Personal Data Protection PolicyDnipro 31.05.2019
PERSONAL DATA PROTECTION POLICY OF INTERPIPE UKRAINE, LLC
Interpipe respects the privacy of its partners, clients, employees and online visitors and complies with applicable laws for the protection of such privacy, including, without limitation, the European Union General Data Protection Regulation ("GDPR") and other applicable regulations.
“BENEFICIARY” – means an owner of the Personal Data or a user of any of Interpipe’s web-sites or related services.
“Interpipe” – means each and every company from the list [linked or below] or all of them together as a Group:
Interpipe Ukraine LLC, represented at the following sources:
- Main website
- Informational websites with brief pieces of news
- Landing page for hiring
- Interpipe TechFest website
- Purchasing website
- Interpipe NTRP
- Interpipe Niko Tube
- Interpipe NMPP
- Interpipe Steel
- Dneprosteel Energo
- Interpipe Vtormet
- Interpipe Middle East
- North American Interpipe
- Interpipe Europe
- Interpipe M
- Interpipe Unified Medical Care Center
“Personal Data” means any information that can either itself identify BENEFICIARY as an individual ("Personally Identifying Information") or that can be connected to the BENEFICIARY indirectly by linking it to Personally Identifying Information.
Interpipe also processes anonymous data, aggregated or not, to analyze and produce statistics related to the usage patterns and demographics of online-visitors as a group or as individuals. Such anonymous data does not allow the identification of the customers to which it relates. Interpipe may share such anonymous data, aggregated or not, with third parties.
2. Why Interpipe сollects and processes Personal Data
Interpipe collects and processes Personal Data based on the following reasons:
a) where it is necessary for the performance of the agreements with Interpipe’s partners/clients to comply with the local legislation;
b) where it is necessary for compliance with legal obligations that Interpipe is subject to (e.g. obligations to keep certain information under tax laws and regulations);
c) where it is necessary for the purposes of the legitimate and legal interests of Interpipe or a third party, except where such interests are overridden by Beneficiary’s prevailing legitimate interests and rights; or
d) where the Beneficiary have given consent to it.
These reasons for collecting and processing Personal Data determine and limit what Personal Data Interpipe collects and how it is used (section 3), how long it is stored (section 4), who has access to it (section 5) and what rights and other control mechanisms are available to the data Beneficiary (section 6).
3. What Personal Data Interpipe collects and processes
3.1. Online information [Global IP Address]
When an online visitor enters one of Interpipe’s web-sites for the first time, the servers log the global IP address, which is a number that is automatically assigned to the network visitor’s computer is part of. The visitor is not required to set up an account, choose a user name and/or a password or provide any other Personal Data.
There is also another way for Interpipe to collect and process Beneficiary’s Personal Data online - via special form whenever any of the Beneficiaries decides to submit his (hers) data via the platforms described in the Definition chapter to be able to participate in Suppliers’ Tenders, purchase Interpipe’s products or participate in PR/HR activities.
Personal Data collected online may include, but is not limited to, browser and device information, interactions with our web-pages and sites’ usage data.
3.2. Other Data
Interpipe will collect and process Personal Data whenever it is explicitly provided to us or sent as part of regular business communication with our employees or agents, or when Beneficiary provides feedback or other user generated content. This data includes:
- Information that Beneficiary post, comment or follow in any of our web-pages (including, but not limited to FB, Twitter, Instragram, else);
- Information sent in emails;
- Information Beneficiary provides when Beneficiary request information or support from us or purchase Products and Services from us, including information necessary to process orders with the relevant payment methods or shipping providers/other kind of agents;
- Information provided by Beneficiary when Beneficiary wants to sell Products and Services to us, including but not limited to participation in tenders or other activities arranged by Interpipe, or responding to surveys, including Beneficiary’s contact details.
3.3. Personal Data required for employment
In order to:
- evaluate any possible candidate for employment;
- make and offer for employment;
- employ a person to any of Interpipe’s subsidiaries,
any Beneficiary may be requested to provide curriculum vitae and copies of other supporting documents which will contain Personal Data to Interpipe. This information and/or documents will be processed and stored as per Interpipe’s subsidiary local laws and regulations requirements.
3.4. Tracking Data and Cookies
When Beneficiary visit any of our services, our servers log Beneficiary’s global IP address, which is a number that is automatically assigned to the network Beneficiary’s computer is part of.
3.5. Google Analytics
Interpipe’s websites use Google Analytics, which is a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on visitors' computers, to help the website operators analyze how visitors use the site. The information generated by the cookie about the visitors' use of the website will generally be transmitted to and stored by Google on servers in the United States.
On Interpipe’s websites, IP anonymization has been activated. The IP addresses of users visiting webpages of Interpipe will be shortened. Only in exceptional cases will a complete IP address be transferred to a Google server in the United States and shortened there. On behalf of the website operator, Google will use this information for the purpose of evaluating the website for its users, in order to compile reports on website activity, and to provide other services relating to website activity and internet usage for website operators.
Furthermore, users can prevent the collection of data about their use of the website (including their IP address) generated by the cookie, and the processing of data by Google, by downloading and installing the browser plug-in through the following link: http://tools.google.com/dlpage/gaoptout?hl=en.
3.6. Content Recommendations
We may process information collected under this section 3 so that content, products and services shown on the pages of the Interpipe can be improved to meet our clients’ needs. This is done to improve our clients’ experience.
4. How Long is the Data stored
The collected information will be only stored as long as necessary for the purposes for which the information is collected and processed. In case any applicable legislation provides for longer storage and retention period — we will pursue the law requirements. After that Beneficiary’s Personal Data will be deleted, blocked or anonymized, as provided by applicable law.
- If a person exercises a right to object the processing of the Personal Data, we will review an objection and delete any Personal Data that Interpipe or any of its partners has collected and processed without undue delay, unless the opposite is required by the applicable law.
- If a person withdraw the consent on which the Personal Data of such person is processed, Interpipe will delete any Personal Data without undue delay to the extent that the collection and processing of the Personal Data was based on such withdrawn consent.
5. Who Has Access to Data
5.1. Interpipe and its subsidiaries may share Beneficiary’s collected Personal Data with each other to achieve the purposes mentioned in section 2 of this Policy.
5.2. Interpipe may also share collected Personal Data with its third party providers. In such case any Personal Data will be used in accordance with this Policy and only as far as this is necessary for performing required services.
5.3. Interpipe may release Personal Data to comply with court orders or laws and regulations that require us to disclose such information.
6. Beneficiary’s Rights and Control Mechanisms
The data protection laws and regulations of the European Union and other countries grant their citizens and visitors certain rights in relation to their Personal Data.
As a resident (or a visitor, whose Personal Data is being processed while Beneficiary are in the European Union, in certain cases) of the European Union Beneficiary has the following rights in relation to the Personal Data:
6.1. Right of Access.
Beneficiary has the right to access his/hers Personal Data, i.e. the right to require free of charge (i) information whether such Personal Data is retained, (ii) access to and/or (iii) duplicates of the Personal Data retained
6.2. Right to Rectification.
If Interpipe processes Beneficiary’s Personal Data, Beneficiary have the right to obtain from Interpipe, without undue delay, the rectification of inaccurate Personal Data. Taking into account the purposes of the processing, the Beneficiary shall have the right to have incomplete personal data completed, including, but not limited to, by means of providing a supplementary statement.
6.3. Right to Erasure.
Beneficiary has the right to obtain deletion of Personal Data concerning him/her if the reason why Interpipe collected such Personal Data does not exist anymore or if there is legal ground for its erasure. Beneficiary can request the full deletion of his/hers Personal Data via request to the Data Protection Officer of Interpipe[AAP1] .
6.4 Right to Object.
When the processing of Beneficiary’s Personal Data is based on Interpipe’s legitimate interests according to Article 6(1)(f) of the GDPR / section 2 of this Policy, Beneficiary have the right to object to this processing. If Beneficiary objects Interpipe will no longer process his/hers Personal Data unless there are compelling and prevailing legitimate grounds for the processing as described in Article 21 of the GDPR; in particular if the data is necessary for the establishment, exercise or defense of legal claims.
Beneficiary also has the right to file a complaint to a supervisory authority.
6.5 Right to restriction of processing of Beneficiary’s Personal Data
Beneficiary has the right to obtain restriction of processing of his/hers Personal Data under the conditions set out in article 18 of the GDPR.
6.6 Right to Personal Data portability
Beneficiary has the right to receive his/hers Personal Data in a structured, commonly used and machine-readable format and has the right to transmit that data to another controller under the conditions set out in article 20 of the GDPR.
7. Contact Info
Beneficiary can contact Interpipe's data protection officer at the address below.
Att. Data Protection officer
address: 01032. Saksaganskogo str., 36b, office 21, Kyiv, Ukraine
8. Other regulations
Being a responsible and law abiding company Interpipe also complies with all local applicable laws and regulations in all jurisdictions of its business. If Beneficiary requires any specific clarification – he/she can contact our DPO for that matter.