Privacy Notice

Privacy Notice

I. General Information on data processing  

As a law-abiding corporation, Knauf pays much attention to the manner in which personal data is processed, especially as data protection constitutes a fundamental Human Right. In this regard, we process personal data in accordance with the applicable laws, and in situations where local data protection laws are judge inadequate, we implement best practices and industrial standards.  

In fulfilment of the fairness and transparency requirements, this Privacy Notice contains relevant information relating to our processing activities, such as but not limited to the nature, scope and purposes of the collection and use of personal data, the legal bases of data processing, storage periods, recipients, as well as the respective rights of the data subject. The information provided here is not necessarily limited to the personal data processed in connection with this website. As a major reference, this notice may cover other tools and processes employed by Knauf, that have little to do with this website.   

We also have an Australian Privacy Policy that is available as follows:

II. Name and Address of the controller

This website may be co-owned by all Knauf entities operating in GermanyAustralia. However, these entities (if applicable) are not considered joint controllers. This Privacy Notice applies to the company or companies listed below, with each entity acting as an independent data controller for the processing of personal data related to its own users or customers.  

III. Data Protection Officer / Coordinator

Please contact the relevant company for any enquiry relating to the processing of your personal data or this Privacy Notice.

If you are the user or data subject of Company ABCKnauf Gypsum Pty Ltd, please contact the following:-

If you are the user or data subject of Company DEFKnauf Insulation PTY Ltd, please contact the following:-

IV. Data Processing on this website  

A. AUTOMATIC AND ESSENTIAL PROCESSING OF WEBSITE VISITOR DATA

Each time our website is accessed, our system automatically processes your personal data, including your IP address and location (region), date and time of visit, operating system, internet service provider, and pages visited (through the so-called ‘logfiles’ or ‘session records’). This processing is essential for the operation (making the website available) and the security of the website. The processing of such data is based on our legitimate Interest. While most of the data is deleted at the end of the visit (session), the log files are deleted within thirty days following the visit.

B. USE OF COOKIES

Our website uses both essential and non-essential cookies. The non-essential cookies are exclusively subject to prior consent. Please refer to our Cookie Policy.

C. COMMUNICATION WITH USERS

Contact

Our website utilizes a contact form and provides an email address to enable users to reach out to us with inquiries or requests for information. When the user fills out the contact form, we process their personal data, such as name, email, postal code, city, country, company name, department, and the content of the inquiry. The user’s personal data transmitted with the message is processed exclusively to process the conversation.

The users are not obliged to provide us with their personal data. However, we need the relevant data to contact them and respond to their request or query. The user’s contact query is forwarded to the competent Knauf affiliate to further for proper attention. We use functions of HubSpot, provided by HupSpot Inc., to offer the contact form services.

The processing of personal data in the context of our communications with the user is based on our legitimate interests to respond to requests or queries, or otherwise to communicate with the users of our website. Where applicable, we also communicate with the user in the context of conclusion or performance of a contract. This information is solely used to respond to their queries and provide necessary assistance. We do not use the data for any other purposes without the user’s consent.  

The personal data is deleted once the objective of the inquiry is achieved.  

Newsletter

On our website, users are given the opportunity to subscribe to general or topic-specific newsletters, free of charge. To subscribe, the user provides personal data, including his or her contact details (first name, surname, email) and country, and may further add his or her phone number, company name, profession, postcode, city, interests. We collect the information on behalf of companies of the Knauf group, whose newsletters the user has indicated interest.  

Also, during trade fares, Knauf events, and meetings, individuals interested in Knauf activities voluntarily share their contact information with Knauf employees, with a view of receiving marketing communications from Knauf. Such information is up registered in our system, and the individual receives an automatic notification regarding such storage, while providing him or her with the possibility to unsubscribe at any time.  We use functions of HubSpot to offer the newsletter services.

The processing of personal data for this purpose aims at advertising our products, services and events to Knauf customers and potential customers (via email). Such processing is exclusively based on the user’s consent, except where the law provides otherwise.  

The user may unsubscribe to the newsletter at any time. A corresponding link is provided for this purpose in each communication.

D. COMPANY PROFILES

We operate publicly accessible company profiles on professional and social networks, where we provide information about our company, products, and services. We provide company updates and relevant industry news and create an opportunity for the users of the professional and/or social network to communicate with us.

We process personal data such as names, profile information, and reactions, when a user interacts with our company profile, e.g. if they comment, share or like our content. Such processing is based on our legitimate interest to present our company information and to communicate with (potential) customers and business partners. When we share a content and a user reacts to it, the user’s personal data (profile information, comments and/or likes) shall be retained as long as our shared content remains publicly accessible, unless the user decides to delete his or her reaction. The data generated in connection with the company profile is not saved in our own systems.

When a user visits our company profile, further personal data may be processed by the operator of the professional or social network for its own purposes. Although joint controllers, we generally have no influence on the way the operator processes personal data. For more Information on how a given operator processes your personal data, please read its privacy notice. Currently, we use the following professional and social networks:

X (formerly known as Twitter):

The platform is operated by Twitter International Company, headquartered in Market Square, 1355 Market St #900, San Francisco, United States. Additional information on the processing of personal data by X can be found here: https://twitter.com/en/privacy.

YouTube:

The platform is operated by YouTube LLC, headquartered in 901 Cherry Ave., San Bruno, CA 94066, United States. Additional information on the processing of personal data by YouTube can be found here: https://policies.google.com/privacy.

LinkedIn:

The platform is operated by LinkedIn Corporation, headquartered in 1000 W Maude Ave, Sunnyvale, CA, USA. Additional information on the processing of personal data by LinkedIn can be found here: https://www.linkedin.com/legal/privacy-policy.

XING:

The platform is operated by XING SE, headquartered in Am Strandkai 1, 20457 Hamburg, Germany. Additional information on the processing of personal data by Xing can be found here: https://privacy.xing.com/en/privacy-policy.

Facebook:

This platform is operated by Meta, headquartered in Menlo Park, California USA. Additional information on the processing of personal data by Meta can be found here: https://www.meta.com/en-gb/actions/protecting-privacy-and-security/

Instagram:

This platform is operated by Meta, headquartered in Menlo Park California USA. Additional information on the processing of personal data by Meta can be found here: https://www.meta.com/en-gb/actions/protecting-privacy-and-security/

TikTok:

This platform is operated by ByteDance headquartered un Haidan, Beijing China and incorporated in the Cayman Islands, Additional information on the processing of personal data by TikTok can be found here: https://www.tiktok.com/legal/page/row/privacy-policy/en

Please state additional country-specific social media used by the local entities, irrespective of whether other markets use them or not.

E. ACCOUNT CREATION

On myKnauf section of our website, users may register and login to a personal Knauf user account. Once an account is created, it is attributed an identifier, which provides access to an interface for business customer-facing applications, e.g., order overviews or materials calculator and information management (e.g. contact details, country and language settings). To register, the user must provide mandatory information, including email, first name, last name, category of user (e.g., architect, distributor, investor, etc.), country and language, and may optionally provide their phone number. We also process the user’s IP address and date and time of registration. The purpose of the registration is to enable the user have access to certain content and services on our website as well as certain digital services. The processing of such data is based on the user's consent.  

Incomplete registration data (e.g., where the user provides his name and email, but fails to create a password) or blocked accounts due to several unsuccessful login attempts, will be deleted after seven days, unless further action is taken by the user. An account would be retained as long as the user remains active, except the he or she decides to delete the account. Inactive users are reminded after two years of inactivity, and be given 30 days to login, failure to which the account would be automatically deleted.

F. WEBSITE ANALYTICS AND ADVERTISING

Based on your consent, we process your personal data for analytics and marketing purposes. We only receive information about the total number of users who have reacted to our advertisement. No information is passed on that would allow us to identify you. In this regard, we employ the following tools.

G. Google AdWords  

This tool processes a limited amount of your personal data, such as IP address, cookies, browser information, as well as the pages visited, to carry out interest-based advertising. It is provided by Google LLC.

Global headquarters: Google LLC, 1600 Amphitheatre Parkway, Mountain View, California, USA

For more information on how Google processes your personal data, please visit: https://policies.google.com/privacy and https://policies.google.com/technologies/partner-sites.

H. Facebook retargeting  

Here, your personal data, such as cookies, device type, IP address, website visited, products viewed, advertisements clicked, and Facebook account (if you are logged into Facebook), is processed for the purposes of interest-based advertising. Facebook retargeting is provided by Meta Platforms, Inc.

Global headquarters: Meta Platforms, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA

For more information on how Meta processes your personal data, please visit: https://www.facebook.com/privacy/policy  

I. Google Ads Remarketing  

Google Ads Remarketing is used for retargeting visitors to our website for advertising purposes via Google Ads advertisements. With the help this tool, target groups (“similar target groups”) can be created, which have, for example, accessed certain pages. This makes it possible to identify the user on other websites and display targeted advertising.

It processes your personal data, such as IP address, cookies, browser information, as well as the pages visited. The tool is provided by Google LLC.

Global headquarters: Google LLC, 1600 Amphitheatre Parkway, Mountain View, California, USA

For more information on how Google processes your personal data, please visit: https://policies.google.com/privacy and https://policies.google.com/technologies/partner-sites.

J. Adobe Analytics 

To continuously enhance our website and increase user friendliness, we use the analytics services of Adobe Analytics, to analyze the surfing behavior. Adobe processes your personal data, such as cookies, device type, IP address, pages visited, products viewed etc. This tool is provided by Adobe Inc.

Global headquarters:  Adobe Inc, 345 Park Avenue, San Jose, CA 95110-2704, USA

For more information on how Adobe processes your personal data, please visit: https://www.adobe.com/privacy.html.

K. Adobe Launch

Adobe Launch is designed to manage and deploy marketing and analytics tags on websites and mobile apps. We use it to collect information about the use of our website. Adobe Launch provides a library containing tags for other Adobe solutions. This tool is provided by Adobe Inc.

Global headquarters:  Adobe Inc, 345 Park Avenue, San Jose, CA 95110-2704, USA

For more information on how Adobe processes your personal data, please visit: https://www.adobe.com/privacy.html.

L. HubSpot

To attract visitors, convert leads, and gain customers, we equally use HubSpot. The HubSpot tracking code collects visitor data, such as website activity data, IP addresses, and other online identifiers for monitoring website traffic. We also use functions of HubSpot to offer the contact form and newsletter services. This tool is provided by HubSpot, Inc. 

Global headquarters: HubSpot, Inc., 2 Canal Park Cambridge, MA 02141 United States

For more information on how HubSpot processes your personal data, please visit: https://legal.hubspot.com/privacy-policy.

M. Facebook pixel

We equally use Facebook pixel, which tracks the actions of users after they have viewed or clicked our Facebook advertisement. During this process, the tool processes personal data, such as advertisements clicked, pages visited, elements clicked, device type, IP address, for the purposes of interest-based advertising. While we receive only anonymous data, Facebook can connect this data with your Facebook account and use it for own advertising purposes. The tool is provided by Meta Platforms, Inc.

Global headquarters:  Meta Platforms, Inc. 1601 Willow Rd Menlo Park, California 94025-1453, USA

For more information on how Meta processes your personal data, please visit:  https://www.facebook.com/privacy/policy

N. LinkedIn Insight Tag

We use LinkedIn Insight Tag to track conversions, retarget website visitors, and learn aggregate insights about categories of members interacting with our ads. The tool processes personal data, such as URL, referrer, IP address, device and browser characteristics (User Agent), and timestamp. LinkedIn does not share personal data with us, rather simply offers aggregated reports on the target group and advertisements. This tool is provided by LinkedIn Corporation.

Global headquarters:  LinkedIn Corporation, 1000 W Maude Ave, Sunnyvale, CA 94085, USA

For more information on how LinkedIn processes your personal data, please visit: https://www.linkedin.com/legal/privacy-policy.

O. Microsoft Ads

We also use Microsoft Ads to track user behavior for the purposes of interest-based advertising. The tool processes personal data such as IP addresses, keywords used, pages visited and duration of the visit, and where a user has a Microsoft account, the information would be linked to his or her profile. The tool is provided by Microsoft Corporation.

Global headquarters:  Microsoft Corporation, One Microsoft Way Redmond, Washington 98052

For more information on how Microsoft processes your personal data, please visit:  https://privacy.microsoft.com/en-gb/privacystatement

P. PostHog

PostHog is an all-in-one product analytics platform that enables companies to analyze user behavior, test features, observe application performance, and deploy new functionalities. It offers a suite of tools including product analytics, session recording, feature flagging, A/B testing, and more, all seamlessly integrated and open source.  

PostHog processes personal data such as user interactions, session recordings, and event data, to provide insights on user behavior and application performance. This tool is provided by PostHog, Inc.

Global headquarters: 2261 Market Street, Suite 4008, San Francisco, CA 94114, United States

For more information on how PostHog processes personal data, click here: https://posthog.com/privacy  

Q. OTHER WEBSITE RELATED TOOLS

We use functions of third-party service providers for the provision of our website such as website hosting, data analysis, payment processing, order fulfilment, fraud prevention, information technology, customer service, marketing delivery, and other services. The following provides an overview of the third-party services we use.

R. Microsoft Azure

Website hosting is carried out by Microsoft Azure from Microsoft Corporation.

Global headquarters:  Microsoft Corporation, One Microsoft Way Redmond, Washington 98052

For more information regarding Microsoft Azure data processing, click here: https://privacy.microsoft.com/en-gb/privacystatement

S. Okta

We use the Okta, a Customer Identity Management platform, for Knauf account registration on our websites, and to access the other services offered here. The data collected by Okta is only used for operation and management of Knauf services that are subject to registration, and for the execution, establishment, or termination of the underlying contract with the user concerning participation in the service selected by him or her. Okta is provided by Okta Inc.

Global headquarters:  Okta Inc., 100 1st St 6th floor, San Francisco, CA 94105, USA

For more information about Okta’s data processing, click here: https://www.okta.com/privacy-policy/.

T. Sprinklr (Social Media Marketing)

Sprinklr is a unified customer experience platform. We specifically use its Social Media Marketing solution to manage, schedule, and analyze content across multiple social platforms (such as LinkedIn, Instagram, Twitter/X, and Facebook). It supports campaign planning, content approval workflows, performance tracking, and publishing all-in-one interface, helping ensure consistency and governance in our social media presence.

Sprinklr processes personal data, including usernames, social media post content, engagement metrics, and potentially user-generated content (e.g., comments or messages) for campaign management and analytics purposes. The tool is provided by Sprinklr, Inc.

Global headquarters: Sprinklr, Inc., 441 9th Avenue, 12th Floor, New York, NY 10001 United States

For more information on how Sprinklr processes personal data, click here: https://www.sprinklr.com/privacy/

U. Qualtrics

We use this tool to conduct surveys and obtain customer feedback. It processes personal data, such as names, companies, phone numbers and opinions regarding our products.  

Global headquarters: Qualtrics International Inc., 333 W. River Park Drive Provo, UT 84604 USA

For more information on how Qualtrics processes personal data, click here: https://www.qualtrics.com/privacy-statement.

V. Cloudflare

On our website, we equally use Cloudflare, a content delivery network (CDN), which is a network of regionally distributed servers connected to the internet. The servers are used to deliver content, especially large media files such as videos. Cloudflare offers web optimization and security services, which we use to improve the loading times of our website and to protect it from misuse functions of the content delivery.  This tool is provided by Cloudflare, Inc.

Global headquarters: Cloudflare, Inc., located at 101 Townsend St., San Francisco, California 94107 USA

For more information regarding Cloudflare’s data processing, click here: https://www.cloudflare.com/privacypolicy/

W. Salesforce

We equally employ Salesforce, a customer relationship management software. It is used for managing sales, customer service, and marketing automation. In this regard, we process our customer’s personal data on the Salesforce platform, including but not limited to name, email address, phone number, business information such as job title and description, language and country. The tool is provided by Salesforce Inc.

Global headquarters: Salesforce Inc., 415 Mission St, San Francisco, CA 94105, USA

For more information on the processing of data by Salesforce, click here: https://www.salesforce.com/eu/company/privacy/

X. Genesys

Also, we employ Genesys, a customer experience and call center technology solftware, to contact and provide assistance to our customers. The tool processes personal data, such as phone numbers, names, voices, and business-related information. Genesys is provided by Genesys Cloud Services, Inc.

Global headquarters:  Genesys Cloud Services, Inc., Menlo Park, 1302 El Camino Real, Suite 300 Menlo Park, CA, 94025, USA

For more information on the processing of data by Genesys, click here: https://www.genesys.com/company/legal/privacy-policy

Y. OneTrust Cookie Management System

We use this tool to manage cookies and consent on our website, to ensure that the wishes of our website visitors are respected in accordance with the applicable laws. The tool stores cookies and users’ choices and preferences on how these cookies should be used. It is provided by OneTrust LLC.

Global headquarters:  OneTrust LLC, 1200 Abernathy Rd NE, Sandy Springs, GA 30328, USA

For more information on the processing of personal data by OneTrust, click here: https://www.onetrust.com/privacy-notice/

Z. STRATOS Technologies

STRATOS Technologies is a business-to-business software that enables the creation of a data driven strategy and synchronized execution at scale. We use the functions of this tool to process project data, carry out market analysis, and evaluate internal marketing & sales capabilities. Here, we mostly process business information. However, the processing of personal data such as names and contact information could occur under certain circumstances, especially when dealing with sole proprietors. The tool is provided by Stratos Technologies Ltd.

Global headquarters: Stratos Technologies Ltd., 16 Great Chapel St London, W1F 8FL, GB

For more information on the processing of data by STRATOS Technologies Ltd., click here: https://stratos.tech/

AA. FoxBase

We use FoxBase, a sales platform designed to digitize and accelerate B2B sales processes. It enables companies to offer their customers the best digital consultation experience without requiring IT knowledge. The platform provides functionalities such as selection, configuration, and calculation, to guide customers to the optimal product or solution. ​FoxBase may process personal data such as user credentials, contact information, and interaction histories, to enhance the digital consultation experience.​ The platform is provided by FoxBase GmbH.

Global headquarters: FoxBase GmbH, Oststraße 10, D-40211 Düsseldorf
Germany

For more information on the processing of data by FoxBase GmbH, click here: https://www.foxbase.de/datenschutz  

BB. Datadog

We employ Datadog, a monitoring and analytics platform for developers, IT operations teams, and business users in the cloud age. It provides end-to-end visibility into application performance, infrastructure, logs, and more, enabling proactive identification and resolution of issues. ​Datadog primarily processes system and application performance data. However, depending on your configuration and the data you send, it might inadvertently process personal data and track website visitors.​ The tool is provided by Datadog Inc.  

Global headquarters: Datadog, Inc., 620 8th Avenue, 45th Floor, New York, NY 10018
United States​  

For more information on the processing of data by Datadog Inc., click here: https://www.datadoghq.com/privacyl

CC. Confluent Cloud

We use Confluent Cloud, a fully managed cloud-native service for Apache Kafka, facilitating real-time data streaming and processing. It enables organizations to build event-driven applications and data pipelines without managing the underlying infrastructure. ​

The data processed depends on the use case. If personal data is included in the event streams, then Confluent Cloud will process it. It's crucial to manage and secure the data in compliance with relevant data protection regulations.​ Currently, we are not processing personal data in Kafka. The tool is provided by Confluent Inc.

Global headquarters: Confluent, Inc., 899 West Evelyn Avenue, Mountain View, CA 94041, United States​

For more information on the processing of data by Confluent, click here: https://www.confluent.io/legal/confluent-privacy-statement/  

DD. Algolia

We use Algolia, a search and discovery API for building fast and relevant search experiences. It enables developers to integrate real-time search functionalities into applications and websites.​ Algolia processes search queries and may process user data to provide personalized search results.​ The tool is provided by Algolia, Inc.

Global headquarters: Algolia, Inc., 589 Howard Street, Suite 5, San Francisco, CA 94105 United States​

For more information on the processing of data by Algolia, click here: https://www.algolia.com/policies/privacy

EE. Graphisoft (Archicad Plugin Platform)

Archicad is a Building Information Modeling (BIM) software solution developed by Graphisoft, widely used by architects, designers, and engineers for 2D and 3D drafting, visualization, and other design functions.​ Archicad may process user credentials, project data, and collaboration information.​

Global headquarters: Graphisoft SE​, Graphisoft Park 1, 1031 Budapest, Hungary​

For more information on the processing of data by Graphisoft, click here: https://graphisoft.com/legal/privacy-policy  

FF. Autodesk (Revit Plugin Platform)

We use Revit, a Building Information Modeling (BIM) software used by architects, engineers, and construction professionals for 2D and 3D modeling, design, and documentation of building projects.​ Revit may process user credentials, project data, and collaboration information.​ This tool is provided by Autodesk, Inc.​

Global headquarters: Autodesk, Inc., 111 McInnis Parkway, San Rafael, CA 94903, United States​  

For more information on the processing of data by Autodesk, click here: https://www.autodesk.com/company/legal-notices-trademarks/privacy-statement

GG. Apryse WebViewer​  

We equally employ WebViewer, a JavaScript-based document viewing and editing library that allows users to view, annotate, and edit PDFs, Microsoft Office documents, images, videos, and web pages directly within web applications. It supports features such as annotation, collaboration, digital signatures, redaction, page manipulation, form creation, document generation, comparison, text editing, and measurements. WebViewer may process personal data such as user annotations, comments, form field entries, and interaction data to facilitate document collaboration and editing functionalities.​ The tool is provided by Apryse (formerly PDFTron Systems Incorporated)​  

Global headquarters: Apryse Software Inc., 2399 Blake Street #125 Denver, CO, 80205 USA

For more information on the processing of data by Apryse, click here: https://apryse.com/privacy  

HH. Unleash

Unleash is a feature management platform that enables software development teams to control the activation and rollout of features in their applications. It allows for safe experimentation, A/B testing, and gradual feature rollouts, reducing the risk associated with deploying new functionalities. Unleash supports both self-hosted and SaaS (Software as a Service) options, catering to various organizational needs. ​  

Depending on its implementation, Unleash may process personal data such as user identifiers and interaction data to facilitate targeted feature rollouts and experiments. However, we are currently not using any of those capabilities. The tool is provided by Bricks Software AS.

Global headquarters: Bricks Software AS, Edvard Storms gate 2, 0166 Oslo, Norway​  

For more information on the processing of data by Unleash, click here: https://www.getunleash.io/privacy-policy

II. Zoom

We use this tool to deliver training and Continuing Professional Development webinars to customers. Zoom processes personal data including names, emails and locations for event registration and communication purposes. It is headquartered in San Jose, California USA

For more information on the processing of data by Zoom, click here:

https://www.zoom.com/en/trust/privacy/privacy-statement/?cms_guid=false&lang=en-US

These are global tools. Please kindly provide any market-specific tools here. It should follow the above pattern. That is, tool name, purpose, personal data processed, service provider, global address and a link to its privacy notice (privacy policy).

V. Job Applications

Each year, we receive several applications for jobs and internships from those interested in working with us. While some applications are submitted via third party tools, others are sent via email (through Knauf employees), and on rare occasions, via the post office. We use Teamtailor, a third-party recruitment tool to manage applications. The tool is provided by Teamtailor Ltd:

Global Headquarters: Teamtailor Ltd, Östgötagatan 16, 116 21 Stockholm, SWEDEN

Please note that Teamtailor may also process your personal data for its own purposes. For more information on how this is done, please visit: https://www.teamtailor.com/de/privacy-policy/

In reviewing these job applications, we process large amounts of personal data, such as candidates’ names, contact information, academic qualifications, professional experiences, references, and in certain cases, photos (which we strongly discourage).  The purpose for processing such data is to assess the candidates’ suitability for the advertised position, and the legal basis is the candidate’s consent. The personal data shall not be used for any purpose other than that to which the data subject has consented.  

The application documents are disclosed only to the relevant Knauf employees in charge of a given recruitment process, and the assessment is done manually. That is, we do not employ AI tools to make automated decisions on who is qualified for an interview or for a given job. At each stage of the evaluation, the applicants are informed about the status their applications.  

After selecting a given candidate, the remaining applications are stored for a reasonable period of time (please refer to the Privacy Notice in Teamtailor), after which they would be automatically deleted, except where the applicant has consented to the sharing of his or her application with other entities of the Knauf Group with a view of being considered for similar positions or has agreed to be included in our talent pool, to be considered for future openings. However, the consent can be revoked at any time by sending a simple email to our data protection officer/coordinator, or through other appropriate means.

VI. Data Sharing

We may share user information as necessary or appropriate, in particular when wIth the data subject's consent, or when we have a legal obligation or a legitimate interest to do so. The following are the potential recipients of your personal data:  

Third-party service providers working on our behalf, to facilitate services they provide to us. As provided above, these can include providers of services such as website hosting and/or maintenance, data analysis, payment processing, order fulfilment, fraud prevention, information technology, customer service, marketing delivery, and other services;

Government authorities, law enforcement, or other third parties for legal, security or safety purposes, such as to comply with legal requirements; to enforce or apply our terms of service and other agreements; and to protect our rights and the property or safety of our users or third parties; and  

Other entities of the Knauf Group, which can be found here: https://knauf.com/en/knauf-worldwide.

VII. Cross-Border Data Transfers  

As a group of companies, we may share your personal data with other Knauf entities and service providers located outside your country. Such data transfers take place in conformity with the applicable laws, to ensure that the data is not accorded less protection in the country of destination.

For EU data subjects, data transfers to third countries to the Union are done based on the Commission’s Adequacy Decisions recognizing countries for providing an adequate level of protection to personal data. This applies to countries such as Argentina, Canada, Israel, Isle of Man, Japan, New Zealand, Republic of Korea, Switzerland, the United Kingdom, the United States (commercial organizations participating in the EU-US Data Privacy Framework), and Uruguay. For countries not covered by an adequacy decision, we use Standard Contractual Clauses.  

For non-EU data subjects, data transfers are primarily done on the basis of Standard Contractual Clauses.  

Also, considering that service providers are likely to independently transfer such data to third countries, for instance, to their servers located in their respective countries of origin, Knauf engages only service providers that have demonstrated their ability to comply with all data protection requirements.  

VIII. The Rights of the Data Subjects

Depending on the means used for a given processing operation, we always give the data subjects the possibility of exercising the following rights:  

A. the right to receive information about their personal data that we process;

B. the right to rectification of incorrect or outdated personal data;

C. the right to deletion, involving the permanent erasure of personal data, except for perfectly anonymized statistics;

D. the right to restriction of data processing, including the suspension of operations conducted on personal data, and where applicable, the temporary deactivation of accounts;

E. the right to data portability, involving the possibility of receiving personal data in a structured, commonly used and machine-readable format (PDF, Word PNG etc.);

F. the right to withdraw your consent at any time without affecting the legality of processing activities that took place prior to such withdrawal;  

G. the right to object to data processing based on legitimate interest, which would automatically halt the processing, unless Knauf demonstrates a compelling legitimate interest that overrides the rights of the data subject;  

H. the right not to be subject to a decision based solely on automated processing, including profiling and AI decisions, which produces legal effects or significantly affects the data subject; and

I. the right to lodge a complaint to a supervisory authority, which in this case is:

Office of the Australian Information Commissioner  
GPO Box 5288  
SYDNEY NSW 2001  
Fax: +61 2 6123 5145
Website: https://www.oaic.gov.au

Where it is not possible to directly exercise these rights, the data subject can reach out to our data protection officer/coordinator via the address provided above.