Privacy statement

This website is operated by Stichting AkzoNobel Art Foundation ("AkzoNobel" or "we").

This Privacy Statement provides information on the processing of personal data of Users ("User" or "you") of this website. Through this Privacy Statement, AkzoNobel strives to comply with data protection laws. This Privacy Statement may be changed from time to time. Users are advised to regularly review the Privacy Statement for possible changes.

This Privacy Statement was last changed on 29 May 2018.

1. SCOPE OF APPLICATION

This Privacy Statement is applicable to the processing of the personal data of users of the website.

2. DATA CONTROLLER

AkzoNobel is the controller for the processing of personal data of Users of the website.

3. PROCESSING DATA

3.1 For what purpose do we process your personal data?

We use your personal data for a number of different purposes. You will find an overview of the types of personal data we process, the purposes for which we process and the legal bases of our use of your personal data below.

(a) For surveys or other (marketing) communication

 What does this purpose entail?

We process your personal data when we send you surveys to request your feedback on our products and services. Or when we send you marketing communication, to keep you updated on events, special offers, products and services of AkzoNobel. You may choose to receive personalized commercial messages, including a personalized newsletter from AkzoNobel, tailored towards your personal preferences. For this we will create profiles and analyze your interactions with us. This way we learn about your interests and can ensure that we provide you with the information and promotions that are of most interest to you. We may also ask you for your opinion about our products and services. If you don’t want to receive any more messages or if you want to opt-out of receiving or seeing a particular form of communication with us (for example SMS, social media, e-mail or regular mail), just follow the steps in that particular communication (usually this will be to click the ‘unsubscribe’ button).

 Which personal information do we process for this purpose?

For this purpose we process your name, title, gender, contact information, e-mail address.

 What is the legal basis for processing?

We process this information on the basis of your consent, which can be withdrawn by you at any time.

4. COOKIES

Cookies are used to identify you with your shopping list or other information you wish to save; and to remember your details so you do not have to give them twice. Cookies are tiny bits of information that we put on your computer to enable us to recognise you next time you visit our website. Cookies do not tell us anything about you except what you allow us to know through ordering or browsing our site, or completing online forms. For security reasons, none of your personal information or account details are stored in the cookie. Most web browsers can be set not to accept cookies, or to notify you if a cookie is sent to you. We use cookies to make your experience on our website as smooth and efficient as possible, with information customised to your needs. For this purpose we also use cookies.

A User may refuse the use of cookies by selecting the appropriate settings on their browser, however please note that by doing this one may not be able to use the full functionality of the website.

5. ACCESS TO DATA

5.1 AUTHORISED EMPLOYEES ONLY. Only authorised AkzoNobel employees who will be bound to confidentiality will have access to your personal data and process your personal data only on a need–to-know basis to the extent required to perform the purposes as set out above.

5.2 EXTERNAL PARTIES. We may also use third-party service providers to perform certain data processing activities on our behalf, such as information technology and related infrastructure provision, security (including identity and access management) services, and legal, financial/accounting and other similar services.

5.3 GDPR COMPLIANCE. We have concluded data processing agreements with these data processors in accordance with the current data protection regulations and, after 25 May 2018, Regulation 2016/679 "General Data Protection Regulation" or "GDPR", on the basis of which the data processors are obligated to comply with our instructions, to maintain strict confidentiality of the personal data and to take appropriate security measures.

5.4 LEGAL OBLIGATION TO DISCLOSE. Only if we are required to do so by law, this personal data will be provided to supervisory agencies, fiscal authorities or investigative agencies. 

6. STORING PERSONAL DATA

6.1 STORAGE LOCATION. The personal data will be stored on servers in European Economic Area ("EEA").

6.2 BINDING CORPORATE RULES APPLY. We will respect personal data transfer restrictions in accordance with our Binding Corporate Rules (https://84e1202b204d21a1cb9b-0e1ab5244fd095dbeb138ed6f973369e.ssl.cf3.rackcdn.com/7082privacyrulesforcustomersupplierandbusinesspartnerdata.pdf).

6.3 ADEQUATELY PROTECTED COUNTRIES. We will not transfer (including by providing remote access) any personal data to a country that is not considered to provide an "adequate" level of protection for personal data without the proper (contractual and physical) safeguards in place at a similar level of protection as provided by our Binding Corporate Rules. We have taken the appropriate technical and organizational security measures against loss or unlawful processing of this data. To this purpose we use several security techniques including secure servers, firewalls and encryption, as well as physical safeguard of the locations where data are stored.

6.4 TRANSFER DATA OUTSIDE EEA. We may transfer personal data to recipients outside the EEA provided that:

(a) the recipients are located in a country, a territory or one or more specified sectors that are considered by the European Commission as providing an adequate level of data protection;

(b) only applicable for transfers to AkzoNobel entities: the transfer is governed by AkzoNobel’s Binding Corporate Rules (BCRs);

(c) the transfer is to a company that has certified to the EU – US Privacy Shield framework and/or the Swiss – US Privacy Shield framework; or

(d) we have otherwise provided appropriate safeguards pursuant to Article 46 of the GDPR, such as the use of Standard Contractual Clauses adopted by the European Commission or a Supervisory Authority.

7. SECURITY PERSONAL DATA

Your personal data are treated confidentially and we have taken technical and organizational security measures against loss or unlawful processing of this data. We use several security techniques including secure servers, firewalls and encryption, as well as physical safeguard of the locations where the data are stored.

8. DATA RETENTION PERIOD

We will retain your personal information for the period necessary to fulfil the purposes outlined in this Statement, unless a longer retention period is required or permitted by applicable law.

9. RIGHTS REGARDING PERSONAL DATA

You have certain rights with regard to your personal data. In accordance with the law you may have the right to a copy of your personal data, to rectify and erase your personal data or to restrict or object to the use of your personal data. In addition to that you may at any time withdraw the consent that you gave to using your personal data. Withdrawal of your consent will not affect the lawfulness of the processing based on your consent before the withdrawal. You also have the right to lodge a complaint with a supervisory authority.

10. BELOW THE AGE OF 16

Persons below the age of 16 may only provide personal data to us if they have written permission of one of their parents or their legal guardian who has read this Privacy Statement.

The parent(s) or legal representative of the minor User must read this privacy statement in the interest of the minor User and can exercise the rights of the relevant User instead of the minor User.

AkzoNobel advises parents or legal guardians to supervise the use of a minor User of the website and to make such Users aware of the use that their personal data can be made on the basis of this privacy statement.

11. CONTACT

11.1 CONTACT. Questions regarding the processing of your personal data may be addressed to Artfoundation@akzonobel.com. In order to process your request we will require (and therefore process) your name and contact details.

11.2 COMPLAINT. You may also lodge a complaint with a supervisory authority within your country the Netherlands.

12. UNSUBSCRIBE

If you have requested to be approached by us with marketing information, product launches events, etc., at any time you may choose to unsubscribe from receiving such communications by using the 'unsubscribe' button underneath every e-mail communication.

13. GOVERNING LAW

This Privacy Statement is governed by and construed in accordance with the laws of the Netherlands. To the maximum extent permitted by the applicable laws, any claim or dispute in relation to or in connection with this Privacy Statement will be submitted to the exclusive jurisdiction of the competent courts of the Netherlands.

14. FUTURE CHANGES OF PRIVACY STATEMENTS

Stichting AkzoNobel Art Foundation may adjust this privacy statement at any time.