Privacy Policy
Mondelēz International Privacy Notice for European Region
1. Privacy Notice Overview
-
2.1 INTRODUCTION
-
2.2 SPEED READ ON KEY MONDELĒZ INTERNATIONAL DATA PROCESSING
-
2.3 WHAT PERSONAL DATA DO WE COLLECT FROM YOU?
-
2.4 WHY DO WE COLLECT AND PROCESS PERSONAL DATA AND ON WHICH LEGAL BASIS?
-
2.5 HOW LONG DO WE RETAIN YOUR PERSONAL DATA?
-
2.6 WHO MAY WE SHARE YOUR PERSONAL DATA WITH?
-
2.7 INTERNATIONAL TRANSFERS OF YOUR PERSONAL DATA
-
2.8 HOW DO WE ENSURE THE SECURITY OF YOUR PERSONAL DATA?
-
2.9 WHAT RIGHTS DO YOU HAVE REGARDING THE PERSONAL DATA WE HOLD ABOUT YOU?
-
2.10 SOCIAL MEDIA AND OTHER WEBSITES
-
2.11 HOW DO WE PROCESS CHILDREN’S PERSONAL DATA?
-
2.12 CHANGES TO THIS PRIVACY NOTICE
-
2.13 MONDELĒZ INTERNATIONAL'S DATA PROTECTION OFFICER IN EUROPE
2. Full Privacy Notice
2.1 INTRODUCTION
At Mondelēz International, we value your trust when sharing your Personal Data with us and recognize that you may be concerned about the information provided to us and about how we handle that information. We attach great importance to protection of your privacy. If you are reading this privacy notice ("Privacy Notice"), it is because you may have visited a website, a mobile app or any social media account controlled by us (referred to hereinafter as "Site" or “Sites”) operated by any of the European entities of Mondelēz International Group ("Mondelēz International" or "us" or "we") or, because you may have interacted with us through other means such as contacting us directly by phone or in writing.
This Privacy Notice sets out in full transparency and in accordance with applicable laws and regulations, especially, but not limited to, the General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR"), the UK GDPR and the Swiss Federal Act on Data Protection (all together "Applicable Data Protection Laws"), what personal data ("Personal Data") are collected, how they are collected, for which purposes and on which legal basis. It further describes your rights in relation to our processing of your Personal Data.
This Privacy Notice was last updated on September 25, 2025.
2.2 SPEED READ ON KEY MONDELĒZ INTERNATIONAL DATA PROCESSING
Mondelēz International collects and processes Personal Data which you provide or which we collect about you when you navigate through our Sites or otherwise for the purposes of (i) providing our products and/or services related thereto, including our Sites, (ii) account management, (iii) design and implementation of campaigns, competitions, sweepstakes, contests and similar promotional support processes in relation to our products and services, (iv) personalisation (online and offline), (v) sending you (personalised) marketing or commercial information via the Sites or via email, (vi) improving and maintaining our products and/or services and our Sites, (vii) customer management, (viii) facilitating our business operations and operating company policies and procedures, (ix) dispute management and legal defence, (x) fighting misuse, fraud and crime, (xi) complying with legal, regulatory and ethical obligations and (xii) conducting corporate transactions (e.g. M&A). You can find the categories of Personal Data processed for these purposes below in section 2.3, What Personal Data Do We Collect From You?
When using our Sites, Personal Data may be processed by means of cookies and similar technologies. More information on the use of these technologies can be found in the Cookie Policy referenced in the footer of the Site you are visiting. Registration for and use of our Sites are subject to our relevant "Terms and Conditions" posted on each Site. Please read these documents together with this Privacy Notice.
We process your Personal Data in accordance with Applicable Data Protection Laws, such as (but not limited to) the GDPR, the UK GDPR and the Swiss Federal Act on Data Protection. The processing of your Personal Data is subject to this Privacy Notice, including processing through access to and use of our Sites. Your Personal Data processing will be limited to what it is necessary in relation to the purposes specified in this Privacy Notice. We will only process your Personal Data if necessary for the performance of a contract with you, for compliance with a legal obligation applicable to Mondelēz International and/or for the purposes of legitimate interests of Mondelēz International. Otherwise, where necessary, we will be collecting your prior consent so that you can control the information we process and hold about you.
Where feasible, we will process your Personal Data in the European Economic Area ("EEA"), Switzerland and/or the UK. However, your Personal Data may also be stored in systems based around the world and may be processed by third party service providers acting on our behalf and located in jurisdictions different than those mentioned above. These systems and providers may be based in territories, such as the USA, that do not provide an equivalent level of protection over Personal Data as that enjoyed in the EU. In that case Mondelēz International will provide for adequate data protection standards by agreeing to appropriate technical organisational and contractual measures (and where needed supplementary measures) to protect your Personal Data and ensure a level of safeguards that is equivalent to the one of the countries of origin. You can seek for further information and exercise your rights of access, rectification, deletion, objection, withdrawal of consent and data portability in respect of your Personal Data, by clicking in our Contact Us feature or contacting our Data Protection Officer (please see contact details below).
2.3 WHAT PERSONAL DATA DO WE COLLECT FROM YOU?
Depending on how and why you interact with Mondelēz International (e.g. via our Sites, purchasing of our products and services), we collect and process different categories of Personal Data. We present an overview of these categories of Personal Data below:
|
Category of Personal Data |
Personal Data attributes in scope |
|
Personal Contact Information |
This includes information that you provide us that would allow us to contact you:
|
|
Account Registration and Login Information |
This includes any information that is required for you to establish and use a user account on our Sites:
|
|
Third-Party Account Information |
In addition, we may process pseudonymised personal data from your Google account. The exact categories of your personal data in relation to your Google account depend on what information you have provided to Google and might typically include:
These personal data are used only to create aggregate reports on conversions through our advertisement campaigns. |
|
Demographic Information and Interests |
This includes information that describes your interests and preferences as well as demographic information:
|
|
Payment Information |
This includes information needed to make purchases from Mondelēz International, processed either directly by Mondelēz International or by its partners (e.g. banks, payment services):
|
|
Order Information |
This includes information relating to your purchase or order of our products and/or services, including transaction details. |
|
Device-related Information |
This includes information automatically collected (and where required, upon your consent):
We collect such information, for example, when we use cookies, web beacons and similar technologies that collect information about your use of our Sites or about your interaction with us by email. More information on the use of these technologies can be found in the Cookie Policy referenced in the footer of the Site you are visiting. |
|
Customer Interaction and Feedback Information |
We process your Personal Data in other instances as well. You may submit a request to us, make a complaint in relation to our products and services. You may contact us via email, online channels such as our Sites, our social media accounts. You may participate in our offers and campaigns, competitions, sweepstakes and contests or reply to surveys. The exact Personal Data attributes differ depending on the nature and scope of your interaction with us. |
|
Consumer Generated Content and Social Media Information |
This includes any content you create and share with us on third party social networks or by uploading it to our Sites:
We also process information you allow social media providers to share with us:
|
|
Other |
We process your Personal Data disclosed voluntarily by you as part of your interactions with us. These include any directly or indirectly identifiable pieces of information that you reveal, for example in your e-mail or phone-based exchanges with us, within your complaints and requests. |
2.4 WHY DO WE COLLECT AND PROCESS PERSONAL DATA AND ON WHICH LEGAL BASIS?
Mondelēz International processes your Personal data as a controller for the purposes described below. Please know that insofar as we already hold information about you, we may use that information for the same purposes. For each purpose, the relevant legal basis is mentioned.
|
Purpose |
Legal basis |
Categories of Personal Data processed for this purpose |
|
Providing our products and/or services, including our Sites Your Personal Data will be processed for the purpose of providing our products and/or services and for making our Sites available to you. This includes that we process Personal Data to communicate with you about our products and/or services or when otherwise required for our contractual relationship, to meet our obligations and enforce our rights arising from any contracts with you or the organisation that you work for, to provide our Sites (e.g. allowing access to our Sites, operating our Sites, providing maintenance and support in relation to our Sites), to send transactional communications and order confirmation, as well as accounting and billing, and to comply with legal requirements and industry standards and our policies. |
This processing is necessary for the conclusion or performance of the contract between Mondelēz International and you. In other cases, the processing is necessary for Mondelēz International’s legitimate interest in processing your Personal Data in the context of our contracts with your organisation. Certain processing may also be necessary for a legal obligation applicable to us. |
|
|
Account management In order to create and maintain your user account in our Sites, we will process your Personal Data. |
This processing is necessary for the conclusion or performance of the contract between Mondelēz International and you. |
|
|
Campaigns, competitions, sweepstakes, contests and similar promotional support processes in relation to our products and services We occasionally allow you to participate in campaigns, competitions or promotions to win a product, service or a prize. In this context, we process your Personal Data to allow you to participate and, if applicable, to keep you informed (of the outcome of) campaigns, competitions, sweepstakes, contests and similar promotional support processes. |
This processing is necessary for our legitimate interest in planning and offering campaigns, competitions, sweepstakes, contests and similar promotional support processes. When you participate, this processing is necessary for the conclusion or performance of the contract between Mondelēz International and you. In other cases, and where legally required, we will request your prior consent. |
|
|
Personalisation (online and offline) In order to better understand you as a customer and provide you with an excellent customer experience, we process Personal Data to (i) analyse your preferences and interests in relation to our products and/or services, (ii) to anticipate your needs based on our analysis of your past interactions with us, (iii) to optimise the tailoring of content you receive and see from us on our Sites. |
Where legally required, we will request your prior consent (e.g. the processing through non-essential cookies and tracking technologies). You can withdraw your prior consent at any time; see section 2.9, What rights do you have regarding the Personal Data we hold about you? In other cases, this processing is necessary for our legitimate interest in knowing and understanding you better as a (potential) customer of Mondelēz International. |
|
|
To send you (personalised) marketing or commercial information via the Sites or via email We process Personal Data to manage your subscription to our newsletters and to provide you with (personalised) communications for marketing and advertisement purposes about our products and services via email, SMS, other electronic means or otherwise, to remind you per email of your abandoned cart, and to send invitations for events or promotional meetings. |
Where legally required, we will request your prior consent (e.g. opt-in to marketing communications, the processing through non-essential cookies and tracking technologies). You can withdraw your prior consent any time; see section 2.9, What rights do you have regarding the Personal Data we hold about you? In other cases, this processing is necessary for our legitimate interest in ensuring that you and your organisation are kept up to date about our Sites and services, understanding your interests, personalizing our interactions with you, and developing our business relationship, as this helps us to preserve our business operations or grow our business (also referred to as “soft opt-in”). |
|
|
Improving and maintaining our products and/or services and our Sites For the purposes of managing, improving and maintaining our Sites and/or our products and/or services, performing support and improvement activities for our Sites, products and/or services, identifying and resolving bugs and service errors, adding new features and optimising your user experience, your Personal Data may be processed. This can include use of Personal Data to generate aggregated statistics about the users of our products and services and for system integrity purposes). |
Where legally required, we will request your prior consent (e.g. the processing through non-essential cookies and tracking technologies). In other cases, this processing is necessary for our legitimate interest to analyse, report on, manage and improve our products and/or services and/or our Sites. |
|
|
Customer and prospect support and management When you submit a request to us, make a complaint in relation to our products and services or engage in any interactions where you provide us with Personal Data, we process certain Personal Data in order to provide optimal (customer) experience. |
This processing is necessary for our legitimate interest in knowing customers and persons that contact us, answering your requests and/or complaints and maintaining our relationship with you or your organisations, with a view to providing an excellent (customer) experience. |
Depending on the format and channels of your interaction with us, the categories of Personal Data processed for this purpose may differ.
|
|
To facilitate our business operations and to operate company policies and procedures To comply and implement internal rules that we create for seamless customer experience and compliance with internal rules, we may process your Personal Data. |
This processing is necessary for our legitimate interest in ensuring compliance with our policies and procedures applicable to our business operations. |
Depending on the nature of the business operation, policy or procedure in question, this could involve all categories. |
|
Dispute management and legal defence |
This processing is necessary for our legitimate interest to collect Personal Data for use in resolving any disputes and/or to defend ourselves in and out of court. |
Depending on the nature of the dispute, claim or case in question, this could involve all categories. |
|
Know your customer, fighting misuse, fraud and crime Your Personal Data may also be used for the prevention or detection of fraud and illegal uses, abuse, spam, fraud, security incidents and other harmful activity. |
Where a legal obligation applies to us, the processing is necessary to comply with such legal obligation applicable to us. In the absence of a relevant legal obligation, the processing is necessary for our legitimate interest to deal with misuse, fraud and crime. |
Depending on the nature of the legal, regulatory and ethical obligation or business interest in question, this could involve all categories. |
|
Comply with legal, regulatory and ethical obligations Personal data may be processed to enable Mondelēz International to conduct its business in accordance with best practice within the confectionery, food, holding, beverage and snack food industries in terms of legal, regulatory and ethical requirements such as maintaining appropriate business records and handling complaints made to our customer service, and/or to comply with orders by a court or regulatory authority. |
Where a legal obligation applies to us, the processing is necessary to comply with such legal obligation applicable to us. In the absence of a relevant legal obligation, the processing is necessary for our legitimate interest to conduct our business in a responsible manner and in accordance with best practices. |
Depending on the nature of the legal, regulatory and ethical obligation in question, this could involve all categories. |
|
In the context of a corporate transaction Personal Data may be processed to evaluate or carry out an acquisition, merger, demerger, restructuring, reorganisation, dissolution or other sale or transfer of some or all of our assets, whether by way of transfer of all or part of the business, or as part of a bankruptcy, liquidation or similar proceeding, where Personal Data held by us forms part of the transferred assets. |
This processing is necessary for our legitimate interest in carrying out the said business transactions to implement our business strategies or grow our business. |
Depending on the nature of the corporate transaction, this could involve all categories. |
2.5 HOW LONG DO WE RETAIN YOUR PERSONAL DATA?
We will only retain your Personal Data for as long as necessary to satisfy the purpose for which it was provided by you or collected by us (for example, for the time necessary for us to answer queries or resolve problems) or as long as permitted or required by applicable laws. We may therefore retain your Personal Data for a reasonable period after your last interaction with us. When the Personal Data that we collect is no longer required in this way, we destroy or delete it in a secure manner. We may, instead of destroying or erasing your Personal Data, make it anonymous so that it cannot be associated with or tracked back to you.
Our determination of the storage period is based on the following criteria:
-
The duration of our relationship with you, including when we have a contractual relationship with you,
-
The duration of a legal obligation applicable to us, and
-
The mandatory or recommended storage period in view of the applicable statutory retention periods, a dispute or regulatory enquiry.
2.6 WHO MAY WE SHARE YOUR PERSONAL DATA WITH?
We may share your Personal Data with:
-
Mondelēz International entities: Your Personal Data could be shared between the responsible Mondelēz International companies that may use your Personal Data as described in this Privacy Notice.
-
Service Providers and Processors: We may engage third party vendors, agents, service providers and affiliated entities to provide services to us on our behalf, such as support for the internal operations of our Sites or online stores (including social media services providers, online advertisement services providers, payment processors, brand activation agencies, data analytics providers and third parties we use for sending your orders to your home address, such as postal courier vendors) or for the technical processing (for example, hosting services or data storage) or for customer relationship management services, as well as related offline product or promotional support services, (for example, competitions, sweepstakes and contests organizers, winner draws providers, events management agencies, prize or compensation packages vendors) and other related services. In providing their services, they may access, receive, keep or otherwise process Personal Data on our behalf. Our contracts with these service providers do not permit use of your information for their own purposes, including for their marketing purposes. Consistent with applicable legal requirements, we take commercially reasonable steps to require third parties to adequately safeguard your Personal Data and only process it in accordance with our instructions.
-
Business Partners: We may sometimes offer you a service or application in co-operation with our business partners (for example, co-sponsors, licensors, licensees or distributors of our branded products). We may therefore need to disclose your Personal Data to those partners. Consistent with applicable legal requirements, we take commercially reasonable steps to require third parties to adequately safeguard your Personal Data and only process it in accordance with our instructions or as co-controllers. Where the disclosure of your Personal Data with business partners takes place based on your consent or your request to do so, where relevant, we will clearly notify you of the sharing, and you will have the choice not to participate or to otherwise object to such sharing.
-
Third parties in case of legal requirement: We may also disclose your Personal Data if we believe we are required to do so by law, or that doing so is reasonably necessary to comply with legal processes; when we believe necessary or appropriate to disclose Personal Data to law enforcement authorities, such as to investigate actual or suspected fraud or violations of law, breaches of security, or breaches of this Privacy Notice; to respond to any claims against us; and, to protect the rights, property, or personal safety of Mondelēz International, our customers, or the public.
-
Third Parties in case of a corporate transaction: In addition, information about our customers, including Personal Data, may be disclosed as part of an acquisition, merger, demerger, restructuring, reorganisation, dissolution or other sale or transfer of some or all of our assets, whether by way of transfer of all or part of the business, or as part of a bankruptcy, liquidation or similar proceeding.
2.7 INTERNATIONAL TRANSFERS OF YOUR PERSONAL DATA
Where feasible, we will process (and store) your Personal Data in the EEA, Switzerland and/or the UK. Notwithstanding this, the global nature of our business involves that your Personal Data may occasionally be disclosed to non-European entities of the Mondelēz International Group for which they have entered into a data transfer agreement regulating these cross-border transfers. We also use some third-party suppliers to help us provide business services. These are not all located in the EEA, the UK or Switzerland. Your data may therefore be processed in these jurisdictions, and, in certain cases, in any country in the world. These third parties may have access to or merely host your Personal Data but will always do so under our instructions and subject to appropriate contractual requirements. If a recipient is located in a country without adequate statutory data protection (e.g. where there is no adequacy decision issued by the country of origin in relation to the location of the recipient), we require the recipient to comply with adequate data protection standards by contractually agreeing to appropriate safeguards (for this purpose, we use the EU Standard Contractual Clauses, the UK Standard Contractual Clauses or the UK addendum to the EU Standard Contractual Clauses or the Swiss Standard Contractual Clauses or the Swiss addendum to the EU Standard Contractual Clauses in addition to an appropriate data transfer impact assessment). As a result of data transfer impact assessments, where needed, we also require these parties to adhere to supplementary measures. You can contact us to receive a copy of the appropriate safeguards that apply to the transfer of your Personal Data by using the contact details in section 2.13, Mondelēz International Data Protection Officer.
2.8 HOW DO WE ENSURE THE SECURITY OF YOUR PERSONAL DATA?
We use a variety of physical, technical and organisational security standards, technologies and procedures to help protect your Personal Data from loss, misuse, alteration, destruction or damage to an appropriate level depending on the sensitivity of the information. We take steps to limit access to your Personal Data to those persons who need to have access for one of the purposes listed in this Privacy Notice. Furthermore, we contractually ensure that any third party processing your Personal Data provides for confidentiality and integrity of your data in a secure way.
2.9 WHAT RIGHTS DO YOU HAVE REGARDING THE PERSONAL DATA WE HOLD ABOUT YOU?
As a data subject you have the following rights in relation to the personal information we hold about you:
-
Right to be informed: This right ensures that you are fully aware of how your Data is being used.
-
Right of access: You have the right to obtain a copy of your Data and receive more information about how and why this Data is being processed.
-
Right to rectification: If your Data is inaccurate or incomplete, you have the right to request that it be corrected or updated. This ensures that your information remains accurate and up-to-date.
-
Right to be forgotten (erasure): You have the right to request the deletion of your Data when it is no longer necessary for the purposes for which it was collected, or if you withdraw your consent.
-
Right to restrict processing: You can request the limitation of our processing your Data in certain circumstances, such as when you contest the accuracy of the Data or object to its processing. This means your data can be stored but not processed further.
-
Right to data portability: This right allows you to obtain and then reuse of some of your Data. You can request that that Data be provided in a structured, commonly used, and machine-readable format, and transferred to another controller if technically feasible.
-
Right to object to processing of your Personal Data for direct marketing purposes or to any processing which we carry out based on our legitimate interest.
-
Right to withdraw your consent for the processing of your Personal Data (insofar the processing is based on your consent). This withdrawal will however not affect the lawfulness of the processing of your Personal Data for the period prior to the time of this withdrawal and processing activities based on another legal basis.
-
Rights in relation to automated decision-making: You are protected against decisions made solely on automated processing, including profiling, which significantly affect you. You can request human intervention or challenge such decisions
You may revoke your consent for receiving newsletter or marketing communications at any time, free of charge by following the instructions in any marketing communication or by using the deregistration option within our Contact Us form. You can also control these preferences in your profile settings, where applicable.**
You have the right to raise a complaint directly with us as the data controller before escalating to the Information Commissioner’s Office (“ICO”). We encourage you to contact us either via our Contact Us form or by contacting our Data Protection Officer (please see contact details in section 2.13, Mondelēz International Data Protection Officer).**
When you raise a complaint with us, we will: (a) acknowledge receipt of your complaint within [5] days; (b) investigate and provide a substantive response within [30] days (or inform you if we need more time and why); and (c) explain the outcome of our investigation and any steps we have taken or will take. If you are not satisfied with our response, or if we fail to respond within the required timeframe, you may then escalate your complaint to the ICO.**
You can contact the ICO as follows (note: the ICO may ask whether you have first raised your complaint with us):**
Contact Method
Details:
Telephone: 0303 123 1113
Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
2.10 SOCIAL MEDIA AND OTHER WEBSITES
When you follow any of our profiles or wherever we are present in any of the various social media networks like Facebook, Twitter, Yammer, Pinterest, Instagram, LinkedIn, YouTube, etc., you should be familiar with and understand the tools provided by those sites that allow you to make choices about how you share the Personal Data in your social media profile(s).
To the extent they act as controllers, the privacy practices or policies of these social media networks apply to the processing of your Personal Data, so we encourage you to read the applicable privacy notices, terms of use and related information about how your Personal Data is used in these social media environments.
Subsequently our Sites may contain links to third-party websites, mobile apps and social media platforms; if you follow these links, you will exit our Sites. While these third-party websites, mobile apps and social media platforms are selected with care, Mondelēz International cannot accept liability for the use of your Personal Data by these organisations. For more information and details, please consult the relevant privacy notice of the third-party website, mobile app and social media platform.
2.11 HOW DO WE PROCESS CHILDREN’S PERSONAL DATA?
In general terms, our Sites are not intended to Children under 13 years old. Above that age, as we take the protection of children’s privacy seriously, we operate our Sites in compliance with all applicable law in each corresponding Jurisdiction. Any time children under 16 or as per the age requirement in the appropriate applicable law access or use our Sites, they should have a parent/guardian’s consent before providing any Personal Data to us. If we determine upon collection that a user is under said age and has not provided a parent/guardian’s consent before providing any Personal Data, we will not use or keep his/her Personal Data without the parent/guardian’s consent. Without such consent, though, the child may not be able to participate in certain activities. However, in certain circumstances, we may keep and use such information (in accordance with this Privacy Notice and applicable law) in order to notify and obtain consent from the parent/guardian and for certain safety, security, liability and other purposes permitted under Applicable Data Protection Laws. A parent/ guardian can review, remove, change or refuse. further collection or use of their child’s Personal Data by contacting us via our Contact Us form or by contacting our Data Protection Officer (please see contact details in section 2.13, Mondelēz International Data Protection Officer), including the child’s name, address and/or e-mail address.
2.12 CHANGES TO THIS PRIVACY NOTICE?
Mondelēz International reserves the right to change this Privacy Notice at any time. Changes to this Privacy Notice take effect at the time of publication. We recommend that you always consult the most recent version (which is the version currently accessible on the site you are visiting). The date of this version can be found on top of this page under section 2.1, Introduction.
2.13 MONDELĒZ INTERNATIONAL'S DATA PROTECTION OFFICER IN EUROPE
Mondelēz International has a Data Protection Officer ("DPO") for European region who is responsible for compliance with Applicable Data Protection Laws. You may contact Mondelēz International 's Data Protection Officer or their office securely and confidentially at any time if you have questions, general concerns about the processing of your Personal Data, or any other data protection issue.
You can contact the DPO's by emailing to MDLZDataProtectionOfficeMEU@mdlz.com