- Contact Details of the Controller
- Data Collection, Processing and Purposes of use
- Legal Bases of Processing
- Third Parties
- Your Rights
- Data Transfer to Third Countries
- Automated decision-making, including profiling
- Deletion Process
- Contact Details of the Data Protection Officer
- External References & Links
CONTACT DETAILS OF THE CONTROLLER
You will find the respective Controller for each specific part of our website in the respective Imprint .
For data processing regarding marketing, sales and customer relations, as well as market-specific services in the individual markets, the respective national sales company of Brenntag are generally responsible. You can get in contact with them by using the contact details of your Brenntag business contact person.
DATA COLLECTION, PROCESSING AND PURPOSES OF USE
When we do business with you or the company you work for, we collect and use your information as described in this policy. If not mentioned otherwise, we have received your data from you directly, your employer or from publicly available sources. We have set out below a description of the ways we use your personal data and for which purposes we process your data.
Brenntag Connect Portal
For entering the Brenntag Connect Portal, we process the registration data (title, name, email address, company name) for the establishment and implementation of your membership, the creation of your member account, the provision of our services and for contacting you, if and to the extent necessary for the aforementioned purposes. After entering your required data, you will receive an email from us to the email address provided and, by clicking on the link contained therein, you confirm that you have proper access authorization to the email address you provided in the registration form (double opt-in).
New Customer Contacts
We record your personal data to be able to provide you our services and products. We may collect and process data from you, such as your first and last name, business address, or business email address to execute the contract or your request. As we only do business with companies, we do only process your business contact details.
Order Delivery and Contract Fulfilment
To process and deliver your order in order to do business with you. This includes managing the payments, fees and charges, but also collecting and recovering money owed to us. In order to achieve this, we process your prename, surname, business contact details like e-mail and business address, financial, company bank account, and transaction information.
We want to maintain a good relationship with our potential or current customers, as well as all other business partners, suppliers and service providers we are working with or who are interested in our business. To manage this, we need to process your prename, surname, and business contact details like e-mail and business address and store it in our CRM system. We will also update our records constantly to be able to contact you.
Improving our Products and Services
In order to improve our products and services your experiences are of great value to us. We may therefore ask you to leave a review or to take a survey to study how customers use and experience our products/services. For this purpose, it is necessary to process your prename, surname, and business contact details like e-mail and business address.
Prize Draws and Competition
To enable you to partake in a prize draw or competition, we process your prename, surname, and business contact details like e-mail and business address.
If you want to receive a newsletter from us, we will add you to the respective mailing list in compliance with the applicable law . To be able to provide the newsletter we process your contact details, like prename, surname, and email address. The newsletter is subscribed by, and with the help of, a double opt-in process, so that we can make sure that you are the right recipient. Double opt-in means that after filling in our form for signing in for our newsletter we will send you an e-mail to the email address you filled in. You need to follow the link to complete your subscription. The time and IP address of your confirmation will be stored in order to prove that you did subscribe to the newsletter. With every email there is the possibility to opt-out of our mailing list as well, resulting in deletion of your personal data from our mailing list.
To serve personalized advertising to you, Brenntag does not share your information with advertisers without your consent. Brenntag allows advertisers to choose the characteristics of users who will see their advertisements, and Brenntag may use any of the non-personally identifiable attributes Brenntag has collected to select the appropriate audience for those advertisements. When you click on or otherwise interact with an advertisement, there is a possibility that the advertiser may place a cookie in your browser and that your attributes meet the criteria the advertiser selected.
Brenntag's web servers track of the pages visited on Brenntag's website, the amount of time spent on those pages and the types of searches done on them. This automatically captures and stores personal data (which is transmitted by the visitor’s internet browser or browsing activity), depending on the selection of privacy settings upon visiting Brenntag's website.
Personal data processing may take place following your preferences such as date and time of the server request, geolocation, type/version of Operating System, type/version of Browser, data transfer volume, screen resolution, accessed links and their status.
As a result, Brenntag also records the Internet Protocol (IP) addresses of visitors which is a unique number assigned dynamically assigned by Internet Service Providers (ISP) to every computer on the internet. This IP address may contain information that could be deemed identifiable.
Brenntag uses the information to prevent potentially illegal activities and to enforce our terms and conditions. Brenntag also uses a variety of technological systems to detect and address anomalous activity and to screen content to prevent abuse, such as spam. These efforts may, on occasion, result in a temporary or permanent suspension or termination of some functions for some users. Brenntag uses this information for statistical purposes to find out which pages users visit and what products and services are of interest or could be of value to Brenntag web servers’ visitors. We collect and process this data for the purpose of ensuring the security of this website. We delete or anonymize this kind of personal data automatically after 14 days.
LEGAL BASES OF PROCESSING
We have set out below a description of the lawful bases we rely on when we process your data. We have also identified what our legitimate interests are where appropriate. Note that we may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us if you need more details about a specific lawful ground.
- Insofar as you have given us your consent to process your data (e.g. participation in a survey, subscribing for newsletters), we process your data on the basis of this consent. Giving us your consent is always voluntarily. Furthermore, you may at any time withdraw your consent for future processing for that purpose. This has no influence on the lawfulness of processing activities in the past.
- If we process data in the context of initiating or fulfilling a contract with you, we process the data on the basis of this contract (e.g. employment contract).
- In case the processing of your personal data is necessary for the fulfilment of our legal obligations (e.g. for the retention of data), we are authorized to do so.
- We process personal data for the purposes of safeguarding our legitimate interests. We process your data in order to do business with you. Therefore, we need to process the data necessary to deliver our products, provide our services and recording our business contacts. In addition, we also process data in order to maintain the functionality of our websites and IT systems. data processing. We do not only consider these legitimate interests among others, but also various aspects to ensure the consideration of interests required in each case, such as the type and nature of personal data, the purpose of processing, the circumstances of processing and your interest in the confidentiality of your data.
Most web browsers are preset to automatically accept cookies. However, you may deactivate the creation and storage of cookies or set your web browser so that it notifies you as soon as cookies are intended to be sent. Please use the help function in the menu bar of your web browser or operating system for further guidance.
Please note that if cookies are deactivated, you may not be able to use the full functionality of our website.
Google will not associate your IP address with any other data held by Google. You may refuse the use of Google cookies by selecting the appropriate settings on your browser, see also Item 6 above. However, please note that if you do this, you may not be able to use the full functionality of this website. Furthermore, you can prevent Google’s collection and use of data (cookies and IP address) by downloading and installing the browser plug-in available under Google Analytics Opt-out .
You can prevent the capturing by Google Analytics by clicking on the following link. An opt-out cookie is set which prevents future collection of your data when you visit this website: Deactivate Google Analytics
Please note that this website initializes Google Analytics with the setting “gat._anonymizeIp();” to ensure anonymized capturing by masking the last part of your IP addresses (IP masking).
GOOGLE TAG MANAGER
This website uses the Google Tag Manager. Google Tag Manager is a solution that allows marketers to manage website tags from applications such as Google Analytics through a single surface/interface. The Tool Tag Manager itself (which implements the tags) is a cookie-free domain and does not collect any personal data. The tool triggers other tags, which in turn may collect data under certain circumstances. Google Tag Manager does not access this data. If deactivation has been made at domain or cookie level, such deactivation remains in effect for all tracking tags that are implemented with Google Tag Manager.
This website uses Hotjar, an analytics software provided Hotjar Ltd. (“Hotjar”) (http://www.hotjar.com, Level 2, St Julian's Business Centre, 3, Elia Zammit Street, St Julian's STJ 1000, Malta, Europe). Hotjar allows us to measure and observe the usage behavior (clicks, mouse movements, scroll heights, etc.) on our website. The information generated by the tracking code and cookie about your visit to our website is transmitted to and stored by Hotjar servers in Ireland. The tracking code collects the following information: device-specific data
The following information may be collected related to your device and browser:
- Device's IP address (captured and stored in an anonymized format);
- Device screen resolution;
- Device type (unique device identifiers), operating system, and browser type;
- Geographic location (country only);
- Preferred language used to display the Hotjar Enabled Site.
- Mouse events (movements, location and clicks)
- referring URL and domain;
- pages visited;
- geographic location (country only);
- preferred language used to display the webpage;
- date and time when website pages were accessed.
Hotjar will use this information to observe your use of our website, to generate usage reports and other services relating to website usage and internet analysis of the website. Hotjar also uses third party services, such as Google Analytics and Optimizely. These third parties may store information that your browser sends when you visit the Portal, such as cookies or IP requests. For more information on how Google Analytics and Optimizely store and use data, please refer to their respective privacy statements.
The cookies used by Hotjar have a different “lifetime”; some remain valid for up to 365 days, some remain valid only during the current visit.
You can prevent Hotjar from collecting your data by clicking on the following link and following the instructions there: Hotjar Opt-out .
This website uses the services of Auth0, a service provided by Auth0, Inc., 10900 NE 8th Street, Bellevue, WA 98004, USA to administer and observe the logins into our system. Data is transferred to the United States and processed there. Auth0 meets the requirements of the EU-US Privacy Shield framework, which regulates the collection, use, and storage of personal data of EU data subjects. Please also note Intercom's privacy .
Brenntag implements reasonable physical, technical and administrative security controls to protect your Personal Data against loss, misuse, unauthorized access, disclosure, alteration or destruction. Your data will be stored in a secure operating environment.
However, Brenntag cannot guarantee the security of information on or transmitted via the internet as it relies on the security of the system you have used in communication with Brenntag systems. Brenntag uses measures to enhance security, such as analyzing account behavior for fraudulent or otherwise anomalous behavior and Brenntag attempts to encrypt that information to protect against eavesdropping.
Brenntag may share the information collected with third parties for further processing to provide a safe, efficient and customized experience. Brenntag uses various ways to achieve this objective:
To the extent necessary to provide products, each entity of the affiliated Brenntag group may share your personal data within the affiliated group, but also with agents, contractors or partners of Brenntag in connection with services that these individuals or entities perform for or with Brenntag.
These agents, contractors or partners are restricted from using this data in any way other than to provide services for Brenntag, or for the collaboration in which they and Brenntag are engaged (e.g. some of our products are developed and marketed through joint agreements with other companies). Brenntag may, for example, provide your information to agents, contractors or partners for hosting our databases, data processing or mailing you information that you requested.
Where processing is to be carried out by agents, contractors or partners on behalf of Brenntag, the contractors provide sufficient guarantees to implement appropriate technical and organizational measures in such a manner that processing will meet the requirements of the data protection law.
In order to respond to legal requests and prevent harm Brenntag reserves the right to share your data to respond to duly authorized data requests of governmental authorities, or where required by law. Brenntag shall never sell your Personal Data to third parties, such as marketers, without your explicit consent. Brenntag do not provide any personal data to "people finder," "public directory" or "white pages" sites. The collection of personal data by — and the disclosure to — governmental institutions and authorities will be carried out only on the basis of specific legal provisions.
Brenntag shall honor your rights in accordance with legal obligations and subject to the exemptions defined in applicable laws and regulations.
These rights are:
- 1. Your right to access your Personal Data;
- 2. Your right to correct or amend or update your Personal Data;
- 3. Your right to be forgotten (right to erasure);
- 4. Your right to obtain Personal Data in a portable form (right to data portability);
- 5. Your right to restriction of processing, according to the regulation, and;
- 6. Your right not to be subject to a decision based solely on automated processing, including profiling.
- 7. Your right to withdraw your consent for future processing. This has no influence on the lawfulness of processing activities in the past.
You have the right to object to processing of your personal data for purposes of direct marketing without stating reasons. If we process your data on the basis of your consent, you can withdraw the consent at any time for future processing. If we process your personal data for the purposes of our legitimate interests, you may object to such processing for reasons arising from your particular situation. We will then no longer process your personal data, unless we can prove compelling reasons for processing worthy of protection. This might override your interests, rights and freedoms or the processing serves the enforcement, exercise or defense of legal claims.
These rights are not exhaustive and may depend on certain legal conditions and exceptions.
If you wish to exercise any of these rights, please contact the Group Data Protection Officer. We will respond to your request within 30 days after we received the request. You can find the contact details below. After we received the request, we will give you further instructions in order to verify your identity in an appropriate manner. We handle your personal data carefully and want to be certain that we are providing information to the right person.
Without prejudice to any other administrative or judicial remedy, every data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work, or place of the alleged infringement if the data subject considers that the processing of personal data relating to him or her infringes the law.
DATA TRANSFER TO THIRD COUNTRIES
Brenntag may disclose personal data to overseas recipients after complying with applicable privacy legislation. Brenntag may also store personal data in a 'cloud'. In cases when Brenntag needs to transmit your personal data, Brenntag shall preferably transmit your data only within countries of the European Economic Area (EEA) and to or from countries that provide adequate protection, as confirmed by the European Commission. For more information, see European Commission, "Commission Decisions on the Adequacy of the Protection of Personal Data in Third Countries."
In other cases, the transmission will be done preferably according to the requirements of applicable regulations with appropriate safeguards, and on condition that enforceable data subject rights and effective legal remedies for data subjects are available or for as long it is legally required. Finally, if these options were not possible, the data transfers we have to make will be in accordance to the provisions of Article 49 GDPR, for example with the explicit consent of the data subject.
AUTOMATED DECISION-MAKING, INCLUDING PROFILING
Your data is not automatically processed, including profiling in the meaning of Art. 4 ch. 4 and 22 GDPR.
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal accounting or reporting requirements or due to other legal storage obligations or to defend possible legal claims.
CONTACT DETAILS OF THE DATA PROTECTION OFFICER
Brenntag has appointed a Group Data Protection Officer who is located at the Headquarters in Germany together with an international Team of Local Data Protection Coordinators, thus you can get in contact in the language of the respective region. We remain available for your questions and remarks at any time.
If you have any questions regarding the processing of your personal data and possible related rights, you may contact the Group Data Protection Officer directly as per the below:
Group Data Protection Officer,
EXTERNAL REFERENCES & LINKS
Brenntag’s websites may have links to other sites that are owned and maintained by other organizations. These links are outside Brenntag scope yet are being provided as a convenience and for informational purposes only. They do not constitute any matter related to or sponsored by Brenntag services or opinions or organization or individual. Please contact the external site for answers to questions regarding its content and their privacy settings & policy.