CLARIOS Privacy Notice


CLARIOS and its affiliated companies (collectively CLARIOS, we, us or our) care about your privacy and are committed to protecting your Personal Information in accordance with fair information practices and applicable data privacy laws.


Sections:


  1. Scope

  2. Identity of Data Controller

  3. Categories of Personal Information

  4. Legal bases for processing

  5. Purposes of processing

  6. Recipients of Personal Information

  7. International Transfers

  8. Retention

  9. Protection of Personal Information

  10. Our websites

  11. your rights

  12. Consent and withdrawal of consent

  13. How to exercise your rights

  14. Complaints

  15. Automated Decision Making

  16. How to Contact Us

  17. Modifications to our Privacy Notice

  18. Local addenda for certain countries


  1. Scope:


    This Privacy Notice explains how we collect and use Personal Information. “Personal Information” means any information relating to an identified or identifiable natural person; one who can be identified, directly or indirectly, by reference to an identifier such as name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.


    We collect Personal Information in a variety of ways through our normal business activities, both online and offline. This includes, for example, when you place orders or purchase products or services from us, enter into agreements or communicate with us, or visit and use our websites. We also receive Personal Information from our customers in order to perform services on their behalf.

  2. Identity of Data Controller:


    To identify the CLARIOS entity(ies) responsible for the processing of your Personal Information, you can ask your CLARIOS business contact, consult the list of our locations on the CLARIOS public website (www.CLARIOS.com) or contact our Privacy Office (privacyoffice@clarios.com ).


  3. Categories of Personal Information:


    Personal Information that we may collect and process includes:


    • Contact Information that allows us to communicate with you, such as your name, job title, age and prefix, username, mailing address, telephone numbers, email address or other addresses that allow us to send you messages, company information and registration information you provide on our website.


    • Relationship Information that helps us do business with you, such as the types of products and services that may interest you, contact and product preferences, languages, creditworthiness, marketing preferences and demographic data.


    • Transactional Information about how you interact with us, including purchases, inquiries, customer account information, order and contract information, delivery details, billing and financial data, details for taxes, transaction and correspondence history, and information about how you use and interact with our websites.


    • Security and Compliance Information that helps us to secure our interests, including information for conflict checks, fraud prevention and internal verification, as well as information necessary for the security of our premises, such as visual recordings.


    • Behavioural Information that helps us and our partners create inferred or assumed details relating to your behaviour and interests, based on your online activity – this is most often collated and grouped into “segments” (e.g., there may be a segment for men, living in London and aged under 25, who like sports), and is often associated with certain elements of your Technical Information (see below).


    • Technical Information about your systems and devices. For example this might include your internet protocol (IP) address, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website, open our emails or use our services. This is often collected by, and associated with, the cookies and other technologies referred to in

      the section of this Privacy Notice labelled Our Websites .


    • Our products may collect system and event information relating to their setup, configuration and operation, as well as information collected by our products in their ordinary course of operation. The nature and extent of the information collected by our products will vary based on the type and function of the product and the type of services for which they are used, subject to applicable laws.


      Please note that in addition to Personal Information we collect from you directly, we may also receive certain of the Personal Information outlined above from third-party sources. For example, a business partner may share your Contact Information with us if you have expressed interest in learning specifically about our products or services, or the types of products or services we offer. We also obtain your Personal Information from other third parties, such as the Technical and Behavioural Information we receive from our marketing/advertising partners (e.g., Google and Facebook), publicly-available sources, and data providers/brokers.


  4. Legal bases for Processing:


    In respect of each of the Purposes for which we use your Personal Information, we are required to ensure that we have a “legal basis” for that use. Most commonly, we will rely on one of the following legal bases – which one applies will depend on the relevant processing activity we are carrying out:


    • The performance of a contract we have with you or to take requested steps before entering into that contract (e.g., a contract to provide you with our services/products).

    • The legitimate interests of CLARIOS, which are our usual business activities.

    • Compliance with our legal obligations under applicable law.

    • Consent, where required, and to the extent of applicable law.

    • To protect the vital interests of a person, where required, and to the extent of applicable law.


      If you want to be informed about the specific legal basis we rely on to process your Personal Information for a particular purpose, you can ask your CLARIOS business contact or contact our Privacy Office (privacyoffice@clarios.com).


      What happens when you do not provide necessary Personal Information? In certain circumstances, we need to process your Personal Information either to comply with our legal obligations under applicable law, or to perform the terms of the contract we have (or are trying to enter into) with you. In these circumstances, where you fail to provide that necessary Personal Information when requested, we may not be able to perform the contract we have (or are trying to enter into) with you.


  5. Purposes of Processing:


    • Fulfilling your orders for products or services and related activities, such as product and service delivery, customer service, account and billing management, support and training, product update and safety related notices, and to provide other services related to your purchase.


    • Managing our contractual obligations and your ongoing relationship with us, including interacting with you, analyzing and improving the products and services we offer, informing you about our products or services, as well as special offers and promotions.


    • Ensuring the security of our websites, networks and systems, and premises, as well as protecting us against fraud.


    • Managing our everyday business needs, such as payment processing and financial account management, product development, contract management, marketing/advertising, website and e-communication administration, fulfillment, corporate governance, audit, reporting and legal compliance.


  6. Recipients of Personal Information:


    • Third Parties: We may use third parties to provide or perform services and functions on our behalf. We may make Personal Information available to these third parties, to perform these services and functions. Any processing of that Personal Information will be on our instructions and compatible with the original purposes. We may also use third parties to provide or perform services and functions on our behalf who will process Personal Information for their own purposes as well as in accordance with our instructions.”


    • As Required by Law: We may also make Personal Information concerning individuals available to public or judicial authorities, law enforcement personnel and agencies as required by law, including to meet national security or law enforcement requirements, and including to agencies and courts in the countries where your information is stored, which may be outside your home country. Where permitted by law, we may also disclose such information to third parties (including legal counsel) when necessary for the establishment, exercise or defense of legal claims or to otherwise enforce our rights, protect our property or the rights, property or safety of others, or as needed to support external audit, compliance and corporate governance functions.


    • Mergers & Acquisitions: Personal Information may be transferred to a party acquiring all or part of the equity or assets of CLARIOS or its business operations in the event of a sale, merger,

      liquidation, dissolution, or other.

    • Affiliates: We may also transfer and share such information to CLARIOS affiliates in compliance with applicable law.


  7. International Transfers:


    The third parties, subsidiaries and affiliates to which your Personal Information can be disclosed may be located throughout the world; therefore information may be sent to countries having different privacy protection standards than your country of residence. In such cases, we take measures to ensure that your Personal Information receives an adequate level of protection and EU Commission-approved Standard Contractual Terms to protect your Personal Information – if you wish to receive a copy of these Standard Contractual Terms, you can ask your CLARIOS business contact or contact our Privacy Office (privacyoffice@clarios.com).


  8. Retention:


    We will retain your Personal Information as long as necessary to achieve the purpose for which it was collected, usually for the duration of any contractual relationship and for any period thereafter as legally required or permitted by applicable law.


  9. Protection of Personal Information:


    Security measures for protecting Personal Information: We apply appropriate technical, physical and organizational measures that are reasonably designed to protect Personal Information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access, and against other unlawful forms of processing. Access to Personal Information is restricted to authorized recipients on a need-to- know basis. We maintain a comprehensive information security program that is proportionate to the risks associated with the processing. The program is continuously adapted to mitigate operational risks and to protect Personal Information, taking into account industry-accepted practices. We will also use enhanced security measures when processing any sensitive Personal Information.


    How we protect Personal Information we process on behalf of our customers (as Data Processor): In some instances, we process Personal Information on behalf of our customers as a service (in a data processor capacity). We collect and process this Personal Information only as instructed by our customer and will not use or disclose it for our own purposes. We maintain information security controls to protect your information and will only disclose or transfer the Personal Information as instructed by the customer or to provide the requested service. Unless otherwise instructed by the customer, we treat the Personal Information we process on behalf of our customers in line with our commitments on disclosure and transfer as set forth in this notice.


  10. Our websites:

    • Cookies, usage data and similar tools


      When you visit our websites or interact with our emails, we may collect certain information by automated means, using technologies such as cookies, pixel tags, browser analysis tools, server logs and web beacons. In many cases, the information we collect using cookies and other tools is used in a non- identifiable way, without any reference to Personal Information.


      Cookies are small text files that a website transfers to your computer or other device’s hard drive through your web browser when you visit a website. We may use cookies to make website sign- in and usage more efficient, and to tailor your browsing preferences and improve the functionality of our websites. Cookies can be used for performance management, and for collecting information on how our website is being used for analytics purposes. They can also be used for functionality management, enabling us to make the user’s visit more efficient by, for example, remembering language preferences, passwords and log-in details. There are two types of cookies: session cookies, which are deleted from your device after you leave the website; and persistent cookies, which remain on your device for longer or until you delete it manually.


      We may use Flash Cookies (also known as Local Stored Objects) and similar technologies to personalize and enhance your online experience. The Adobe Flash Player is an application that allows rapid development of dynamic content, such as video clips and animation. We use Flash cookies for security purposes and to help remember settings and preferences similar to browser cookies, but these are managed through a different interface than the one provided by your web browser. To manage Flash cookies, please see the Adobe website or visit www.adobe.com. We may use Flash cookies or similar technologies for behavioral targeted purposes or to serve interest-based advertising.


      Our server logs may also collect information about how users utilize the websites (usage data). This data may include a user's domain name, language, type of browser and operating system, Internet service provider, Internet protocol (IP) address, the site or reference directing the user to the website, the website you were visiting before you came to our website and the website you visit after you leave our site, and the amount of time spent on the website. We may monitor and utilize usage data to measure the website's performance and activity, improve the website's design and functionality or for security purposes.


      We may also use pixel tags and web beacons on our website and in our emails. These are tiny graphic images placed on web pages or in our emails that allow us to determine whether you have performed a specific action. When you access these pages or open or click an email, the pixel tags and web beacons generate a notice of that action. These tools allow us to measure response to our communications and improve our web pages, communications and promotions.

      You can change your browser settings to block or notify you when you receive a cookie, delete cookies or browse our website using your browser’s anonymous usage setting. Please refer to your browser instructions or help screen to learn more about how to adjust or modify your browser settings. If you do not agree to our use of cookies or similar technologies which store information on your device, you should change your browser settings accordingly. You should understand that some features of our websites may not function properly if you do not accept cookies or these technologies


      Where required by applicable law, you will be asked to consent to certain cookies and similar technologies before we use or install them on your computer or other device.


    • Data Sharing and Browser Do Not Track Requests: Because we do not (and do not permit others) to track our website visitors, we do not process web browser Do Not Track signals. To learn more about browser tracking signals and Do Not Track please visit http://www.allaboutdnt.org/.


    • Linked sites: We may provide links to third parties' websites (“linked sites”) from our websites. Linked sites are not necessarily reviewed, controlled or examined by us. Each linked site may have its own terms of use and privacy notice, and users must be familiar and comply with all such terms when using linked sites. We are not responsible for the policies and practices of any linked site, or any additional links contained in them. These links do not imply our endorsement of the linked sites or any company or service and we encourage users to read these linked sites’ terms and notices prior to using them.


    • Children: Our websites are not directed at children and we do not use our websites to knowingly solicit Personal Information from or market to children. If we learn that a child has provided Personal Information through one of our websites, we will remove that information from our systems.


    • Google Analytics: We may also use Google Analytics on our website to collect information about your online activity on our websites, such as the web pages you visit, the links you click, and the searches you conduct on our websites. We may use the information to compile reports and to help us improve the website. The cookies collect information in an anonymous form, including the number of visitors to the website, where visitors have come to the site from and the pages they visited. The information generated by those cookies and your current IP-address will be transmitted by your browser to and will be stored by Google on servers in the United States and other countries. Google will use this information on our behalf for the purpose of evaluating your use of our website as described above. The IP address collected through Google Analytics will not be associated with any other data held by Google. For more information about the information gathered using Google Analytics please visit http://www.google.com/intl/en/analytics/privacyoverview.html.

      You can prevent these cookies by selecting the appropriate settings on your browser. If you do this you may not be able to use the full functionality of our websites. You may download and install the Google Analytics Opt- out Browser Add-on available here: http://tools.google.com/dlpage/gaoptout.


    • Google Remarketing Technology: Our websites may use Google’s remarketing technology. This technology enables users who have already visited our online services and shown interest in our services to see targeted advertising on the websites of the Google partner network. Likewise users that are similar to the visitors of our website can be addressed. The information generated by the cookie about the website use will be transmitted to and stored on servers in the United States by Google. In the event that the IP address is transferred, it will be reduced by the last 3 digits. Using cookies, the user behavior on a website can be analyzed and subsequently utilized to provide targeted product recommendations and advertising based on the user’s interests. If you would prefer to not receive any targeted advertising, you can deactivate the use of cookies for these purposes through Google by visiting the website: https://www.google.com/settings/ads/. Alternatively, users can deactivate the use of cookies by third party providers by visiting the Network Advertising Initiative’s deactivation website ( http://www.networkadvertising.org/choices/). Please note that Google has its own data protection policy which is independent of our own. We assume no responsibility or liability for their policies and procedures. Please read Google’s privacy policy before using our websites (https://www.google.com/intl/en/policies/privacy/).


    • Facebook Conversion Tracking: Our websites may utilize the Conversion Tracking Pixel service of Facebook Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA (“Facebook”). This tool allows us to follow the actions of users after they are redirected to a provider’s website by clicking on a Facebook advertisement. We are thus able to record the efficacy of Facebook advertisements for statistical and market research purposes. The collected data remain anonymous. This means that we cannot see the Personal Information of any individual user. However, the collected data are saved and processed by Facebook. Facebook is able to connect the data with your Facebook account and use the data for their own advertising purposes, in accordancewith

      https://www.facebook.com/ads/website_custom_audiences/


  11. Your Rights:


    Under certain circumstances, by law you have the right to:

    • Request access to your Personal Information. This enables you to receive a copy of the Personal Information we hold about you and to check that we are lawfully processing it.

    • Request correction of the Personal Information that we hold about you . This enables you to have any incomplete or inaccurate information we hold about you corrected.

    • Request erasure of your Personal Information . This enables you to ask us to delete or remove Personal Information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your Personal Information where you have exercised your right to object to processing (see below).

    • Object to processing of your Personal Information . This right exists where we are relying on our legitimate interests as the legal basis for our processing and there is something about your particular situation, which makes you want to object to processing on this ground. You also have the right to object where we are processing your Personal Information for direct marketing purposes.

    • Request the restriction of processing of your Personal Information . This enables you to ask us to suspend the processing of Personal Information about you, for example if you want us to establish its accuracy or the reason for processing it.

    • Request the transfer of your Personal Information . We will provide to you, or a third party you have chosen, your Personal Information in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.


  12. Consent and Withdrawal of Consent:


    By providing Personal Information to us, you understand and agree to the collection, processing, international transfer and use of such information as set forth in this Privacy Notice. Where required by applicable law we will ask your explicit consent.


    You may always object to the use of your Personal Information for direct marketing purposes or withdraw any consent previously granted for a specific purpose, free of charge by clicking on relevant links on our websites, following the directions contained in an email or by contacting our Privacy Office at privacyoffice@clarios.com.


  13. How to exercise your rights:


    If you want to exercise any of the rights described above, please contact privacyoffice@clarios.com.


    Typically, you will not have to pay a fee to access your Personal Information (or to exercise any of the other rights). However, except in relation to Withdrawal of Consent (see above), we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive, or, we may refuse to comply with your request

    in these circumstances.


    We may need to request specific information from you to help us confirm your identity and ensure your right to access your Personal Information (or to exercise any of your other rights). This is a security measure to ensure that Personal Information is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.


    We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.


  14. Complaints:


    If you would like to make a complaint regarding this Privacy Notice or our practices in relation to your Personal Information, please contact privacyoffice@clarios.com. We will reply to your complaint as soon as we can.


    If you feel that your complaint has not been adequately resolved, please note that you can contact your local data protection supervisory authority.


  15. Automated Decision-Making:


    Please note that we do not currently make any decisions about you based solely on automated processing (a term which includes profiling techniques) which produce legal (or similarly significant) effects concerning you.


    CLARIOS respects your rights under law regarding automated decision-making. So, if we do start engaging in such automated decision-making processes, we will let you know and update this Privacy Notice accordingly.


  16. How to contact us:


    If you would like to communicate with us regarding privacy issues or have questions, comments or complaints, please contact our Privacy Office at privacyoffice@clarios.com.


  17. Modifications to our Privacy Notice:


    We reserve the right to change, modify, and update this Privacy Notice at any time. Please check

    periodically to ensure that you have reviewed the most current notice.


  18. Local addenda for certain countries:


We have extended the Privacy Notice with specific information for certain countries where required by applicable local law. You can find these complementary notices through the local addenda links on the Privacy homepage.



This Privacy statement is effective as of: 1 May 2019