INFORMATION NOTICE ON THE PROCESSING OF PERSONAL DATA

titolare-trattamento
CONTROLLER

Who decides the purposes and means of the collection?

Mapei Australia Pty Ltd (Mapei) is an APP Entity, which means that it is an organisation that is required to comply with the APP in relation to the collection¹ of personal data². Below you can find the contact details of Mapei:

Address: 180 Viking Drive, Wacol 4076, Queensland, Australia
Telephone: +61 7 3276 5000
E-mail: sales@mapei.com.au

In the present information notice, Mapei is also referred to as the 'Company' or 'Controller'

dati-trattati PROCESSED DATA

What kind of data do we collect?

We collect various personal data, to fulfill the processing purposes listed in the following paragraph. We process only common personal data³, including:

identification, contact and authentication data, i.e. user’s first and last name, e-mail (username) and password for sign up and login;
data spontaneously provided by the user while using the services, such as professional and banking information; and
navigation data within the website, using tracking tools such as technical cookies, analytics, profiling cookies; for further information on cookies, please refer to the cookie policy.

finalita

PURPOSES

For what purpose do we collect users’ data?

The collecting of user’s data is carried out for different purposes⁴:

creation of a MyMapei account;
marketing: sending of advertising and promotional material, both through automated and traditional means, related to services and products offered by the Company, invitation to events, market research, statistical analysis. Depending on the user's preferences, this activity may also include sending a periodical Newsletter by e-mail and/or sending Mapei’s international magazine by traditional mail, to the postal address provided by the user. You can find out more about the magazines and their contents at this link;
profiled marketing / profiling: analysis of the user's preferences, habits, behaviour, interests deduced from the data provided by the user and his/her interaction with the site, in combination with the data collected via cookies, to send personalised commercial communications and/or to carry out targeted promotional actions;
registration for online and/or in-person courses organised by the Company. In order to obtain professional training credits, professional information will be requested;
fulfilment of legal obligations provided for by applicable national and supranational regulations;
ascertainment, exercise or defence of the Controller's rights in court and/or out-of-court procedures.

necessarieta

NECESSITY

Is the collection of personal data necessary?

Third parties to who we disclose your personal information may include:

For some of the collection purposes listed above, it is necessary for the user to provide their data, without which we will not be able to provide our services; for others, the provision of data is optional. In particular, the provision of data marked with an asterisk (*) in the MyMapei registration form is mandatory for the purposes of creating the account itself; in the context of registration for training courses, the provision of the professional order number and the tax code is optional, but without them it will not be possible to obtain any professional training credits.

Consent to marketing and profiling is optional and revocable at any time⁵, in the appropriate section of your MyMapei profile, or by contacting the Controller at the following e-mail address sales@mapei.com.au.

soggetti-terzi

THIRD PARTIES

To whom could we communicate personal data?

The user’s data may be communicated to subjects acting as controllers such as, by way of example, authorities and supervisory and control bodies, persons, companies, associations or professional firms providing assistance and consulting services, and in general by public and private subjects entitled to request the data. The user’s data may be processed, on behalf of the Data Controller, by subjects subject who processes data on behalf of the Controller, who are given appropriate operating instructions.

These subjects are essentially included, by way of example, in the following categories:

a) companies that provide e-mail and hard-copy sending services;
b) companies that provide website and information system maintenance services;
c) companies that provide management and maintenance services for the Controller's database; and
d) companies that provide marketing automation platform management services.

For a complete list of third parties who processes data on behalf of the Controller, please send a request to sales@mapei.com.au.

extra-ue

INTERNATIONAL TRANSFERS

Could data be transferred to countries outside of Australia

Mapei may use cloud storage to store or host personal information we hold about you and the relevant IT servers may be located outside Australia. We may disclose your personal information to overseas entities in countries, including Italy.

There may be transfer of data outside of Australia, including to Italy, for the creation and use of the services available in the MyMapei profile.

If the data subject requests to receive the International Magazine in countries outside of Australia, personal data will also be processed outside of Australia, in order to allow the magazine to be sent by post.

diritti

RIGHTS

What are the data subject's rights?

By contacting the Company by e-mail at sales@mapei.com.au users may request access to their information or make a complaint with the Company regarding the collection of personal data or other relevant privacy concerns.

Data subjects have the right to withdraw their consent at any time, as well as to object – for reasons related to their particular situation – to processing carried out in pursuit of the legitimate interests of the data controller. Data subjects may withdraw and manage their consents via the channels indicated, or by contacting the Controller by e-mail at sales@mapei.com.au. Such withdrawal shall not affect the lawfulness of the processing based on the consent given before the withdrawal.

Finally, data subjects have the right to lodge a complaint with the competent supervisory authority⁶.

REFERENCES

¹An entity collects personal information only if the entity collects the personal information for inclusion in a record or generally available publication.

² Personal data means information or an opinion about an identified individual, or an individual who is reasonably identifiable:

(a) whether the information or opinion is true or not; and
(b) whether the information or opinion is recorded in a material form or not.

By way of example, a name, an identification number, location data, one or more factors specific to the physical, economic, cultural or social identity of that natural person.

³Personal data can be classified into two types: common data and special categories of personal data (also known as "sensitive data"). Special categories of data include data revealing racial or ethnic origin, political opinions, membership of a political association, religious beliefs or affiliations, philosophical beliefs, membership of a professional or trade association, membership of a trade union, or sexual orientation or practices, that is also personal information (ie: identifies a person or makes the person identifiable). This also encompasses health and genetic information about individuals, including biometrics.

⁴ Personal data may only be collected for specified, explicit and legitimate purposes.

⁵ Consent to the collection of personal data, in order to be compliant, must be express or implied. ‘Consent’ requires that:

(a)   the individual is adequately informed before giving consent;
(b)   the individual gives consent voluntarily;
(c)   the consent is current and specific; and
(d)   the individual has capacity to understand and communicate consent.

The interested party has the right to revoke his/her/their consent at any time: by accessing the appropriate section of your MyMapei profile you can choose to revoke your consent to marketing or select only the types of content that you are interested in (among generic marketing, newsletters and the international magazine).

⁶ The Office of the Australian Information Commissioner (OAIC) is the independent Australian national regulator for privacy and freedom of information. The data subject may contact the OAIC regarding an alleged infringement to lodge a complaint.