Privacy Policy

Privacy Policy

I. General information on data processing

We process the personal data of our users for the purposes described below and in accordance with the applicable laws, and in particular in accordance with European data protection regulation.

In this Privacy Policy we would like to inform our users about the nature, scope and purposes of the collection and use of their personal data, and inform about the legal basis of the processing, storage periods, and about respective rights with regard to data processing.

II. Name and address of the controller

The controller within the meaning of the GDPR and other data protection regulations is:

Knauf Digital GmbH
Landshuter Allee 10
80637 Munich, Germany
Phone: +49 (0) 9323 / 31-0
Email: info@knauf.com
https://www.knauf.com

III. Data protection officer Knauf Group

Am Bahnhof 7
97346 Iphofen Germany
Phone: + 49 (0) 9323 / 31-0
Email: data-protection@knauf.com

IV. How we process personal data on our website

Provision of the website and creation of log files

Description and scope of data processing
Every time our website is accessed, our system automatically records information transmitted to us by the user’s browser. These data include the IP address and related location, the date and time of visit, the device’s operating system, the internet service provider, and websites which the user navigates through their visit on the site (so-called ‘logfiles’ or ‘session records’). Processing of the personal data is essential for operation of the website.

Purpose of data processing
Generally, we use the data to enable access to and the display of our website, to ensure the security of our website, in particular to prevent unauthorised interference with it, and to enable us to exercise our legal rights and obligations in regard to such unauthorised interference. Furthermore, we analyse session records to optimise our website. The purposes mentioned above also constitute our legitimate interest in the processing of data.

Period of storage
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. Where the data is recorded for the purpose of providing the website, this is the case when the respective session has ended. Where the data is stored in log files, this is the case after at most thirty days.

Use of cookies

Our website uses cookies. Please refer to our Cookie Policy.

V. Communicating with our users

Contact

Description and scope of data processing
Our website utilizes a contact form and provides an email address to enable users to reach out to us with inquiries or requests for information. When the user fills out the contact form, we process their company name, department type, name, email, postal code, city, country, category of intent and any other details they choose to provide. The user’s personal data transmitted with the message is processed exclusively to process the conversation.

The users are not obliged to provide us with their personal data. However, we need the relevant data to contact them and respond to their request or query.

To the extent required to fulfil the user’s contact query, Knauf Digital GmbH will forward the query to the competent Knauf affiliate to further process the contact query.

We use functions of HubSpot Inc., 2nd Floor, 25 First Street, Cambridge, MA 02141, USA (hereinafter referred to as: HubSpot) to offer the contact form services.

Purpose of data processing
The processing of personal data in the context of our communications with the user is based on our legitimate interests to respond to requests or queries, or otherwise to communicate with the users of our website. Where applicable, we also communicate with the user in the context of conclusion of performance of a contract. This information is solely used to respond to their queries and provide necessary assistance. We do not use the data for any other purposes without the user’s explicit consent.

Newsletter

Description and scope of data processing
Users are given the opportunity on our website to subscribe to general or topic-specific newsletters free of charge. The user shall provide information including their contact details (first name, surname, email) and their country and may provide further optional data (phone, company name, profession, postcode, city, interests). We collect the information on behalf of and for the use by the Knauf group company whose newsletter the user is interested in as it will be indicated when subscribing for the newsletter.

We use functions of HubSpot to offer the newsletter services.

Purpose of data processing
The newsletter sending Knauf group company processes the personal data to inform their customers and potential customers about Knauf group products, services and events. Personal data is processed based on consent the user gives when signing up for the newsletter. The data is used exclusively to dispatch the newsletter.

The user may cancel their subscription to the newsletter at any time. A corresponding link is provided for this purpose in each newsletter.

VI. Creating an account

Description and scope of data processing
Users may register or login to a personal Knauf user account. A global account with a unique identifier will be created which provides access to an interface for business customer-facing applications, e.g., order overviews or materials calculator and information management (e.g. contact details, country and language settings).

To register, the user must provide mandatory information, including email, first name, last name, category of user (e.g., architect, distributor, investor, etc.), country and language and may optionally provide their phone number. We also process the user’s IP address and date and time of registration.

Purpose of data processing
Users have to register in order for us to provide certain content and services on our website as well as certain access to our digital services. We will process the personal data to perform the contract we conclude with the user upon registration.

Period of storage
The data will be deleted if the registration on our website is cancelled or changed. Incomplete registration data (e.g., the user has provided name and email but has not entered a password) or locked accounts due to password attempt fails will be deleted after seven days.

VII. Company profiles

We operate publicly accessible company profiles in professional and social networks where we provide information about our company, our products, and services on the topics of building materials, drywall, insulation, and ceilings. We provide company updates and relevant industry news and create an opportunity for the users of the professional and/or social network to communicate with us.

We process personal data such as names or profile pictures when a user interacts with our company profile, e.g. if they post, share or like content. Such processing is based on our legitimate interest to present our company information and to communicate with (potential) customers and business partners. The data generated in connection with the company profile is not saved in our own systems.

When a user visits our company profile, further personal data may be processed by the operator of the professional and/or social network irrespective of the user being registered or logged in to their account. Processing data by the social networks may be based on different legal bases, which the operators of the social networks are obligated to state. However, since we generally have no influence on the processing of personal data by the operator of the professional or social network, please refer to the privacy policies of the relevant networks for details on their processing activities.

In principle, users can assert their rights as explained under section XIV. Rights of the data subject towards us or the operator of the network in question. Please note that despite our joint status as controller, we do not have full influence over the social media portals’ data processing operations. Our options are primarily geared toward the relevant provider’s corporate policy.

Without processing the above-mentioned personal data, the user will not be able to interact with our company profiles.

Currently, we use the following professional and social networks:

X (formerly known as Twitter):
The platform is operated by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland. Additional information on the processing of personal data by X can be found here: https://twitter.com/en/privacy.

YouTube:
The platform is operated by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, United States. Additional information on the processing of personal data by YouTube can be found here:  https://policies.google.com/privacy.

LinkedIn:
The platform is operated by LinkedIn, Unlimited Company Wilton Place, Dublin 2, Ireland. Additional information on the processing of personal data by LinkedIn can be found here: https://www.linkedin.com/legal/privacy-policy.

XING:
The platform is operated by XING SE, Dammtorstraße 30, 20354 Hamburg, Germany. Additional information on the processing of personal data by Xing can be found here: https://privacy.xing.com/en/privacy-policy.

VIII. Analytics and Advertising

Description and scope of data processing

Google AdWords

We use Google AdWords from Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as: Google). This service allows us to place advertisements. Google places a cookie on your computer for this purpose. Personal data may be saved and evaluated as a consequence, above all the activity of the user (especially which pages were visited and which elements were clicked), as well as device and browser information (especially the IP address and the operating system), data on the advertisements displayed (especially which advertisements were displayed and whether the user clicked these), and also data from advertising partners (especially pseudonymized user IDs). For more information on the processing of data by Google, click here: https://policies.google.com/privacy.

We only receive information about the total number of users who have reacted to our advertisement. No information is passed on that would allow us to identify you. Usage is not for the purpose of tracking. Personal data is processed based on consent of the user.

Facebook retargeting

We use functionalities of the Facebook Retargeting advertising plugin from Meta Platforms Technologies Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (hereinafter referred to as: Facebook Retargeting). Facebook Retargeting is used to conduct advertising campaigns and interact with them. Users are reminded by Facebook Retargeting of products they searched for or viewed but did not buy. Cookies are saved on your device by Facebook in the process. The following personal data in particular is processed by Facebook as a consequence: – Information on the user’s activities – Website visited – Which products were displayed – Which advertisements were clicked – Device information, especially device type, IP address – Facebook account of users, if users are logged into Facebook Data is processed in this regard on servers of Meta Platforms, Inc. 1601 Willow Rd Menlo Park, California 94025-1453, USA. Other recipients of data include providers and service providers of Meta Platforms, Inc., for analysis purposes for example. For more information on the processing of data by Facebook, click here: https://www.facebook.com/privacy/policy

We use Facebook Retargeting to place advertisements on various platforms and to analyze how users interact with these advertisements. Our intention here is to be able to display personalized advertising to these users, which is therefore also relevant to them. Personal data is processed based on consent of the user.

Google Ads Remarketing

We use Google Ads Remarketing from Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as: Google). Google Remarketing is used for retargeting visitors to the website for advertising purposes via Google Ads advertisements. With the help of Google Ads Remarketing, target groups (“similar target groups”) can be created, which have, for example, accessed certain pages. This makes it possible to identify the user on other websites and display targeted advertising. Google places a cookie on the user’s computer for this purpose. Personal data may be saved and evaluated as a consequence, above all the activity of the user (especially which pages were visited and which elements were clicked), as well as device and browser information (especially the IP address and the operating system), data on the advertisements displayed (especially which advertisements were displayed and whether the user clicked these), and also data from advertising partners (especially pseudonymized user IDs). For more information on the processing of data by Google, click here: https://policies.google.com/privacy and https://policies.google.com/technologies/partner-sites.

The purpose of processing the personal data is the targeted addressing of a target group. The cookies stored on the devices of users recognize them when they visit a website and can therefore show them interest-based advertising. Personal data is processed based on consent of the user.

Adobe Analytics

We use the analytics service Adobe Analytics from Adobe Inc, 345 Park Avenue, San Jose, CA 95110-2704, USA and its representative in the EU, Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland (hereinafter referred to as: Adobe). Adobe places a cookie on your computer for this purpose. Personal data may be stored and evaluated as a consequence, in particular the activity of the user (especially which pages were visited and which elements were clicked) as well as device and browser information (especially the IP address and the operating system). For more information on the processing of data by Adobe, click here: https://www.adobe.com/uk/privacy.html.

The processing of the personal data of users by Adobe Analytics allows us to analyze the surfing behavior of our users. By evaluating the data obtained, we can compile information on the use of individual components of our offer. This helps us to continually enhance our website and also increase user friendliness in this context.

Adobe Launch

We use the services of Adobe Experience Platform Launch by Adobe Inc, 345 Park Avenue, San Jose, CA 95110-2704, USA and its representative in the EU, Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland (hereinafter referred to as: Adobe Launch). Adobe Launch is designed to manage and to deploy marketing and analytics tags for websites and mobile apps. We use it to collect information about the use of our website. Adobe Launch provides a library containing tags for other Adobe solutions.

HubSpot

We use functions of HubSpot. HubSpot is an integrated software solution we use to cover various aspects of our online marketing. These include general reporting (especially traffic sources, accesses, etc.).

For more information on the processing of data by HubSpot, click here: https://legal.hubspot.com/privacy-policy.

Facebook pixel

We use the Facebook pixel by Meta Platforms, Inc. 1601 Willow Rd Menlo Park, California 94025-1453, USA and its representative in the EU, Meta Platforms Technologies Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. It allows us to track the actions of users after they have viewed or clicked a Facebook advertisement. Personal data may be saved and evaluated as a consequence, above all the activity of the user (especially which pages were visited and which elements were clicked), as well as device and browser information (especially the IP address and the operating system), data on the advertisements displayed (especially which advertisements were displayed and whether the user clicked these), and also data from advertising partners (especially pseudonymized user IDs). This lets us capture the effectiveness of Facebook advertisements for statistical and market research purposes. Personal data is processed based on consent of the user.

Data can be transferred to Facebook servers in the US in the process. The data collected in this way is anonymous for us, in other words we do not see the personal data of individual users. However, this data is saved and processed by Facebook. Facebook can connect this data with your Facebook account and also use it for own advertising purposes in accordance with Facebook’s Data Use Policy. For more information on the processing of data by Facebook, click here: https://www.facebook.com/privacy/policy.

LinkedIn Insight Tag

We use functionalities of the LinkedIn Insight Tag marketing plugin by LinkedIn Ireland, Unlimited Company, Wilton Place, Dublin 2, Ireland. It enables us to capture website audiences and conversions by allowing us to obtain information on the visitors to the website and to keep detailed campaign reports. Cookies are saved on the user’s device by LinkedIn. The following personal data is processed by LinkedIn as a consequence: URL, referrer URL, IP address in shortened or hashed form, device and browser properties (user agent) as well as time stamp. For more information on the processing of data by LinkedIn, click here: https://www.linkedin.com/legal/privacy-policy.

LinkedIn does not share personal data with us, rather simply offers aggregated reports on the target group and advertisements. LinkedIn also offers a remarketing function, which allows us to show targeted and personalized advertising outside of our website without us discovering the website visitor’s identity. Personal data is processed based on consent of the user.

Purpose of data processing
We will process the personal data in line with the aforementioned purposes according to the consent of the user.

IX. Period of storage

Unless indicated otherwise in this Privacy Policy, the following applies to the period of storage of personal data. We retain personal data only for as long as there is a legitimate reason or other legal ground to do so and will keep these legal bases under review. If there is no longer a legal ground for the data to be retained, we will erase personal data securely, or in some cases anonymise it.

The criteria used to determine our retention periods include:

X. Data sharing

We may share our user’s information as necessary or appropriate, in particular when we have a legal obligation or legitimate interest to do so:

XI. Other third party providers

We use functions of third-party service providers for the provision of our website such as website hosting, data analysis, payment processing, order fulfilment, fraud prevention, information technology, customer service, marketing delivery, and other services. The following provides an overview of the third-party services we use.

Microsoft Azure

Website hosting is carried out by Microsoft Azure from Microsoft Corporation, Microsoft Deutschland GmbH: Walter-Gropius-Strasse 5, 80807, München, Germany

For more information regarding Microsoft Azure data processing, click here: https://privacy.microsoft.com/en-gb/privacystatement

Okta

We use the Customer Identity Management platform from Okta, Inc., 101 1st Street, San Francisco, CA 94105, USA (“Okta”) to register for a Knauf account on our websites and to access the other services offered here. Okta manages and stores the data in Germany, but may also use international support teams, for example, in Singapore, Canada, Japan, Australia, and the US, in the event of support requests. The data collected by Okta is only used for operation and management of Knauf services that are subject to registration and for the execution, establishment, or termination of the underlying contract with the user concerning participation in the service selected by him*her.

For more information about Okta’s data processing, click here: https://www.okta.com/privacy-policy/.

Qualtrics

We use the customer feedback tool "Qualtrics" of Qualtrics Ireland Limited: Costello House, 1 Clarendon Row, Dublin 2, D02 TA43, Ireland.

For more information about Qualtrics’ data processing, click here: https://www.qualtrics.com/privacy-statement/.

Cloudflare

On our website, we use functions of the content delivery network Cloudflare, Inc., 101 Townsend St., San Francisco, California 94107, USA . A content delivery network (CDN) is a network of regionally distributed servers connected over the Internet, which are used to deliver content – especially large media files such as videos. Cloudflare offers web optimization and security services, which we use to improve the loading times of our website and to protect it from misuse.

For more information regarding Cloudflare’s data processing, click here: https://www.cloudflare.com/en-gb/privacypolicy/

Salesforce

We use functions of Salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 Munich, Germany (hereinafter referred to as: Salesforce). Salesforce is a cloud-base customer relationship management software solution we use to cover various aspects of managing our customer relations. To effectively serve our customers, we process our customer’s personal data on the Salesforce platform, including but not limited to name, email address, phone number, business information such as job title and description, language and country.

For more information on the processing of data by Salesforce, click here: https://www.salesforce.com/eu/company/privacy/.

XII. Cross-border data sharing

As a global firm, we may share personal data in compliance with applicable data protection laws with other Knauf entities, offices, or departments. Appropriate safeguards for personal data transfers within the Knauf Group will be ensured through standard contractual clauses where necessary.

The user’s personal data may be stored and processed in any country where we have facilities or in which we engage service providers. Information may be transferred to countries outside of the user’s country of residence which may have data protection rules that are different from those of their country. In certain circumstances, courts, law enforcement agencies, regulatory agencies or security authorities in those other countries may be entitled to access personal information.

Additional information regarding the EU: Personal data may be transferred to a country outside of the EU that is not recognized by the European Commission as providing an adequate level of data protection according to EU standards. For transfers from the EU to countries not considered adequate by the European Commission, we have put in place adequate measures, such as standard contractual clauses adopted by the European Commission, and where appropriate additional technical and/or organisational measures, to protect our user’s personal data.

XIII. Rights of the data subject

If you are an individual whose personal data, and the processing of that personal data by the controller, are subject to the application of the GDPR, you have certain rights as set out below if statutory requirements are met. Where your personal data and the processing of your personal data are not subject to the GDPR these rights do not necessarily apply and nothing in this Privacy Policy may be interpreted to establish rights or obligations that go beyond what is mandated by the respectively applicable data protection laws.

You further have the right to object against data processing based on legitimate interests.