Privacy Notice for partners of DKSH Business Unit Performance Materials
At DKSH Business Unit Performance Materials, we are committed to respecting and safeguarding your privacy by handling your personal data responsibly and in accordance with applicable laws. To fully comply with the EU General Data Protection Regulation, other applicable laws, and DKSH policies regarding data protection, we have updated our data protection notices and processes which regulate how we collect and use your personal data.

1. What personal data about you do we collect and why do we collect it?
DKSH collects and processes certain types of personal data about you, depending on the relationship that you have with us as well as applicable laws, and as far as this is necessary to pursue our legitimate business interests (such as to support our internal operations, to communicate with you and to otherwise carry out our normal business operations), to comply with legal obligations, or to perform any contract with you or as agreed by you.
We may collect the following personal data about you:
Personal data category
Types of personal data
General and contact information
Your name (including prefixes and suffixes), job title, company, address, telephone, fax, e-mail, social network information (e.g. Facebook, Twitter, LinkedIn) and other relevant contact details; job and educational information as well as information about the preferred way and time of communication
Financial and transactional information
Information collected in connection with sales and promotional activities; financial information including transaction details, bank and credit card details, payment methods and terms, travel information for invoicing purposes and quality reporting concerning products

2. How do we collect your personal data?
We may collect your personal data directly from you, via our contractual relationship, at congresses or via our contact forms or indirectly from public sources or third-parties, such as LinkedIn and digital market places (like Molbase and UL Prospector).

3. How do we process your data?
We may process your personal data for the following reasons, and other compatible reasons:
Reason for processing
Description
Facilitating our interactions with you
This includes maintaining our business relationship by providing you with information related to our products and services, sales and delivery of products and, inviting you to a congress and soliciting expert advice regarding new products and services.
Managing our relationship
This includes managing our product and service delivery, contract management and related financial transactions including invoicing for services, travel and expense management and carrying out quality reporting concerning our products.
Complying with legal requirements and DKSH policies
This includes processing your personal data for income tax and national insurance deductions, record-keeping and reporting obligations, conducting audits, complying with inspections and other requests from law enforcement or other public authorities; responding to legal processes such as subpoenas; pursuing legal rights and remedies; defending litigation and managing any internal complaints or claims, etc.
Research and insights
This includes strategic internal research and data analytics.
Customer classification
This includes categorizing data subjects. For example, independent Pharmacy vs. Chain Pharmacy.

4. Who may have access to your personal data and why?
Due to our global operations, we may share, or otherwise disclose your personal data to our affiliated companies and further to trusted clients from which we buy products and/or to which we provide services, customers that purchase products from us or business partners providing services on our behalf, such as for technical support, to evaluate the usefulness of our website, for marketing purposes or other types of service delivery. We have contracts in place with these parties to ensure that personal data is processed based on our instructions and in compliance with this Privacy Notice and any other appropriate confidentiality and security measures.

We only share your personal data with the parties mentioned above and other third parties, including governmental authorities, as far as this is reasonably necessary for the purposes as outlined in this Privacy Notice. We may share personal data about you, as necessary in the case of a reorganization or divestiture of our business through sale, merger or acquisition, to protect your, our, or others’ rights, property or safety, to maintain the security of our services or if we are required to share your personal data to comply with applicable laws, court or other governmental regulations, or if such disclosure is otherwise necessary for support of any legal or criminal investigation or legal proceeding.

Please note that DKSH companies and subsidiaries, as well as authorities, customers and suppliers to whom we may disclose your personal data, may be located outside of your country of domicile, including countries in Asia and potentially the United States of America, whose data protection laws may differ from those in the country in which you are located. In such cases, we will ensure that appropriate safeguards are in place to protect your personal data by implementing appropriate legal mechanisms, such as EU Standard Contractual Clauses. For more information, please contact us as described in the section “How to contact us”.

5. How long will your personal data be stored?
DKSH will store your personal data as long as necessary for the purposes outlined in this Privacy Notice, unless a longer or shorter retention period is required or permitted by law. In no case will DKSH retain your personal data for more than 20 years from the point we last used it.

6. How is your personal data secured?
DKSH has implemented technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss or alteration and unauthorized disclosure or access to your personal data. These measures include training of our personnel who may have access to your personal data.

7. What rights do you have in respect to your personal data?
You have the right to request information on what personal data we hold about you and to request the correction or deletion of your personal data that is held by a third party with whom we conduct business or by us. Also, you have the right, under certain circumstances, to object to the processing of your personal data, where such processing is based on our legitimate interest and to request the restriction of the processing of your personal data. Further, you have a right to data portability and the right to lodge a complaint to your supervisory authority. If the processing is based on your consent, you have the right to withdraw your consent at any time. Please note that the withdrawal of consent will not affect the processing which has already occurred. Also, please note that these privacy rights are not absolute, and we reserve the right to enforce the restrictions imposed by law.

To make such a request, please contact us as described in the section “How to contact us” below. After providing proof of identity, we will respond to your requests within one month.

8. How to contact us?
If you have any questions, comments or concerns about this Privacy Notice, or want to request access to your personal data or exercise your privacy rights, please contact us at: dpo.pm@dksh.com

This Privacy Notice is effective from July 15, 2019.