n n Uponor
Uponor International Sales
Industriestrasse 56, 97437 Hassfurt, Germany
+49 9521 690 0international.cs@uponor.com
Contact UponorAll international contact information
Find you next wholesaler

Uponor Customer and Marketing Privacy Statement


1. Controller of Personal Data

Uponor Corporation and its subsidiary controlled by Uponor Corporation, with whom you have customer relation or other connection, in parallel (together “GF Building Flow Solutions”). GF Building Flow Solutions is part of the Georg Fischer group, located in Schaffhausen, Switzerland. For more information, visit GF Building Flow Solutions.
 
2. Contact Information

You can reach GF Building Flow Solutions at
Uponor Corporation
Ilmalantori 4
FI-00240 Helsinki
FINLAND
e-mail: privacy@uponor.com.
 
In case you wish to make a request relating to your personal data, please use the forms available at https://www.uponor.com/en-en/legal-information/data-protection and on the local GF Building Flow Solutions websites.
 
3. Group of Data Subjects

GF Building Flow Solutions processes data on representatives, employees, directors and officers of customers, end-customers, potential customers and potential end-customers of GF Building Flow Solutions as well as consumers and Uponor Academy members (together “Customer(s)”).
 
4. Purpose and Legal Basis of Processing Personal Data

The purposes for processing the Customer personal data are marketing and communications to Customers as well as the management of GF Building Flow Solutions’ relations with the Customers, including the processing of personal data of Customers for the following purposes:

  • performing GF Building Flow Solutions’ obligations towards its Customers and handling, evaluating and enforcing Customers’ or GF Building Flow Solutions’ obligations or liabilities;
  • managing, handling and submitting offers and quotations as well as other binding or non-binding documents;
  • exercising GF Building Flow Solutions’ rights,
  • upholding and developing the customer relationships;
  • establishing relationships with Customers;
  • managing and handling customer loyalty programs;
  • marketing and communication purposes such as for conducting marketing research, direct marketing, automated marketing, informing the Customers of new features, new products or launches, and special promotions;
  • provision of GF Building Flow Solutions products and services to Customers and ensuring quality, functionality and security of the products and services;
  • manage and handle any product liability matters,
  • developing GF Building Flow Solutions’ services and products;
  • providing Customer trainings (including webinars, live streams, and e-learnings)
  • invoicing;
  • statistical and analytical purposes, including website analytics; and
  • transfer in the event of merger: such as, in sale, transfer, merger, reorganization or similar event, we may transfer your personal data to one or more third parties, including companies, affiliates and subsidiaries under the Georg Fischer group, as part of that transaction.

 
Collection and processing of personal data is based on the legitimate interests of GF Building Flow Solutions. These interests arise from the relationship with Customers. Additionally, GF Building Flow Solutions may send direct marketing to Customers based on their consent, if such consent is required.

The customers’, the end-customers’ and consumers’ personal data may be stored as long as GF Building Flow Solutions needs it for the above listed purposes, however typically not longer than ten years.

The potential customers’ and the potential end-customers’ personal data may be stored as long as GF Building Flow Solutions needs it for the above listed purposes, however typically not longer than two years.
 
5. Content of the Personal Data Processing


GF Building Flow Solutions may process especially the following Customer information:

  • Basic information, such as: name, date of birth, e-mail address, telephone number, home address, position, gender (salutation);
  • Qualification data (Uponor Academy qualification, with regard to professional customers);
  • Information on customer projects and products and services sold to the Customer;
  • Information on meetings and other activities with the Customers;
  • Information needed for managing customer loyalty programs (if Customer has registered in such programs);
  • Information on GF Building Flow Solutions arranged trainings Customer has participated;
  • Information regarding interests of Customers on GF Building Flow Solutions’ products and services;
  • Information regarding the contents and method of communications (e.g. email, SMS) with the Customer;
  • Preferences of existing customers and end-customers in recreational activities for the purpose of upholding the customer relationship; and
  • Preferences of potential customers and end-customers in recreational activities for marketing purposes.

  
6. Regular Sources of Data


The data is primarily collected from each data subject themselves, by GF Building Flow Solutions personnel or through website or applications. In addition to publicly available sources, personal data may in some situations, as allowed by applicable legislation, be collected from other sources than directly from the data subject, e.g. from GF Building Flow Solutions’ subcontractors or service providers.
GF Building Flow Solutions informs each data subject of the data processing, including of any third party data sources and data collected from such sources, in accordance with applicable legislation.

The data is entered into the personal data databases by GF Building Flow Solutions’ personnel and by GF Building Flow Solutions’ subcontractors or service providers.


7. Sharing and Disclosing of Personal Data

The personal data covered by this Privacy Statement is exclusively processed for the purposes referred to above and will only be shared or disclosed on a strict need-to-know basis with the following categories of recipients:
Other companies within the Georg Fischer group;
Authorized external service providers, external auditors and/or subcontractors of the Georg Fischer group;
A competent public authority, government, regulatory or fiscal agency where it is necessary to comply with a legal or regulatory obligation to which the relevant Georg Fischer group company is subject to or as permitted by applicable local law; or
As necessary or appropriate to enforce our terms and conditions, and to protect our rights, privacy, safety or property, and/or that of our affiliates, you or others.
 
8. Disclosure and Transfer of Personal Data Outside the EU/EEA Area

GF Building Flow Solutions may disclose and transfer personal data outside EU/EEA in accordance with and subject to the limitations imposed by applicable legislation as follows:

  • to companies belonging to the Georg Fischer group in accordance with a contract entered into between the relevant GF Building Flow Solutions entities, incorporating the European Commission’s Standard Contractual Clauses, which ensure that adequate data protection arrangements are in place, as well as
  • to authorized third parties to the extent they participate in the processing of personal data for the purposes stated in this privacy statement. The personal data may be processed by such authorized third parties also outside EU or EEA in accordance with a contract entered into between GF Building Flow Solutions and such authorized third party, incorporating the European Commission’s Standard Contractual Clauses or other appropriate safeguards for data transfers as listed in the EU General Data Protection Regulation (GDPR), which ensure that adequate data protection arrangements are in place. GF Building Flow Solutions shall oblige such third parties to keep confidential and adequately secure any such transferred personal data; or
  • based on consent; or
  • as otherwise permitted by applicable legislation.

 
For technical reasons and for reasons related to the use of data, the personal data may be stored on servers of external service providers who may process the data on behalf of GF Building Flow Solutions.

Any transfers of personal data shall be made in accordance with the General Data Protection Regulation (2016/679) and any applicable mandatory legislation, as may be amended from time to time.

 9. Rights of Data Subjects


Unless any limitations apply, each data subject has the right to access all personal data GF Building Flow Solutions have on them. Each data subject also has the right to request that GF Building Flow Solutions corrects, erases or stops using any erroneous, unnecessary, incomplete or obsolete personal data. Each data subject may also withdraw any consent previously provided by them, and object to all direct marketing.

Any requests should be sent via the request forms available at https://www.uponor.com/en-en/legal-information/data-protection  and on the local GF Building Flow Solutions websites. GF Building Flow Solutions processes all requests as soon as possible. If dissatisfied with the decision or actions of GF Building Flow Solutions, each data subject has the right to lodge a complaint with their country's data protection authority.

10. Principles of Securing Personal Data – Technical and Organizational Controls

GF Building Flow Solutions shall ensure that sufficient technical and organizational personal data protection measures are implemented and maintained throughout its own organization. Further, GF Building Flow Solutions shall ensure that any transfer or disclosure of personal data described in this privacy statement to any third party is subject to GF Building Flow Solutions having ensured an adequate level of data protection by agreements or by other means required by law.

Technical controls:
Physical material is stored in locked spaces with restricted access. Any IT systems are secured by means of the operating system’s protection software. Access to the systems requires entering a username and a password and data transfers happen via high encryption channels.

Organizational controls:
Within the organization of GF Building Flow Solutions, the use of the personal data is instructed, and access to IT systems including personal data is limited to such persons who are entitled to access them on the basis of their work assignments or role and who are subject to confidentiality obligations regarding the personal data.
 
11. Changes to this Privacy Statement
 
We may amend/update this Privacy Statement from time to time in accordance with our processing activities. Updates to this Privacy Statement will be posted on our website and/or notified to you as appropriate. For clarity, this Privacy Statement has an effective date set out at the end of this document.
 
Date of publication: 25 June 2024