Privacy, Cookie & Data Use Policy

Date: September 16, 2024

Why this privacy notice?

Avendra Group Company is a sub-group of the Aramark corporation, a public entity traded on the NYSE. Avendra Group comprises legal entities registered in the UK, Ireland, France, Belgium, the Netherlands and Germany. This privacy policy is issued on behalf of the Avendra Group (“Avendra”, “we” and “our”). Avendra operates its websites and is responsible for the collection and storage of personal data through the websites. Avendra respects the privacy of every user of this website (you) and informs you below about how personal data is processed on this website.

Please note that this information on data protection applies to the website www.trinitypurchasing.com and its language specific versions but not to third-party websites that you can access via hyperlinks from our website.

Data controllers

  1. To the extent that the data processing activities relate to Avendra’s business in the UK, the following Avendra entity is the data controller:Trinity Purchasing UK Limited
    PO Box GU14 6XN, Ascent 4
    Farnborough Aerospace Centre
    Farnborough
    United Kingdom

    Contact details of our compliance department responsible for data processing:
    Trinity Purchasing UK Limited
    PO Box GU14 6XN, Ascent 4
    Farnborough Aerospace Centre
    Farnborough
    United Kingdom
    gdpr@aramark.com

  2. To the extent that the data processing activities relate to Avendra’s business in Ireland, the following Avendra entity is the data controller:
    Trinity Purchasing Limited
    70 Sir John Rogerson’s Quay
    Dublin 2
    Ireland

    Contact details of our compliance department responsible for data processing:
    Trinity Purchasing Limited
    70 Sir John Rogerson’s Quay
    Dublin 2
    Ireland
    gdpr@aramark.com

  3. To the extent that the data processing activities relate to Avendra’s business in France, the following Avendra entity is the data controller:Trinity Hospitality Services SARL
    320, rue Saint-Honoré,
    75001 Paris
    France

    Contact details of our compliance department responsible for data processing:
    Trinity Hospitality Services SARL
    320, rue Saint-Honoré,
    75001 Paris
    France
    gdpr@aramark.com

  4. To the extent that the data processing activities relate to Avendra’s business in Belgium, the following Avendra entity is the data controller:Trinity Purchasing NV
    Fotografielaan 20
    2610 Wilrijk
    Belgium

    Contact details of our compliance department responsible for data processing:
    Trinity Purchasing NV
    Fotografielaan 20
    2610 Wilrijk
    Belgium
    gdpr@aramark.com

  5. To the extent that the data processing activities relate to Avendra’s business in the Netherlands, the following Avendra entity is the data controller:
    Trinity Purchasing BV
    Keizergracht 482,
    1017EG Amsterdam
    Netherlands

    Contact details of our compliance department responsible for data processing:
    Trinity Purchasing BV
    Keizergracht 482,
    1017EG Amsterdam
    Netherlands
    gdpr@aramark.com

  6. To the extent that the data processing activities relate to Avendra’s business in Germany, the following Avendra entity is the data controller:Trinity Hospitality Services GmbH
    Georg Glockstrasse 4
    40474 Düsseldorf
    Germany

    Contact details of our compliance department responsible for data processing:
    Trinity Hospitality Services GmbH
    Georg Glockstrasse 4
    40474 Düsseldorf
    Germany
    gdpr@aramark.com

What personal data is processed?

a) Data processed when visiting our website
The following data is automatically collected when you visit our website:

  • Name of retrieved website
  • Date and time of the retrieval
  • Amount of data transferred
  • Message about successful retrieval
  • Browser type/version
  • Operating system
  • Referrer URL (the previously visited page)
  • IP address
  • The requesting provider

b) Data processed when you contact us
You can also provide us with the following data if you contact us via the contact forms integrated on our website or by e-mail:

  • Your contact data (e.g. your name and e-mail address) in connection with the
  • content of your inquiry as you submit it to us

You are not obliged to provide us with the data listed in the aforementioned sections a) and b). Without this data, however, we are not able to provide you with the website with all its functions or to answer your contact request.

For what purpose and on what legal basis is the data processing carried out?

Insofar as data about access to the website and the server log files also includes personal data, we collect and process this data in our legitimate interest within the meaning of Art. 6(1) lit. f Data Protection Regulation (GDPR) (in order to operate and improve the website).

Avendra only uses log data to ensure the technical functionality and security of the website. However, Avendra reserves the right to check the log data retrospectively if there is a justified suspicion of unlawful use on the basis of concrete indications.

If you send us an inquiry about our offer via contact form or e-mail, we process your personal data for the purpose of carrying out pre-contractual measures within the meaning of Art. 6(1) lit. b GDPR (to be able to make you an offer and/or to answer your questions about our offer).

What are cookies and what types do we use?

Cookies are small files that enable specific, device-related information to be stored on your device (computer, smartphone or similar). They are used, among other things, to collect statistical data on website usage and to be able to analyze it for the purpose of improving the website.

You can control the use of cookies via our cookie banner. However, we would like to point out that the use and especially the user comfort of our website will be limited without cookies.

The following cookies are or may be used on our website:

1. Strictly Necessary Cookies
These cookies are used for the essential functions of our websites. They do not collect information about you that could be used for marketing purposes and do not remember where you have been on the internet. This category of cookies cannot be deactivated, as this would impair the function of our website. The following strictly necessary cookies are used:

ProviderNamePurposeValidity Period
trinitypurchasing.comOptanonAlertBoxClosedThis cookie is set by websites using certain versions of the cookie law compliance solution from OneTrust. It is set after visitors have seen a cookie information notice and in some cases only when they actively close the notice down. It enables the website not to show the message more than once to a user. 1 year
trinitypurchasing.comOptanonConsentThis cookie is set by the cookie compliance solution from OneTrust. It stores information about the categories of cookies the site uses and whether visitors have given or withdrawn consent for the use of each category. This enables site owners to prevent cookies in each category from being set in the users browser, when consent is not given. The cookie has a normal lifespan of one year, so that returning visitors to the site will have their preferences remembered.1 year

2. Performance Cookies
These cookies allow us to gain insight into various categories of information about visitors to our websites. This information is used to improve the functionality of our website. We may also use third-party analytics tools such as Adobe Analytics to measure traffic and usage trends and understand our users’ audience. The following performance cookies are used:

ProviderNamePurposeValidity Period
trinitypurchasing.com__hssrcThis cookie name is associated with websites built on the HubSpot platform. It is reported by them as being used for website analytics.1 year
trinitypurchasing.com_gaThis cookie name is associated with Google Universal Analytics – which is a significant update to Google’s more commonly used analytics service. This cookie is used to distinguish unique users by assigning a randomly generated number as a client identifier. It is included in each page request in a site and used to calculate visitor, session and campaign data for the sites analytics reports. By default it is set to expire after 2 years, although this is customisable by website owners._ga1 year
trinitypurchasing.com_ga_xxxxxxxxxxNAUsed by Google Analytics to identify and track an individual session with your device.1 year
trinitypurchasing.com__hstcThis cookie name is associated with websites built on the HubSpot platform. It is reported by them as being used for website analytics.5 months
trinitypurchasing.com__hsscThis cookie name is associated with websites built on the HubSpot platform. It is reported by them as being used for website analytics.a few seconds
trinitypurchasing.com_gidThis cookie name is associated with Google Universal Analytics. This appears to be a new cookie and as of Spring 2017 no information is available from Google. It appears to store and update a unique value for each page visited._gida few seconds
trinitypurchasing.com_gat_UA-This is a pattern type cookie set by Google Analytics, where the pattern element on the name contains the unique identity number of the account or website it relates to. It appears to be a variation of the _gat cookie which is used to limit the amount of data recorded by Google on high traffic volume websites.a few seconds

3. Advertising Cookies:
These cookies are 3rd party cookies used to personalize the ads displayed on our websites or by us on other websites. This information allows us to better tailor our offers to you, either through ads that better suit your needs or to prevent repeated ads that you may not want. The following advertising cookies are used:

ProviderNamePurposeValidity Period
hubspot.com_cfuvidThis domain is owned by Hubspot. This company provides a range of online marketing and sales technology and services.1 year
hsforms.com_cfuvidThis domain is owned by Hubspot. The company provides a range of online marketing and sales technology and services.1 year
youtube.comVISITOR_INFO1_LIVEThis cookie is used as a unique identifier to track viewing of videos6 months
youtube.comYSCYouTube is a Google owned platform for hosting and sharing videos. YouTube collects user data through videos embedded in websites, which is aggregated with profile data from other Google services in order to display targeted advertising to web visitors across a broad range of their own and other websites.Session
youtube.comVISITOR_PRIVACY_METADATAYouTube is a Google owned platform for hosting and sharing videos. YouTube collects user data through videos embedded in websites, which is aggregated with profile data from other Google services in order to display targeted advertising to web visitors across a broad range of their own and other websites.5 months
hsforms.com__cf_bmThis is a CloudFoundry cookiea few seconds
hubspot.com__cf_bmThis is a CloudFoundry cookiea few seconds

We use non-essential function, performance and advertising cookies only with your consent (Art. 6(1) lit. a GDPR), which you can give when you first visit the website using our cookie banner. Subsequent adjustments and changes to your cookie settings are possible at any time via the cookie banner.

With regard to the use of cookies that are absolutely necessary and any data processing that takes place in this context, the legal basis is our legitimate interest in providing you with a functioning website (Art. 6(1) lit. f GDPR).

Adobe Analytics

This website also uses Adobe Analytics, a web analytics service provided by Adobe Systems Software. By using the Adobe Analytics web analysis tool, we measure the reach and use of our website to improve its design, functionality and offer.  In addition to data on usage and click behavior (including visitor origin, page views, length of stay per page), information about the content accessed and the type of browser and device used is also stored. Cookies are also used (please see “What are cookies and what types do we use?”).

We only use this cookie-based service on our website with your prior consent. You can give this consent either on your first visit via the consent banner or at any time in the cookie settings and adjust or revoke it with effect for the future.

The data stored by Adobe Analytics will be deleted as soon as you withdraw your consent or the data is no longer needed for the above-mentioned purposes. This is the case after 24 months at the latest.

Further information on the purpose and scope of data collection and its processing by Adobe as well as your rights and setting options to protect your privacy can be found here: https://www.adobe.com/privacy.html

To whom do we transfer your personal data and where are these recipients located?

As part of the provision of our website, we work with IT service providers who support us in the creation, operation and further development of the website and keep the website and its content stored on their servers. Furthermore, we use the tool of an IT service provider to analyze pseudonymous usage data (for more information on how we analyze usage data, see the section “What are cookies and what types do we use?“). The service providers we use in connection with the provision and operation of our website process personal data of the website users shared with them for this purpose as our data processor within the meaning of Art. 4(8) GDPR. We have therefore concluded data processing agreements with the service providers to protect your data.

Some of the aforementioned service providers with whom we cooperate are located in countries outside the European Economic Area (EEA), so that a so-called data transfer of your personal data takes place. Some of the service providers are located in countries whose laws do not guarantee a level of data protection comparable to the European data protection laws, this applies in particular to the United States of America (USA). In the event of a data transfer to such a country, we take additional appropriate safeguards to ensure the protection of your personal data, e.g. by agreeing the Standard Contractual Clauses of the European Commission with the respective service providers. If you would like more information on this, in particular a copy of the safeguards we use, please contact us at gdpr@aramark.com

How long do we store personal data?

We store your personal data for as long as is necessary for the purposes for which it was collected. The retention or storage periods result from business requirements and relevant laws.

Stored personal data will be deleted if you revoke any consent you have given us to process it, if the data is no longer necessary for the fulfillment of the purpose for which it was processed, or if its processing is inadmissible for other legal reasons.

Your rights as a data subject

As a data subject of our data processing, you have certain rights, which we inform you about below:

(a) Right of access: You have the right to request a copy of the personal data collected about you.

(b) Right to rectification: You have the right to request that inaccurate personal data concerning you be completed or rectified if it is inaccurate or incomplete.

(c) Right to erasure: If certain grounds exist (e.g., the data is no longer necessary for the purposes for which it was collected), you may request the erasure of data relating to you.

(d) Revocation of consent: If we have obtained your consent to process your personal data in relation to a specific data processing process, you may revoke this consent for the future and prevent further data processing, unless another legal ground for permission is relevant. This right of revocation does not affect data that we process for other legal reasons. Your revocation does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.

(e) Right to restrict processing: You may request the restriction of the processing of certain personal data for the duration of a complaint procedure or for specific other reasons.

(f) Right to data portability: You may request that we electronically transfer your personal data that you have provided to us and which we still hold to another data controller.

(g) Right to lodge a complaint: You may also lodge a complaint with the competent data protection authority if you believe that the processing of your personal data violates data protection laws. You can find your data protection regulator here.

Please note that there are exceptions to the above rights and that you may not be able to exercise them fully in every situation.

Up-to-dateness of this privacy notice

Avendra reserves the right to modify this privacy notice at any time and with future effect. It is therefore recommended that you read this privacy notice again at regular intervals.

Get Started

We are here to support you!

Our experienced teams work carefully to best identify the requirements of each business and location.

Meet our team of experts

Industries We Support

Testimonials

We’re here to serve you, let’s get started!

Get in Touch