We are the Carlsberg Marston’s Brewing Company. You may know us as Carlsberg Marston’s Brewing Company Limited (company reg. no. 12577732), Carlsberg UK Limited (company reg. no. 00078439), Carlsberg Supply Company UK Limited (company reg. no. 08626420), Marston's Beer Company Limited (company reg. no. FC037407) or one of our other trading divisions or group companies from time to time. Where we refer to ‘CMBC’, ‘we’, ‘our’ or ‘us’ in this Privacy Notification, we mean Carlsberg Marston’s Brewing Company Limited, Carlsberg UK Limited, Carlsberg Supply Company UK Limited, Marston's Beer Company Limited and / or any company or division in our group depending on the specific situation / activity carried out. See “How we use your Personal Data” below for further details.
At CMBC our mission is to brew for a better today and tomorrow. Improving and constantly doing better is in our DNA. This approach is not limited to brewing but extends to all parts of CMBC and what we do – including protecting personal data. In CMBC we believe that protecting personal data is of utmost importance and we constantly strive to improve our efforts every day. ’Personal Data’ is any information relating to you.
This Privacy Notification applies to you if you purchase goods from us, receive services from us, are a business partner or supplier, a visitor at one of our sites or offices, an applicant for a job at CMBC, participate in our events or promotions or otherwise interact with us, including by using any of our websites or communicating with us via social media or other platforms.
If you are an existing customer, consumer, business partner or supplier of ours, further details about how we use your Personal Data may be set out in your contract with us. Other notices highlighting certain uses we wish to make of your Personal Data (together with the ability to opt in or out of selected uses) may also be provided when we collect Personal Data from you.
For the purpose of your interactions with us, we may process and use Personal Data concerning you.
We are part of a global group of companies. In that connection we may share your Personal Data with the following group companies (known as the ‘CMBC Group Entities’):
for the purposes stated in this Privacy Notification. Each of those companies may also process and use your Personal Data for the purposes stated in this Privacy Notification, but they do it independently on their own behalf only.
In addition to us sharing your Personal Data with CMBC Group Entities, we may in some situations also share your Personal Data with third parties such as business partners, suppliers (e.g. online payment processors), vendors, consultants, agencies, customers, consumers, governmental bodies, courts, e-commerce platform providers (e.g. Shopify, a company registered in Ireland and Carlsberg’s e-commerce platform provider for the website www.pourtodoor.co.uk) and IT hosting, supply and service providers that we use for our group’s IT environment (‘Third Parties’). We only share Personal Data where it is relevant and necessary for us to perform the activities described in this Privacy Notification; for example, the fulfilment of your order, the processing of your payment details, or the provision of support services.
For questions about Third Party service providers including their respective privacy policies, please send an email to firstname.lastname@example.org. For more information about whom we share your Personal Data with, please consult each activity in this Privacy Notification where you will find further details.
The Carlsberg Marston’s Brewing Company Group was formed on 31 October 2020 and Personal Data collected before that date by us and Marston’s PLC was transferred into this Group. We may process Personal Data provided prior to 31 October 2020 to Marston’s PLC (and any of its group companies) or to any company that forms part of the Carlsberg Marston’s Brewing Company Group (e.g. to Carlsberg Marston’s Brewing Company Limited, Carlsberg UK Limited, Carlsberg Supply Company UK Limited, Marston's Beer Company Limited and / or any company or division in our group) as a result of such transfer in connection with each activity mentioned below (where relevant) but only where the law permits us to do so. Our legal bases for such transfer are legitimate interests (in order to allow us to develop our business) and legal obligation.
For each activity mentioned below, we note the purpose for which we use the Personal Data, whom this Personal Data regards, the categories of Personal Data being used, the legal bases we rely on for our use, the source from where we received the Personal Data, for how long we keep the Personal Data and with whom we might share the Personal Data.
Depending on the specific situation, we may use your Personal Data for the following activities – please click on each activity to learn more:
Some of the CMBC Group Entities and Third Parties with whom we share your Personal Data may be located in countries outside the EU and/or European Economic Area.
Where we transfer your Personal Data to CMBC Group Entities and Third Parties located outside the EU and the European Economic Area, we may be required to take specific additional measures to safeguard the relevant Personal Data. Certain countries outside the EU and the European Economic Area have been approved by the European Commission as providing essentially equivalent protections to EU and European Economic Area data protection laws and, therefore, no additional safeguards are required to transfer your Personal Data to these jurisdictions. In countries that have not had these approvals, we will use appropriate safeguards to protect any Personal Data that are being transferred, such as EU Commission-approved standard contractual clauses to ensure that your Personal Data is protected adequately.
Keeping your Personal Data secure is a top priority at CMBC. We adhere to internationally recognised security standards and store your Personal Data on secure servers. All Personal Data will be treated as confidential information by those who are allowed to process and use it. Furthermore, CMBC limits access to your Personal Data only to those people who require it. We regularly perform internal audits and follow-ups in order to review whether our measures are appropriate and to ensure continued compliance with internationally recognised security standards and our policies.
Where we have given you (or where you have chosen) a password that enables you to access certain parts of our websites or other platforms, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
Unfortunately, the transmission of information via the Internet is not completely secure. Although we will do our best to protect your Personal Data, we cannot guarantee the security of your Personal Data transmitted to our websites – any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
In certain limited circumstances, we may need to ask for your specific consent to use your Personal Data. However, in most cases we will process it for the reasons set out in this Privacy Notification and it will not be appropriate or necessary for you to provide consent.
If the legal basis for using your Personal Data is consent, you may at any time withdraw your consent by sending an email to email@example.com and informing us about your wishes. If you choose to withdraw your consent, we may no longer use your Personal Data based on consent. The withdrawal will not affect the lawfulness of use based on consent before its withdrawal. In some cases, we may continue using your Personal Data after withdrawal of your consent, if the law permits.
If the CMBC office you are interacting with and which uses your Personal Data for the activities mentioned in this Privacy Notification is based within the EU and/or the European Economic Area, you may:
If we use your Personal Data specifically based on our legitimate interests, you may at any time object to us using your Personal Data based on this legal basis.
Please note that these rights are subject to certain exemptions and may not all be available in the country in which you are based. This might be due to obligations imposed upon CMBC, such as other legislation requiring CMBC to retain the Personal Data, protection of the rights and freedoms of others, or the like. CMBC always does its utmost to carefully evaluate every single request and will provide the reasons if actions are not taken.
If you wish to exercise your rights, you can contact us by sending an email to firstname.lastname@example.org.
If you have any queries that cannot be clarified as a result of internal dialogue with us or you wish to file a complaint, you can contact the Information Commissioner’s Office. Please visit https://ico.org.uk/global/contact-us/ for further details.
If you have any concerns or questions about our use of your Personal Data or this Privacy Notification, you can contact us by sending an email to email@example.com.