At Saint-Gobain, privacy is a serious matter and we are committed to protecting it. In accordance with the General Data Protection Regulation (“GDPR”), this policy explains when, why and how companies in our group governed by this Regulation:
What are the policy changes
This policy may evolve over time so please check the date on this page to make sure that you have the latest version.This policy was last updated on 17th of May 2018.
Who we are
The Saint-Gobain group (hereafter the “Group”) is made up of numerous individual companies. Whenever dealing with one of our Group companies (hereafter the “Company”), the “controller” of your personal data will be the Company that decides why and how your personal data is processed.
Where this policy refers to “we”, “our” or “us” below, unless mentioned otherwise, this refers to the particular Company that is the controller of your personal data.
How and what personal information is collected
We may collect and process the following personal data:
Personal data you give to us: this is information about you that you give to us, entirely voluntarily, by entering information via:
Example: this includes information provided at the time of registering to use our websites, subscribing to the services we provide through our websites, posting material or requesting further services, managing your account online (including accessing documentation and engaging in correspondence with us by phone, email or otherwise). We may also ask you for information when you report a problem with our websites. If you complete any surveys requested for research purposes, we will collect information in such circumstances as well.
The information you give us may relate to your identification, such as your name, address, email address and phone number, or enquiry details, and may include records of any correspondence and responses to any surveys.
Personal data we collect about you: we may automatically collect the following information:
Personal data we may receive from other sources: we obtain certain personal data about you from sources outside our business which may include our Group companies or other third party companies.
The remaining provisions of this policy also apply to any personal data we obtain from these sources.
Why and how we use your personal data
We process your personal data lawfully for:
We may use and process your personal data principally:
For example, for the following purposes:
where it is required for the PERFORMANCE OF A CONTRACT we have with you, or because you have asked us to take specific steps before entering into a contract. This will include information that we process in order to enable you to make use of our website and the services we provide through it.
Who may receive or have access to your personal data
We may share your information with other Companies within the Saint Gobain group for internal administrative purposes or for marketing purposes in connection with the products and/or services that complement their own range of products and/or services that might interest you.
We may also transmit your personal data when we redirect your request to our contacts within the Group who are able to handle your request (for example, to solve a problem you have reported to us).
Our suppliers and service providers
We may disclose your information to our third party service providers, agents, subcontractors and other organisations for the purposes of providing services to us or directly to you on our behalf. Such third parties may include cloud service providers (such as hosting and email management) or advertising agencies, administrative services, credit reference agencies, credit/debit card payment processors, customer satisfaction surveys or other third parties who provide services to us and assist us in the operation of our business and website.
When we use third party service providers, we only disclose personal data that is necessary for them to provide their service and we have a contract in place that requires them to keep your information secure and confidential, and not to use it other than in accordance with our specific instructions.
Third parties who provide products and services to you through us
We work closely with various third parties to bring you a range of products and services which are complementary to those which we provide. In particular, we may offer finance or insurance products in relation to our own products and services.
When you enquire about or purchase one or more of these products or services through us, the relevant third party may use your details to provide you with information and to carry out their obligations arising from any contracts you have entered into with them.
Other ways we may share your personal data
We may transfer your personal data:
However, we will always take steps to ensure that your privacy rights continue to be protected.
Where we store your personal data
Your information is stored either in our databases or in the databases of our service providers. Mainly because of the international dimension of the Saint-Gobain group and in order to optimize service quality, the information you provide to us may be transferred to countries outside the European Economic Area (EEA).
In such cases, we will take to the appropriate security and confidentiality measures to ensure that your privacy rights continue to be protected as outlined in this policy. These steps include imposing contractual obligations on the recipient of your personal data or ensuring that the recipients have subscribed to “international frameworks” that aim to ensure adequate protection.
How long we keep your personal data
We retain your personal data for a period of time necessary to achieve the purpose for which we use that information and to fulfil our obligations under other laws. Except in specific cases, this period is specified at the time the information is collected.
We do not retain personal data in an identifiable format for longer than is necessary.
What are your rights
Subject to applicable law and certain exemptions, restrictions or circumstances, you may have the right:
These rights may be exercised by written request sent to the contact details that will be provided to you at the time of data collection. A reply will be provided to you within a reasonable delay, in accordance with the applicable regulations.
How we ensure security and confidentiality of your data
Our aim is to keep your data as safe and secure as possible at all times. Once we have received your personal data, we put in place reasonable and appropriate technical and organisational measures and controls to prevent as much as possible any accidental or unlawful destruction, loss, alteration, or unauthorised access.
How cookies work
“Cookies” are small pieces of information sent to your device and stored on its hard drive to allow our website to recognise you when you visit.
Please direct any queries about this policy to our Data Protection Officer using our contact details below. If you wish to write to us, please write to the address given at the start of the Legal Notice. Our email address for data protection queries is here.