Information regarding processing of Personal Data
Controllership
This data protection information shall inform you in detail about how we, as a member of the multinational Heidelberg Materials Group, process your personal data in connection with customer feedback activities.
Purpose and means of data processing
We are interested in getting feedback from our customers about our service performance to secure and improve our service quality. To standardise the procedure, we have developed a survey (“NPS Survey”) which is made available to our customers upon agreement via an electronic platform (“NPS Survey Platform”).
Data categories
Based on your consent, we will reach out to you and process the personal data, which you submit to us to conduct the NPS Survey as described below. We use, inter alia, the following personal data to select you and carry out the NPS Survey: your full name, the company you work in along with its address, your job title as well as your phone number and email address.
In case you have agreed to be contacted by phone after you have participated in the NPS Survey on the NPS Survey Platform, we process additionally your voice.
In case you log in to the NPS Survey Platform, we process your log-in data to ensure authentication.
When using the Platform, we process so-called log files, in which access data are stored each time a page is accessed. The data record saved contains the following details:
Your IP address, the date, the time, to which the file was accessed, the status, the request made by your browser to the server, the amount of data transmitted and the webpage from which you accessed the requested page (referrer) as well as the product and version information of the browser used, your operating system and your country of origin.
All data mentioned in the paragraph above are hereinafter referred to as “Personal Data”.
The log data are routinely deleted after 30 days. In other words, all data contained therein is irretrievably deleted. The usage of the log files and its temporary storage is used to ensure a proper technical performance of the websites and to protect our websites against attacks and misuse. We do not use the log data for any other purposes. We process these data in accordance with Art. 6(1)(f) GDPR.
Cookies
Our website only uses necessary cookies. Necessary cookies do not require the consent of the user under applicable law.
You can configure your web browser in such a way that necessary cookies are also blocked, but you may then not be able to use the website as intended.
If the data processed with the help of necessary cookies can be viewed in individual cases as person related, the legal basis for such processing is Art. 6(1)(f) GDPR, as we have a legitimate interest in the operation of the website.
Purpose of data processing
The processing of your Personal Data is required for conducting the NPS Survey, reviewing your input and also for further communication with you via the NPS Survey Platform, by phone or by email (the “Customer Feedback”). The contact channel depends on the consent you have granted to us. Your Customer Feedback will be stored on the NPS Survey Platform and is being accessed and used as described below to improve our business relationship and Heidelberg Materials Group’s services in general. The data processing takes place in the NPS Survey Platform as well as in our upstream and downstream systems.
Data recipients
Service providers and auxiliary agents used by us in connection with the website, e.g. host providers, agencies and IT service providers may have access to your personal data. If these service providers and auxiliary agents process data on our behalf, they only act in accordance with our instructions and are contractually bound by us accordingly. This also applies to service providers which have their legal seat in a third country (outside the EU or the EEA).
In third countries, the same level of data protection may not be guaranteed as in the European Economic Area. If data is transferred to a third country, we ensure that this transfer only takes place in accordance with the statutory provisions (Chapter V GDPR). In this respect, we always orientate ourselves on the current case law and follow the applicable recommendations of authorities in order to be able to ensure that your data is protected at the same level as the GDPR.
We use for the processing of your Personal Data the services provided by GemSeek Consulting Ltd. Office 301, Galaxy Trade Center, 18, Schipchenski Prohod Blvd., 1113, Sofia, Bulgaria and its sub-processors, in particular Medallia Inc, which is the NPS Survey Platform Provider.
Your Personal Data will be processed by us only for conducting the NPS Survey, to receive and review your Customer Feedback and to derive measures therefrom to improve our services and Heidelberg Materials Group’s services in general.
Due to the organizational structure of the team dealing with customer satisfaction within Heidelberg Materials Group, your personal data may be anonymized and the anonymized Customer Feedback may be transmitted afterwards to Heidelberg Materials AG.
Legal basis
The data processing operations in connection to the NPS Survey will be based on your consent according to Art. 6(1)(a) GDPR and Art. 7 GDPR.
Note that you are not obliged in any form to provide us with your consent to the described data processing. You will not face any disadvantages if you do not consent; however, it will not be possible for you to give us your Customer Feedback in a structured format like the NPS Survey. Of course, you are welcome to provide us your feedback by other means (e.g. email, phone) if you wish.
Withdrawal of your consent
Your consent remains valid until you withdraw it. You can declare your withdrawal at any time with effect for the future without giving reasons by using the respective link in the invitation to the NPS Survey for deletion of your data, by reaching out to us via phone, in writing, or by email. Upon withdrawal of the consent, your collected and stored personal data will be deleted without undue delay. In case you do not revoke your consent, we will delete your personal data at the latest after 5 years.
Encryption
Data you insert on our website is transferred in encrypted form (Transport Layer Security – TLS). We take technical and organizational measures to secure our website and other systems against loss, destruction, access, modification or dissemination of your data by unauthorized persons.
Your rights
You have the right to obtain information about your personal data stored by us, to have incorrect personal data corrected, to restrict the processing of your personal data with effect for the future, to object to the processing of your personal data with effect for the future, or to request the deletion of your personal data. Under the conditions specified in Art. 20 GDPR, you are entitled to receive the personal data concerning yourself, which has been stored, in a structured, commonly used, and machine-readable format and to transmit this data to another controller without hindrance by us.