Personal information is information relating to an identified or identifiable individual. This document covers information we collect about you.

Some of the key points of Onduline’s privacy statement are:

• We will never sell your data to third parties without your prior consent.
• We will make it easy for you to manage your information, and you can change your communication preferences at any time.
• We do use data to help us provide great customer service, which includes tailoring the information we share with you to help ensure that it’s relevant, useful and timely.

In the course of your dealings and interaction with Onduline we process personal information to allow us to complete our service and commitment to you as a customer.

The types of personal information we may process include, but are not limited to: 

• Identification data e.g. name.
• Contact details e.g. postal address, telephone/email, job title, company name, company type, your role.
• Project details e.g. project name, project address, project type, size of opportunity.
• Website usage data including your web visits and IP address
• Surveys you have completed.
• Any other personal information that you choose to provide to us when you complete our online contact forms or otherwise make contact with us.

Usually you will have provided the information we hold about you but there may be situations where we collect personal information from other sources. The following are the types of information we may collect about you and the source of the information:

• Project information supplied by third parties involved in projects that we are engaged on.

This data includes major project details and contact details of responsible person(s) for those projects.

• Your delivery address and contact details supplied by our direct customer base whom we are delivering on behalf of.
• Other group companies may pass your details onto us if you have contacted them by mistake for products that we manufacture.

We use your personal information as follows:

• To comply with our legal obligations;
• To investigate and respond to potential violations of law or of our website policies as well as to potential breaches of our or relevant third parties' systems and networks;
• To identify you and communicate with you;
• To keep internal records;
• To develop products and services; occasionally we may contact you with service and product surveys. We may contact your company and individuals within your company to complete a survey;
• To fulfil your requests and answer your queries or complaints;
• For market research and to assess marketing strategies and campaigns;
• If you already are a customer or other contact of ours, to update our information about our contact with you on our customer relationship management system;
• To deliver our own products and services to you; and
• To market our own products and services to you; through means such as newsletters and invitations to events.

We would like to provide you with information about Onduline’s products and services, and other information from Onduline, which we think you may find interesting. We may send you such information by post, email, and/or telephone if you agree we can or unless you have asked us not to do so (see below).

We do not provide your personal information to external organisations (i.e. to contractors, merchants, distributors and retailers, which are outside of Onduline) for their own direct marketing in relation to Onduline products and services without your explicit consent.

If at any time you do not want your information used for direct marketing purposes by an Onduline company, please contact the relevant Onduline company from which you have received marketing so that they can unsubscribe you from their marketing lists. If you have received email marketing from an Onduline company and decide that you no longer wish to receive marketing emails from them, you will be able to opt out of receiving further email marketing from them by following an unsubscribe link in the email, or by such other means as we may communicate to you, including but not limited to telephone and post.

In addition to the sharing of information mentioned above under section 4 (Marketing), we may share your personal information with third parties as follows: 

• in order for us to process payments that are due to us, in doing so we provide bank card details to such providers;
• to receive services from our providers such as our IT service providers and therefore may access or receive personal data in the context of providing services to us;
• to licensed credit reference agencies, debt collection agencies and lawyers when we carry out credit checks, to report on your payment performance and/or or seek to recover debts due to us;
• to our accountants, auditors, lawyers or similar advisers when we ask them to provide us with professional advice;
• to emergency services in the event that we need to report accidents or incidents or request emergency assistance or to other third parties where necessary to protect the vital interests of a person (for example they need urgent medical attention);
• to any Government Department, public body or other third party where we believe in good faith that the law requires this; in the interests of public health and safety; or in order to protect the rights, property, or safety of Onduline, its employees or others;
• with other third parties to comply with our legal obligations, including where necessary to abide by law, regulation or contract, or to respond to a court order, administrative or judicial process, or to meet national security or law enforcement requests, including, but not limited to, a subpoena or search warrant;
• as necessary to establish, exercise or defend against potential, threatened or actual litigation;
• in connection with the sale, assignment or other transfer or all or part of our business; and
• for the purpose of mutual business opportunities with others.

Our legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it.

However, we will normally collect personal information from you only where we have your consent to do so, where we need the personal information to perform a contract with you, or where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms.

In some cases, we may also have a legal obligation to collect personal information from you or may otherwise need the personal information to protect your vital interests or those of another person.

Mostly, however, we process contacts information for our legitimate business interests in the context of providing or receiving services to customer or from our service providers or in the case of partners, for the purpose of the collaboration or partnership. If we collect and use your personal information in reliance on anything other than our legitimate interests, we will make clear to you at the relevant time. For example, if we ask you to provide personal information to comply with a legal requirement or to perform a contract with you, we will make this clear at the relevant time and advise you whether the provision of your personal information is mandatory or not (as well as of the possible consequences if you do not provide your personal information).

If you have questions about or need further information concerning the legal basis on which we collect and use your personal information, please contact us using the contact details provided under the “Contact us” heading below.

We retain your personal information for no longer than is necessary for the purposes for which the personal information is collected, taking into account, but not limited to, any legal obligations and applicable tax and accounting requirements we have to retain data for certain periods of time and contractual obligations such as in order to fulfil warranty/product guarantee obligations.

Thereafter we will erase your information securely once it is no longer needed unless erasure is not possible (for example, because your personal information has been stored in backup archives), and in which case we will securely store your personal information and isolate it from any further processing until deletion is possible.

Onduline hold and share data with Onduline affiliates and relevant third parties who are compliant with our data policies.

Your personal information may be transferred to, and processed in, countries other than the country in which you are resident. These countries may have data protection laws that are different to the laws of your country.

We have taken appropriate safeguards to require that your personal information will remain protected in accordance with this Privacy Statement.

Onduline is part of a group of companies within the European Union. Insofar as Onduline is required, Onduline with comply with the requirements under the GDPR in respect of your personal information.

Onduline is committed to ensuring that your personal information is secure. In order to prevent unauthorised access or disclosure we have put in place suitable physical, electronic and managerial procedures where relevant to safeguard and secure the information we collect.

You have the right to be informed that we hold your personal data, the right of access to that data we hold, the right to rectification of any errors in that data, the right to erasure, sometimes referred to the right to be forgotten, the right to restrict how we process your data, the right to data portability and the right to object to how we process your data. You also have the right to opt out of marketing communications at any time.

These rights can be exercised at any time. They are not absolute and are subject to certain exceptions and/or qualifications.

If we have collected and process your personal information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.

You are also entitled to make a complaint to the Office of the Information Commissioner in your country.

You may also be entitled to make a complaint under the GDPR if that relates to data that is covered by that regulation. Such complaints can be directed to the information is Commissioner’s office in the relevant European country. For example the website for the information Commissioner’s website in France is https://www.cnil.fr/

If you do have any concerns about how we process your personal data you can also contact us using the contact details at the end of this Privacy Statement.

We review our privacy practices from time to time. We ask that you bookmark and periodically review this page for updates to our Privacy Statement.