Data Privacy Notice
This website is provided to you by Hydro Building Systems UK Ltd, Severn Drive, Tewkesbury, Gloucestershire, GL20 8SF. Hydro Building Systems UK Ltd is one of five divisions of Hydro; referred to as "Hydro" in these terms and conditions.
Hydro respects the privacy of users and processes all personal data in accordance with the General Data Protection Regulation (GDPR) and other relevant laws.
This Privacy Policy is intended to inform you what information we collect, why we collect it, what we intend to do with it and what choices you have regarding the use, access and correction of this personal information.
The parent company Norsk Hydro ASA has established Binding Corporate Rules (BCR) that apply to all Hydro legal entities, providing a legal basis for transfer of personal data within the Hydro group. You can read the BCR here.
1. Controller for Data Processing
Hydro is the Controller for the processing of personal data on this website (Site). Hydro respects your privacy and will process any personal data according to the EU General Data Protection Regulation (GDPR). The site is managed on Hydro’s behalf by Episerver DXC.
2. Collection and processing of personal data
When visiting the Site, some general identifiable information is retained and processed by Hydro. This includes your IP address, which we use to identify the country you are originating, and to suggest preferred language. If you submit information into contact fields or provide comments, or log in to sections on the webpage, any personal data that you voluntarily provide will be processed by Hydro and/or its affiliates depending on which Hydro part of the website you are visiting. We may also collect or create aggregated or anonymous data from usage activity on our Site, to help us better understand and improve the site features and functionality.
We do not store the data longer than necessary to fulfill the purposes for which the personal data were collected.
2. Why we process personal data
We process the personal data collected from the Site for the following purposes:
- To provide the Site to you and deliver any services requested by you, and to continuously improve the Site by analyzing traffic and usage on the various sections of the Site;
- We will send you newsletter and other marketing information if you have requested the information or given your consent. You can at any time withdraw your consent and opt-out of receiving information from us;
- If you have submitted a contact form, we use your provided personal data in order to answer your specific request;
4. Contact by e-mail or contact form
4.1 Requests and other purposes
When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, your name and telephone number if applicable) will be stored by us to answer your questions. As far as we ask for entries via our contact form which are not necessary for contacting you, we have always marked them as optional. This information serves us to concretise your inquiry and to improve the processing of your request. Any communication of this information is expressly on a voluntary basis and with your consent, Art. 6 Para. 1 lit. a) GDPR. Insofar as this involves information on communication channels (e.g. e-mail address, telephone number), you also agree that we may contact you via this communication channel in order to answer your request. You can of course revoke this consent at any time in the future.
We will delete the data collected in this context after storage is no longer required, or restrict processing if there are legal storage obligations.
4.2 Seminars
You can register for our seminars via a contact form. When you register, the data you provide (name, company, e-mail address etc.) will be stored by us in order to process your registration. As far as we ask for entries via our contact form which are not necessary for contacting you (here your comments), we have marked these as optional. The processing is carried out for the fulfilment of a contract, but at least for the implementation of pre-contractual measures which are carried out on the basis of your enquiry in accordance with Art. 6 Para. 1 lit. b) GDPR.
We also delete the data arising in this connection after storage is no longer required or restrict processing if there are legal retention periods.
5. Newsletter
With your consent you can subscribe to our newsletter, with which we inform you about our current offers.
We use the so-called double-opt-in procedure to subscribe to our newsletter. This means that after your registration, we will send you an e-mail to the e-mail address you provided, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within [24 hours], your information will be blocked and automatically deleted after one month.
In addition, we store your IP address and the time of registration and confirmation. The purpose of this procedure is to be able to verify your registration and, if necessary, to clarify any possible misuse of your personal data.
Your e-mail address is the only mandatory information for sending the newsletter. The provision of further, separately marked data is voluntary and is used to address you personally. After your confirmation we will save your e-mail address for the purpose of sending you the newsletter. The legal basis is Art. 6 Para. 1 lit. f) a GDPR.
You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. You can revoke your consent by clicking on the link provided in each newsletter e-mail or by e-mail to XXX.
6. Usage of Cookies
When you use our website, cookies are stored on your computer. Cookies are small text files that are stored on your hard disk, assigned to the browser you are using, and through which certain information flows to the site that sets the cookie. Cookies cannot execute programs or transfer viruses to your computer. They serve to make the Internet offer as a whole more user-friendly and effective.
The legal basis for the processing of personal data using cookies is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest in using Cookies lies in the user-friendly and more effective design of our website.
This website uses the following types of cookies, the scope and functioning of which are explained below:
6.1 Session Cookies
These cookies are automatically deleted when you close the browser. These include in particular the session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the common session. This enables your computer to be recognised when you return to our website. The session cookies are deleted when you log out or close the browser.
6.2 Persistent Cookies
These cookies are automatically deleted after a preset period of time, which may vary depending on the cookie. You can delete the cookies in the security settings of your browser at any time.
6.3 Preventing Cookies
You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. Please note that you may then not be able to use all the functions of this website.
In addition, when using our website, you can use the so-called cookie banner to click on the "I do not agree" button. This sets a so-called "Do-Not-Track" cookie, which ensures that unnecessary cookies are not set.
7. Social-Plugins
7.1 Google YouTube
We use services on our website from YouTube, LLC 901 Cherry Ave., 94066 San Bruno, CA, USA, a Google Inc. company, Amphitheatre Parkway, Mountain View, CA 94043, USA.
This always assumes that the providers of this content (hereinafter referred to as "third-party providers") are aware of the IP address of the users. This is because without the IP address they would not be able to send the content to the browser of the respective user. The IP address is therefore necessary for the display of this content. We make every effort to use only such content whose respective providers use the IP address only to deliver the content. However, we have no influence if the third-party providers store the IP address for statistical purposes, for example. As far as we are aware of this, we inform the users about it. The legal basis for this is Art. 6 Para. 1 lit. f) GDPR. The legitimate interest here lies in the analysis, optimisation and economic operation of our Website and related services.
7.2 Google Maps
This site uses the map service Google Maps. Google Maps is a map service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
In order to use the functions of Google Maps, information, including the IP address and the address entered as part of the route function, may be transmitted to the provider's servers. This information is usually transferred to a Google server in the USA and stored there. When you visit a website that contains Google Maps, your browser establishes a direct connection with the Google servers, whereby the map content is sent to your browser and integrated by it. The provider of this site has no influence on this data transmission. According to current knowledge, this includes the following data:
- Date and time of your visit to the website in question,
- Internet address or URL of the web page called up,
- IP address, (start) address entered during route planning
The use of Google Maps is in the interest of an attractive presentation of our online offers and easy findability of the places we have indicated on the website. If you do not want Google to process data via this service, you can deactivate the use of JavaScript in your browser settings. Please note that in this case the interactive map function of Google Maps cannot be used.
For more information on how we handle user data, please see Google's privacy policy: https://www.google.de/intl/de/policies/privacy/.
The legal basis for this is your consent, Art. 6 Para. 1 lit. a) GDPR.
8. Website Analytics
For the purpose of analysing and optimising our websites, we use various services which are described below. For example, we can analyse how many users visit our site, which information is most in demand or how users find the offer. Among other things, we collect data about the website from which a person concerned came to a website (so-called referrer), which subpages of the website were accessed or how often and for how long a subpage was viewed. This helps us to design and improve our services in a user-friendly manner. The data collected in the process is not used to identify individual users personally. Anonymous or at most pseudonymous data is collected. The legal basis for this is Art. 6 Para. 1 lit. f) GDPR.
The legitimate interest of the person responsible lies in the optimization of his website by means of website analysis programs.
8.1 Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The usage includes the operating mode Universal Analytics. This makes it possible to assign data, sessions and interactions across multiple devices to a pseudonymous user ID and thus to analyze the activities of a user across devices.
Google Analytics uses cookies that enable an analysis of your use of the website. The information generated by the cookie about your use of the website is usually transferred to a Google server in the USA and stored there. However, in the event that IP anonymisation is activated on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. The IP address transmitted by your browser within the scope of Google Analytics is not merged with other Google data. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on the website activities and to provide further services to the website operator in connection with the use of the website and the Internet. These purposes also include our legitimate interest in data processing. To ensure the legality of the processing, we process your data by means of Google Analytics only on the basis of your consent, Art. 6 Para. 1 lit. a) GDPR. You can of course revoke your consent at any time. The data sent by us and linked to cookies, user IDs (e.g. user ID) or advertising IDs are automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month. You can find more information on terms of use and data protection at https://www.google.com/analytics/terms/de.html or https://policies.google.com/
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the https://tools.google.com/dlpage/gaoptout?hl=de Opt-out cookies prevent the future collection of your data when visiting this website. In order to prevent Universal Analytics from collecting data across multiple devices, you must opt-out on all systems in use. Click here to set the opt-out cookie:
8.2 Pardot tracking script:
A Pardot tracking script is added to our website which tracks visitors’ IP address to identify page views and time spent on page. Data tracked is the IP address only, unless you proactively identify yourself through a Pardot contact form where a clear consent needs to be actively ticked off. It is only when a consent has been given and personal details have been provided by you, that we will see your email address and other personal information provided by you. This information is stored through third party supplier Pardot. The purpose for our use of tracking by Pardot is to be able to provide visitors with information especially relevant to them, in cases where they have given their consent to this use.
You will find more information on: https://www.salesforce.com/company/privacy/
8.3 Google Tag Manager
Google Tag Manager is used for tracking which pages IP addresses visit and time spent on each page. This is also used for tracking activities provided by the IP addess such as videos played, forms submitted and movement around the site. All data is anonymised before being sent to Google Analytics, which reports the data tracked by Google Tag Manager.
8.4 Google Search Console
Google Search Console is used to monitor the site performance and sends information about search queries to Google Analytics.
All data is aggregated, and no data tracked by Google Tag Manager, Google Search Console, or any data reported in Google Analytics is connected to the personal information of users, just the IP address.
You can find more on Google Analytics and how the data is collected here.
9. Advertisment / Marketing
We use cookies for marketing purposes in order to address our users with advertising that is in line with their interests. In addition, we use cookies to limit the likelihood of an advertisement being played and to measure the effectiveness of our advertising efforts. This information may also be shared with third parties, such as ad networks. The legal basis for this is Art. 6 Para. 1 lit. a) and f) GDPR. Direct marketing has a legitimate interest for the purposes pursued with the data processing. You have the right to object at any time to the processing of your data for the purposes of such advertising. For this purpose, we provide you with opt-out options for the respective services in the following. Alternatively, you can prevent the setting of cookies in your browser settings.
9.1 DoubleClick by Google
We use on our website the online marketing tool DoubleClick by Google. DoubleClick uses cookies to display ads that are relevant to users, to improve campaign performance reports, or to prevent users from seeing the same ads more than once. Google uses a cookie ID to help identify which ads are shown in which browser. This prevents the same ad from being shown more than once. DoubleClick may also use cookie IDs to track conversions related to ads. For example, if a user sees a DoubleClick ad and later visits the advertiser's website using the same browser and makes a purchase.
When a user visits a page that uses DoubleClick and where the DoubleClick script is enabled, your browser automatically establishes a direct connection with Google's server. We as the website operator have no influence on the scope and further use of the data collected by Google through the use of this tool. We inform you according to our state of knowledge: By integrating DoubleClick, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will find out your IP address and save it.
Google has submitted to the EU-US Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI
There are several ways you can prevent detection by this tracking procedure: a. by setting your browser accordingly. Suppressing third-party cookies means that you will not see third-party ads. b. By disabling cookies for conversion tracking, you prevent interest-based advertising from being displayed. To do this, you must block cookies from the domain "www.googleadservices.com" in your browser. c. You can set an opt-out cookie at https://www.google.de/settings/ads. However, this setting will be deleted if you delete all your cookies. d. By deactivating the interest-based ads of the providers that are part of the self-regulation campaign "About Ads" via the link http://www.aboutads.info/choices, whereby this setting will be deleted if you delete your cookies; d. By permanently deactivating cookies in your browser under the link https://www.google.com/settings/ads/plugin. We would like to point out that in this case you may not be able to use all functions of our website to their full extent.
Further information about DoubleClick by Google can be found at https://www.google.de/doubleclick and https://support.google.com/adsense/answer/2839090, and about data protection at Google in general: https://www.google.de/intl/de/policies/privacy. Alternatively, you can visit the Network Advertising Initiative (NAI) website at https://www.networkadvertising.org.
10. Your Rights
You have the following rights in relation to the processing of your personal data:
10.1 General Rights
You have a right of access, rectification, erasure, restriction of processing, objection to processing and data transferability. Insofar as processing is based on your consent, you have the right to revoke this consent with effect for the future.
10.2 Rights regarding data processing based on our legitimate interests
Under Article 21 Para 1 GDPR, you have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6 Para 1 letter e) GDPR (data processing in the public interest) or Article 6 Para 1 letter f) GDPR (data processing to safeguard a legitimate interest), including profiling based on this provision. In the event of your objection, we will no longer process your personal data, unless we can prove compelling reasons for processing that are justifiedand outweigh your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.
10.3 Rights regarding direct advertisments
If we process your personal data for the purpose of direct marketing, you have the right to object at any time to the processing of personal data relating to you for the purpose of such marketing, including profiling, in so far as it is connected with such direct marketing, in accordance with Art. 21 Para. 2 GDPR.
If you object to processing for the purpose of direct marketing, we will no longer process your personal data for these purposes.
10.4 Right to lodge a complaint with a supervisory authority
You also have the right to complain to a Data Protection Supervisory Authority about the processing of your personal data by us.
11. Data Transfer to Third Parties
Your data will not be transferred to third parties unless we are legally obliged to do so, or the transfer of data is necessary for the execution of the contractual relationship, or you have previously given your express consent to the transfer of your data.
External service providers and partner companies will only receive your data to the extent that this is necessary to carry out our services. In these cases, however, the scope of the transmitted data is limited to the required minimum. As far as our service providers come into contact with your personal data, we ensure within the scope of order processing in accordance with Art. 28 GDPR that they comply with the regulations of the data protection laws in the same way. Please also note the respective data protection notices of the service providers. The respective service provider is responsible for the contents of external services, whereby we check the services for compliance with the legal requirements within the scope of reasonableness.
We attach importance to processing your data within the EU / EEA. However, it may happen that we use service providers who process data outside the EU / EEA. In these cases, we ensure that an adequate level of data protection is established at the recipient before your personal data is transferred. This means that by means of EU standard contracts or an adequacy finding, such as the EU Privacy Shield, a level of data protection is achieved that is comparable to the standards within the EU.
12. Data Security
We have taken extensive technical and operational precautions to protect your data from accidental or deliberate manipulation, loss, destruction or access by unauthorised persons. Our security procedures are regularly reviewed and adapted to technological progress.
We regularly review our data protection regulations. This data protection information was last updated in June 2020.
