Privacy Policy

This Privacy Policy has been adopted by Cloetta AB (publ) and its group companies (“Cloetta” or “We”), and applies to our processing activities in relation to end-users of our services, visitors of our websites and digital channels, and individuals communicating with us.

Cloetta is committed to protecting and respecting your privacy. Therefore, you are encouraged to carefully read this policy. If you have any concerns, please contact us as set out below in the section “Contact Information”.

What is Personal Data?

Personal data is all information that directly or indirectly (i.e. together with other information) may identify an individual. This means that a wide range of data, such as names, contact details, IP addresses, and behaviour and choices made online, are personal data.

Data processing is any operation or set of operations performed upon personal data, whether or not by automatic means, such as collection, recording, organization, storage, adaptation or alteration, blocking, erasure or destruction of personal data.

How Do We Process Your Personal Data?

Visitors to Our Websites and Digital Channels

When you visit our websites and digital channels we may process:

  • Information you have volunteered, such as name, date of birth and contact details;
  • Details of your visits to our websites and digital channels, including search terms you use, likes, and shares;
  • Campaign traffic data;
  • Sales via this website;
  • Personal information that does not identify you (“Grouped Data”), including gender, region, household and age;
  • Technical data, including URL information, cookie data, IP address, and device types used to access Cloetta websites; and
  • If you have consented to the use of cookies, we will apply the “Facebook Pixel” of Facebook and may process Facebook ID (the data remains anonymous and cannot be used to identify you).

We process your data for the following purposes:

  • To monitor and improve our products and services, including optimizing our websites and digital channels and making them more user-friendly;
  • To measure the performance of advertising and digital campaigns;
  • To target and reach audiences online;
  • To communicate with you via digital channels, monitor social posts, brand sentiment, and newsletters;
  • To analyze information for individual profiling in order to offer personalized ads, offers, and other customized information; and
  • For purposes related to our use of cookies (please see our Cookie Policy).

Customers Buying Our Products Online

When you are a customer buying our products online we may process:

  • Information you have volunteered, such as name, gender, home and/or delivery address, telephone number, email address, date of birth, demographic information, interests, preferences, payment information;
  • Historical order information; and
  • Products you have purchased.

We process your data to:

  • Handle our customer relationship (e.g. identifying you as a customer); and
  • Fulfil contractual obligations (e.g. providing services).

Subscribers to Newsletters or Marketing Contests

Consistent with the permission you have given us by opting in and consenting to our terms and conditions, we may process:

  • Name, gender, telephone number, address, email address, and date of birth; and
  • Depending on the prize value (USD), we may also collect your social security number.

We process your data for:

  • Direct marketing purposes, including newsletters, offers and promotions by email (you may unsubscribe at any time via the link in each email);
  • Administering contests; and
  • Complying with legal obligations (e.g. reporting contests to a National Tax Board).

When You Communicate With Us

When you communicate with us we may process:

  • Information you provide such as name, address, telephone number, email address, date of birth, demographic information, interests, preferences, payment information and case details.

We process this data to fulfil your request or respond to your inquiries, including handling customer complaints.

Legal Ground for Our Processing

Cloetta processes personal data in accordance with applicable data protection legislation. Within the EU/EEA, the General Data Protection Regulation (GDPR) applies (Regulation (EU) 2016/679).

We process your personal data when necessary to:

  • Fulfil a request from you or respond to your inquiries;
  • Comply with a legal obligation; or
  • Serve a legitimate interest (e.g. marketing and improving our services).

Where required, we will collect your prior consent before processing your data.

Personal data indicated as mandatory is required for statutory, contractual, administrative or technical reasons.

How Long Do We Keep Your Information?

We retain your personal data only as long as necessary to:

  • Provide products or services;
  • Improve our services; and
  • Comply with legal and audit requirements.

We have routines in place to ensure personal data is deleted when no longer needed.

How Do We Share Your Information?

Cloetta may engage third parties to provide services such as IT systems and operational support. Personal data may be processed by such providers on our behalf.

Your personal data may be transferred outside the EU/EEA. In such cases, appropriate safeguards will be implemented, including EU Commission model clauses.

We may disclose personal data if required by law or to detect and prevent fraud or technical/security issues.

Service providers processing personal data on our behalf are required to sign agreements ensuring high levels of data protection.

In accordance with the California Consumer Privacy Act (CCPA), we do not sell personal data in exchange for monetary or other valuable consideration.

Information Security

We implement organizational and technical security measures to protect personal data from unauthorized access, use, alteration, or deletion.

Our Use of Cookies

A cookie is a small text file placed on your device when you visit a website. For more information on how cookies are used, please see our Cookie Policy.

Your Rights

Under applicable data protection legislation, you have the right to:

  • Request access to and rectification of your personal data;
  • Request erasure of your personal data;
  • Request restriction of processing;
  • Object to processing and withdraw consent at any time;
  • Receive the personal data you have provided to us.

You also have the right to lodge a complaint with the relevant supervisory authority.

Contact Information

The entity listed as responsible for the digital channel in question is the data controller for that channel. Other legal entities within the Cloetta group may also act as data controllers where applicable.

If you have questions or wish to exercise your rights, please contact:

Cloetta Sverige AB
Email: privacy@cloetta.com
Address: Brogatan 7, 21144 Malmö, Sweden

Updates to This Policy

This Privacy Policy was last updated in January 2026. We may update this policy from time to time by publishing a new version on our website or through other appropriate means. We recommend that you review this page periodically.