it. In this regard we process your name, email address and phone number. Your reviews and the score you give to our boxes and/or recipes may be used to promote our products and services. For each of these reviews, Factor will individually verify that you have actually purchased at least one Factor box before writing your review. The reviews shown are a selection of reviews with a rating of 8 stars (10 being the highest) and a maximum length of 3 lines. If you no longer wish to receive such messages, you can change this directly in your account preferences or by contacting our customer care service department. In some cases, we combine personal data with information from external sources (including demographic and geographic segments). We also process your personal data such as your name, email address and phone number when you participate in a survey or contest. The legal basis for with regard to processing of personal data in connection with us sending out an email offering you to participate in contests is the GDPR article 6(1)(a) – your consent. You can withdraw your consent at any time – please refer to the "Your rights" section below with regard to more information on how to do so. The legal basis for conducting surveys, studies, getting your review(s) and identifying participants and winners of contests is the GDPR article 6(1)(f) – as it is our legitimate interest in being able to improve our products via studies and surveys, to promote our products, and to identify the participants in the competitions. ##### 7. Administration of suppliers and business partners When administering our suppliers and our business partners we process your contact information such as name, phone number, email address, the company you represent, your position, information in connection with the specific task or situation where personal data is processed. The legal basis is the GDPR article 6(1)(f) – as it is our legitimate interest in administering contacts at our suppliers and business partners. ##### 8. Profiling We may use fully automated decisions (or profiling) to send you targeted advertisements or offers that may be of interest to you. For example, certain data, such as the number of boxes you have ordered or the interruption of your orders, are processed automatically. Our automated decisions (or profiling) is conducted through the use of cookies and direct marketing activities and is subject to you consent. Please refer to the marketing activities section above and the statement on the use of cookies below with regard to how we process your personal data in this regard. In order to provide you with the best possible experience, we may combine your Personal Data with information from external sources (such as demographic and/or geographic data) or from games and contests. Analysis of this information allows us to better understand our customers and their use of Factor 75. The result can be used, among other things, to improve our offer and services as well as our advertising campaigns. The processing of this data is based on our legitimate interest, as provided for by the RGPD. #### Legitimate interests Insofar as it is in our interest to process your personal data, we do so only if necessary and insofar as our interest does not outweigh your rights and freedoms. In any case, we take reasonable steps to avoid unnecessary infringements of your privacy. #### Transfer of personal data *Transfer to subcontractors*
In order to provide you with the services detailed in this privacy statement, Factor 75 may share your Personal Information with processors (that e.g., supply our IT systems such as hosting, backup and support), delivery partners, payment providers, collection agencies and so on. It is also possible that we are required by law to pass on your data to supervisory authorities, (tax) authorities, investigative bodies or other public bodies. In case of a dispute or where we need external counselling, we may also disclose your personal data to our advisors or lawyers. We choose our partners carefully and in all cases ensure that they offer adequate guarantees regarding privacy protection. *Transfer of personal data to social networks*
When you visit our pages on social networks (such as Facebook, Instagram, Pinterest) our suppliers of the social networks collect and process personal data regarding your behavior through the use of cookies and subject to the consent you possibly have given. Furthermore, when you visit our pages on social networks, we will receive statistics with regard to e.g., demography and geography from the social networks regarding the visitors on our pages. We are a joint controller with the supplier of the social networks for the processing of the personal data that is processed in connection with your visit to our pages. You may therefore exercise your rights according to the GDPR towards us or our suppliers. *Transfer within the HelloFresh Group*
In order to manage your personal data, it may be necessary for us to share your personal data with our parent company, HelloFresh SE, located in Berlin, Germany as with other companies of the HelloFresh Group. It is also necessary for our delivery personnel to have access to your personal data in order to deliver the lunch box to your address. *Transfer to third parties*
It is also possible that we are required by law to pass on your data to supervisory authorities, (tax) authorities, investigative bodies or other public bodies. To the extent that third parties are located outside the EU/EEA, we will only transfer your personal data if adequate measures have been taken to ensure that it receives protection comparable to that required in the EU/EEA. #### Your rights *Consultation rectification, objection and transfer of your personal data*
You can at any time consult the data that Factor 75 processes about you and, if you wish, correct or complete them. You can also view your contact details, address and payment details. Furthermore, you can ask us to send you your data so that you can transfer them (right to data portability). You also have the right to ask us to restrict the processing of your data. *Opposition to the processing of your personal data*
You may also opt-out of receiving targeted information about our services or marketing activities that we send to you. If you ask us to stop contacting you through any of our marketing channels (for more information on this, see 3.) Email Marketing and 4. Other Marketing Activities), we must retain your name and other relevant data so that we can exclude you from future marketing activities. *Deletion of your personal data*
You can also ask us to delete your personal data from our database. You can also ask us to (temporarily) process less personal data about you. You have the right to obtain that we erase your personal data in the following circumstances: - Your personal data is no longer necessary in relation to the purposes for which they were collected or otherwise processed by us; - You withdraw your consent to one/several of our processing(s) that was based on your active consent; - When a processing is based on our legitimate interest, that you object to this processing and that this objection overrides our legitimate interest; - When the process of your personal data is unlawful; - When your personal data has to be erased due to compliance with one or more legal obligations. In some cases, we are obliged to keep certain personal data, for example if you have ordered a boxed meal from us and we are subject to a tax retention obligation. *Restriction of your personal data*
You have the right to request restriction of the processing of your personal data by us in the following circumstances: - you contest the accuracy of the personal data during a period enabling us to verify the accuracy of such data; - the processing is unlawful and you are requesting restriction of your personal data instead of erasure; - your personal data is no longer needed for the purposes of the processing, but is necessary for us for the establishment, exercise or defense of legal claims; - you have objected to the processing of your personal data which we carry out based on a legitimate interest, pending the verification whether your objection overrides us or another party’s legitimate interest to continue with the processing. *Withdrawal of authorization*
You can also withdraw your consent to certain processing (e.g. e-mail marketing) at any time. *Making use of your rights*
If you wish to use one of these options, you can contact our customer care service department, through our website or chat. You can send your questions or requests to privacy@factormeals.se Factor 75 is required to verify your identity before deleting your personal data from our administration. In order to fulfill your request, we ask for certain personal data which we use only for this purpose. #### How does Factor 75 protect your data? Factor 75 has taken steps to ensure the confidentiality and security of your Personal Data. Factor 75 has taken appropriate technical, physical and organizational measures. These include an IT security policy, staff training and secure servers. #### How long do we keep your personal data? We store your personal data for as long as it is necessary for the purposes described or to the extent that it is necessary to comply with legal obligations and to settle (commercial) disputes. Below is our specific retention periods for the specific purposes: | Purpose | Retention period | | ---------- | ---------- | | Personal data related to your Factor 75 account | As long as the Factor 75 account is active and up to 3 years after the last activity, unless the user actively unsubscribes before this time. | | Personal data related to management of subscriptions and processing your Factor 75 order | Data related to bookkeeping are generally deleted 7 years after the end of the financial year where the transaction took place. | | Personal data related to marketing activities:

Sending out newsletters (email marketing)

Sending out direct mail

Telemarketing

Sending out SMS

Personal data related to use of cookies |

Data related to sending out newsletters are as long as the consent is valid. Name and email address are kept for up for 3 years after the last newsletter was sent out.
Data related to direct mail are deleted 3 years after you last received a meal box.
Data related to telemarketing are deleted after 3 months
Data related to SMS are deleted 3 years after you last received a meal box.
Please refer to our cookie policy where the retention period for each cookie is specified. | | Personal data related to providing support and maintaining communication | Up to 3 years after the latest correspondence. | | Personal data related to studies, surveys and competitions | Up to 3 years after the study, survey and competition has been completed. | | Personal data related to administration of suppliers and business partners | Generally deleted 3 years after the business relationship is terminated and/or latest contact with the business partner. Data can also be anonymized to be kept longer for statistical purposes. #### Statement on the use of cookies ##### Introduction This Factor 75 website uses cookies. Cookies are small files that are offered on the Factor 75 website(s). One of the benefits of cookies is that you don't have to fill in the same information over and over again. In addition, they help us understand how our websites are used, so we can improve them. Through cookies,and upon your consent, Factor 75 may collect or store information about the website visit and the user's (device). In addition, cookies allow Factor 75 to make its websites more personal and user-friendly. We also set cookies to show you relevant ads on other websites and to share our content via social networks. This Cookie Statement outlines the cookies we set, their purpose and how you can delete them. Factor 75 strives to keep its cookie statement as current as possible and will review it regularly. In the privacy statement above, you can read more about how we process your personal data. #### What type of cookies do we use and why? Different types of cookies are used on our website for different purposes. Some are required to use the website, while others are optional depending on your choices. - Necessary (technical) cookies
Cookies which are necessary in order to ensure functionality and security of the website. These cookies allow you to view requested content and use all functionalities on the website, and they do not register data about your preferences or searches on the website. - Statistical cookies
Cookies which are used to optimize design, usability, and efficiency of the website. The data collected may be used for analytical purposes, e.g. which content is most popular on the website etc. Statistical cookies can also be used to collect visitor statistics through a simple count of the number of visits to the website. Statistical cookies do not register data about your preferences or searches on the website. - Personalized (tracking) cookies
Personalized cookies collect data by following you around the website, including registering your entries such as your login information, which pages you have viewed, time spent on a page, click through, search history etc. They are therefore also called "tracking cookies". Personalized cookies are used to provide you with more targeted and relevant content, for example in the form of suggested information and ads, as well as autofill-information etc. - Marketing cookies
Cookies which are used to target and personalize ads and offers to you, based on your preferences, interests, habits and activities. Marketing cookies collect information by following you on the individual websites. Marketing cookies are therefore also "tracking cookies". - Third-party cookies
In addition to the cookies we place on our website, we use a number of third-party cookies to collect data. Third party cookies are cookies which are placed on our website by third parties, and the data collected are transferred to those third parties. #### Which cookies are used? A complete list of cookies/trackers used by the Factor 75 website can be found here:

This list will be updated monthly. and we will obtain your consent accordingly (if necessary). If you have any questions after reading it, you can contact our customer care service or send an e-mail to privacy@factormeals.se. #### Trackers and cookies on your first visit to the Factor website When you first log on to our website you have the choice to accept all cookies or to configure your preferences. Privacy is important to Factor 75, which is why you can choose to decline certain cookies by setting your preferences. Please feel free to click on the different cookies to learn more about their purpose and how we use them. Refusing certain cookies may affect your experience on our site and the services we offer. You can change your preferences and refuse cookies/trackers at any time by clicking here: Privacy Settings #### Prefer not to use cookies? You have the choice to accept or decline cookies when you first visit our website. You can always change this choice through your browser settings. The links below will provide you with specific information on how to decline cookies for the most commonly used browsers: - [Cookies and Internet Explorer](https://support.microsoft.com/fr-be/help/17442/windows-internet-explorer-delete-manage-cookies) - [Cookies and Microsoft Edge](https://support.microsoft.com/en-us/help/4027947/microsoft-edge-delete-cookies) - [Cookies and Firefox](https://support.mozilla.org/fr/kb/cookies-informations-sites-enregistrent) - [Cookies and Google Chrome](https://support.google.com/chrome/answer/95647?co=GENIE.Platform=Desktop&hl=fr) - [Cookies and Opera](https://help.opera.com/en/latest/web-preferences/#cookies) and - [Cookies and Safari](https://support.apple.com/fr-be/guide/safari/sfri11471/mac) #### Contact details Factor 75 is located at Spaklerweg 50-52, 1114 AE in Amsterdam. Factor 75 is responsible for processing your personal data as described in this privacy and cookie statement. If you have any questions, comments or complaints about this privacy statement and the use of cookies or the use of your personal data in general, please let us know. You can send your questions, comments or complaints to Factor 75 through our contact webpage or by e-mail to privacy@factormeals.se #### Right to lodge a complaint You can also lodge a complaint about the processing of your personal data by Factor 75 with the Data Protection Authority. #### Changes to the privacy and cookie statement Factor 75 reserves the right to make changes to this privacy and cookie statement, for example, as a result of new laws or regulations. The most recent and current version can be found at [www.factormeals.se/privacy-policy](https://www.factormeals.se/privacy-policy). We will always inform you of any new changes. This Privacy and Cookie Statement was last amended on April 2024.

Correspondence