Legal bases for the processing of your personal data are:
(i) performance of a contract, where we have entered into a contract with you and need to process your personal data to fulfil our contractual obligations to you, such as to facilitate contracts with our growers, suppliers, or contractors including managing shipping/distribution and billing and invoicing, manage your service target/standards and ensure that you are providing the services to Zespri in accordance with the terms and conditions set out in your contractual agreement, ensure your compliance with our Code of Conduct and other Zespri terms and standards, as applicable (Art. 6 (1) lit. b GDPR/UK GDPR).
(ii) our legitimate interests (Art. 6 (1) lit. f GDPR) for personal data passively collected through our site which are the following: to monitor and maintain the performance of the site and to analyze trends, usage and activities in connection with our site, understand the ways you use our products and services, including our websites, or the path you have taken to find us, conduct market or health research into the use of our products and services, understand public sentiment about our products and brand and, where appropriate, respond to comments made about these, administer our websites and the use of services offered on them, including ensuring that our websites are safe and secure, generally improve the products and services we offer and ensure that any negative experiences you have shared with us are addressed, generally ensure that we market our products and services effectively and in a way that is relevant manage the product distribution and supply process, ensure the quality of your orchard and product, conduct research and development activities in respect of growers, products or orchards, develop marketing material about our growers, manage pest or disease outbreaks, determine your eligibility to provide the services under a Services Agreement, Terms of Trade or other contract, and ensure that you have the necessary skills and qualifications, facilitate inter-group communications, facilitate travel and transfers, to help us identify and evaluate any compliance issues or risks associated with doing business with you, investigate and manage any complaints from or about you, ensure your health and safety, including establishing any particular medical requirements for you and ensuring that emergency contacts are maintained, ensure the health and safety of you and of our staff when they visit your property, respond to any lawful requests from government agencies or law enforcement agencies, work with industry bodies.
(iii) our legitimate interests (Art. 6 (1) lit. f GDPR/UK GDPR) for the transfer of your personal data within the group of companies which are the following: for internal administrative and support purposes (access is limited to colleagues with a need to know), customer and grower support services, quality management, HR and personnel management, transport and logistics support, digital support and troubleshooting, security monitoring and system access control services.
(iv) compliance with a legal obligation to which Zespri is subject (Art. 6 (1) lit. c GDPR/UK GDPR), for example if we are required by law to disclose for the transmission of personal data to law enforcement agencies, or governmental authorities, or to enable compliance with health and safety, tax, employment, immigration and other legislative requirements.
(v) our legitimate interests for the purposes of exercising our legal rights or defending legal claims, legal counsel and external consultants or legitimate interests, such as exercise or defense of legal claims.
(vi) our legitimate interests (Art. 6 (1) lit. b GDPR/UK GDPR) for the transfer of your personal data in connection with a transfer of all or part of our organization or assets which are the following: the orderly transition of all or part of our business.