Introduction
This notice is in addition to and therefore forms part of the Privacy and Disclaimer Notice for those that reside in jurisdictions where the General Data Protection Regulation (GDPR) Regulation (EU) 2016/679 applies for processing of personal data, free movement of such data and repealing Directive 95/46/EC in the European Economic Area (EEA). Notwithstanding the above, as applicability of GDPR becomes more inclusive, this Notice shall represent GDPR protection and privacy requirements “in principle”, regulations or directives that may apply.
Policy Objectives and Examples
Data Collection and Purposes of Processing
Personal Data gathered through cookies is at the sole discretion of a visitor’s browser settings. You can set your browser to not accept cookies, and in a few cases, some of our website features may not function as a result. When you voluntarily accept cookies from Plasman.com, you agree and consent to their use for:
• Functionality – We use these cookies so that we recognize you on our website and remember your previously selected preferences. These could include what language you prefer and location you are in. A mix of first-party and third-party cookies are used,
• Advertising – Plasman uses these cookies to collect information about your visit to our website, the content you viewed, the links you followed and information about your browser, device, and your IP address.
Other Personal Data provided voluntarily by visitors for the purpose of employment opportunities, receiving additional information or registering for a service or event entered in web forms are used only to respond to and process these requests.
Lawful Basis for Processing and Balance of Interest
Generally, we process personal information provided by visitors through our website on the basis of consent, and a legitimate purpose is needed from Plasman to process any Personal Data. Plasman may also process personal information on other bases permitted by the GDPR and applicable laws, rules and prescripts such as may be necessary when processing is necessary for us to comply with our legal obligations. We assess whether the purpose is legitimate based on the advantages (including safety) for you and the general public. When the purpose is more important than protecting your privacy, such as at the request of a court or a requirement of legislation, we can process some of your Personal Data without your explicit consent.
Third Party Consent Requirements
When visiting our website and dependent upon how you have your web browser configured, information collected as a result of your visit may be shared with third parties and Plasman does not guarantee how any third party handles your personal data in a reliable or secure manner. Whereas Plasman Privacy Policy defines Public, Confidential and Highly Confidential data classifications, these third parties may define your personal identifiable information or otherwise private and confidential information differently. We require that you review the privacy statements and policies of any third parties interacting with our website, and if required grant your expressed consent before providing personal information, as Plasman assumes no rights, responsibilities, or liabilities whatsoever, as a result of interactions with third parties from your visit to Plasman.com. If you have questions regarding the use of your personal data by a particular third party, please contact the third party directly.
Categories of Personal Information
We process the following information when provided voluntarily by our website visitors: name, business title, name of employer, email address (business e-mail address preferred), postal address and/or country, and telephone number (again, business number preferred).
Use and Access to Your Personal Information
We strive to only process Personal Data that are sufficient, relevant, and not to extensive in relation to the purpose, such as name, address, phone number, personal ID number, etc. Once a year you have the right to demand and obtain information free of charge regarding (i) what Personal Data we process about you, (ii) where the personal data is stored, (iii) the purpose of the process and (iv) whom can access the Personal Data. Such a request must be made in writing and be signed by you personally and include your name, address and preferably your email. You also have the right to demand us to correct, block or remove any incorrect information about you. We will do our utmost to make sure your request is handled quickly and correctly. For any demand to remove Personal Data, applicable requirements apply according to law. When applicable law leads to an administrative fee to fulfill such demand, Plasman may charge you for that fee.
Information Regarding the Transfers of Personal Data Outside of the European Economic Area (EEA)
Plasman’s global headquarters are based in Canada, and that’s where most of the personal information collected through our website is processed. We also have head offices for Sales and Engineering in Gothenburg, Sweden, as well as facilities in more than 11 countries (see http://plasman.com). When you provide personal information to us, we generally have a necessary business purpose to share your information that you have provided voluntarily, or otherwise, with your expressed consent to a third party. Countries such as Canada and the USA, where we have bonified purposes to transfer information, do not have an adequacy decision from the European Commission about whether the laws of the country provide adequate protection for personal information. Although these countries do not provide legal protection that is equivalent to EU data protection laws, we safeguard your personal information by treating it in accordance with this GDPR Privacy Notice. We take appropriate steps to protect your privacy and implement industry standard, reasonable security measures to protect your personal information both in transmission and at rest (in storage). We also enter into contracts with our data processors that require them to treat personal information in a manner that is consistent with this Notice.
Retention Period and Storage for Personal Information
How long we retain personal information varies according to the type of information in question and the purpose for which it is used. Plasman strives to take necessary technical and organizational measures to protect your Personal Data from accidental or illegal destruction, accidental loss or alteration, unauthorized disclosure or access and all other illegal forms of treatment. We strive to ensure that the level of confidentiality and measures taken to protect your personal information are adequate in relation to the risks that exist due to the characteristics and processing of your Personal Data.
We delete personal information within a reasonable period after we no longer need to use it for the purpose for which it was collected (or for any subsequent purpose that is compatible with the original purpose). This does not affect your right to request that we delete your personal data before the end of its retention period. We may archive personal data (which means storing it in inactive files) for a certain period prior to its final deletion, as part of our ordinary business continuity procedures. Plasman securely stores your data in an industry standard and secure data center, located primarily in the United States. All data are stored in encrypted form in back-ups, which are necessary to support availability plan disaster recovery requirements that requires a business purpose for access to the data, or in an industry standard secure data center designed to implement appropriate technical and organizational security measures to protect personal data against unlawful destruction or accidental loss, alteration, unauthorized disclosure or access. In most cases, Plasman will keep your confidential or highly confidential data if it is provided by you and hosted by Plasman subject to applicable law and your expressed consent. Once time periods have legally expired, we will delete your data by ensuring that it is no longer assessable in a readable form.
Your Rights to Access
You have the right to request access to your personal data, to have your personal data corrected, restricted, or deleted, and to object to our processing of your personal data. You also have the right of data portability, which means that you can request that we provide you (or a third party you designate) with a transferable copy of personal information that you have provided to us. Your rights may be subject to various limitations under the GDPR. If you wish to exercise any of these rights, or if you have any concerns about our processing of your personal data, please contact us in any of the ways listed in the section “Contact Information” in our general Privacy and Disclaimer Notice.
The Right to Lodge a Complaint
You have the right to file a complaint concerning our processing of your personal data with your national (or in some countries, regional) data protection authority. Please check with your local supervisory authority before lodging a complaint.
Contact Information
If you have any questions, comments, or complaints concerning our privacy practices please contact us at https://plasman.com/contact-us/. We will attempt to respond to your requests and to provide you with additional privacy-related information.
Definitions
“Personal Data Controller” means the physical or legal person, authority, institution or other which alone or together with others determines the purposes and means of processing personal data. For avoidance of doubt, the Personal Data Controller referred to herein shall be the Plasman group of companies (collectively “Plasman”), where the Plasman General Counsel, as Chair of the Plasman Privacy Committee, serves as the lead contact for all privacy related matters (see “Contact Information” below).
“Personal Data” means any information relating to an identified or identifiable physical person (the registered). An identifiable person is a person who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to his/her physical, physiological, psychological, economic, cultural or social identity. In accordance with Plasman Privacy Policy defined Public, Confidential or Highly Confidential data classifications, your personal private and otherwise confidential information is minimally regarded as Confidential by Plasman, unless selected attributes or certain data are identified as Highly Confidential, in which case Plasman shall process these data as Highly Confidential information.
“Processing” means any action or series of actions taken regarding personal data, whether automatic or not, for example, collection, registration, organization, storage, processing or modification, recovery, collection, use, disclosure by transmission, dissemination or other provision of data, compilation or interconnection, blocking, deletion, or destruction.