Privacy and Cookies Policy

Industry Platform by XOM Materials Operations Inc. (Effective: January 2019)

1. Subject-matter of this policy

We appreciate your interest in our Industry Platform. The protection of your personal data ("data") is a special and important concern for us. In the following, we would like to inform you about the data collected during your visit to our Industry Platform at xom-materials.com, which is operated by XOM Materials Operations Inc., c/o WeWork Tower Place, 3340 Peachtree Road NE, Atlanta, GA 30326, and the use of the services offered there, and how these are processed and used by us. We would also like to inform you about the technical and organizational measures we have taken to protect your data.

2. Personal Data

Personal data is individual information about your personal or factual circumstances such as your name, your date of birth or your e-mail address. When using our Industry Platform, we process the following data (“contact information”):

  • Name and address of your company, divergent shipping address, if any
  • First name
  • Last name
  • Division
  • Job title/Role
  • Phone number
  • business email address
  • Tax Identification Number
  • Customer number

3. Collection, Use and Disclosure

Whether and to what extent we collect and use data may differ according to how you use our Industry Platform. For example, you can visit our website for mere information purposes. You can also make use of the services offered there, in particular purchasing products from Vendors on the Industry Platform.

 

3.1 Use for information purposes

If you visit our Industry Platform for mere information purposes, it is generally not necessary for you to provide us your data. In this case, we only collect and use the data that your internet browser automatically sends us, such as

  • Date and time of accessing of one of our websites,
  • Type and setup of your internet browser,
  • operating system used,
  • the website you came from,
  • your IP address.

These data are collected and used when visiting our website for information purposes only in non-personalized form and solely for the purpose of enabling your use of the websites you have accessed, to improve our website and for statistical purposes. We only store the IP address for the duration of your visit. A personalized evaluation of your data does not take place.


3.2 Registration

We act as a neutral platform operator and provide you with access to the Industry Platform free of charge. You can register on our Industry Platform for making use of the services provided by various Vendors. When registering, we inquire your contact details and create a corresponding user profile. At the end of the registration process, a contract between you and us for the use of the Industry Platform is concluded based on our terms and conditions. We process your contact details solely for the fulfilment of the contract and for the purpose of the proper provision of the Industry Platform as well as for the provision of services.

 

3.3 Order processes

You can place orders with Vendors via our Industry Platform. In this case, you may conclude a contract with the Vendor for the purchase of products or services. We provide your information to the respective Vendor via the Industry Platform for ensuring the execution of orders between you and the respective Vendor, in particular for the delivery of goods and the provision of services and the processing of payments.

In such a case, we process further transaction-related data. These are data on purchases or sales you make when placing an order, or other transaction-related data, such as the time and price of the transaction, and financial information for settlement as well as shipping and billing information for the purpose of fulfilling the contract (“order data”).

 

3.4 Evaluation of order data

Furthermore, we process the information underlying an order on the amount and type of purchased products in aggregated form. For example, we store product and pricing information from a successful order process and aggregate that data to evaluate the use of our Industry Platform. Your data is not affected by this. Rather, merely anonymous data is concerned which cannot be assigned to your person or user profile and which only allows a statistical evaluation of the use of the Industry Platform.

 

3.5 Provision of data

The provision of your data to us is completely voluntary. If you provide us with your data, we can create a respective user profile and provide you with the services of our Industry Platform. You can delete your user profile at any time and thus exclude further use of your data.

 

3.6. Other uses and disclosures of data

Your data will not be sold by us (in particular, we do not sell or trade email or physical address mailing lists). Disclosure of the data to third parties will only take place if this is necessary for the fulfilment of the contract, in particular for the fulfilment of transactions on the Industry platform with a Vendor or service providers that we retain (for example technical service providers, payment service providers, logistics service providers) to perform services in order to ensure the safety and availability of our information technology equipment, or if we are required to do so by court or an administrative decision.

We also may use and disclose your data when we deem it necessary in connection with an investigation into security breaches, violations of our terms of service, other misconduct or where necessary in connection with the assertion or defense of a legal claim. 

In addition, in the event that our company or some of our assets are sold or transferred or used as security or to the extent we engage in related negotiations, your data may be transferred or shared with third parties as part of that transaction.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

 

4. Duration of processing

Generally, we process your data only as long as necessary for the fulfilment of your existing contract with us. For example, if you deleted your profile, we will also regularly delete your data. This is solely then not the case if we are obliged to retain it due to statutory retention requirements, in particular for tax and financial reasons. In this case, we will delete your data at the end of the corresponding retention periods, respectively.

5. Cookies

Our website uses cookies. Cookies are small text files that are sent by our web server to your internet browser during your visit to our website and are stored on your computer for retrieval.

The purpose of these cookies is:

  • to enable the use of the websites of the Industry Portal which you accessed;
  • identify your device with which you visit our website when you browse from one of our websites to another and determine the end of your visit;
  • to determine how users use our websites to make them more user-friendly;
  • to enable us to present you suitable products and services.

We do not collect or store your data in cookies. We also do not use techniques that combine information generated by cookies with user data.

Some Internet browsers have begun to offer what often are referred to as "do not track" mechanisms for browser users to automatically signal privacy preferences to websites that they visit. Our site does not currently respond to do-not-track-signals.  You may set your website browser to reject cookies, but doing so may limit your ability to use some features of our website.

6. Cookies by third parties

We use Google Analytics and Google Tags, further described below.  We do not otherwise permit third parties to collect information about a visitor to our site over time and/or across different websites when the visitor uses our website.

 

6.1 Google Analytics

Our Industry Platform also uses Google Analytics, a web analytics service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043 (“Google”). We use this web analytics service to collect and store data that are used to create usage profiles using pseudonyms. The usage profiles created in this way are used to evaluate visitor behavior in order to be able to design and improve the services offered on our Industry Platform as required. Google Analytics uses “cookies”, i.e. small text files that are stored on your computer and allow an analysis of the use of our websites.

The information generated by a cookie about your use of our Industry Platform is regularly transmitted to and stored by Google on servers in the United States. On our behalf, Google will use this information to evaluate your use of our Industry Platform to compile reports on Industry Platform activities and to provide other services related to the use of our Industry Platform and internet usage to us as operator of the Industry Platform.

The IP address provided through your internet browser will not be merged with other data by Google. Usage profiles managed under a pseudonym will not be associated with personal data without your expressly stated consent. Nevertheless, you can prevent the storage of cookies by a corresponding setting of your browser. Please note, however, that in this case you may not be able to fully use all the functions of our Industry Platform.

In addition, you can prevent the collection of the data generated in the cookie and related to your use of our website by Google by downloading and installing the browser plug-in available at http://tools.google.com/dlpage/gaoptout?hl=en.

Google privacy notices are available at http://www.google.com/intl/en/policies/privacy/ and at http://www.google.com/intl/en/analytics/privacyoverview.html.

 

6.2 Google Tag Manager

Our website uses Google Tag Manager. This service allows website tags to be managed through a single interface. Google Tag Manager only implements tags. No cookies are used and no personal data is collected by the tool. The Google Tag Manager only triggers tags, which in turn may capture data (for example, via Google Analytics). However, Google Tag Manager does not access this data. If deactivated at the domain or cookie level, it will remain in effect for all tracking tags as far as they are implemented with the Google Tag Manager.

 

6.3 Smartlook

To ensure the quality of our online services, we use the Smartlook analysis tool from smartlook.com, sro, Milady Horakove 13, 602 00 Brno, Czech Republic, which allows for the anonymous evaluation of website usage.

Anonymized usage logs are stored in accordance with the law and automatically deleted after 30 days. For more information, see the Smartlook Privacy Policy: https://www.smartlook.com/privacy

You can deactivate it by Smartlook under the following link: https://www.smartlook.com/en/opt-out

7. Data security

We use technical and organizational security measures intended to protect data that is collected and processed, in particular against accidental or intentional manipulation, loss, destruction or access by unauthorized persons.

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions or direction and they are subject to a duty of confidentiality as well as a contractual warranty to comply with all laws and regulations, including those both internationally as well as domestically regarding data privacy rights.

We also have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

8. Transfer to third countries

Data may be stored on servers in the United States and also may be stored on servers under the control of our corporate parent in Germany.  In addition, in the event that you seek to place or receive an order through our Industry Platform with a Vendor located in another country, data related to that transaction will be transferred to the Vendor that you have selected in the country where they are located.  By seeking to engage in a transaction with the Vendor you consent to our transfer of your data to the Vendor on your behalf.

Cookies
Im Rahmen unserer Webseiten verwenden wir zudem Cookies. Cookies sind kleine Textdateien, die auf Ihrem Endgerät gespeichert werden. Sie können keine Programme ausführen oder Ihr Endgerät mit Schadcode infizieren. Wir verwenden Cookies, um Ihnen technische Funktionalitäten wie z.B. einen Warenkorb zur Verfügung zu stellen. Die Rechtsgrundlage hierfür ist Art. 6 Abs. 1 lit. f) DS-GVO. Unser berechtigtes Interesse liegt in der Bereitstellung der jeweiligen Funktion für Sie.

Falls Sie die Verwendung von Cookies unterbinden wollen, besteht dazu bei Ihrem Browser die Möglichkeit, die Annahme und Speicherung neuer Cookies zu verhindern. Die jeweiligen Einstellungen gelten jedoch immer nur für das konkrete Gerät und den konkreten Browser, den Sie gerade verwenden. Wenn Sie ein anderes Gerät oder Browser benutzen oder Ihren Browser neu installieren, müssen Sie ggf. die Einstellungen erneut vornehmen. Um herauszufinden, wie das bei dem von Ihnen verwendeten Browser funktioniert, können Sie die Hilfe-Funktion Ihres Browsers benutzen oder sich an den Hersteller wenden. Bitte beachten Sie, dass Sie, für den Fall, dass Sie Cookies deaktivieren, möglicherweise nicht alle Funktionen unserer Website verwenden können.

Google Analytics inkl. der Funktion Audiences
Diese Website benutzt Google Analytics, einen Webanalysedienst der Google LLC ("Google"). Google Analytics verwendet Cookies. Die durch das Cookie erzeugten Informationen über Ihre Benutzung dieser Website werden in der Regel an einen Server von Google in den USA übertragen und dort gespeichert. Im Falle der Aktivierung der IP-Anonymisierung auf dieser Website, wird Ihre IP-Adresse von Google jedoch innerhalb von Mitgliedstaaten der Europäischen Union oder in anderen Vertragsstaaten des Abkommens über den Europäischen Wirtschaftsraum zuvor gekürzt. Nur in Ausnahmefällen wird die volle IP-Adresse an einen Server von Google in den USA übertragen und dort gekürzt. In unserem Auftrag wird Google diese Informationen benutzen, um Ihre Nutzung der Website auszuwerten, um Reports über die Websiteaktivitäten zusammenzustellen und um weitere mit der Websitenutzung und der Internetnutzung verbundene Dienstleistungen gegenüber uns zu erbringen. Die im Rahmen von Google Analytics von Ihrem Browser übermittelte IP-Adresse wird nicht mit anderen Daten von Google zusammengeführt.

Wir verwenden Google Analytics zudem, um Ihnen zielgruppenspezifische Werbung über das Google Werbenetzwerk anzuzeigen. Hierzu übermitteln wir an Google ggf. Daten über die von Ihnen angesehenen Angebote bzw. bestimmte damit zusammenhängende Merkmale (z.B. Interessen an bestimmten Themen oder Produkten, die anhand der besuchten Webseiten bestimmt werden). Google verwendet diese Daten, um Ihnen zielgruppenspezifische Werbung beim Besuch unserer Seite oder unsere Werbung auf anderen Seiten des Google Netzwerks auszuspielen (sog. „Remarketing-“, bzw. „Google-Analytics-Audiences“). Mit Hilfe der Remarketing Audiences möchten wir auch sicherstellen, dass unsere Anzeigen dem potentiellen Interesse der Nutzer entsprechen.

Sie können die Erfassung der durch das Cookie erzeugten und auf Ihre Nutzung der Website bezogenen Daten (inkl. Ihrer IP-Adresse) an Google sowie die Verarbeitung dieser Daten durch Google verhindern, indem Sie das unter dem folgenden Link

tools.google.com/dlpage/gaoptout?hl=de

verfügbare Browser-Plugin herunterladen und installieren.

Sie können die Erfassung durch Google Analytics zudem verhindern, indem Sie auf den am unteren Ende der Seite angeführten Button klicken. Es wird dann ein Opt-Out-Cookie gesetzt, das die zukünftige Erfassung Ihrer Daten beim Besuch dieser Website verhindert.

Der Verwendung der Daten zur Ausspielung zielgruppenspezifischer Werbung können Sie widersprechen, indem sie unter dem folgenden Link

https://adssettings.google.com/u/0/authenticated?hl=de-DE

die entsprechenden Einstellungen vornehmen.

Die Rechtsgrundlage für die Verwendung von Google Analytics und dessen Funktion Remarketing ist Art. 6 Abs. 1 lit. f) DS-GVO. Unser berechtigtes Interesse liegt in den beschriebenen Zwecken. Die Daten werden für 3 Monate gespeichert.

Nähere Informationen zu Nutzungsbedingungen und Datenschutz finden Sie unter www.google.com/analytics/terms/de.html bzw. unter www.google.de/intl/de/policies/.

Berlin, Juni 2018 

9. Data subject rights

You have the right to request information about the data used when visiting our website or when using our platform services as well as the right to correction or deletion. If you would like to access or correct data about you, please use the mechanisms offered through our site, or contact our privacy officer using the contact information below. 

10. Children’s Data

COPPA regulates the collection of personal information online from children under the age of 13. This site is not intended or designed to attract users under the age of 13 or to collect personal information from such users. We do not collect personally identifiable data from any person we know to be under the age of 13 and those under 13 should not submit any personal information through this site. If we learn that we have inadvertently collected personal information from a child under the age of 13 we will remove the information from our files.

11. Policy Changes

If we make any material changes to this privacy policy we will change the "last updated" date so that you can quickly determine whether there were material changes since the last time you reviewed the policy.

12. Contact data of data protection officer

For further questions or comments regarding data protection or exercising your data protection rights, you may contact datasecurity@xom-materials.com

13. Used cookies

Session ID

The session id is mandatory and is used to identify multiple concurrent requests from a user and assign them to a session.

Cookie name:JSESSIONID

Globally Unique Identifier (GUID)

Mandatory security cookie that is set after logging in. This cookie authenticates the user in the shop.

Cookie name:secureGUID

CSRF-Token

Mandatory auxiliary cookie to prevent cross-site request forgery (CSRF) attacks.

Cookie name:CSRFToken

Delivery address

When an anonymous user sets a delivery address, this information is stored as a cookie to identify products for the selected region. Only country and postal code are stored.

Cookie name:user-region

Status of cookie banner

Mandatory cookie that stores the information that the "We use cookies" information has already been noted.

Cookie name:disable-cookies-bar

Status of Google Analytics

Mandatory cookie that stores the information whether Google Analytics is disabled.

Cookie name:disable-analytics

Goolge Analytics

We use Google Analytics, to collect information about how users use our Site. The information generated by the cookie about your use of the site will be transmitted to and stored by Google on servers in the United States.

Cookie names:_ga, _gat, _gid, _gac, __utma, __utmt, __utmb, __utmc, __utmz, __utmv, collect

Status: Disabled

Enable Google Analytics