Privacy, terms & condition and cookie policy


JOTUN PRIVACY STATEMENT

INTRODUCTION
Jotun A/S and its Group Companies (Jotun) are committed to the protection of personal data of Jotun employees and other individuals.  
This Privacy Statement (the "Privacy Statement") describes the information that Jotun collects from or about you ("Personal Data"), and how we use and to whom we disclose such data. Jotun A/S or the Jotun company which controls the Personal Data is the so-called “data controller” for the Personal Data that is processed about you.

PURPOSE OF THIS DOCUMENT 
This Privacy Statement is developed to guide the activities of Jotun and inform Data Subjects of their rights related to protection of Personal Data.

ORGANISATIONS AND DATA SUBJECTS COVERED BY THIS STATEMENT
“Jotun” includes the parent company, Jotun A/S, and its subsidiaries. All references in this Privacy Statement to "Jotun", "we", "us", "our" and like terms should be interpreted accordingly.
This Privacy Statement applies to the Personal Data of all individuals that is either a Customer, an employee of a Customer, a Supplier or an employee of a Supplier or individuals registering their personal data on jotun.com(the “ Data Subject”).

LEGAL FRAMEWORK AND COMPLIANCE
The Jotun Group has entered a set of data protection rules and policies, binding for all companies.  The so-called Jotun Binding Corporate Rules (“BCR”), with corresponding policies, procedures and guidelines are worked out in order to be compliant with the General Data Protection Directive, (EU) 2016/679 ("GDPR"). With common data protection rules across Jotun, we ensure an adequate level of protection for all Data Subjects including when Personal Data is transferred between different Group companies to different countries.
It is Jotun's policy to comply with the privacy law within each country in which we operate. Sometimes this legislation and/or a Data Subject's right to data protection are different from one country to another.  Data Subjects keep any rights they have under local law. This Privacy Statement shall apply only where it provides additional protection. Where local law provides more protection than this Privacy Statement, local law shall apply.
 
WHAT IS PERSONAL DATA?
Personal Data is any information related to a person that can be used to directly or indirectly identify the person. It can be anything from a name, a photo, an email address, bank details, posts on social networking websites, medical information, or a computer IP address.
For the purposes of this Privacy Statement, Personal Data is any information about an identifiable individual. Personal Data does not include anonymous or non-personal information (i.e., information that cannot be associated with or tracked back to a specific individual).

FOR WHICH BUSINESS PUPROSES DO WE COLLECT PERSONAL DATA?
Personal Data of Data Subjects, shall be collected, used or otherwise Processed for one (or more) of the following Business Purposes:
  • Providing, development and improvement of products and/or services purposes:
  • Conclusion and execution of agreements with Customers, Suppliers and Business Partners:
  • Relationship management and marketing purposes:
  • This includes activities such as maintaining and promoting contact with Customers, Suppliers and Business Partners, account management, customer service, recalls and the development, execution, and analysis of market surveys and marketing strategies.
  • Business process execution, internal management, and management reporting purposes:
  • Health, safety and security purposes:
  • In order to comply with legal obligations.
  • In order to protect vital interests of Employees or Data Subjects.
  • Cookies (please see our Cookie Policy for more information).
WHAT KIND OF PERSONAL DATA DOES JOTUN COLLECT FROM YOU?
Jotun collects and maintains different types of Personal Data in respect of Data Subjects. This includes e.g. the Personal Data contained in: 
  • contact information such as name and address, telephone numbers and email address; 
  • details about an individual’s work experience and qualifications, date of birth, driver’s license details; 
  • business details, including the names of relevant office holders of a company and business numbers.
In addition to the examples listed above, Personal Data also includes information such as and any other information necessary to fulfil Jotun's business purposes.
Where permitted or required by applicable law or regulatory requirements, Jotun may collect information about you without your knowledge or consent. 

MARKETING
We may use the information stated in article 7 to inform and promote our products and/or services. If we choose to promote such information we will ask for your explicit consent and give you an “opt out” option for being contacted. This information will not be disclosed to any other third parties outside of Jotun.
Without consent we may use the information stated under article 7 to inform and promote information related to products and/or services purchased from Jotun.        

WHEN DO WE DISCLOSE YOUR PERSONAL DATA?
We may share your Personal Data with our Employees, contractors, consultants and other parties (including other members of the Jotun group) who require such information to assist us fulfilling the business purposes of Jotun. This includes parties that provide products or services to us or on our behalf.
In some instances, such parties may also provide certain information technology and data processing services to us so that we may operate our business. We may share Personal Data with such parties both in and outside of your home jurisdiction, and as a result, your Personal Data may be collected, used, processed, stored or disclosed in Norway or any other country where Jotun is present.


TRANSFER AND DISCLOSURE OF PERSONAL DATA
Personal Data is only transferred to external parties, outside the Jotun Group if this is required or permitted under the applicable privacy legislation. When we share Personal Data with external parties we require that the external party enters into a Data Processing Agreement (DPA) with Jotun in compliance with the GDPR. Such parties may only use or disclose Personal Data in a manner consistent with the use and disclosure provisions of this Privacy Statement. 
Further, your Personal Data may be disclosed in the following situations:

  • If permitted or required by applicable law or regulatory requirements. In such a case, we will endeavour to not disclose more Personal Data than is required under the circumstances.
  • To comply with valid legal processes such as search warrants, subpoenas or court orders; or
  • As part of Jotun's regular reporting activities to other members of the Jotun group (including outside of your home jurisdiction); or
  • As part of transactions or divestments which involves third parties. In such a case, we will endeavour to not disclose more Personal Data than is required under the circumstances.
  • To protect the rights and property of Jotun;
  • During emergency situations or where necessary to protect the safety of a person or group of persons;
  • Where the Personal Data is publicly available; or
  • With your consent where such consent is required by law.
 
NOTIFICATION AND CONSENT
Privacy laws do not generally require to obtain your consent for the collection, use or disclosure of Personal Data for the purpose of conducting the business purposes of Jotun. In addition, we may collect, use or disclose your Personal Data without your knowledge or consent where we are permitted or required by applicable law or regulatory requirements to do so.
In some situations, however, it might be that your consent is required for our collection, use or disclosure of your Personal Data. In such cases you may at any time, subject to legal or contractual restrictions and reasonable Statement, withdraw your consent. If you choose to withdraw your consent please  send an email to your contact person in Jotun or to dataprotection@jotun.com

HOW IS YOUR PERSONAL DATA PROTECTED?
Jotun endeavours to maintain physical, technical and procedural safeguards that are appropriate to the sensitivity of the Personal Data in question. These safeguards are designed to protect your Personal Data from loss and unauthorized access, copying, use, modification or disclosure.


PERSONAL DATA RETENTION
Except as otherwise permitted or required by laws or regulations, Jotun endeavours to retain your Personal Data only for as long as we believe is necessary to fulfil the purposes for which the Personal Data was collected. We may, instead of destroying or erasing your Personal Data, make it anonymous so that it cannot be associated with or tracked back to you. 

UPDATING YOUR PERSONAL DATA
It is important that the Personal Data in our records is both accurate and current. If your Personal Data happens to change, please keep us informed of such changes.

ACCESS, CORRECTIONS AND DELETING PERSONAL DATA
You have the right to access information about your Personal Data. If you want to review, verify, correct or delete your Personal Data, please send an email to dataprotection@jotun.com. 
We will take necessary steps to confirm the data subject’s identity before providing any information regarding personal data. The request will, when the requestors identity is confirmed, be answered within 30 days. In some instances, the request may take longer, but we will inform you accordingly and send an answer at the latest within 90 days.
 
Your right to access the Personal Data is not absolute. There are instances where law or regulations allow or require us to refuse to provide some of the Personal Data. It may also be statutory requirements preventing us from deleting some Personal Data. In the event that we cannot adhere to your request, we will endeavour to inform you of the reasons why, subject to any legal or regulatory restrictions.

INQUIRIES OR CONCERNS
If you have any questions about this Privacy Statement or concerns about how we manage your Personal Data or if you wish to file a complaint, please contact our Global Data Protection Officer at dataprotection@jotun.com.
We will endeavour to answer your questions and advise you of any steps taken to address the issues raised by you at our earliest convenience and at the latest within one month after your request was made.

REVISIONS TO THIS PRIVACY STATEMENT
Jotun may from time to time make changes to this Privacy Statement to reflect changes in our legal obligations or in the manner we deal with your Personal Data. We will communicate any revised version of this Privacy Statement. The, at all times applicable and updated Data Protection Statement is available on www.jotun.com. Any changes to this Privacy Statement will be effective from the time they are communicated. Any change that relates to why we collect, use or disclose your Personal Data, that require your consent, will not apply to you until we have obtained your consent.

INTERPRETATION OF THIS PRIVACY STATEMENT
This Privacy Statement includes examples but is not intended to be restricted only to such examples. Therefore, where the word 'including' is used, it shall mean; including but not limited to.




TERMS and CONDITIONS 
By accessing and using www.jotun.com or other Jotun websites you agree to the following terms and conditions:   
   
INTELLECTUAL PROPERTY 
This website, including the content as well as the selection and arrangement of the content of each individual page or of the collection of the pages, are fully owned by Jotun, unless otherwise stated. This includes, but is not limited to copyright, trademarks and designs. All rights reserved.  You are allowed to store extracts from Jotun's website and to print copies of them for your personal, non-commercial use only. Any other kind of uses, reproductions, translations, adaptations, arrangements, any other alterations, distribution or storage of this site in any form and by any means, in whole or in part, without the prior written permission of Jotun is prohibited. Neither Jotun nor any of our subsidiaries are responsible for the content of any other website, which is not under the control of Jotun through which you may have gained access to our website, or to which you may gain access from our website. Jotun and its subsidiaries will accept no liability in respect of the material on any other website.   

DISCLAIMER OF LIABILITY 
Every effort is made to provide accurate and complete information. However, we cannot guarantee that there will be no errors. Jotun makes no claims, promises or guarantees about the accuracy, completeness, or adequacy of the contents of this website and expressly disclaims liability for any inaccuracies, errors and omissions in the contents of this website.  
All colours presented on the website may vary depending lighting conditions, technical equipment, different use of web browsers and monitors, finish, gloss levels, type of surface and adjacent colours. For critical colour matches we recommend use of physical painted colour samples. In some situations deviations can occur between the samples shown due to production methods, pigments etc.   
With respect to the content of Jotun websites, neither Jotun, nor its affiliates, employees and contractors make any warranty, expressed or implied or statutory, including but not limited to the warranties of non-infringement of third party rights, title, and the warranties of merchantability and fitness for a particular purpose with respect to content available from the Jotun websites or other Internet resources linked from it. Neither does Jotun nor any of its subsidiaries assume any legal liability for any direct, indirect or any other loss or damage of any kind for the accuracy, completeness, or usefulness of any information, product, or process disclosed herein, nor freedom from computer virus, and do not represent that use of such information, product, or process would not infringe on privately owned rights.                                                   

This notice shall be governed by and construed in accordance with Norwegian law.   

If any provision of this notice shall be unlawful, void or for any reason unenforceable then that provision shall be deemed severable and shall not affect the validity and enforceability of the remaining provisions.   
provisions.   



COOKIE POLICY

Jotun appreciates your interest in our web pages. We would like to assure you that all personal information is handled securely. This page explains how Jotun handles the personal data we collect on our website.
All personal information you submit to Jotun is solely used by us to give you better service. Visits to our sites are traceable, to help us see which of our web pages are most interesting to our users. We request that you accept cookies so that we can offer you better service on our website, in social media, and in advertising. This privacy statement applies to any processing of personal data on the website and our online subscription services (Email Newsletter, Technical Documentation, My subscription) In the following jotun.com and local websites such as jotun.no and others are referred to as the “Website”.

AUTOMATIC STORAGE OF INFORMATION: WHAT INFORMATION DO WE COLLECT AND WHAT DO WE USE IT FOR?
Jotun uses pixels and cookies on our website for the sole purpose of measuring traffic and handling sessions. Pixels are small images which are loaded successively as you navigate a page. Cookies are small text files that are left on your computer to allow us to optimise our service to you as a user. Pixels and cookies provide us with information on how you use the website, so that we know how much you have read and which links you have clicked on. This is done to improve your experience of jotun.com and poses no security risk to you. Social media and advertising cookies of third parties are used to offer you social media functionalities and personalized ads.  

We use this information to determine how interesting our content is for you as a user, and to:


  • Generate traffic statistics and use of this website
  • Target advertising, including on other applications or services such as Google and Facebook. 
The following cookies are used on the Website:
  • Jotun.com - My list
  • Jotunprofessionals.com  - Favorites
Your browser automatically sends information to the Website’s servers every time you ask to see a page. This information may include what kind of browser and version you are using and your IP address. For every page displayed, information such as date and time, the previous page you visited, what page you are visiting now, etc. is also stored.
None of these details will be used to identify individuals. We use this information to generate general statistics indicating for example what pages are most popular and what kind of information the users are searching for. We use statistics as a tool to improve our services.
Jotun does not sell any of the information generated by use of such tracing technology (cookies). Be aware, however, that our website may contain links/pointers to other external web sites that are not controlled by Jotun. Jotun is not liable for data protection handling on external web sites. 

SHARING OF YOUR INFORMATION
Jotun does not sell any of the information generated by use of such tracing technology (cookies). Be aware, however, that our website may contain links/pointers to other external web sites that are not controlled by Jotun. Jotun is not liable for data protection handling on external web sites.

EMAIL ALERTS
On jotun.com you may subscribe to email alerts for press releases, magazine articles, and similar services. The information recorded is only utilised for email alerts. Access to this information is restricted to administrators.

HOW DO YOU ADMINISTER OR DELETE INFORMATION?
You can learn how to change your preferences and control cookies by visiting the website AboutCookies.org

ABOUT THIS PRIVACY POLICY AND RESPONSIBLE UNIT
Jotun A/S is the data controller for personal data submitted to this Website. For questions about Jotun A/S’ treatment of personal data, please contact the company’s Global Data Protection Officer at dataprotection@jotun.com.
 



Updated 25 May 2018.