SitePrivacy policy

Privacy policy

1. About this Privacy Policy

1.1 This Privacy Policy applies to the websites (hereinafter: "Website") operated by Ideal Standard International NV and its affiliates (hereinafter: "Ideal Standard", "we", "our" and "us") and to the processing of personal information by Ideal Standard as contemplated in this privacy policy. Any reference to "you" or "your" means you, the user.

1.2 Ideal Standard respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy describes how we collect and use your personal information that we may collect about you through the Website and from our communications with you.

1.3 This Privacy Policy does not apply to the processing of personal data of people who choose to apply job opportunity via our recruitment website. The processing of personal data of Applicants via such recruitment website is governed by a separate privacy policy, which can be consulted via that website.

1.4 Please note that we use cookies through this Website. Cookies are small text files that are stored on a device’s storage medium and contain certain information and sometimes personal data. For more information on the way we use cookies, we refer to our cookie policy.

2. In general

2.1 Your personal data are processed by Ideal Standard International NV, having its offices at 1930 Zaventem, Da Vincilaan 2, registered with the Crossroad Bank of Enterprises under the number 0891.422.179, and its affiliate companies of the Ideal Standard Group (hereinafter “we”, “us”, “our”, “Ideal Standard”). You can contact us via e-mail at compliance@idealstandard.com.

2.2 A reference in this Privacy Policy to certain laws or regulations also includes any change, replacement or annulment of these laws or regulations, including any related executive decisions.

2.3 We reserve the right to modify, change or amend this Privacy Policy from time to time at our own discretion. Such modification, change or amendment will be communicated via the Website. Your use of the Website constitutes acceptance of our Privacy Policy at all times.

3. Types of personal data we process

3.1 Every time that you visit or use our Website, we collect:

• Technical information relating to the devices that you use, such as the IP-address, browser type, geographical location and operating system;
• Information that relates to your browser behaviour, such as how long you visit, which links you click on, which pages you visit or how many times you visit a certain page.

For contact form
3.2 When you fill out a contact form on our Website, or contact us via e-mail, telephone, fax or social media channels, we collect:
• The identity information you provide us with, such as your name, e-mail address, postal address, phone number and mobile telephone number;
• The content of your communication or enquiry and the technical details of the communication itself (such as with whom you correspond at our end, date and time, etc.);
• Your preferences with regard to the communication medium used;
• Publicly available information of your profile on social media channels;
• Any other personal data you choose to provide to us;

For wishlist
3.3 When you create a wishlist, we collect:
• The identity information you provide us with, such as your name and e-mail address;
• The products you place on your wishlist;
• The people you share your wishlist with.

For entering into agreement
3.4 When we enter into an agreement with you or for the performance of that agreement, we collect:
• Your VAT number;
• Your delivery and /or invoice address.

3.5 All of the personal data mentioned above, we receive directly from you. It is possible that we receive additional information about your preferences and surfing behaviour from partners such as Google. If you require more information about the personal data these parties process about you and make available to others, we refer you to their respective privacy policies.

4. Purposes for which we collect and use your personal data and the legal grounds on which these purposes are based

The purposes
We process your personal data to provide you specific information concerning our services and products that you request via the Website, by email, telephone, fax or social media channels
The legal grounds
In order to take steps prior to entering into a contract with us, we may base the processing of your personal data on the necessity for the performance of that contract, or in the process of entering into that contract.

The purposes
Except if you are an existing customer who has already purchased similar goods or services from us and who we wish to target with our own commercial messages, we will only send you communications, promotions, offerings, newsletters and other advertisements via email or other communication channels, if you explicitly consented to receiving such communications, promotions, offerings, newsletters and other advertisements.
The legal grounds
This processing activity is based on your consent.

The purposes
We process your personal data to comply with legal obligations or to comply with any reasonable request from competent law enforcement agents or representatives, judicial authorities, governmental agencies or bodies, including competent data protection authorities.

Your personal data may be transferred upon our own initiative to the police or the judicial authorities as evidence or if there are justified suspicions of an unlawful act or crime committed by you through your registration with or use of the Website, our social media channels or other communication with us.
The legal grounds
This processing activity is necessary to comply with legal obligations imposed on us.

The purposes
We process your personal data to perform statistical analyses or in the context of surveys so that we may improve our Website, advertisements, products and services or to develop new products and services.

We process your personal data to conduct market research and business development.

We process your personal data for marketing purposes, such as to provide you with targeted communications, newsletters, promotions, offerings and commercial messages of Ideal Standard and selected partners.

We may process your personal data for informing any third party in the context of a possible merger with, acquisition from/by or demerger by that third party, even if that third party is located outside the EU.

We may also process your personal data for the preservation of the legitimate interests of us, our partners or a third party if and when your registration with or use of the Services can be considered (a) a violation of the Terms or the intellectual property rights or any other right of a third party, (b) a threat to the security or integrity of the Website, (c) a danger to the Website or any of our or its subcontractors’ underlying systems due to viruses, Trojan horses, spyware, malware or any other form of malicious code, or (d) in any way hateful, obscene, discriminating, racist, slanderous, spiteful, hurtful or in some other way inappropriate or illegal.
The legal grounds
For these purposes, the processing of your personal data is based on our legitimate interests, such as:
• Continuous improvements of our Website, social media channels, products and services to ensure that you have the best experience possible;
• Keeping our Website, social media channels, products and services safe from misuse and illegal activity;
• Marketing and promotion of our products, services, brands and overall successful.

5. To whom we send your personal data

5.1 We rely on third party processors to provide you our Website and to process your personal data on our behalf. These third party processors are only allowed to process your personal on our behalf upon our explicit written instructions.

5.2 We warrant that all third party processors are selected with due care and are obliged to ensure the safety and integrity of your personal data.

5.3 We may share your personal data with other entities within the Ideal Standard Group. However, we will ensure that all Ideal Standard entities will take due care that all processing of your personal data is in line with what is set out in this Privacy Policy.

5.4 We do not send your personal data in an identifiable manner to any other party than the ones mentioned in Articles 5.1 and 5.2 without your explicit permission to do so. However, we may send anonymised data to other organisations that may use those data for improving products and services as well as to tailor the marking, displaying and selling of those goods and services.

6. Location and transfer

6.1 We process your personal data within the European Economic Area (EEA). However, in order to process your personal data for the purposes outlined in Article 4 above, we may also transfer your personal data to other Ideal Standard entities or to third parties who process your personal data on our behalf outside the EEA. Each entity outside the EEA that processes your personal data will be bound to observe adequate safeguards with regard to the processing of your personal data. Such safeguards will be the consequence of:

• The recipient country having legislation in place which may be considered equivalent to the protection offered within the EEA; or
• A contractual arrangement between us and that entity, such as an agreement based on the European Commission’s Standard Contractual Clauses.

6.2 We may transfer anonymized and/or aggregated data to organisations outside the EEA. Should such transfer take place, we will ensure that there are safeguards in place to ensure the safety and integrity of your data and all rights with respect to your personal data you might enjoy under applicable mandatory law.

7. Quality assurances

7.1 We do our utmost best to process only the personal data which are necessary to achieve the purposes listed under Article 4 of this Privacy Policy.

7.2 Your personal data are only processed for as long as needed to achieve the purposes listed under Article 4 of this Privacy Policy or up until such time where you withdraw your consent for processing them. Note that withdrawal of consent may imply that you can no longer use the whole or part of the Website. We will de-identify your personal data when they are no longer necessary for the purposes outlined in Article 4, unless there is:
• an overriding interest of us, or any other third party, in keeping your personal data identifiable;
• A legal or regulatory obligation or a judicial or administrative order that prevents us from de-identifying them.

7.3 You understand that an essential aspect of our marketing efforts pertains to making our marketing materials more relevant to you. We do this by customising your unique profile based on relevant characteristics as outlined in Article 3 of this Privacy Policy and then uses this profile to provide you with communications, promotions, offerings, newsletters and other advertisements about products and services that may interest you.

7.4 We will take the appropriate technical and organisational measures to keep your personal data safe from unauthorized access or theft as well as accidental loss, tampering or destruction. Access by our personnel or its third party processors will only be on a need-to-know basis and subject to strict confidentiality obligations. You understand, however, that safety and security are best efforts obligations only which can never be guaranteed.

7.5 If you are registered to receive communications, promotions, offerings, newsletters and other advertisements via e-mail or other electronic communication channels, you can change your preferences for receiving such communications, promotions, offerings, newsletters and other advertisements by clicking on opt-out link provided in such communications.

8. Your rights

Right to access your data
8.1 You have the right to request access to your personal data processed by us pertaining to you. We reserve the right to charge an administrative fee for multiple subsequent requests for access that are clearly submitted for causing nuisance or harm to us. Each request must specify for which processing activity you wish to exercise your right to access and must specify to which data categories you wish to gain access to.

Right to correct your data
8.2 You have the right to ask that any personal data pertaining to you that are inaccurate, are corrected free of charge. If a request for correction is submitted, such request shall be accompanied of proof of the flawed nature of the data for which correction is asked.

Right to withdraw consent
8.3 You have the right to withdraw your earlier given consent for processing your personal data, in which case Article 7.2 will apply.

Right to erase your data
8.4 You have the right to request that personal data pertaining to you be erased if they are no longer required in light of the purposes outlined in Article 4 or if you withdraw your consent for processing them. However, you need to keep in mind that a request for erasure will be evaluated by us against:
• Overriding interests of us or any other third Party;
• Legal or regulatory obligations or administrative or judicial orders, which may contradict such deletion;
• For the establishment, exercise or defence of legal claims.

Instead of deletion you can also ask that we limit the processing of your personal data if and when (a) you contest the accuracy of that data, (b) the processing is illegitimate or (c) the data are no longer needed for the purposes listed under Article 4 but you need them to defend yourself in judicial proceedings.

Right to oppose the processing of your data
8.5 You have the right to oppose the processing of personal data if you are able to proof that there are serious and justified reasons connected with his particular circumstances that warrant such opposition. However, if the intended processing qualifies as direct marketing, you have the right to oppose such processing free of charge and without justification.

Right to obtain a copy of your data
8.6 You have the right to receive from us in a structured, commonly used and machine-readable format the personal data you have provided to us.

Where to exercise your rights
8.7 If you wish to submit a request to exercise one or more of the rights listed above, you can send an e-mail to compliance@idealstandard.com or if available, you could use the contact form provided in this Website. Such request should clearly state which right you wish to exercise and the reasons for it if such is required. It should also be dated and signed, and accompanied by a digitally scanned copy of your valid identity card proving your identity. If you use the contact form, we may ask you for your signed confirmation and proof of identity.
We will promptly inform you of having received this request. If the request proves valid, we shall honour it as soon as reasonably possible and at the latest thirty (30) days after having received the request.

Where to file complaints
8.8 If you have any complaint regarding the processing of your personal data by us, you may always contact us via compliance@idealstandard.com. If you remain unsatisfied with our response, you are free to file a complaint with the competent data protection authority.

Job Applicants Privacy Policy

1. About this Privacy Policy

1.1 This Applicants Privacy Policy governs the processing of your personal data as part of your application for a job at a company of the Ideal Standard Group via any websites of Ideal Standard or Ideal Standard’s designated websites (hereinafter: the “Websites”) or in any other way (including spontaneous application), and your subsequent communications with us via e-mail, telephone, fax and social media channels (such as LinkedIn) in relation to any job offers.

1.2 This Applicants Privacy Policy only and specifically relates to the specific processing of personal data of applicants applying for a job at Ideal Standard. For our general policy in relation to the use of our Websites and our communication with you in any other capacity than as a job applicant, please see the respective Privacy Policy/Cookie Policy of the Websites.

1.3 By submitting your application via any of the Websites or directly to any Ideal Standard company, you acknowledge that you have read this Applicants Privacy Policy carefully and that you agree with it without reservation.

2. In general

2.1 If you apply for a vacancy which is posted on any of the Websites or in any other place, or if you send a spontaneous application directly to a specific company of the Ideal Standard Group, then the data controller of the processing of your personal data is the company of the Ideal Standard Group to which the vacancy relates or to which you sent your application.

If you apply spontaneously, then the initial data controller of the processing of your personal data is the respective recipient entity or the entity which operates the respective Website. If such entity subsequently shares your personal data with other company(ies) of the Ideal Standard Group in view of possible employment at that company, then that company will be a data controller of its processing of your personal data.

2.2 Any reference in this Applicants Privacy Policy to certain laws or regulations also includes any change, replacement or annulment of these laws or regulations, including any related executive decisions.

2.3 We reserve the right to from time to time modify this Applicants Privacy Policy at our own discretion. Such modification may be communicated via the Websites or email. If you do not object to such modification by e-mail within three business days after the modifications have been announced, you will be deemed to have accepted all modifications.

3. Types of personal data we process

3.1 When you apply for a job with Ideal Standard, we collect the following personal data about you:
• Your contact details and basic identity information that you provide us with, such as your photo, name, postal address, e-mail address, phone number, date and place of birth, nationality, etc.;
• Resume-related information, such as former and current employer, work experience, education, skills, references, etc.;
• Information about your current level of remuneration, including benefit entitlements;
• Results of any assessments and/or occupational testing;
• Information we gather during interviews and phone or skype screenings (or any other means of telecommunications that we use for interview purposes);
• Information about your entitlement to work in the EU or in the country where you applied;
• Any other personal data you choose to provide us as part of your application;
• Publicly available information of your profile on social media channels (such as Linkedin);

3.2 In principle we obtain the personal data mentioned above directly from you. However, if you choose to apply via an external recruitment company, we receive your personal data via the external recruitment company. It is that company’s responsibility to relay the information contained in this Applicants Privacy Policy to you. We advise that you consult the privacy policy of your external recruitment company to ascertain which personal data it processes about you, what the conditions for that processing are and how you can exercise your rights vis-à-vis that company. We will not send any of the personal data you provide via the Websites or in any other way to external recruitment companies unless you explicitly consent to it.

3.3 Notwithstanding article 2.2 hereabove, we may also collect personal data about you from former employers when we ask for references.

3.4 If we offer you a position, our internal recruitment department may also add personal data pertaining to your application to your profile.

3.5 Our application process is not meant to involve the processing of personal data that can be construed as sensitive data. Sensitive data are personal data that pertain to your race or ethnicity, political affiliations, religious convictions, membership of a trade union, your health or sex life or criminal history. If such information becomes relevant as part of the application process, for instance in the context of equal opportunities monitoring or to assess your physical ability to perform your job, you will be specifically asked for it and be given the opportunity to consent to the processing of these sensitive data separately.

If you nevertheless choose to upload or otherwise provide sensitive data about yourself, your uploading or provision of these will constitute your freely given, specific, informed, explicit and unambiguous written consent to our processing of these data in line with this Applicants Privacy Policy.

4. Purposes for which we collect and use your personal data and the legal grounds on which these purposes are based

The purposes
We processes your personal data to allow you to apply for employment with us and to allow us to process, assess and decide on your application.
The legal grounds
We process your personal data for this particular purpose because that processing is necessary in order to take steps at your request prior to entering into a contract.

The purposes
We also process your personal data in order for you to receive relevant and personalized information regarding future opportunities for employment with Ideal Standard.
The legal grounds
The processing of your personal data for this purpose is based on your consent.

The purposes
We process your personal data in order for us to be able to defend ourselves in case of a dispute regarding your application (such as related to our refusal of your application).
The legal grounds
The processing of your personal data for this purpose is necessary for the protection of our legitimate of being able to defend ourselves in case of a dispute.

The purposes
If an application process for a particular position with us leads to a successful outcome, the personal data you provided will be used for human resources purposes during your employment with us.
The legal grounds
The processing of your personal data for this purpose is necessary for the protection of our legitimate interest to save time and resources in order to run a more efficient business by re-using already available information where permitted.

The purposes
We process your personal data to perform statistical analysis to improve our application and recruitment process and our service offering in general. Such processing will take place in a pseudonymized manner where possible.
The legal grounds
The processing of your personal data for this purpose is necessary for the protection of our legitimate interest to continuously improve our Websites, social media channels, products and services to ensure that you have the best experience possible.

The purposes
We process your personal data to comply with our legal obligations or to comply with any reasonable request from law enforcement agents or representatives, judicial authorities, governmental agencies or bodies, including data protection authorities.
The legal grounds
The processing of your personal data for this purpose is necessary to allow us to comply with our legal obligations.

The purposes
We process your personal data for informing any third party and its advisors in the context of a possible merger with, acquisition by/of, demerger by, or other share or asset purchase deal with that third party, also if that third party is located outside the European Union.
The legal grounds
The processing of your personal data for this purpose is necessary for the protection of our legitimate interest of being able to explore or conduct normal corporate or M&A transactions.

The purposes
We also process your personal data for the preservation of our legitimate interests or those of our affiliates, partners or a third party if your application-related use of the Websites or your application in general can be considered: (a) a violation of any applicable terms of use of the Websites or the intellectual property rights or any other right of a third party, (b) a danger or threat to the security or integrity of our Websites, social media channels or other communication channels or any of our or our affiliates’ subcontractors’ underlying IT systems due to viruses, Trojan horses, spyware, malware or any other form of malicious code, or (d) in any way hateful, obscene, discriminating, racist, slanderous, spiteful, hurtful or in some other way inappropriate or illegal.
The legal grounds
The processing of your personal data for this purpose is necessary for the protection of our legitimate interest to keep our Websites, social media channels, products and services safe from misuse and illegal activity.

5. To whom we send your personal data

5.1 We rely on third-party processors to provide you our Websites and social media channels, including the job application parts thereof, and to process your personal data on our behalf. These third-party processors are only allowed to process your personal data on our behalf and upon our explicit written instruction.

5.2 We share your personal data with other entities within the Ideal Standard Group. We will ensure that all companies of the Group will take due care that all processing of your personal data is in line with what is set out in this Applicants Privacy Policy.

5.3 Your personal data may be shared upon our own initiative with the police or the judicial authorities as evidence or if there are justified suspicions of an unlawful act or crime committed by you in the context of your application.

6. Location and transfer

6.1 We process your personal data first and foremost within the European Economic Area (EEA). However, in order to process your personal data for the purposes outlined in Article 3 of this Applicants Privacy Policy, we may also transfer your personal data to other companies of the Ideal Standard Group or to third parties who process on our behalf outside the EEA. Should such transfer take place, Ideal Standard will ensure that there are safeguards in place to ensure the safety and integrity of your data as well as all rights with respect to your personal data you might enjoy under applicable mandatory law.

6.2 Each company of the Ideal Standard Group or third party outside the EEA that processes your personal data will be bound to observe adequate safeguards in order to ensure the safety and integrity of your data. Such safeguards will be the consequence of:

• The country of the recipient having legislation in place which is considered equivalent to the protection offered within the EEA; or
• A contractual arrangement between us and that entity.

7. Quality assurances

7.1 Your personal data are only processed for as long as needed to achieve the purposes listed under Article 3 above or, regarding the purpose based on your consent up until such time where you withdraw your consent for processing them. We will de-identify your personal data when they are no longer necessary for the purposes outlined in Article 3 above, unless there is:

• An overriding interest of Ideal Standard or any other third party in keeping our personal data identifiable;
• A legal or regulatory obligation or a judicial or administrative order that prevents us from de-identifying them.

7.2 You understand that an essential aspect of assessing your application for employment with Ideal Standard or sending you relevant and personalized information regarding future opportunities for employment with Ideal Standard involves assessments of your professional and relevant personal characteristics. This means that we build and use a profile of you based on these characteristics. Please note, however, that these assessments are never fully automated and require human intervention.

7.3 We will take appropriate technical and organizational measures to keep your personal data safe from unauthorized access or theft as well as accidental loss, tampering or destruction. Access by our personnel or our third-party processors will only occur on a need-to-know basis and will be subject to confidentiality obligations. You acknowledge, however, that safety and security are best-efforts obligations which can never be guaranteed.

8. Your rights

8.1 You have the right to request access to all personal data pertaining to you that we process. We reserve the right to charge an administrative fee for multiple subsequent requests for access that are clearly submitted for the purpose of causing nuisance or harm to us. Each request has to specify for which processing activity you wish to exercise your right of access and which data categories you wish to gain access to.

8.2 You have the right to request that any personal data pertaining to you that are inaccurate, be corrected free of charge. If you submit a request for correction, such request has to be accompanied by proof of the flawed nature of the data for which correction is asked.

8.3 You have the right to withdraw your earlier given consent for the processing of your personal data.

8.4 You have the right to request that personal data pertaining to you be deleted if these data are no longer required in the light of the purposes outlined in Article 4 above or if you withdraw your consent for processing the data. However, we will evaluate a request for deletion against:
• Overriding interests of Ideal Standard or any other third party;
• Any legal or regulatory obligations or administrative or judicial orders which may contradict such deletion.

Instead of deletion you can also ask that we limit the processing of your personal data if (a) you contest the accuracy of the data, (b) the processing is illegitimate, or (c) the data are no longer needed for the purposes mentioned in Article 4.

8.5 You have the right to oppose the processing of personal data, unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

8.6 You have the right to receive from us in a structured, commonly used and machine-readable format all personal data you have provided to us.

8.7 If you wish to submit a request to exercise one or more of the rights mentioned above, you can send a letter or e-mail to the Ideal Standard company to which the vacancy relates or to which you sent your application. In any case, you can also send an e-mail the Ideal Standard’s general privacy e-mail address: compliance@idealstandard.com.

A request to exercise a right will not be construed as consent with the processing of your personal data beyond what is required for handling your request. Any request has to clearly state which right you wish to exercise and the reasons for it if such is required. It should also be dated and signed, and accompanied by a digitally scanned copy of your valid identity card proving your identity. If you use the contact form on the Websites, we may ask you for your signed confirmation and proof of identity.
We will promptly inform you of having received this request. If the request proves valid, we will honour it as soon as reasonably possible and at the latest thirty (30) days after having received the request.

If you have any complaint regarding our processing of your personal data, please feel free to contact Ideal Standard via the Ideal Standard Group’s general privacy e-mail address mentioned above. You also have the right to file a complaint with the competent data protection authority.