Your data and your rights

SAINT-GOBAIN GROUP PRIVACY POLICY

WHAT IS THIS

At Saint-Gobain, privacy is a serious matter and we are committed to protecting it.

In accordance with the General Data Protection Regulation (“GDPR”), this policy explains when, why and how companies in our group governed by this Regulation:

  • collect personal data about individuals;
  • use this information;
  • disclose this kind of data to others, when this is necessary and under certain conditions;
  • keep secure and confidential this personal data.

WHAT ARE THE POLICY CHANGES

This policy may evolve over time so please check the date on this page to make sure that you have the latest version.

This policy was last updated on 17th of May 2018.

WHO WE ARE

The Saint-Gobain group (hereafter the “Group”) is made up of numerous individual companies. Whenever dealing with one of our Group companies (hereafter the “Company”), the “controller” of your personal data will be the Company that decides why and how your personal data is processed.

Where this policy refers to “we”, “our” or “us” below, unless mentioned otherwise, this refers to the particular Company that is the controller of your personal data.

HOW AND WHAT PERSONAL INFORMATION IS COLLECTED

We may collect and process the following personal data:

Personal data you give to us: this is information about you that you give to us, entirely voluntarily, by entering information via:

  • one of our websites;
  • our mobile applications;
  • social media platforms;
  • corresponding with us by phone, email or otherwise.
  • IP address

Example: this includes information provided at the time of registering to use our websites, subscribing to the services we provide through our websites, posting material or requesting further services, managing your account online (including accessing documentation and engaging in correspondence with us by phone, email or otherwise). We may also ask you for information when you report a problem with our websites. If you complete any surveys requested for research purposes, we will collect information in such circumstances as well.

The information you give us may relate to your identification, such as your name, address, email address and phone number, or enquiry details, and may include records of any correspondence and responses to any surveys.

Personal data we collect about you: we may automatically collect the following information:

  • details of transactions you carry out through the websites, and your visits to our websites, including, but not limited to, traffic data, location data, weblogs and other communication data, and the resources you access;
  • technical information, automatically collected, including anonymous data collected by the hosting server for statistical purposes, the Internet protocol (IP) address used to connect your computer or device to the Internet, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform. Please see cookies for further information;
  • any personal data which you allow to be shared that is part of your public profile or third party social network.

Personal data we may receive from other sources: we obtain certain personal data about you from sources outside our business which may include our Group companies or other third party companies.

The remaining provisions of this policy also apply to any personal data we obtain from these sources.

WHY AND HOW WE USE YOUR PERSONAL DATA

We process your personal data lawfully for:

  • the purpose of handling communication and exchange of information with our websites users;
  • the purpose of managing our customer/prospect relations; notably when processing your orders, responding to your requests or by regularly sending you news and information on our products, our brands or our initiatives that might arouse your interest;
  • any other specific purpose indicated at the time of collecting the information.
  • To provide you with relevant contact information based on your IP Address from which we derive your approximate country.

We may use and process your personal data principally:

  • where you have provided freely given and explicit CONSENT and for specific, determined and legitimate purposes. You may withdraw your consent for us to use your information by contacting us at any time.
  • where it is necessary for us to pursue our LEGITIMATE INTERESTS as a business, provided that your interests or your fundamental rights and freedoms are not overriding, taking into consideration your reasonable expectations, based on your relationship with us. For example, for the following purposes:
    • direct marketing activities (other than where we rely on your consent) as analysis to inform our marketing strategy, and to enhance and personalise your user experience;
    • assess and improve our service to customers through recordings of any calls with our contact centres;
    • detection, prevention and mitigation of fraudulent or other illegal activities;
    • network and information security in order for us to take steps to protect your information against loss or damage, theft or unauthorised access.
  • where it is necessary for us to COMPLY WITH A LEGAL OBLIGATION and notably:
    • to assist a public authority or criminal investigation body;
    • to identify you when you contact us under certain legal circumstances;
    • to verify the accuracy of data we hold about you.
  • where it is required for the PERFORMANCE OF A CONTRACT we have with you, or because you have asked us to take specific steps before entering into a contract. This will include information that we process in order to enable you to make use of our website and the services we provide through it.

WHO MAY RECEIVE OR HAVE ACCESS TO YOUR PERSONAL DATA

Group companies

We may share your information with other Companies within the Saint Gobain group for internal administrative purposes or for marketing purposes in connection with the products and/or services that complement their own range of products and/or services that might interest you.

We may also transmit your personal data when we redirect your request to our contacts within the Group who are able to handle your request (for example, to solve a problem you have reported to us).

Our suppliers and service providers

We may disclose your information to our third party service providers, agents, subcontractors and other organisations for the purposes of providing services to us or directly to you on our behalf. Such third parties may include cloud service providers (such as hosting and email management) or advertising agencies, administrative services, credit reference agencies, credit/debit card payment processors, customer satisfaction surveys or other third parties who provide services to us and assist us in the operation of our business and website.

When we use third party service providers, we only disclose personal data that is necessary for them to provide their service and we have a contract in place that requires them to keep your information secure and confidential, and not to use it other than in accordance with our specific instructions.

Third parties who provide products and services to you through us

We work closely with various third parties to bring you a range of products and services which are complementary to those which we provide. In particular, we may offer finance or insurance products in relation to our own products and services.

When you enquire about or purchase one or more of these products or services through us, the relevant third party may use your details to provide you with information and to carry out their obligations arising from any contracts you have entered into with them.

These third party product providers may share your information with us which we will use in accordance with this policy. In some cases, they will be acting as a controller of your information and therefore we advise you to read their own privacy policy.

Other ways we may share your personal data

We may transfer your personal data:

  • to a third party as part of a sale of some or all of our business assets to any third party or as part of any business restructuring or reorganisation;
  • if we are under a duty to disclose or share it in order to comply with any legal obligation or when this disclosure is required by applicable laws, court orders or government regulations, to detect or report a crime, to enforce or apply the terms of our contracts or to protect the rights, property or safety of our visitors and customers;
  • to enforce applicable terms of use, to protect the rights, privacy, safety or property of our companies;
  • if you have consented to the disclosure.

However, we will always take steps to ensure that your privacy rights continue to be protected.

WHERE WE STORE YOUR PERSONAL DATA

Your information is stored either in our databases or in the databases of our service providers. Mainly because of the international dimension of the Saint-Gobain group and in order to optimize service quality, the information you provide to us may be transferred to countries outside the European Economic Area (EEA).

In such cases, we will take to the appropriate security and confidentiality measures to ensure that your privacy rights continue to be protected as outlined in this policy. These steps include imposing contractual obligations on the recipient of your personal data or ensuring that the recipients have subscribed to “international frameworks” that aim to ensure adequate protection.

HOW LONG WE KEEP YOUR PERSONAL DATA

We retain your personal data for a period of time necessary to achieve the purpose for which we use that information and to fulfil our obligations under other laws. Except in specific cases, this period is specified at the time the information is collected.

We do not retain personal data in an identifiable format for longer than is necessary.

WHAT ARE YOUR RIGHTS

Subject to applicable law and certain exemptions, restrictions or circumstances, you may have the right:

  • to access your personal data;
  • to correct, modify and update your personal data;
  • to erase your personal data or restrict its processing;
  • to withdraw your consent;
  • to object to our use of your personal data for automated decisions made about you;
  • to ask us to transfer your personal data in a structured data file to you or to another service provider if it is technically possible (data portability);
  • to lodge a complaint with the competent supervisory authority and seek a judicial remedy.

These rights may be exercised by written request sent to the contact details that will be provided to you at the time of data collection. A reply will be provided to you within a reasonable delay, in accordance with the applicable regulations.

HOW WE ENSURE SECURITY AND CONFIDENTIALITY OF YOUR DATA

Our aim is to keep your data as safe and secure as possible at all times. Once we have received your personal data, we put in place reasonable and appropriate technical and organisational measures and controls to prevent as much as possible any accidental or unlawful destruction, loss, alteration, or unauthorised access.

RESPONSIBILITY AND LIABILITY

Compagnie de Saint-Gobain, owner of this Website, will on an ongoing basis use its best efforts to ensure the reliability of any and all information provided on this Website at the time it is displayed online, as well as while it is available online.

Compagnie de Saint-Gobain reserves the right to modify and/or rectify the content of the information and documents published on this Website at any time, without notice.

Compagnie de Saint-Gobain (as well as any other Saint-Gobain Group Entity) may not be held liable for errors or omissions in the information disseminated or technical problems encountered on the Website and on all the other sites to which it establishes links, or any interpretation of the information published on these sites, or the consequences of their use.

More generally, Compagnie de Saint-Gobain (as well as any other Saint-Gobain Group Entity) shall not be liable for any and all damage, direct or indirect, whatever the cause, origin, nature or consequence, caused by the access of anyone to the Website or the impossibility of accessing it, or by the use of the Website and/or the credit given to any information available directly or indirectly from this Website as well as any website to which the Website refers or establishes a link.

INTELLECTUAL PROPERTY

Unless otherwise stated, the intellectual property rights in the documents on the Website and in each element created for this Website are exclusively owned by Compagnie de Saint-Gobain and/or the Saint-Gobain Group Entities, which grant no license or right other than the rights to visit and navigate on the Website. The reproduction of all documents published on the Website (notably, the photographs, films and animations) is solely authorized for information purposes, and only for personal and private use, any reproduction and any use of copies made for other purposes being expressively prohibited, except with the prior written permission of Compagnie de Saint-Gobain. The corporate names, logos, products, brands and domain names mentioned on this Website are the sole property of Compagnie de Saint-Gobain and/or the Saint-Gobain Group Entities, and shall not be used without the prior and written authorization from the company or entity concerned.


HOW COOKIES WORK

Like many other websites, our websites use cookies (including Google Analytics cookies) to obtain an overall view of the volumes and the habits of our visitors on our websites.

“Cookies” are small pieces of information sent to your device and stored on its hard drive to allow our website to recognise you when you visit.

It is possible to switch off cookies by setting your browser preferences. For more information on how we use cookies and how to switch them off on your device, please visit the applicable cookies policy of the concerned website.

Cookies of third parties placed on cultilene.com

Google Analytics

Cookie: Google Analytics
Function: analytical cookie measuring website visits
Retention period: 2 years

See here for more information about Google Analytics and the cookies used: https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage.

Cultilene uses Google Analytics to gain insight regarding, for instance, visitor flows, traffic sources and page views on our website. This means that Google acts as an adapter in the processing of personal details by Cultilene .

Google will never process your entire IP address and protects your anonymity as much as possible. Cultilene , for example, cannot identify individual visitors paying a visit to our website.

Google can only provide your information to third parties in case the company is legally required to do so, or insofar third parties process the information on behalf of Google. For more information, go to Google’s Privacy Policy.

To find out which settings are used by Google with regard to (personalised) adverts, you can consult https://adssettings.google.com/authenticated.

Google Maps

Cookie: Google Maps Cookie

Function: functional cookie

Retention period: 2 years

See here for more information about Google Maps and the cookies used:

https://policies.google.com/privacy.

On our website, Google Maps is being used on some of our pages. Google can make use of cookies here as well, to store user preferences concerning the last selected location.

CONTACT US

Please direct any queries about this policy to our Data Protection Officer using our contact details below.

If you wish to write to us, please write to Ericssonstraat 2, NL-5121 ML Rijen | P.O. Box 10190, NL-5000 JD Tilburg.

Our email address for data protection queries is privacycultilene@saint-gobain.com.

Keep up to date

Nieuwsbrief

  • Hidden