Wavin Privacy Notice

Effective date: 30/11/2021

This is the Privacy Notice of Wavin B.V. (Stationsplein 3, 8000AD, Zwolle, the Netherlands) and its affiliates (hereinafter: “Wavin”, “we”, “our” or “us”).

This Privacy Notice (“Notice”) describes the basis on which we process your Personal Data when you purchase our products or services, visit our premises, use our applications (such as the Loyalty App and Sentio App), interact with us or otherwise make use of our services (such include webinars, training, tradeshows etc.) ("Services") or are a supplier of Wavin.

The Wavin entity that is responsible and acts as a “data controller” for the Personal Data collected in light of the provision of the Services, is the Wavin entity with whom you have concluded a contract, whose premises or website(s) you have visited or with whom you interacted in any other way. An overview of the applicable responsible Wavin entities and, where applicable, their representatives, can be found here

• Your personal information, including contact details. This includes your first and last name, title, gender, job title, company name, address, email address, telephone number and “myWavin” account information, including username (email address) and password. 
• Your contract/financial details. The contract and financial information that has been disclosed to us and can be linked to you as a customer representative, such as contract information, payment method, payments made or due (including invoice details), details of authorised persons(s) on the accounts, payment transaction reference, transaction data including transaction history, your authorisation by the company you represent and, if applicable, your identity document (passport or driver’s license).
• Recording of video footage. When you enter or buildings or premises, you are recorded by our video surveillance systems (CCTV). You can also be recorded on video footage during events or fairs that we organize and during which we make video footage. 
• Log of visitors at our premises. This includes first and last name, time of arrival and departure and, if applicable, vehicle registration number. 
• Your use of our Services. We collect information relating to your use of our Services, such as which purchases you make on behalf of your company, the amount and date of your purchase, the product or service you purchase, location of purchase, product usage, functional classification etc.
• Your picture. Where requested we collect your picture to identify you as customer representative. 
• Data collected automatically. When visiting our Website, we collect data automatically through your browser or device, by making use of cookies and other technologies to track visitors on the Website and to collect information about your use of our Website. Such information includes, an identifier that corresponds to your device, your IP address, information about the device you use (e.g. operating system, model, language setting), duration, frequency, time of use, click through information (the way you browse through and use our Website) and/or region.

Please read our cookie notice if you would like to know more about the cookies we place on our Website and to manage your cookie preferences.

• Your communication data. Your requests, any complaints you may have and any other (engagement) data that we receive if you communicate with us via e-mail, by telephone, online or via social media.

• Any other Personal Data. This includes any Personal Data that you disclose to us during the course of your contractual relationship with us, either voluntarily or upon request.

For the performance of our agreement with you: To carry out the agreement that we concluded or will conclude with you on behalf of your company and to provide you with the information and Services you request. For instance, we will need to process your Personal Data in order to deliver products and invoices, keep in contact with you, manage and handle requests, manage your “myWavin” account, provide (technical) support or customer service, facilitate webinars, training or tradeshows, provide essential information regarding the Services, etc. 

For our legitimate commercial interests: This includes the following: 

• to send (personalized) marketing (such as newsletters via email) to our existing customers for the purpose of advertising our products and services or otherwise engaging with our customers for marketing or commercial purposes (e.g. via email, telephone or hardcopy post), provided that you have not opted out.  

• to manage our internal client database (CRM) system, in order to keep track of our financials and Services. to personalize our Services, such including, online ordering, calculation tools, BIM content, e-learning, technical drawings and/or price lists. 

• to personalize our Services, such including, online ordering, calculation tools, BIM content, e-learning, technical drawings and/or price lists.
• to better understand you as a customer (customer optimization). This enables us to assess what may interest you, to measure or understand the effectiveness of advertising we serve you and others and to deliver relevant and targeted advertising (both on our own Website and on other websites (including social media)).  

• to operate and expand our business activities and Services. 

• to obtain feedback on our products and Services and develop and improve the quality of our Services (e.g. by conducting customer satisfaction surveys).

• to operate company policies and procedures, such as for training and learning purposes. 

• to ensure and protect the integrity, security and safety of our systems, buildings and premises. This includes the prevention of unauthorized persons from accessing our premises and protecting our facilities. 

• to enable us to make corporate transactions, such as mergers, sales, reorganizations, transfer of our assets or business or acquisitions.

• other legitimate business purposes permitted by applicable law. 

To the extent that we rely on our legitimate interests to use your Personal Data, you have the right to object to such use, and we must stop such processing unless we can either demonstrate compelling legitimate grounds for the use that override your interests, rights and freedoms or where we need to process the data for the establishment, exercise or defence of legal claims. Use of information based on your consent: We may use your Personal Data referred to above in the section ‘Personal Data we collect’ to send you marketing communications (such as newsletters, promotions, news on products or service updates) via email, other electronic means or telephone, subject to your consent (e.g. in light of our ne-wsletter subscription). 

We may also ask for your consent to process certain Personal Data for other specific purposes. If we do so, we will provide you with full details of the Personal Data that we would like to process and the reason we need it, so that you can carefully consider whether you wish to consent.

You can withdraw your consent at any time; see the Section 7 regarding Your rights below. To comply with our legal obligations: Any information referred to above in the section ‘Personal Data we collect' may be used to comply with a legal obligation to which we are subject, such as maintaining appropriate business records, complying with lawful requests by governmental agencies and public authorities and to comply with applicable laws and regulations or as otherwise required by law. 

• Other entities within the Wavin Group. we will share your Personal data internally between the responsible Wavin entities to the extent required for internal administrative purposes, management purposes or other business related purposes as described in this Notice. An overview of the relevant responsible Wavin entities can be found here

• Service Providers and Processors. We engage third party vendors, from time to time, including:   

• Business partners, suppliers (such as IT service providers) and sub-contractors for the performance of any contract we enter into with them or to provide services on our behalf; 

• Professional advisors (including without limitation tax, legal or other corporate advisors who provide professional services to us); 

• Financial institutions, mostly to carry out credit related investigations regarding our customers; 

• Telemarketing companies and other advertising companies that assist us or that carry out marketing activities on our behalf; and/or 

• Analytics and search engine providers that assist us in the improvement and optimisation of our Website and Services.   

In providing their services, they will access, receive, maintain or otherwise process Personal Data on our behalf. Our contracts with these third party vendors do not permit use of your Personal Data for their own (marketing) purposes. Consistent with applicable legal requirements, we take commercially reasonable steps to require third parties to adequately safeguard your Personal Data and only process it in accordance with our instructions. 

• Third parties in case of legal requirement. We also disclose your Personal Data if disclosure is required by law or in the context of an investigation, regulatory requirement, judicial proceeding, court order or legal process served on us, or to protect the rights or safety of the Website, us or our affiliated companies. 

• Third parties in case of a corporate transaction. In addition, information about our customers, including Personal Data, may be disclosed as part of any merger, sale, transfer of Wavin’s assets, acquisition, bankruptcy, or similar event. 

• With consent. We also disclose information about you, including Personal Data to any other third party, where you have consented or requested that we do so. 

Wavin will take all necessary measures to ensure that transfers out of your country are adequately protected as required by applicable data protection law. With respect to transfers to countries not providing an adequate level of data protection, Wavin may base the transfer on appropriate safeguards, such as the EU standard contractual clauses adopted by the European Commission or other approved data transfer or certification mechanisms together with binding and enforceable commitments of the recipient. In each instance, Wavin will review the transfer and ensure that any additional technical and organizational measures are put in place to ensure that an adequate level of protection is provided. You are entitled to receive a copy of any documentation showing the suitable safeguards that have been taken by making a request using the contact details provided in Section 10 below.

5. Security

Wavin will take reasonable steps to ensure that your Personal Data are properly secured using appropriate technical, physical, and organizational measures, so that they are protected against unauthorised or unlawful use, alteration, unauthorised access or disclosure, accidental or wrongful destruction, and loss.   

We take steps to limit access to your Personal Data to those persons who need to have access to it for one of the purposes listed in this Notice. Furthermore, we contractually ensure that any third party processing your Personal Data equally provide for confidentiality and integrity of your data in a secure way. 

6. Data Retention

7. Your Rights

• Right to access personal information  

You have a right to request that we provide you with a copy of your personal information that we hold and you have the right to be informed of; (a) the source of your personal information; (b) the purposes, legal basis and methods of processing; (c) the data controller’s identity; and (d) the entities or categories of entities to whom your personal information  may be transferred. 

• Right to rectify or erase personal information 

You have a right to request that we rectify inaccurate personal information. We may seek to verify the accuracy of the personal information  before rectifying it.  

  You can also request that we erase your personal information in limited circumstances where: 

• it is no longer needed for the purposes for which it was collected; or 
• you have withdrawn your consent (where the data processing was based on consent); or 
• following a successful right to object (see right to object); or 
• it has been processed unlawfully; or  

• to comply with a legal obligation to which the Company is subject. 

We are not required to comply with your request to erase personal information if the processing of your personal information is necessary: 

• for compliance with a legal obligation; or 
• for the establishment, exercise or defence of legal claims; 

• Right to restrict the processing of your personal information  

You can ask us to restrict your personal information, but only where: 

• its accuracy is contested, to allow us to verify its accuracy; or 
• the processing is unlawful, but you do not want it erased; or  

• it is no longer needed for the purposes for which it was collected, but we still need it to establish, exercise or defend legal claims; or 
• you have exercised the right to object, and verification of overriding grounds is pending. 

We can continue to use your personal information following a request for restriction, where: 

• we have your consent; or  

• to establish, exercise or defend legal claims; or 
• to protect the rights of another natural or legal person.  

• Right to data portability

You can ask us to provide your personal information to you in a structured, commonly used, machine readable format, or you can ask to have it transferred directly to another data controller, but in each case only where:

• the processing is based on your consent or on the performance of a contract with you; and 
• the processing is carried out by automated means.  

• Right to object to the processing of your personal information 

You can object to any processing of your personal information which has our legitimate interests as its legal basis, if you believe your fundamental rights and freedoms outweigh our legitimate interests.  

• If you raise an objection, we have an opportunity to demonstrate that we have compelling legitimate interests which override your rights and freedoms. Right to object to how we use your personal information for direct marketing purposes

You can request that we change the manner in which we contact you for marketing purposes. 

• You can request that we not transfer your personal information to unaffiliated third parties for the purposes of direct marketing or any other purposes. Right to obtain a copy of personal information safeguards used for transfers outside your jurisdiction 

You can ask to obtain a copy of, or reference to, the safeguards under which your personal information is transferred outside of the European Union.

We may redact data transfer agreements to protect commercial terms. 

• Right to withdraw consent 

In the event your Personal Data is processed on the basis of your consent, you can withdraw consent at any time by contacting us, using the contact details provided below, without affecting the lawfulness of processing based on consent before its withdrawal.  

Finally, if you are unsatisfied with how we process your Personal Data or if you believe that your data protection rights have been violated, you have the right to lodge a complaint with the supervisory authority in the country where you live or work or where you believe your rights have been infringed. 

If you have any questions or if you wish to exercise one of your rights under applicable local privacy laws or submit any objections regarding the processing of your Personal Data, please use the contact details provided in Section 10 below and specify your request.  

We will respond to your request as soon as possible and consistent with applicable law. If a request is denied, the reason for the denial will be communicated within such response.  

8. Other Websites

9. Changes to this notice

10. Contact us

Wavin Limited may also track certain information through the use of JavaScript code and website analytics providers, e.g., Google Analytics and Lead Forensics. In the case of Lead Forensics, this software identifies the IP address of the user visiting the Website and matches this to its database of companies and their IP addresses. The IP address does not identify the specific user within that company.

We will process your data for the purposes of marketing and optimization, products, and services with the help of Lead Forensics. Lead Forensics determines details of your organization, including Company name, business telephone number, web address, SIC code, and a company description. Lead Forensics shows the actual course of a site visit to this website, including all pages that you have visited and viewed and how long you have spent on this page. 

As far as IP addresses are collected, they are anonymized immediately after collection. On behalf of Wavin Limited, Lead Forensics will use the information collected to evaluate your visit to the website, compile reports on website activity, and to provide the website operator with other services related to website activity and internet usage. If you disagree, you can object to the collection, processing, and storage of data at any time with effect for the future by clicking on the following link: https://optout.leadforensics.com/?clientID=265549

Annex

Wavin Entities

• United Kingdom - WavinUK (Holdings)Ltd EdlingtonLaneEdlington, DONCASTER DN12 1BY UNITED KINGDOM - www.wavin.com/en-gb