PRIVACY NOTICE FOR BRAZIL - CUSTOMERS AND SUPPLIERS
PRIVACY NOTICE FOR BRAZIL - CUSTOMERS AND SUPPLIERS
Owens Corning, its subsidiaries, affiliates and related entities, including entities in Brazil (together "Company"), is committed to the protection of the privacy and security of Personal Data, as well as complying with the terms of the General Data Protection Act (Law No. 13,709/2018) ("LGPD").
This notice provides additional information to our customers, suppliers and professional contacts, and describes the categories of Personal Data we collect, how we use such Personal Data, how we protect Personal Data, when we may disclose Personal Data to third parties, and when we may transfer Personal Data to other jurisdictions.
This notice also describes your rights with respect to the Personal Data we keep about you, including how you can access, correct, diverge, request confirmation, anonymity, export or cancel your Personal Data or revoke consent. We also refer to our Privacy Policy, which you find at www.owenscorning.com.
We will only process your Personal Data in accordance with our Privacy Policy and this Notice, unless other requirement is made by applicable law. We take all necessary measures to ensure that the Personal Data we collect about/you is appropriate, relevant, not excessive and processed within legal limits.
What Personal Data does Owens Corning collect?
When you purchase our products or when you provide us with products or provide services, we receive and store information that you pass us directly in the context of our professional relationship. For example, when we create new accounts for third party service providers, we collect Personal Data, such as names and email addresses. The type of information we may collect directly from our customers and suppliers includes, but is not limited to, names, usernames, email addresses, business addresses, telephone numbers, professional positions and securities, transactional, financial and accounting information, as well as any other contact or other information you decide to pass us or enter into our systems.
When you browse our websites, we may collect any personal information you decide to provide to us. If you contact us through our websites, we keep an internal record.
Marketing: considering our legitimate interest in promoting our products and solutions, we collect and process Personal Data (personal names, names of organizations, positions and titles, websites, details and contacts on social media, addresses, phone numbers and email addresses) of professionals who act as consultants or promoters of our products and solutions, for the purpose of sending them information about Owens Corning, whether we have received your information directly or by other means, such as by acquiring contact lists. Recipients of such information shall always have the right, at any time, to refuse such registration, processing or purpose.
Personal Data is retained only as long as necessary and in accordance with applicable retention rules.
If, in the future, we intend to process your Personal Data for purposes other than those indicated above, we will inform you of the purpose and other relevant measures.
Is my Personal Data secure?
We apply technical, administrative and organizational measures to protect any information we keep in our records from loss, misuse, unauthorized access, disclosures, alterations or destruction.
Among other practices, systems are being protected by appropriate measures and hardware, and accounts protected by passwords or encrypted for your privacy and security. You must prevent unauthorized access to your account and Personal Data by selecting and protecting your passwords properly and limiting access to your computer or equipment and browser, leaving your account when you finish the job or when you finish using your account.
How does Owens Corning share and disclose Personal Data to third parties?
We only disclose information about you to third parties for the purpose of our contractual relationship or for the management of the Company's business. We may share your information with service providers, consultants or other contractors to act on our behalf. These companies include, but are not limited to, collection and payment service providers, analytical companies/websites, product feedback or software help-desk companies, tax, legal and accounting consultants, tax authorities, insurers, securities authorities, CRM service providers, email services, or others.
We may also disclose Personal Data when this is necessary to develop, establish, execute or prepare legal defenses, either before the judiciary or in administrative procedures.
Owens Corning only shares Personal Data of residents in Brazil with third parties who expressly comply with the LGPD. Such compliance with the law is obtained through appropriately drafted service agreements, in which we impose compliance and security instructions or by blocking such third parties or their products and services.
To which countries is my Personal Data transferred?
Owens Corning has offices and plants in North America, South America, Europe, Russia and Asia and the Middle East. Shares to and from these locations are protected by appropriate measures.
Your right to privacy
According to the LGPD, you have rights in regarding your Personal Data. As an information object, you have the right to request access, correction, refuse, processing of confirmations, anonymity, export and cancellation of your Personal Data. When you have granted your consent to the processing of your Personal Data, you will have the right to cancel this authorization at any time (in some circumstances), which will not invalidate the processing of the information prior to your cancellation request.
You may exercise your right over your Personal Data by requesting through email at Privacy.Brazil@owenscorning.com. Our Data Privacy Team will review your request and give you a return as soon as possible.
If you believe that Owens Corning is not respecting your data protection rights, you have the right to file a formal complaint with the National Data Protection Authority (ANPD) through the www.gov.br/anpd.