Privacy notice – E-shop registration

Why do we process your personal data?

We process your personal data for the following purposes:

• To process and fulfill your orders, including payment, delivery and customer support
• To manage your account and give you access to your order history and personalized settings
• To communicate with you about your purchases, account status or customer service inquiries
• To send you marketing communications if you have given your consent
• To improve our website and services by analyzing usage and purchasing behavior

What is the legal basis for processing?

We process your personal data based on your explicit consent under Article 6(1)(a) of the General Data Protection Regulation (GDPR).

You can withdraw your consent at any time by selecting the unsubscribe link in any email you receive from us.

Who has access to your data?

Only authorized Dormer Pramet employees and technical support teams can access your personal data. Technical support teams have access only for support purposes.

We do not sell or rent your personal data to third parties. We never disclose or make your personal data available to unidentified parties.

If data is transferred outside the EU/EEA, we will take contractual warranties (as subscription of standard contract terms approved by the European Commission) subscripted with the offshore companies that received the data; these contractual warranties provide the same level of data protection prescribed by the EU legislation.

How long do we keep your data?

We keep your personal data only for as long as necessary for the purposes described in this notice or as required by law.

• Your data will be stored while you are subscribed to our newsletter.

If you unsubscribe

If you unsubscribe, we take the following steps:

• We stop sending you emails immediately.
• We remove your personal data from our marketing systems within 24 hours, unless we must retain it for legal reasons.

Storage after the initial purposes

When personal data is stored after the initial purposes have been fulfilled, Dormer Pramet uses the following criteria to determine the storage period:

• as required by legal obligations (such as book-keeping or labor law retention requirements) or contractual obligations (such as collective bargaining agreements), to which Sandvik is subject; or
• to meet legitimate business purposes for storing the personal data longer and such legitimate purposes shall be documented and communicated to you upon request; or
• to meet applicable statutes of limitations (deadline for when a lawsuit may be filed for a particular legal right), for example, for to exercise, establish or defend claims, and during and in preparation of litigation or investigations

Your rights

You have the right to:

• Access your personal data: you have the right at any time, to obtain confirmation as to whether your personal data are being processed and ask for clarification about the information included in this privacy notice;
• Correct inaccurate data: you can request the rectification (integration or updating) or correction of your data if not accurate;
• Request erasure (“right to be forgotten”): you can ask the erasure; if the consent is withdrawn or you oppose for legitimate reason to their treatment; if the personal data have been unlawfully processed, that is in case of a legal obligation of deletion;
• Restrict the processing: you may request to process your data solely for the period necessary for the rectification; in case of unlawful processing and excluding any other data processing; in case the data we have kept can be useful for you to exercise your rights in court of law and, finally, if you oppose to the data processing and there is a review of the prevalence of our legitimate reasons to yours.
• Object to the processing: you can at any time object to the processing of your data, unless there are compelling and legitimate reasons for us to proceed with the data processing which override yours (for example, for our exercise or defense of legal claims).
• Withdraw your consent at any time: you can withdraw your consent at any time by notifying the Data Controller. The withdrawal will not affect the lawfulness of the processing carried out before you have withdrawn the consent.

How to exercise your rights

You can exercise your rights by contacting the Data Controller (dp@dormerpramet.com) or submitting a personal data request.

You can also address the European Data Protection Supervisor (edps@edps.europa.eu) if you consider that your rights under Regulation (EU) 2018/1725 have been infringed as a result of the processing of your personal data by the Data Controller.

Questions?

For any questions about how we process your personal data, contact: dp@dormerpramet.com