Privacy Policy
The protection of your data is important to us. In this Privacy Statement, we explain how we collect and use your data.
1. Why do we process your personal data?
If you submit your personal data to us, we may process it for the purposes described below.
1.1 To respond to your queries or communicate with you
We process your data when you contact us via our online contact forms.
We process your name, title, (business) contact details (including your email address, telephone number, and name of your company) and any other information that you provide to us in the open field entry of the contact form.
We process this information based on your consent, which you can withdraw at any time.
1.2 For surveys or other (marketing) communication
We process your data to send you surveys on our products or services or to send you marketing communication, to keep you updated on events, special offers, products and services of AMPI Paint. We may create profiles and analyze your interactions with us. This way we learn about your interests and can customize our communication to meet your interests.
We process your name, address, date of birth (but only if you have provided us with that information voluntarily), your email address and other topics you may have actively and voluntarily shared with us.
We process this information based on your consent, which you can withdraw at any time.
1.3 For the development and improvement of products and services
We process aggregated personal data for various AMPI Paint business-related purposes, such as developing new products and services, enhancing, improving or modifying our websites, apps and other digital channels, identifying usage trends, determining the effectiveness of our promotional campaigns and operating and expanding our business activities.
When possible, we use aggregated data. Sometimes we process personal data such as your name, your email address, your IP address, gender, place of residence, digits of your zip code and any other information mentioned in this Statement or otherwise provided to us by you.
We process this information for our legitimate business purposes.
1.4 When you purchase products through our web shop, to process your order and manage the relationship
We use personal data to process your purchase and to deliver your order, to report the status of your order and to contact you about the transaction.
For this purpose, we process your name and address, contact details such as telephone number or e-mail address, credit card or other payment information, which a PCI-certified supplier will process, your acceptance of our applicable terms and conditions, and whether you want to receive our newsletter. We will also process information about what you have purchased from us and information through your registered interactions with the AMPI Paint website (for which we may use cookies).
We process your data to carry out our purchase agreement with you and deliver your order.
2. Cookies and similar tracking technology
We use cookies and similar tracking technology to collect and use personal information about you, including, subject to your consent, to serve you with interest-based advertising. For further information about the types of cookies we use, why, and how you can control cookies, please see our Cookie Statement.
3. With whom do we share your personal data?
We may disclose your data to:
- Our group companies, and third-party service providers who provide data processing services to us (for example, to support the delivery of, provide functionality on, or help to enhance the security of our services), or who otherwise process personal data for purposes that are described in this Privacy Statement or notified to you when we collect your data. To ensure that your data is treated with a high level of protection, AMPI Paint has implemented the AMPI Paint Binding Corporate Rules, which ensure that every AMPI Paint legal entity applies the same level of protection to personal data. We have also agreed technical, organizational and contractual measures (data processing agreements) with third-party suppliers to ensure that your data is exclusively processed for the purposes mentioned above and to ensure that the data is well secured.
- Any competent law enforcement body, regulatory, government agency, court, or other third party where we believe disclosure is necessary:
- As a matter of applicable law or regulation;
- To exercise, establish or defend our legal rights; Or
- To protect your vital interests or those of any other person;
- An actual or potential buyer (and its agents and advisers) in connection with any actual or proposed purchase, merger, or acquisition of any part of our business, provided that we inform the buyer it must use your data only for the purposes disclosed in this Privacy Statement; and
- Other persons if you have consented to, or instructed us our suppliers to make the disclosure.
4. Where do we store your personal data?
Your data may be transferred to, and processed in, countries other than the country in which you are resident. These countries may have data protection laws that are different to the laws of your country (and, in some cases, may not be as protective).
Our servers are in the European Economic Area, although our group companies and third-party suppliers operate around the world. This means that when we collect your data we may process it in any of these countries, subject to the following paragraph.
Countries outside the European Economic Area do not always have strong data protection laws. However, we will always take steps to ensure that your information is used by third parties by this policy and that we comply with applicable legal requirements to ensure adequate protection for your information. We will ensure that if your data are transferred to another country, it will continue to receive adequate protection, through AMPI Paint’s own Privacy Rules for Customer, Supplier and Business Partner Data or through contractual arrangements with third parties. This may include implementing the European Commission’s Standard Contractual Clauses for transfers of personal information, which require the recipient of data to protect the personal information they process by European Union data protection law.
We may also transfer or disclose your data to our third-party suppliers, professional advisers, and such other persons as we consider necessary for the administration of the services and our business.
5. How do we secure your personal data?
We use appropriate technical and organizational measures to protect the personal information about you that we collect and process. The measures we use are designed to provide a level of security appropriate to the risk of processing your data.
We have implemented a security policy that guards against unauthorized access. Data on our secure pages is encrypted using SSL technology. Your browser may indicate (and you should check) that the page is secure. It may be able to configure your browser to give a warning message when you first access any secure page on the site.
All your data will be encrypted at all times whilst in transit over the Internet. SSL is special software that automatically encrypts any data sent by you on our secure pages. Our server then reads the data using a private key. This means that your data, be it debit or credit card information or any other personal details, is turned into code that can only be decoded with the private key or password. All parts of the services that require you to enter personal data are secure.
Where we have given you (or where you have chosen) credentials which enable you to access certain parts of our services (such as usernames and passwords), you are responsible for keeping these confidential.
The transmission of information via the Internet is not completely secure. Although we will do what we reasonably can to protect your data, we cannot guarantee the security of any personal data that you disclose online. You accept the inherent security implications of using the internet and we will not be responsible for any breach of security unless we have been in breach of applicable laws, and then only to the limits set out in any relevant terms and conditions.
6. How long do we retain personal data?
We retain personal data we collect from you where we have an ongoing legitimate need to do so (for example, to provide you with a service you have requested or to comply with applicable legal, tax, or accounting requirements).
When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymise it or, if this is not possible (for example, because your data has been stored in backup archives), then we will securely store your data and isolate it from any further processing until deletion is possible.
7. What requests can you make in relation to your personal data?
You have the following rights to your data:
- You have the right to access, correct, update, or request deletion of your data. In addition, you can object to the processing of your data, ask us to restrict the processing of your data or request portability of your data. You can exercise these rights by contacting us using the contact details provided below.
- You have the right to opt out of marketing communications we send you at any time. You can exercise this right by clicking on the unsubscribe or opt-out link in the emails we send you. To opt out of other forms of marketing, then please contact us using the contact details provided below.
- Similarly, if we have collected and processed your personal information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted before your withdrawal, nor will it affect the processing of your data conducted in reliance on lawful processing grounds other than consent.
- Whilst we would prefer you to come to us first with any complaints, you have the right to complain to a data protection authority about our collection and use of your data. For more information, please contact your local data protection authority.
We respond to all requests we receive from individuals wishing to exercise their data protection rights by applicable data protection laws.
8. Links to other websites and social media
Our services may contain links to and from the services of our partner networks, advertisers, affiliates and members of our corporate group. If you follow a link to any of these, please note that they should have their privacy policies/terms of use, and we do not accept any responsibility or liability for them. Please check their privacy notices before you submit any personal data to them.
We also offer the opportunity to create an account with us through your social network account (such as Facebook). This will save you time in creating the account, as your sign-on credentials will be imported from your social network account. Please note that when you use this “social sign-on” option, we may receive certain information via the social network, such as your name, age, location, preferences, occupation, and other information from your public profile. This information is not requested by us but is provided by the social network using the social sign-on option. When you use the social sign-on option, we will only import the information that is necessary for the creation of your account with us and will, upon receipt of any other information, delete the other information received through the social network. After having created your account, you will have the opportunity to supplement it with any information you want to share with us.
9. May persons below the age of 16 provide personal data?
Persons below the age of 16 may only provide personal data to us if they have written permission from one of their parents or their legal guardian who has read this Privacy Statement.
How to contact us
If you have any questions or concerns about our use of your data, please contact us using the following details: