DATA PROTECTION

Thank you very much for your interest in our website. Protecting your personal data is important to us. The following contains information about how we handle the data we collect when you visit our website. Your data are processed in accordance with data protection regulations. If our website contains a link to other websites, we do not have any influence or control over the linked contents and the data protection policy of those sites. We would advise you to check the data privacy statements on the linked websites to determine whether and to what extent personal data are collected, processed or made accessible to third parties.

Controller within the meaning of the data protection law

SOPREMA SAS
14, Rue de St Nazaire
CS 60121 - 67025 Strasbourg Cedex
France
Phone: + 33(0)3 88 79 84 00

ALSAN Europe
Email: info@alsan.com

Responsible : Rudolf Schibli

Definitions

Our data privacy statement is designed to be straightforward and easy for everyone to understand. The data privacy statement generally uses the official terms of the general data protection regulation (GDPR). The official terms are explained in art. 4 GDPR.

Data processing by visiting our website

When you access our website, there is a technical requirement for data to be transmitted to our web server via your internet browser. The following data are recorded while the connection is established so that your internet browser can communicate with our web server:

• Domain visited
• Date and time of request
• Page from which the file was requested
• Access status (file transferred, file not found etc.)
• Web browser and operating system used
• IP address of computer generating the request
• Transferred data volume

We collect the data listed above to ensure a problem-free connection with our website and convenient use of our website for users. Furthermore, the log file is used to evaluate system security and stability as well as for administrate purposes. The lawfulness of the temporary storage of data or log files is based on art. 6 clause 1 point (f) GDPR.

For reasons of technical security, especially to guard against attempted attacks on our web server, we may store such data for a short period. These data cannot be used to identify any individual. After seven days at the latest these data are anonymised by shortening the IP address to the domain level, which means that it is then no longer possible to trace this back to an individual user. These data are not evaluated in any way, except for statistical purposes and in an anonymised form. The data are not combined with data from other data sources.

Contact form and contacting us by email

If you have sent us an enquiry using the contact form or email, we will store the details you have provided in the contact form or in your email, including the contact details, so that we can deal with your enquiry and in the event of follow-up queries. We never pass on these details without your consent. The lawfulness of the processing of such data is based on our justified interest in answering your request pursuant to art. 6 clause 1 point (f) GDPR as well as, if applicable, art. 6 clause 1 point (b) GDPR, in so far as your request is aimed at the conclusion of a contract. Once your enquiry has been finalised, your data will be deleted unless there is a conflicting statutory requirement for us to store such data.

Newsletter

If you would like to receive the newsletter offered on our website with regular information about our offers and products, we will require your email address as mandatory information.
To send out the newsletter we employ the double opt-in method. This means that we will only email our newsletter to you once you have expressly confirmed that you agree to receiving these newsletters. The first stage involves sending you an email with a link for you to confirm that you, as owner of the relevant email address, would like to receive the newsletters in future. By confirming that this is the case, you are giving us your consent pursuant to art. 6 clause 1 point (a) GDPR to the effect that we may use your personal data for the purpose of sending you the newsletters as requested.
When you register for our newsletter, we store the email address required for sending the newsletter you used for registering for the newsletter, as well as the date and time of your registration and your confirmation, so as to identify any possible misuse at a later date.
You can unsubscribe from the newsletter any time by clicking on the link inserted in every newsletter or by sending an email to the controller as indicated above. Once you have unsubscribed, your data will be erased from our newsletter distribution system, unless you have expressly consented to the continued use of the collected data or unless continued processing is otherwise legally permissible.

Google Analytics

Our website uses Google Analytics, a web analysis service provided by Google Inc. ("Google"). Provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies. These are text files that are stored on your computer and facilitate an analysis of your use of the website. The information generated by the cookie about your use of this website is generally transmitted to a Google server in the USA and stored there. We only use Google Analytics with activated IP anonymisation. This means that Google shortens the IP address of our users within the Member States of the European Union or in other contracting states of the Agreement on the European Economic Area so that the possibility of any personal identification can be excluded. Google Inc. is certified under the "Privacy Shield", a US-European data protection agreement that guarantees compliance with the data protection standards applicable in the EU. Processing is effected pursuant to art. 6 clause 1 point (f) GDPR or article 15 section 3 TMG (German telemedia act) on the basis of our justified interest in the statistical analysis of user behaviour for optimisation and marketing purposes. The data are kept for a period of 26 months.

On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports about website activities and to provide further services for the website operator with regard to website and internet use. The IP address transmitted by your browser for the purpose of Google Analytics will not be combined with other data collected by Google. The terms and conditions for using Google Analytics and information about data protection can be accessed via the following links: http://www.google.com/analytics/terms/gb.html and https://policies.google.com/?hl=en.

ou can use the appropriate setting in your browser software to prevent cookies from being saved; however, we would like to point out that in such an event you may not be able to make full use of all the functions of this website. In addition, you can prevent the data generated by the cookie and relating to your use of the website (including your IP address) from being collected by Google and you can prevent such data from being processed by Google by using the following link to download and install the relevant browser plug-in: https://tools.google.com/dlpage/gaoptout?hl=en-GB. By clicking on the following link, you can set an opt-out cookie to prevent data collection by Google Analytics:

Deactivation of Google Analytics For information about the way in which Google Analytics handles user data, please refer to Google's data privacy statement: https://support.google.com/analytics/answer/6004245?hl=en.

Use of YouTube plug-ins

We use YouTube as a provider for embedding videos and similar material. YouTube is operated by YouTube LLC, the headquarters of which are at 901 Cherry Avenue, San Bruno, CA 94066, USA. YouTube is represented by Google Inc., based at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

On some of our web pages we use plug-ins provided by YouTube. If you access the web pages of our website featuring such a plug-in, for instance in our news items, a connection to the YouTube servers is set up and the plug-in is shown as part of this process. Information is consequently transmitted to the YouTube server, indicating which of our web pages you have accessed. If you are also logged into your YouTube account, YouTube will assign this information to your personal user account. By using the plug-in, e.g. by clicking on the start button of a video, this information is also assigned to your user account. You can prevent such assignment by logging out of your YouTube user account as well as out of other user accounts operated by YouTube LLC and Google Inc. and deleting the relevant cookies set by these companies before you use our web pages.

Further information about data processing and data protection information relating to YouTube (Google) can be found at https://policies.google.com/privacy?hl=en&gl=de.

Cookies

Our website uses cookies that the browser stores in your device and that contain specific settings for the use our of website (e.g. for the current session). They are used to make our offering more user-friendly, more effective and more secure. Cookies are small text files stored by your browser on your computer. Most of the cookies we use are session cookies and these are automatically deleted when you close the browser. Other cookies are stored on your terminal device until you delete them or until the storage period expires. These cookies allow us to recognise your browser the next time you visit our website.
Some of these cookies are designed to simplify website processes by storing settings (e.g. default settings for options previously selected). If individual cookies implemented by us also involve the processing of personal data, such processing is carried out pursuant to art. 6 clause 1 point (b) GDPR, either to fulfil a contract, or pursuant to art. 6 clause 1 point (f) GDPR, to safeguard our justified interest in the best possible functionality of our website as well as the customer-friendly and effective design of the site visit.
You can set your browser to notify you when cookies are set and only allow them to be used in individual cases, to allow cookies in specific instances or block them generally, and automatically to clear all cookies when you quit your browser. You can manage the cookies settings via the following links for your specific browser:
Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies Chrome: http://support.google.com/chrome/bin/answer.py?hl=en&hlrm=en&answer=95647 Safari: https://support.apple.com/kb/ph21411?locale=en_UK Opera: http://help.opera.com/Windows/10.20/en/cookies.html

You can also manage the individual cookies set by many companies and functions for marketing. To do so, you can employ the relevant user tools, which are available through https://www.aboutads.info/choices/ or http://www.youronlinechoices.com/uk/your-ad-choices.

Most browsers also offer a do-not-track function, which you can enable if you do not want websites to track your online activities. When you activate this function, your browser tells marketing networks, websites and applications that you do not want tracking for behavioural marketing and similar purposes. Information and instructions of how to use this function is available through one of the links below, depending on your browser provider:

Google Chrome: https://support.google.com/chrome/answer/2790761?co=GENIE.Platform%3DDesktop&hl=en Mozilla Firefox: https://support.mozilla.org/en-US/kb/how-do-i-turn-do-not-track-feature Internet Explorer: https://support.microsoft.com/en-gb/help/17288/windows-internet-explorer-11-use-do-not-track Opera: http://help.opera.com/Windows/12.10/en/notrack.html Safari: https://support.apple.com/kb/PH21416?locale=en_UK

In addition, you can use a standard setting to block specific scripts. NoScript only allows JavaScript, Java and other plugs-ins to run if the hosting domain is one that you trust. For information and instructions relating to managing this function, please check with your browser provider (e.g. for Mozilla Firefox go to: https://addons.mozilla.org/en/firefox/addon/noscript/).

Please note that disabling cookies can restrict the functionality of this website.

Data transfer and recipients

Your personal data is not transferred to third parties beyond the Soprema Group unless, pursuant to art. 6 clause 1 s. 1 point (b), this is necessary for handling contractual relationships with you.

Furthermore, we use external service providers for handling our services; we have chosen these service providers carefully and drawn up a written contract with them. In addition to those mentioned in relation to the newsletter, these are as follows:

Service providers necessary within the scope of commercial performance of contract (logistics sector)

• service providers for sales promotions and customer loyalty measures (sports events, competitions),
• service providers for web hosting as well as
• third parties who are necessary as regards statutory requirements, e.g. tax consultants.

These service providers act in accordance with our instructions and are regularly checked by us. The service providers do not transfer data to other third parties.

Storage periods for personal data

The storage period for personal data is based on the relevant statutory retention periods (e.g. in accordance with commercial and tax law). At the end of the relevant periods, the data in question are routinely erased. If data are required for the performance or setting up of a contract or if we have a justified interest in the continued storage of data, the data will be erased once they are no longer required for these purposes or if you have exercised your right of cancellation or opposition.

Your rights

The following contains information about which data subject rights the current data protection law confers on you in relation to the controller as regards the processing of your personal data:

• The right, pursuant to art. 15 GDPR, to demand information about your personal data processed by us. In particular you can demand information about the purposes of processing, the category of your personal data, the categories of recipients to whom your data have been or are being disclosed, the intended storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of the right to lodge a complaint, the origin of your data if the data were not collected by us, as well as information about the existence of an automated decision-making process including profiling, and, if appropriate, reasonable information relating to the details thereof.
• The right, pursuant to art. 16 GDPR, to demand immediate rectification of inaccurate personal data or completion of incomplete personal data stored by us.
• The right, pursuant to art. 17 GDPR, to demand erasure of the personal data stored by us, unless processing is necessary for exercising the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to establish, exercise or defend legal claims.
• The right, pursuant to art. 18 GDPR, to demand the restriction of processing of your personal data, in so far as the accuracy of the data is contested by you, the processing is unlawful and you oppose the erasure of the personal data and we no longer require the data, but you need them to establish, exercise or defend legal claims or you have objected to the processing pursuant to art. 21 GDPR.
• The right, pursuant to art. 20 GDPR, to receive the personal data which you have provided to us, in a structured, commonly used and machine-readable format or to demand transmission of those data to another controller.
• The right, pursuant to art. 77 GDPR, to lodge a complaint with a supervisory authority. Generally you will be able to contact the supervisory authority of the federal state where our headquarters as shown above are located, or, if appropriate, the supervisory authority at your habitual residence or place of work.
• Right to withdraw consent pursuant to art. 7 clause 3 GDPR: You have the right to withdraw the consent, once given, to the processing of your data at any time with future effect. In the event of withdrawal of consent, we will delete the data concerned without delay, unless further processing can be justified on the basis of the lawfulness of processing not based on consent. Withdrawing your consent will not affect the lawfulness of the processing based on your consent prior to withdrawal.

Right to object

If your personal data are processed by us on the basis of justified interests pursuant to art. 6 clause 1 s. 1 point (f) GDPR, you have the right, pursuant to art. 21 GDPR, to object, on grounds relating to your particular situation, to the processing of your personal data. If the objection is directed against the processing of personal data for the purpose of direct marketing, you have a general right to object without the need to provide information about a particular situation.

If you would like to exercise your right of withdrawal or objection, an email to info@alsan.com will suffice.

Changes to our data privacy statement

We reserve the right to revise or update this data privacy statement in line with the data protection regulations in force. This allows us to modify them in accordance with current legal requirements and to take account of changes concerning our services, e.g. when introducing new services. The most recent version applies to your visit.

Revised: 23 May 2018