Last update: September 2021

Sioen Industries NV is a company incorporated under Belgian law, with its registered office at Fabriekstraat 23, 8850 Ardooie, Belgium. This is the privacy policy of the websites of Sioen Industries NV and its subsidiaries (hereafter referred to as “Sioen” or “Sioen Group”) and governs the processing of your personal data by Sioen and its subsidiaries as part of your visit to our websites, webshops and all your communication with us by email, telephone, fax and social media (e.g. Facebook, LinkedIn, Twitter, …).

Sioen reserves the right to modify this privacy policy at all times. Such modification shall be communicated on our websites. The revision date of our Privacy Policy is mentioned on top of this article. This privacy notice should be read together with our cookie policy.

When does this Privacy Policy apply?
This privacy policy applies to the processing of personal data obtained through the websites and webshops of Sioen and your communication with us by email, telephone fax and/or social media.

Who is responsible for the processing of your personal data?
Sioen is the party responsible for the processing of your personal data. Sioen determines the purposes of the processing of your personal data and the means used to process your personal data.

---

Which types of personal data do we process about you?

Information provided by you
Automatically obtained information
Information obtained through purchases on our webshop.

1. Information provided by you

All of the personal data listed below, we obtain directly from you. When filling out a contact form on our websites or webshops or contacting us by e-mail, telephone, fax or social media channels, we collect:

• Basic personal identification data such as name, e-mail address, postal address, phone number, the company you work for, your position, billing information ;
• The content of your communication and the technical details of this communication ;
• Your preferences regarding receiving e-mail communication such as newsletters, promotions, advertisements, … in the event you have chosen to receive those types of communication ;
• Any other personal data you choose to provide us with.

2. Automatically obtained information

When browsing our website, we receive data from cookie providers about your activity on our website such as the time and duration of your visit, the hyperlinks that brought you to our website and the hyperlinks on our website that link to other websites, your IP address, the pages you visit, the browser you use, operating system, preferred dealers, geographical data such as your location and your preferred language.
We obtain this information by using cookies. More information about the use of cookies can be found in our cookie policy.

3. Information obtained through purchases on our webshops

When purchasing products from our webshops, we will collect personal data in order to process your orders, manage your payments and ensure that the products you have purchased are delivered to the correct address by our third-party parcel delivery companies.
We will collect personal data such as your first name, last name, email address, phone number, billing and delivery information and limited information about your payment card. We process your personal data for the purposes set out above because it is necessary for the performance of our contract with you.
We may also need to process other personal data, such as your navigation and surfing habits. In doing so, it is for example our intention to save items in your shopping basket or to provide you with relevant product recommendations or tailored suggestions. In addition, the processing of these personal data allows us to track your purchase history, for example if you change your mind after your purchase, or if you need to return a product in accordance with the applicable return policy.

For what purposes do we process your personal data?

1. To keep you informed.
   We process your personal data in order to provide you with personalised and targeted communications you request through our websites, webshops, e-mail, telephone, fax and social media. For those purposes, we may process personal data such as your name, address, e-mail address, phone number,... .
   Unless you are an existing customer who has already purchased similar goods or services from Sioen, Sioen will only send you communications, newsletters, promotions,… through e-mail or other communication channels if you have explicitly consented to receive such communications (e.g. by subscribing on our websites).
   Those data are processed on the basis of unambiguous consent.
   If you are registered to receive communications, promotions, offerings, newsletters and/or other advertisements by email or other electronic communication channels, you may always change your preferences for receiving such communications by following the opt-out link provided in those communications.

2. For the technical and functional management of our websites.
   In order to personalise our websites and webshops and to ensure they are easily accessible and easy to navigate, we process your personal data.
   For those purposes, we may process data such as your IP address, the browser used, the pages on our website you visit, geographical data, time and duration of your visit and your preferred language.
   Those data are processed on the basis of your unambiguous consent or Sioen’s legitimate interest in improving its websites and protecting itself against any cyber attacks or other harmful behaviour.

3. To comply with legal obligations.
   Sioen may process your personal data to comply with legal obligations (f.e. for handling payment data) or to comply with any reasonable request from competent law enforcement agents or representatives, judicial authorities, governmental bodies, including competent data protection authorities.
   Your personal data may be transferred upon Sioen’s initiative to the police or judicial authorities as evidence or if there are justified suspicions of an unlawful act or crime committed by you through your use of our websites or by other communications with us.

4. To fulfill a contract with you.
   In order to correctly execute the preparation, execution or termination of any agreement with you, we will need to process your personal data as stated above.

5. Links to other websites and social Media
   The websites of Sioen may contain references to other websites, offered by third parties. Sioen is not responsible for the processing of personal data through those websites. This privacy policy only applies to the Sioen websites.

How do we protect your personal data?

Sioen takes the necessary technical and organisational measures such as (e.g.) firewalls and secured servers, to protect your personal data from unauthorised access or theft as well as accidental loss, tampering or destruction. We are committed to always ensuring an adequate and sufficient level of protection of your data.

Sioen engages third parties to perform certain processing activities such as the hosting of our websites. These third-party processors are only allowed to process your personal data on behalf of Sioen upon our explicit written instruction. Sioen warrants that all third-party processors are selected with due care and are obliged to observe the safety and integrity of your personal data. Sioen does not transmit your personal data in an identifiable manner to any third party without your explicit permission.

Access by Sioen employees or third-party processors will be on a need-to-know basis and subject to confidentiality obligation. Sioen may also share your data with companies within the Sioen Group. In doing so, Sioen shall always ensure that all group entities will take due care that all processing of your personal data is in line with this privacy policy.

Transfer to external parties

Where relevant and necessary for the purpose of the processing activity, we may occasionally need to disclose your personal data to other appropriate organisations who have a need to know (so-called ‘third party recipients’), based on our legitimate interest. We are also required to share some of your personal data with delivery couriers, when you buy a product from our webshop, and with financial institutions in order to verify your payment details, based on the performance of a contract.

Each time your personal data is shared externally, this will be covered by strict data processing agreements, where Sioen remains the data controller and the third parties involved act as data processors. Sioen shall restrict the access and transfer of your personal data to trusted third-party recipients who demonstrate an adequate level of data protection. Moreover, these third-party recipients will be required to delete or return all the personal data to Sioen after the end of the provision of services relating to the processing and delete existing copies, unless the law requires storage of the personal data.

Location and transfers

Sioen processes your personal data within the EEA. It is however possible for any purpose outlined above that we may transfer your personal data to other entities within the Sioen Group or to third-party processors who process on our behalf and which are located outside the EEA. E.g. if we share systems between our Sioen Group companies with a foreign-based service provider.

Each entity located outside the EEA has the obligation to take adequate safeguards with regard to the processing of your personal data. These safeguards will either be:

• A contractual agreement between Sioen and that entity or;
• The recipient country having legislation in place that offers the same protection as within the EEA.

How long do we store your personal data?

Sioen will retain your personal data for the period necessary to fulfil the purposes outlined in this privacy policy unless a longer retention period is required or permitted by law or, until you withdraw your consent.
Please note that if you withdraw your consent you can no longer use our websites or any other communication channels in whole or in part. Sioen de-identifies or destroys your personal data when they are no longer necessary for the purposes outlined above unless:

• There is an overriding interest of Sioen or any other third-party in keeping your personal data identifiable;
• There is a legal obligation that prevents Sioen from de-identifiying or destroying your personal data.

What are your rights and how can you exercise them?

You have the following rights with regard to your personal data:

• The right to be informed ;
• The right to access and a copy of all your personal data processed by Sioen. Sioen reserves the right to charge an administrative fee for multiple subsequent requests clearly causing nuisance to Sioen ;
• The right to rectification of inaccurate personal data ;
• The right to restriction of processing ;
• The right to data portability ;
• The right to object to the processing ;
• The right to not to be subject to profiling ;
• The right to erasure of your personal data if they are no longer required for the purposes outlined above unless:
  • There is an overriding interest of Sioen or any other third party in keeping your personal data identifiable ;
  • There is a legal obligation that prevents Sioen from de-identifying or destroying your personal data.

If you have any requests or questions regarding those rights, please contact dataprotection@sioen.com.

Sioen shall honour your request as soon as reasonably possible and at the latest 30 days after having received the request.
If you have any requests or questions regarding those rights, Sioen will notify all third parties to whom we have disclosed your personal data so that they can ensure that your personal data are also completely accurate with them.

If your data are being processed on the basis of your consent, you also have the right to withdraw your consent at any time, without this affecting the legitimacy of the processing done prior to the withdrawal of your consent. You may send this request to dataprotection@sioen.com or follow the opt-out link in our communications to you.
Your request always has to be accompanied with a proof of identity.

You also have the right to file a complaint with the supervisory authority in your country of residence, your place of work or the place of an alleged infringement. For Belgium, the supervisory authority is the Belgian Data Protection Authority commission@privacycommission.be.

Contact

Should you have any other questions you may contact us:

• By email: dataprotection@sioen.com.
• By regular mail: Sioen Industries – Legal Department – Fabriekstraat 23, 8850 Ardooie, Belgium.

If you would like to know more on how the Sioen Group handles personal data in general, we kindly refer you to our Group Data Protection Policy,