DATA PROTECTION

GENERAL INFORMATION

Thank you for visiting our website and for your interest in our company and our products. The protection of your personal data is very important to HAHN Plastics Canada Ltd. We process personal data that is collected when you visit our online offers confidentially and only in accordance with the statutory provisions. It is important for us to inform you about which personal data is collected, how it is used and what options you have in this regard.

I. RESPONSIBLE PERSON

The data controller is HAHN Plastics Canada Ltd., J101-155 Frobisher Drive, Waterloo ON N2V 2E1, Canada. Exceptions are explained in this data protection notice. If you have any questions about data protection, you can contact our data protection officer at info@hanit.ca.

II. COLLECTION, PROCESSING AND USE OF PERSONAL DATA

1. CATEGORIES OF DATA PROCESSED
Communication data (e.g. name, telephone number, e-mail address, personal address, IP address) and / or usage data (e.g. session duration, browser and operating system) with and without personal reference can be processed.

2. PRINCIPLES
Personal data is all information that relates to an identified or identifiable natural person, e.g. names, addresses, telephone numbers, or e-mail addresses that express the identity of a person. We collect, process, and use personal data (including IP addresses) only if there is a legal basis for this or if you e.g. have given your consent when contacting us.

3. PROCESSING PURPOSES AND LEGAL BASES
We and service providers commissioned by us process your data for the following processing purposes:

Provision of this online offer
Legal basis: Overriding legitimate interest on our part in direct marketing as long as this is done in accordance with data protection and competition law requirements.

Recipient: Technical service providers (e.g. hosting)

Answering user inquiries as part of a contact form
Legal basis: Overriding legitimate interest on our part in marketing and in the improvement of our products and services, as long as this is in accordance with data protection and competition law requirements or the fulfilment of the contract or consent.

Recipient: HAHN Plastics Canada Ltd. and Technical service providers

Identification of malfunctions and security reasons
Legal basis: Fulfilment of our legal obligations in the area of data security and an overriding legitimate interest in the elimination of disruptions and the security of our offers.

Recipient: Technical service providers

In-house and third-party advertising as well as market research and range measurement to the extent permitted by law or on the basis of consent
Legal basis: Consent or overriding legitimate interest on our part in direct marketing, as long as this is in accordance with data protection and competition law requirements.

Recipient: Marketing service provider

Protecting and defending our rights
Legal basis: Legitimate interest on our part in asserting and defending our rights.

Recipient: Legal institutions

4. TRANSFER OF DATA

Transfer of data to other responsible parties
Your personal data will only be transmitted by us to other responsible parties insofar as this is necessary to fulfil the contract (e.g. delivery with a shipping and logistics company), we or the third party have a legal requirement to pass it on (e.g. Customs clearance) or you have given your consent (e.g. forwarding of the data to subsidiaries or dealers of HAHN Plastics Canada Ltd.). Details on the legal bases and the recipients or the categories of recipients can be found in the section "Processing purposes and legal bases" (see No. 2.3). In addition, data can be transmitted to other responsible parties, insofar as we are obliged to do so due to statutory provisions or an enforceable official or judicial order.

Service provider (general)
We commission external service providers who do not use the data themselves, with tasks such as marketing services, programming, and data hosting under contract processing agreements. We have carefully selected these service providers and regularly monitor them, in particular their careful handling and protection of the data stored with them. All service providers are obliged by us to maintain confidentiality and to comply with legal requirements. Other companies in the HAHN Group can also be service providers.

Duration of storage and retention periods
When ordering or registering on our site, as appropriate, you may be asked to enter your name, email address, mailing address, phone number, or other details to help you with your experience. We collect information from you when you subscribe to a newsletter, fill out a form or enter information on our site. We may use the information we collect from you when you register, make a purchase, sign up for our newsletter, respond to a survey or marketing communication, surf the website, or use certain other site features in the following ways:

(a) To improve our website in order to better serve you

(b) To allow us to better service you in responding to your customer service requests

Protecting visitor information
We do not use vulnerability scanning and/or scanning to PCI standards. We use regular Malware Scanning. Your personal information is contained behind secured networks and is only accessible by a limited number of persons who have special access rights to such systems and are required to keep the information confidential. In addition, all sensitive/credit information you supply is encrypted via Secure Socket Layer (SSL) technology. We implement a variety of security measures when a user enters, submits, or accesses their information to maintain the safety of your personal information. All transactions are processed through a gateway provider and are not stored or processed on our servers. According to CalOPPA we agree to the following: Users can visit our site anonymously. Once this privacy policy is created, we will add a link to it on our home page or as a minimum on the first significant page after entering our website.

California Online Privacy Protection Act
CalOPPA is the first state law in the nation to require commercial websites and online services to post a privacy policy. The law's reach stretches well beyond California to require a person or company in the United States (and conceivably the world) that operates websites collecting personally identifiable information from California consumers to post a conspicuous privacy policy on its website stating exactly the information being collected and those individuals with whom it is being shared, and to comply with this policy. For more information, please visit the following link.

5. LOG-FILES
Each time you use the Internet, your Internet browser automatically transmits certain information and saves it in so-called log files. We store the log files for a period of 14 days to identify faults and for security reasons (e.g. to investigate attempted attacks) and then delete them. Log files, the further storage of which is necessary for evidence purposes, are excluded from deletion until the respective incident has been finally clarified and can be passed on to investigating authorities in individual cases. Log files are also used for analysis purposes (without or without a full IP address) subject to the requirements of Section 2.3 "In-house and third-party advertising as well as market research and reach measurement to the extent permitted by law or on the basis of consent".

In particular, the following information is stored in the log files:

IP address (Internet protocol address) of the device from which the online offer is accessed
Internet address of the website from which the online offer was accessed (so-called origin or referrer URL)
Name of the requested URL of our website (request URL)
Date of retrieval
Amount of data transferred
Information on the Internet browser used (user agent) including installed add-ons (e.g. for the Flash Player).

6. AGE REQUIREMENT
This online offer is aimed at adults. The resulting age limit is based on the regulations of the corresponding country or location from which our online offer is accessed.

III. USE OF COOKIES AND SIMILAR TECHNOLOGIES

To optimize your website experience, we use cookies or similar technologies. These are small text files that are stored on your terminal device.

1. MANAGEMENT OF COOKIES
When you visit our website, you will be asked in a cookie layer which cookies or categories of cookies you consent to. The cookie settings you have chosen will be stored for one month before you are automatically asked again to set your cookie preferences when you revisit our website. Via the icon in the bottom left corner of the screen, you can reopen the cookie layer at any time and edit your settings with effect for the future, revoke them, or grant your consent at a later date.

All relevant information on the respective cookies and cookie categories, such as for example, the purpose and scope of the processing, recipients, or storage duration, as well as the respective legal basis can be viewed directly in the cookie layer.

2. SWITCH OFF ALL COOKIES
You can manage your cookie settings individually in the browser. The settings you have made only relate to the browser used. If you want to turn off all cookies, please go to your browser settings and deactivate the setting of cookies. Please note that this can impair the functionality of the website.

Details on the browsers used in many cases can be found here:

Mozilla Firefox
Internet Explorer
Google Chrome
Safari

3. SOCIAL NETWORKS
We maintain an online presence in social networks and process user data in this context in order to communicate with active users there or to provide information about us.

Detailed information on the respective platforms:

Facebook
LinkedIn

4. GOOGLE FONTS
On our website we use Google Fonts from the company Google. The company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for the European region. We have integrated the Google fonts locally, e.g. on our web server - not on Google's servers. This means that there is no connection to Google servers and therefore won´t be any data transfer or storage.

IV. EXTERNAL LINKS

Our online offer may contain links to third-party websites that are not affiliated with us. After clicking the link, we no longer have any influence on the collection, processing and use of any personal data transferred to the third party when the link is clicked (such as the IP address or the URL of the page on which the link is located), since the behaviour of third parties is naturally beyond our control. We are not responsible for the processing of such personal data by third parties.

V. SAFETY

Our employees and the service companies commissioned by us are bound to secrecy and compliance with the provisions of the applicable data protection laws. We take all necessary technical and organisational measures to ensure an appropriate level of protection and to protect your data managed by us, in particular from the risks of unintentional or unlawful destruction, manipulation, loss, alteration or unauthorised disclosure or unauthorised access. Our security measures are continuously improved in line with technological developments.

VI. USER RIGHTS

To assert your rights, please use the information in the "Contact" section (see No. 8). Please make sure that we can clearly identify you.

1. RIGHT TO INFORMATION AND ACCESS
You have the right to receive information from us about the processing of your data. To do this, you can assert a right to information in relation to the personal data that we process about you.

2. RIGHT TO RECTIFICATION AND ERASURE
You can ask us to correct incorrect data. As long as the legal requirements are met, you can request the completion or deletion of your data. This does not apply to data that are required for billing and accounting purposes or are subject to statutory retention requirements. If access to such data is not required, their processing will be restricted (see below).

3. RESTRICTION OF PROCESSING
If the legal requirements are met, you can request that we restrict the processing of your data.

4. DATA PORTABILITY
As long as the legal requirements are met, you can request that the data you have made available to us be transmitted in a structured, common and machine-readable format or - if technically feasible - that the data be transmitted to a third party.

5. RIGHT TO OBJECT

Objection to direct marketing
You can object to the processing of your personal data for advertising purposes at any time ("advertising objection"). Please note that, for organizational reasons, there may be an overlap between your objection and the use of your data in the context of an ongoing campaign.

Objection to data processing on the legal basis “legitimate interest“
You have the right to object to data processing by us at any time, provided this is based on the legal basis of "legitimate interest". We will then stop processing your data, unless we can - in accordance with the legal requirements - prove compelling reasons worthy of protection for further processing, which outweigh your rights.

6. REVOCATION OF CONSENT
If you have given us your consent to process your data, you can revoke this at any time with effect for the future. This does not affect the legality of processing your data until you withdraw your consent.

7. RIGHT TO LODGE A COMPLAINT WITH THE SUPERVISORY AUTHORITY
You have the right to lodge a complaint with a data protection supervisory authority. You can contact the data protection supervisory authority that is responsible for your place of residence or your state or the data protection supervisory authority responsible for us.

This is:

Complaints body in Canada
Office of the Privacy Commissioner of Canada

Office of the Privacy Commissioner of Canada
30, Victoria Street
Gatineau, QC K1A 1H3

Toll-free: 1-800-282-1376
Phone: (819) 994-5444
TTY: (819) 994-6591