Pursuant to art. 13 of EU Regulation 2016/679 (“GDPR”), Aalborg Portland Holding A/S (“Aalborg Portland Holding” or the “Data Controller”) - with registered office at Rørdalsvej 44, 9220 Aalborg East, Denmark - in its capacity as Data Controller, represented by the legal representative, hereby informs you about the purposes and methods of processing personal data provided by filling in the appropriate form in the "new registration" section of the www.aalborgwhite.com site (the "Site") as well as the rights recognized by the GDPR with regard to the processing of personal data and their free circulation.
1. Identity and contact information of the Data Controller
The Data Controller is Aalborg Portland Holding, represented by the legal representative, and may be contacted by registered letter to be sent to the branch and operating office at Rørdalsvej 44, 9220 Aalborg East, Denmark, or by email to the email address: privacy@aalborgportland.com
2. Source of personal data
Personal data are collected directly from the data subject.
3.Purposes and lawfulness of the processing
Personal data are processed by the Data Controller pursuant to art. 6 of the GDPR The specific purposes of the processing and the relative legal bases are listed below:
| Purpose of the processing | Legal basis of the processing |
|---|---|
| Registration at the Site for Aalborg White cement and its various potential uses, whit access to “E-learning” section, to “Product data sheets” section to know specific cement’s characteristics and quality, to “cement information” section, to inform about commercial news. | Pursuit of the legitimate interests of the data controller or third parties1 |
| Analysis of the information filled in by the user for registration on the Site in order to qualify the company or the professional as customer or prospect to regulate access (i) to “e-learning” section or (ii) to "product data sheet" or “cement information" section | Pursuit of the legitimate interests of the data controller or third parties2 |
| To send advertising material and/or marketing communications and/or communications and/or invitations to events such as fairs and/or events and /or sector meetings also organized by Aalborg Portland Group companies, in order to promote Aalborg White cement and brand. To send newsletters. | Express consent of data subject |
1Access to the Site, management of login credentials and their security, dissemination of knowledge of Aalborg White cement brand, of its potential, characteristics, commercial innovation between customers and prospects.
2Interest of the Data Controller in selecting user access to the reserved areas of the Site; interest of the Data Controller in making available only to Aalborg Portland Group’s customers the information relating to “product data sheets” and “cement information”, as strictly confidential and reserved.
4.Nature of data provision and consequences of refusal
Data provision is necessary for processing operations for Aalborg Portland Holding’s legitimate interests. The provision of data processed based on consent is instead optional and requires your consent, which you may always withdraw according to the methods described below. Whit your specific consent, Data Controller can process your personal data for direct marketing purposes and therefore for the purpose of sending newsletters, advertising material and / or marketing communications and / or communications and / or invitations to events, such as fairs and / or events and / or sector meetings also organized by the companies of the Aalborg Portland Group, in order to promote Aalborg White cement and brand. To achieve the aforementioned purpose, the Data Controller will also use automated contact methods (use of e-mail). Failure to consent will make it impossible for the Data Controller to send the aforementioned communications for promotional and marketing purposes, but this will not prevent you from using the information services provided by the Site.
5. Method of processing personal data
The processing of personal data will take place in compliance with the provisions of the GDPR, using paper, IT and telematic tools, with logic strictly related to the purposes indicated, and, in any case, with suitable methods to guarantee their security and confidentiality in accordance with the provisions of the article 32 GDPR.
6. Categories of personal data recipients and subjects who may become aware of them
For the pursuit of purpose described above, personal data may be communicated to other Aalborg Portland Group’s companies. Moreover personal data may be disclosed to the company used by the Data Controller for the hosting and website maintenance services. The aforementioned subjects are qualified as "Data Processors" specifically appointed by Aalborg Portland Holding, pursuant to art. 28 of the GDPR or as autonomous "data controllers". Personal data will also be processed by internal parties authorised to process them by the Data Controller. Personal data are not disclosed.
7. Transfers outside the EU
For the pursuit of the processing purpose described above, personal data may be transferred to the recipients specified above in Denmark and EU. In no case personal data will be transferred outside the European Union.
8. Period for which personal data are stored
The personal data processed by Aalborg Portland Holding will be stored for the time necessary for the purposes for which they were collected or subsequently processed. Below, details concerning the time period for which the data will be stored for the purpose described above:
| Purpose of the processing | company | Time limits for erasure |
|---|---|---|
| Registration at the Site for Aalborg White cement and its various potential uses, whit access to “E-learning” section, to “Product data sheets” section to know specific cement’s characteristics and quality, to “cement information” section, to inform about commercial news. |
Name, surname Email address password company Position |
Until the request for cancellation from the “new registration” section (*) |
| Analysis of the information filled in by the user for registration on the Site in order to qualify the company or the professional as customer or prospect to regulate access (i) to “e-learning” section or (ii) to "product data sheet" or “cement information" section. |
Name, surname Email address company Position |
Until the request for cancellation from the “new registration” section |
| To send advertising material and/or marketing communications and/or communications and/or invitations to events such as fairs and/or events and /or sector meetings also organized by Aalborg Portland Group Companies, in order to promote Aalborg White cement and brand. To send newsletters. |
Name, surname Email address company Position |
Until the withdrawal of consent and / or the request for cancellation from the “new registration” section. |
(*) the request for cancellation from the “new registration” section can be sent by registered letter with advice of receipt to the Data Controller at the following address: Rørdalsvej 44, 9220 Aalborg East, Denmark, or by email to the email address: privacy@aalborgportland.com.
9. Automated decision-making
To achieve the purposes of processing described above, no decision is taken that is based solely on automated processing and produces legal effects concerning the Data Subject or similarly significantly affects the Data Subject.
10. Rights of the data subject
Pursuant to and in accordance with the GDPR, Data Subject is recognised the following rights which may be exercised with respect to Data Controller:
a) right to obtain from the Data Controller confirmation as to whether or not personal data of Data Subject are being processed, and, where that is the case, access to the personal data and the information set forth in Article 15 and specially on the purposes of the processing, categories of personal data concerned, recipients or categories of recipient to whom the personal data have been or shall be disclosed, period for which the personal data shall be stored, etc.;
b) right to have your personal data rectified if inaccurate as well as supplemented when deemed incomplete again in relation to the purposes of the processing (Article 16);
c) right to erasure of data (“right to be forgotten”), in one of the circumstances set forth in Article 17;
d) right to restriction of processing, in the cases envisaged in Article 18;
e) right to data portability pursuant to Article 20;
f) right to object to processing pursuant to Article 21;
g) right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal, only when the consent provides the legal basis of the processing (Article 7).
Such rights may be exercised by sending a request by registered letter with advice of receipt to the Data Controller at the following address: Rørdalsvej 44, 9220 Aalborg, Denmark, or by email to the email address: privacy@aalborgportland.com.
The right sub g) may also be exercised directly through the Site, upon accessing / log in with the authentication credentials, on the user's personal profile page (https://aalborgwhite.com/user) where it is possible to modify the choice of consent - or not - to the processing for marketing purposes, as well as verify and / or modify the personal data provided. Data Subject has the right to submit a complaint to the Personal Data Protection Authority or to another Supervisory Authority pursuant to art. 13, par. 2, letter d) of the GDPR.
11. Changes to this Disclosure
The Data Controller reserves the right to modify and update this disclosure over time.