In this Business Contacts Privacy Notice, we, Clif Bar & Company at 1451 66th Street, Emeryville, California, 94608 and our affiliates, provide information to individual representatives of our business partners (including distributors, resellers, sales representatives, suppliers and service providers) in the European Economic Area (EEA) about how we process personal data that we receive from you. Our authorised representative in the EU is Clif Bar Europe B.V., Prins Bernhardplein 200, Amsterdam, Netherlands.DATA CATEGORIES COLLECTED AND PURPOSES OF PROCESSINGWhen you give us a business card, register at the reception in one of our offices or meet with us, you may provide us with business contact information (name, business address, email address and work phone number), professional information, data related to purchasing, products or services. We process this data to be able to do business with you and the company that you represent, including contacting you about business opportunities, delivering products and services or following up on contracts. Any data that you do not provide to us directly is either collected from publicly available sources such as your company websites or professional networking sites, or provided by another business professional in your field. LEGAL BASES FOR PROCESSINGWe process your personal data on several different legal bases, as follows::1. Based on necessity to perform contracts with you (as of 25 May 2018, based on Art. 6(1)(b) of the European Union General Data Protection Regulation (GDPR). We need to process your personal data to fulfil sample requests and orders, answer questions and requests from you, and provide customer support.2. Based on legitimate interests (as of 25 May 2018, based on Art. 6(1)(f) of the GDPR): We process personal data from you for security and safety; to detect and prevent fraud; to protect and defend the rights or property of others, or our own rights and interests; we consider your privacy interests in this regard and redact personal information to the largest extent practicable to avoid affecting your privacy rights.3. Based on compliance with legal obligations (as of 25 May 2018, based on Art. 6(1)(c) of the GDPR): We may need to process your personal data to comply with relevant laws, regulatory requirements and to respond to lawful requests, court orders and legal processes.4. Where required by applicable law, based on your consent (as of 25 May 2018, based on Art. 6(1)(a) of the GDPR): If you consent to receiving marketing communications, we may send you marketing communications on the basis of such consent.CATEGORIES OF RECIPIENTSWe share business contact information on a "need to know" basis with personnel in the sales, marketing and procurement departments of affiliated companies in the Clif Bar group as well as independent distributors, resellers and sales representatives, as necessary to operate our business. We also work with service providers that help us operate our business under our instructions and confidentiality obligations.PROCESSING AND STORAGE OF PERSONAL DATAWe and our affiliates and service providers process and store your personal data on servers in the United States, which have not received an unqualified adequacy decision by the European Commission. We provide adequate protection for your personal data by having entered into data processing agreements and data transfer agreements that include standard contractual clauses approved by the European Commission. Such data processing agreements and data transfer agreement are available upon request by contacting firstname.lastname@example.org.DATA RETENTIONWe retain your personal data as long as you have a business relationship with us and for 4 years thereafter, subject to applicable laws.YOUR RIGHTS AND CHOICES:You can contact us to obtain access to your personal data or copies. You may ask that we correct, archive or delete your personal data or request your personal data to be made available according to portability requirements. You can exercise statutory rights by contacting us at email@example.com. You also have the right to lodge a complaint with a supervisory authority. Having a business relationship with us is voluntary, but it may not be possible to work with you without processing some personal data about you, such as your contact information.