PRIVACY POLICY

MAPEI Inc. is the data controller, which means that it is the subject who determines the purposes and means of the processing¹ of personal data². Below you can find the contact details of MAPEI Inc.:

Address: 2900 Francis-Hughes Avenue, Laval (Quebec) H7L 3J5

Telephone and Fax: (450) 662-1212    + 1-800-426-2734 

E-mail: digitalmarketing@mapei.com

Contact: Anick Paré, Human Resources Director

In the present information notice, MAPEI Inc. is also referred to as the 'Company' or 'Controller'.

We collect various personal data, to fulfill the processing purposes listed in the following paragraph. We process only common personal data³, including:

• identification, contact and authentication data, i.e., user’s first and last name, e-mail (username) and password for sign up and login;
• data spontaneously provided by the user while using the services such as tax code and professional register number;
• navigation data within the website, using tracking tools such as technical cookies, analytics, profiling cookies; for further information on cookies, please refer to the cookie policy.

The processing of the user’s data is carried out for different purposes⁴:

1. creation of a MyMapei account;
2. marketing: sending of advertising and promotional material, both through automated and traditional means, related to services and products offered by the Company, invitation to events, market research, statistical analysis. Depending on the user's preferences, this activity may also include sending a periodical Newsletter by e-mail and/or sending Realtà MAPEI or Realtà MAPEI International magazine by traditional mail, to the postal address provided by the user. You can find out more about the magazines and their contents at this link;
3. profiled marketing / profiling: analysis of the user's preferences, habits, behaviour, interests deduced from the data provided by the user and his/her interaction with the site, in combination with the data collected via cookies, to send personalised commercial communications and/or to carry out targeted promotional actions;
4. registration for online and/or in-person courses organized by the Company. In order to obtain professional training credits, the professional order/registry number and the tax code will be requested;
5. fulfilment of legal obligations provided for by applicable national and supranational regulations;
6. ascertainment, exercise or defence of the Controller's rights in court and/or out-of-court procedures.

The processing must be founded on an adequate legal basis to be lawful:

1. and 4. performance of a contract⁵ to which the data subject is a party, or execution of pre-contractual measures taken at his/her request. The user will be able to save in the MyMapei profile the professional order/registration number and the tax code: this processing will be based on consent;

2. and 3. consent of the data subject;

5. compliance to a legal obligation to which the Controller is subject;

6. legitimate interest of the Controller or of a third party.

We retain the user’s data for a period that depends on the specific purpose of the processing:

1. and 4. contractual duration and, after its termination, for the ordinary limitation period of 10 years;

2. until revocation of the data subject’s consent (marketing registry) and for a maximum period of 24 months (information related to campaigns sent to the user);

3. until revocation of the data subject’s consent (profiling registry) and for a maximum period of 12 months (information connected to the user's behaviour, preferences and interests);

5. for the time required by the applicable legislation;

6. for the entire duration of judicial or extrajudicial litigation⁶.

For some of the processing purposes listed above, it is necessary for the user to provide their data, without which we will not be able to provide our services; for others, the provision of data is optional. In particular, the provision of data marked with an asterisk (*) in the MyMapei registration form is mandatory for the purposes of creating the account itself; in the context of registration for training courses, the provision of the professional order number and the tax code is optional, but without them it will not be possible to obtain any professional training credits. Consent to marketing and profiling is optional and revocable at any time⁷, in the appropriate section of your MyMapei profile, or by contacting the Controller at the following e-mail address digitalmarketing@mapei.com.

The user’s data may be communicated to subjects acting as controllers such as, by way of example, authorities and supervisory and control bodies, persons, companies, associations or professional firms providing assistance and consulting services, and in general by public and private subjects entitled to request the data. The user’s data may be processed, on behalf of the Data Controller, by subjects appointed as Processors⁸, who are given appropriate operating instructions.

These subjects are essentially included, by way of example, in the following categories:

a) companies that provide e-mail and hard-copy sending services;

b) companies that provide website and information system maintenance services;

c) companies that provide management and maintenance services for the Controller's database;

d) companies that provide marketing automation platform management services.

For a complete list of the Processors, please send a request to digitalmarketing@mapei.com.

Personal data may be processed by personnel members, who have been expressly authorized by the person exercising the highest authority to process the data, and who have received adequate operating instructions.

There will be no transfer of data outside Quebec as regards the processing related to the creation and use of the services available in the MyMapei profile. As an exception, if the data subject requests to receive the magazine Realtà MAPEI or Realtà Mapei International in jurisdictions outside Quebec, personal data will also be processed outside of Quebec, in order to allow the magazine to be sent by post. Prior to any transborder data disclosure or transfer, data controllers will undertake a privacy impact assessment and will only transfer personal information outside Quebec if: (1) the data controller determines that the personal information will receive equivalent protection in the other jurisdiction and (2) a written agreement is in place that reflects the result of the privacy assessment.

By contacting the Company by e-mail at digitalmarketing@mapei.com users may request access to the data concerning them, their rectification, integration or erasure. They also have the right to be informed about the information collected, used, and disclosed and the purposes for the processing of such information.

Data subjects also have the right, in the event that the processing is based on consent or contract and is carried out by automated means, to receive the data in a structured, commonly used and machine-readable format, as well as, if technically feasible, to transmit them to another data controller without hindrance.

Data subjects have the right to withdraw their consent at any time, as well as to object – for reasons related to their particular situation – to processing carried out in pursuit of the legitimate interests of the data controller. Data subjects may withdraw and manage their consents via the channels indicated, or by contacting the Controller by e-mail at digitalmarketing@mapei.com. Such withdrawal shall not affect the lawfulness of the processing based on the consent given before the withdrawal.

Data subjects have the right to lodge a complaint with the competent supervisory authority⁹.

[1] Processing means any operation or set of operations which is performed on personal data, whether or not by automated means, such as collection, storage, organisation, consultation, use, erasure of data.

[3] Personal data can be classified into two types : common data and special categories of personal data (also known as sensitive data). Special categories of data include data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, generic data, biometric data intended to uniquely identify a natural person, data concerning a person’s health, or sexual orientation. Common data are, by exclusion, all other data, eg. name and surname, contact details, postal address, bank details, etc.

[4] Personal data may only be collected for specific, explicit, and legitimate purposes, and subsequently processed in a manner compatible with those purposes. 

[5] The scope includes also activities that apparently might not appear to be contracts : eg. registering on a site, sending an enquiry via a contact form, registering for a training course.

[6] Until the time limit for appeals is exhausted.

[7] Consent to the processing of personal data, in order to be compliant, must be free, specific, informed, unequivocal and expressed through positive action by the data subject. The interested party has the right to revoke his/her/their consent at any time: by accessing the appropriate section of your MyMapei profile you can choose to revoke your consent to marketing or select only the types of consent that you are interested in (among generic marketing, newsletters, and magazines)

[8] The Data Processor is the subject who processes data on behalf of the Controller. For example, when MAPEI enters into a contract with a supplier, if the latter is required to process personal data belonging to MAPEI in order to perform its services, it must also sign the Data Processing Agreement, undertaking to process personal data in compliance with the instructions received.

[9] The Commission d’accès à l’information du Quebec is the regulatory authority overseeing the application of the Act.