Uponor International Sales
Industriestrasse 56, 97437 Hassfurt, Germany

Uponor Smatrix Application Privacy Policy

Last Updated: 10 July 2024

Controller
 
Uponor Corporation (“GF Building Flow Solutions”). GF Building Flow Solutions is part of the Georg Fischer group, located in Schaffhausen, Switzerland. For more information, visit GF Building Flow Solutions.
 
Corporate Data Protection Officer
Email: dataprotection@georgfischer.com
 
 
 
1. Contact details
 
You can reach GF Building Flow Solutions at
Uponor Corporation
Ilmalantori 4
FI-00240
Finland
 
Our data protection officer details are found here:
Holger Schieb
Group Data Protection Officer
Privacy@uponor.com
 
Should you wish to make a request relating to your personal data, please use the forms available at https://www.uponor.com/en-en/legal-information/data-protection, including options for your local language.
 
 
2. Purpose and legal basis for processing
 
GF Building Flow Solutions collects personal data about the user (“User”) of Uponor Smatrix application (“Application”). Personal data can only be processed for a specific purpose under a valid legal basis.
 
The User’s personal data may be processed by GF Building Flow Solutions and on its behalf for the following purposes:
 
  • performing GF Building Flow Solution’s obligations towards the User for the functioning of the Application
  • The storage and analysis of the data for the purpose of Application maintenance and development and GF Building Flow Solution products and services;
  • The storage, handling, and evaluating of User data for the purpose of enforcing Users of GF Building Flow Solution’s obligations or liabilities, including the exercising of GF Building Flow Solution’s rights;
 
The legal basis for processing the user’s personal data is the performance of the agreement between the User and GF Building Flow Solution concerning the use of the Application and the services it provides (see article 6.1(b) of the EU General Data Protection Regulation 2016/679, the “GDPR”).
 
GF Building Flow Solutions may also process the user’s personal data for usage analysis, Improvement and protection based on a legitimate interest (article 6.1(f) GDPR) This legitimate interest is to develop and improve the application experience, cybersecurity, and improve GF Building Flow Solution products.
Processing may be based on user’s consent (article 6.1 (a) GDPR) if such consent is required under applicable laws or regulations.
 
 
3. Types of personal data processed
 
The Application processes the following personal data types:
 
The User’s location data (GPS) for providing weather information
The User’s device ID/serial number
 
 
4. Collection, sharing, and storage of data
 
The personal data is collected primarily from the User of the Application self-submitting the data or through the Application itself. The data is processed exclusively for the aforementioned purposes and may only be shared on a strictly necessary basis to the following recipients:
 
  • GF Building Flow Solutions employees to perform the aforementioned purposes
  • Other companies within the Georg Fischer group;
  • Authorized external service providers, external auditors and/or subcontractors of the Georg Fischer group;
  • A competent public authority, government, regulatory or fiscal agency where it is necessary to comply with a legal or regulatory obligation to which the relevant Georg Fischer group company is subject to or as permitted by applicable local law; or
  • As necessary or appropriate to enforce our terms and conditions, and to protect our rights, privacy, safety or property, and/or that of our affiliates, you or others.
 
 
The user’s personal data may be stored for as long as is necessary for the above listed purposes, typically not longer than 12 months.
 
5. Regular disclosure of data and the transfer of data outside the EU or the EEA
 
GF Building Flow Solutions may disclose and transfer personal data outside EU/EEA in accordance with and subject to the limitations imposed by applicable legislation as follows:
 
  • To companies belonging to the Georg Fisher group in accordance with a contract entered into between the relevant GF Building Flow Solutions entities, incorporating the European Commission’s Standard Contractual Clauses, which ensure that adequate data protection arrangements are in place;
  • to authorized third parties to the extent they participate in the processing of personal data for the purposes stated in this privacy policy. The personal data may be processed by such authorized third parties also outside EU or EEA in accordance with a contract entered into between GF Building Flow Solutions and such authorized third parties, incorporating the European Commission’s Standard Contractual Clauses or other appropriate safeguards for data transfers as listed in the EU General Data Protection Regulation (GDPR), which ensure that adequate data protection arrangements are in place. GF Building Flow Solutions shall oblige such third parties to keep confidential and adequately secure any such transferred personal data; or
  • based on consent; or
  • as otherwise permitted by applicable legislation.
 
For technical reasons and for reasons related to the use of data, the personal data may also be stored on servers of external service providers (also outside EU / EEA) who may process the data on behalf of GF Building Flow Solutions.
 
Any transfers of personal data shall be made in accordance with the General Data Protection Regulation (2016/679) and any applicable mandatory legislation, as amended.
 
In addition to the above GF Building Flow Solutions may be obliged to disclose the personal data to the authorities. GF Building Flow Solutions may also disclose and otherwise process the personal data, in accordance with applicable legislation, to defend its legitimate interests.
 
6. Principles of Securing Personal Data – Technical and Organizational Controls
 
GF Building Flow Solutions shall ensure that sufficient technical and organizational personal data protection measures are implemented and maintained throughout its own organization. Further, GF Building Flow Solutions shall ensure that any transfer or disclosure of personal data described in this Privacy Policy to any third party is subject to GF Building Flow Solutions having ensured an adequate level of data protection by agreements or by other means required by law.
 
Technical controls:
Physical material is stored in locked spaces with restricted access. Any IT systems are secured by means of the operating system’s protection software. Access to the systems requires entering a username and a password and data transfers happen via high encryption channels.

Organizational controls:
Within the organizations of GF Building Flow Solutions, the use of the personal data is instructed, and access to IT systems including personal data is limited to such persons who are entitled to access them on the basis of their work assignments or role, who are then subject to confidentiality obligations regarding the personal data.
                            
7. Rights of the User as a Data Subject
 
As a Data Subject, the User has the following rights regarding the personal data processed by GF Building Flow Solutions in the usage of the app:
 
  • The right to access all personal data GF Building Flow Solutions have on them.
  • The right to request that GF Building Flow Solutions corrects, erases, or stops using any erroneous, unnecessary, incomplete, or obsolete personal data.
  • The right to withdraw any consent previously provided by them for the use of the app
 
The user may exercise these rights by using the forms provided on https://www.uponor.com/en-en/legal-information/data-protection, Including options for your local language. GF Building Flow Solutions processes all requests as soon as possible.
 
If dissatisfied with the decisions or actions of GF Building Flow Solutions, the user has the right to lodge a complaint with their local data protection authority.
 
8. Privacy Statement changes
 
GF Building Flow Solutions reserves the right to amend/update this Privacy Policy as necessary and in accordance with our processing activities. Updates to this Privacy Statement will be posted on our website, the relevant app store and the user will be notified as appropriate. Material updates to the privacy policy will be effective from the data set out at the beginning of the privacy policy.