Privacy policy
BAYROL DEUTSCHLAND GMBH - BAYROL FRANCE SAS - BAYROL IBERICA SL
KEY SUMMARY
This Privacy Notice applies to users of our website who submit general inquiries, complaints or comments by telephone, e-mail or mail and subscribe to our e-mail newsletter. We process your personal information solely for the purpose of responding to such inquiries and sending e-mail newsletters.
We use cookies that collect information about your use of the website to improve the content and usability of our website. For more information about our cookies, please see our Cookie Policy.
This Privacy Notice explains what data we process, why, the legality of this process and your rights.
About us and about this notice
This Privacy Notice is provided by BAYROL France SAS, BAYROL Deutschland GmbH and BAYROL Iberica SLU ("BAYROL" or "we"). We are a "controller" for the purposes of the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the Data Protection Act 2018 and any other national data protection and privacy legislation (collectively the "Data Protection Law").
We take your privacy very seriously. We ask that you read this Privacy Notice carefully, as it contains important information about our processing and your rights.
How to Contact Us
If you have any questions about this Privacy Notice, how we process your personal data or if you wish to exercise any of your rights, please contact: bayrolprivacy@bayrol.eu.
Changes to the Privacy Notice
We may change this Privacy Notice from time to time. We will alert you on the website when changes are made. Current version: [September 2020]
WHAT PERSONAL DATA DO WE COLLECT AND WHY?
Personal data provided by you
- Visitors only
If you are simply browsing our website, we will not collect any personal data.
- Information you submit
We process personal information about you (such as your name, address, e-mail address and telephone number and anything else you provide to us) when you contact us by telephone, e-mail or mail to respond to your inquiry.
We also collect personal information when you contact us, send us feedback or respond to surveys that we use to improve our services and products in the future.
Special categories of personal data Provided by you
We do not collect any special categories of personal data about you unless you choose to provide it to us.
HOW IS THE PROCESSING OF YOUR PERSONAL DATA LEGAL?
We are allowed to process your personal data on the following legal grounds:
Legitimate interest
It is in our legitimate interest to :
- respond to inquiries to serve our customers and provide product support;
- generate statistical data, to the extent that anonymized data ceases to be personal data;
- monitor the use of our website in order to improve it. To do this, we use aggregated data so that it does not affect your privacy; and
- provide information about our products and/or services to customers who have purchased similar products and/or services from us.
Please note that you have the right to object to the processing of your data in relation to the identified legitimate interests and that we must cease the relevant processing activities if we cannot demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.
Consent
We will only send you our newsletter by e-mail if you have given us your consent where necessary. You can withdraw this consent at any time.
WHO WILL HAVE ACCESS TO YOUR PERSONAL DATA?
Like any business, we use service providers to operate our website. Some of these service providers will process your data as part of the services they provide to us. We take steps to ensure that our service providers process your data in accordance with the law, use it only in accordance with our contract with them and keep it secure.
The following is a list of some of our major service providers acting as subcontractors who will have access to your personal data. If you wish to know the categories of our other service providers, please contact us using the details at the beginning of this Privacy Notice.
Processors
KIK Custom Products Inc - Computer System Support
We also share data with our affiliates (for the purpose of making strategic group decisions) and as necessary to enforce our legal rights, defend legal claims and, if required by law, disclose to courts, police, law enforcement or regulators.
Transfers of your information outside the European Economic Area ("EEA")
We need to transfer your data to the United States for KIK Custom Products Inc. to provide IT services to us. Any transfer of your data will be made in accordance with the law to protect your privacy rights and to provide you with recourse in the unlikely event of a security breach or other similar approved mechanism. In the case of the United States, we ensure that the company concerned has implemented appropriate safeguards. In the event that KIK Custom Products Inc. uses service providers based in other countries outside the EEA, we will ensure that the transfer of personal data is done in accordance with data protection laws using appropriate safeguards. If you would like to know more about how personal data is transferred and to obtain a copy of the documentation providing for such appropriate safeguards, please contact us using the contact details in the section entitled "How to Contact Us".
How we protect your data
We endeavour to implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, accidental loss or alteration, unauthorised disclosure or access and any other form of unlawful processing. We ensure that the level of security and measures adopted to protect your personal data are appropriate to the risks presented by the nature and use of your personal data. We follow accepted industry practices to protect our computing environment and physical facilities.
WHEN WILL WE DELETE YOUR DATA?
The table below provides details of how long we will process your data.
Data we process
How long it will be kept
Information from inquiries
Until the inquiry is completed and no further response is received for 3 years.
Email newsletter
3 years from your last purchase or other contact (or until you tell us you no longer wish to receive the e-mail newsletter).
Data relating to the exercise of the right to object to a data controller established in France.
6 to 7 years in the archives after the request has been answered or, in the event of an ongoing dispute at the end of this period for which this data is relevant, after its final settlement
Data relating to the exercise of other rights such as the right of access or rectification with a data controller established in France
1 to 2 years in the archives after the response to the request or, in the event of a dispute pending at the end of the period for which the data are relevant, after final settlement of the dispute
YOUR RIGHTS
As a data subject, you have the following legal rights:
- Right of access to your personal data
- Right to correct any errors in your information
- Right to ask us to stop contacting you with direct marketing
- Right to prevent the processing of your personal data in certain circumstances
- Right to object to the processing of your data where it is processed for legitimate interests
- Right to erasure in certain circumstances
- Right to withdraw consent
If you wish to exercise your rights, please contact us at the contact details listed above in the section entitled "How to contact us".
We will respond to any rights you exercise within one month of receiving your request, unless the request is particularly complex and/or we receive a large number of requests, in which case we will respond within three months.
Please note that there are exceptions to some of these rights which we will enforce in accordance with the law.
For users in France, in accordance with French data protection laws, you may write to us to tell us how to handle your personal information after your death.
What happens if your rights are violated?
You may be entitled to compensation for damages caused by non-compliance with Data Protection Laws.
Complaints to the regulator
If you believe that we have not processed your data in accordance with this Privacy Notice, you should inform us as soon as possible. You also have the right to complain to the competent supervisory authority in your country. Information on how to do this is available on the website of each supervisory authority as indicated below:
BfDI: www.bfdi.bund.de
CNIL: www.cnil.fr