Privacy Notice regarding Grundfos’ marketing services
What personal data is collected, for which purposes and on what legal basis?
Grundfos collects the personal data provided by you when signing up for Grundfos marketing services, which can include your first and last name, your email address, your telephone number, your country, your company, related company information, your area of interest and your job role (hereinafter the “Personal Data”).
Grundfos is using the Personal Data for the purposes of delivering the requested marketing services to you and to provide you with personalized experience, information and marketing relevant for you through email, SMS, phone, push notifications or letter about Grundfos tools, applications, products, events and promotions.
In order for Grundfos to fulfil the purposes mentioned above, Grundfos will store your Personal Data, analyse your behaviour and create a profile based on your use of the different Grundfos websites, applications or tools, you have access to, including if you have created a Grundfos Account or filled out a form.
To analyse your behaviour Grundfos is using an Adobe Experience Cloud Visitor ID to identify visitors and re-visitors on the Grundfos websites through cookies. Please, read our cookie policy for more information on Grundfos’ usage of cookies. Further, if you are having a Grundfos Account, you will get a Public User ID that will be picked up and saved for each page, you have viewed when being logged in. Your Adobe Experience Cloud ID or your Public User ID is combined with your email address and from these ID’s Grundfos may utilize additional customer attributes to personalize and make the marketing information more relevant for you.
The legal basis of the processing of your Personal Data for newsletter mailings is your consent (Article 6, para. 1, lit. a of the General Data Protection Regulation (Regulation (EU) 2016/679) (“GDPR”).
Your Personal Data may only be processed for different purposes if this is necessary for complying with legal or regulatory obligations (e.g., transfer to courts or criminal prosecution authorities), if you have consented to the respective processing or if the processing is otherwise lawful under applicable law. If processing for a different purpose takes place we may provide you with additional information.
You are not obliged to provide your consent to receipt of the marketing services and the related processing of your personal data. If you do not provide your consent, you will not be able to get the marketing services.
Details of the data controller and recipients of the personal data
Grundfos Holding A/S, Poul Due Jensens Vej 7, 8850 Bjerringbro, Denmark and Grundfos (Pty) Ltd, 16 Lascelles Road, Meadowbrook, Germiston, 1609, South Africa (together “Grundfos”) are joint data controllers of your Personal Data and responsible for data security and processing of the data according to the specific purposes mentioned above.
Grundfos can share your Personal Data with third party parties who will act as Grundfos’ data processors for processing your Personal Data according to the purposes mentioned above. The following data processors are used:
- Adobe Systems Software Ireland Limited 4-6 Riverwalk, City West Business Campus, Dublin 24 Ireland: System used by Grundfos for storage of all your profile data and for personalizing and sending out marketing material.
- Microsoft Ireland Operations Limited, Atrium Building Block B Carmenhall Road Sandyford Industrial Estate Dublin 18, Ireland: System used by Grundfos for analysing your behaviour (big data analysis).
- Other local companies within the Grundfos Group that will assist with IT support for the above systems.
- Other recipients, typically consultants, that will assist with IT support for the above systems and assist with the processing of your Personal Data on behalf of Grundfos in the above systems.
Other authorized third parties may need to access or store personal data if required or permitted by applicable law (e.g. governmental authorities, courts, external advisors, and similar third parties that are public bodies).
Retention period
Data collected for the purposes stated above will be stored only as long as necessary for the purposes mentioned above, namely as long as you have not withdrawn your marketing consent. That means that if you withdraw your consent, Grundfos will as soon as possible remove the link directly to your profile identity in the marketing system and will only keep your system ID to make sure that we will not contact you again with our marketing services.
Be aware that if you have given your consent for marketing services in connection with signing up for one or more of Grundfos’ other services, e.g. created a Grundfos Account or signed up for Grundfos for Installers, Grundfos will still process your Personal Data for these other purposes. If you wish for Grundfos to completely stop processing your Personal Data in connection with these services, please follow the instructions given in the privacy notices for these services.
If a judicial or disciplinary action is initiated, the Personal Data may be stored until the end of such action, including any potential periods for appeal, and will then be deleted or archived.
Your Personal Data will not be kept in a form that allows you to be identified for any longer than is reasonably considered necessary by Grundfos for achieving the purposes for which it was collected or processed or as it is established in the applicable laws related to data retention periods.
Your Rights
If you have declared your consent for any personal data processing activities, you can withdraw this consent at any time with future effect. Such a withdrawal will not affect the lawfulness of the processing prior to the consent withdrawal.
Right of access: You may have the right to obtain from us confirmation as to whether or not personal data concerning you is processed, and, where that is the case, to request access to the personal data. The access information includes – inter alia – the purposes of the processing, the categories of personal data concerned, and the recipients or categories of recipients to whom the personal data have been or will be disclosed. However, this is not an absolute right and the interests of other individuals may restrict your right of access.
You may have the right to obtain a copy of the personal data undergoing processing. For further copies requested by you, we may charge a reasonable fee based on administrative costs.
Right to rectification: You may have the right to obtain from us the rectification of inaccurate personal data concerning you. Depending on the purposes of the processing, you may have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
Right to erasure ("right to be forgotten"): Under certain circumstances, you may have the right to obtain from us the erasure of personal data concerning you and we may be obliged to erase such personal data.
Right to restriction of processing: Under certain circumstances, you may have the right to obtain from us restriction of processing your personal data. In this case, the respective data will be marked and may only be processed by us for certain purposes.
Right to object: Under certain circumstances, you may have the right to object, on grounds relating to your particular situation, or where personal data are processed for direct marketing purposes at any time to the processing of your personal data by us and we can be required to no longer process your personal data.
Right to data portability: Under certain circumstances, you may have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you may have the right to transmit those data to another entity without hindrance from us.
If you would like to know more or wish to use one or more of your above rights, you are welcome to contact Grundfos Holding A/S by sending an email to enews@grundfos.com.
In case of complaints, you also have the right to lodge a complaint with the competent supervisory authority regarding the processing of your Personal Data.
Changes to the Privacy Notice
We reserve the right to change or supplement this privacy notice at any time. To the extent, the changes of the Privacy Policy are regarded as material and significant, you will be expressly informed hereof, for example via email.
Effective date of the recent update of the Privacy Notice:
28/03/2018