Privacy Policy

Effective Date: 16th December 2019

Website Privacy Notice

GCP Applied Technologies Inc. and its subsidiaries (collectively "GCP," "we" and "our") are committed to protecting your privacy and takes the protection of your personal data very seriously. This Privacy Policy is designed to assist you in understanding how we collect and use the personal data that you provide to us, that we collect when you visit our website (the “Site”) and your choices regarding our use of that information. Please read this Privacy Policy very carefully. 

GCP is the data controller in relation to the processing activities described below. This means that we decide why and how your personal data is processed. 

Because GCP operates globally, this Privacy Policy takes into consideration various privacy regulations and frameworks governing the collection, use, maintenance, sharing and disposition (collectively, “processing”) of personal data. Our privacy practices may vary among the countries in which we operate to reflect local practices and legal requirements.

Additional information relating to our practices and the rights of individuals located in specific locations is provided at the end of the Privacy Policy in the  “State- and Country-Specific Notices” section.

Personal Data

Throughout this Privacy Policy, we use the term “personal data” to describe information that relates to an identified or an identifiable person. Personal data includes, but is not limited to, a name, an identification number, location data, and an online identifier. 

Changes to the Privacy Policy

We ask that you read this Privacy Policy from time to time. We may modify it at any time in our sole discretion. If we make material changes to this Privacy Policy that increase our rights to use personal data that we have previously collected about you, we will obtain your consent, where required by law, either through your registered email address or by prominent posting on this Site. 

The following topics are covered below:

Personal Data We Collect About You

We collect data about you through a third-party service provider that collects information on our behalf when you interact with the Site, including when you log in to the Site, create an account, or join our mailing list. The personal data we collect includes the following information:

  • Data that you provide:
    • Name;
    • Email address;
    • Phone number;
    • Company name;
    • Information that you choose to submit in connection with your comments or inquiries which may include records of any correspondence and responses to any surveys.

You are not required to provide personal data as a condition of using our Site. 

Personal Data We Collect Through Automated Means

We may automatically collect information about the devices that you use to interact with the Site, as well as information about how you interact with the Site. The information that we automatically collect may include the following:

  • IP address and other device identifiers;
  • Location (based on IP address);
  • Web browser type and version;
  • Pages you visit while on the Site;
  • Time spent on those pages;
  • Date, time and for how long you visited the Site;
  • Contact information, including telephone number from device; and
  • Documents you downloaded from the Site.

This data that we automatically collect may be associated with any personal data that you have provided to us.

How We Protect Children’s Privacy

The Site is a general audience site and is not directed at or designed to be used by children under the age of 16. If we obtain actual knowledge that any information we collect has been provided by a child under the age of 16, we will promptly delete that information.

How We Use Personal Data We Collect About You

The purposes for which we use your information and the legal basis under data protection laws on which we rely to do this are explained below.

If we intend to use personal data for a purpose other than the purpose for which we collected the data, we will provide you with information about this secondary purpose and any additional information necessary to ensure fair and transparent processing, before we engage in further processing.

  • Performance of a contract - with you or to take steps taken to enter into it. We may use and process your personal information where:
    • we have supplied you (or continue to supply you) with any products and services;
    • where you are in discussions with us about any new product and where you have an account with us;
    • respond to your inquiries on a product or service;

We will use this information in connection with the contract for the supply of products when it is needed to carry out that contract with you or for you to enter into it, and to manage your account with us and administer our reward and loyalty schemes in accordance with our terms and conditions for those services. 

  • Legitimate interests or that of a third party - for the following purposes:
    • for marketing activities (other than where we rely on your consent to do this);
    • for analysis to inform our strategy, help us understand how our Site is used, and to enhance and personalise your customer experience (including to improve the recommendations we make to you on our Site);
    • to operate, evaluate and improve our business, including by managing, enhancing, improving and analysing our products, to correspond or communicate with you;
    • to verify the accuracy of data that we hold about you and create a better understanding of you as a customer;
    • to develop new products and services based on our analysis of consumer preferences;
    • to perform other research, such as determining industry trends and growth opportunities based on consumer activity;
    • for network and information security in order for us to take steps to protect your information against loss or damage, theft or unauthorised access; 
    • for prevention of fraud and other criminal activities;
    • to comply with a request from you in connection with the exercise of your rights (for example where you have asked us not to contact you for marketing purposes, we will keep a record of this on our suppression lists in order to be able to comply with your request);
    • for assessing the quality of the our service and to provide staff training within the business;
    • for the management of queries, complaints, or claims; and
    • to assist our sales and marketing teams to perform their functions.

 

  • Compliance with a legal obligation - we will use your personal information to comply with our legal obligations: 
    • to assist any public authority or criminal investigation body; 
    • to identify you when you contact us; and/or 
    • to verify the accuracy of data we hold about you. 
    • to protect against and detect fraud, abuse or other unlawful activity; and
    • to enforce the Site’s Terms of Use, other corporate policies, and industry standards.

 

  • Vital interests - where we have supplied you with any products, we may use your personal information to contact you if there are any urgent safety or product recall notices to communicate to you or where we otherwise reasonably believe that the processing of your personal information will prevent or reduce any potential harm to you. It is in your vital interests for us to use your personal information in this way.

 

  • Consent - we will ask for your consent to send you direct marketing communications, including: 
    • providing information about products and services that we offer, including sending promotional materials and other communications;
    • delivering advertisements to you about products that may be of interest to you; and
    • sending you information relating to investor relations that you request to receive. 

Marketing

We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising. 

You may at any time tell us not to send you marketing communications by email by clicking on the “opt out” or “unsubscribe” link within the marketing emails you receive from us or by contacting us as indicated below. 

Analytics

We may use third-party analytics services on our Site. The analytics providers may use technologies such as cookies, web server logs, and web beacons to help us analyze visitors’ use of our Site. The information collected through these technologies, including your IP address, may be disclosed to the analytics providers and other relevant third parties that use the information to analyze the use of the Site.

Do Not Track

Our Site does not collect personal data about your online activities over time and across third-party websites or online services. Therefore, “do not track” signals transmitted from web browsers do not apply to our Site, and we do not alter our data collection and use practices upon receipt of such a signal.

When We Share Your Personal Data

We may share your personal data with the following third parties for the purposes described in this Privacy Policy, which includes our affiliates and subsidiaries, our contractors, service providers and other third parties that support our business and perform functions on our behalf, as described below. GCP does not and will not sell to, or share your personal data with, non-affiliated third parties.

Third parties providing services on our behalf. We may engage third parties to perform services in connection with our business operations. These services may include (a) products and/or experience customization; (b) distribution of marketing and promotional material; (c) website evaluation; (d) data collection, storage, management, analysis and, where applicable, deletion; and (e) other services designed to maximize our business potential. These third parties may have access to certain information, including personal data, to the extent necessary to perform their duties and functions.

Company security.  We may disclose information about our users, including personal data, when legally required to do so, at the request of government authorities conducting an investigation or to verify or enforce compliance with the policies governing our company and applicable laws. We also may disclose such information when necessary to protect our rights, property or safety of GCP, our affiliates, business partners, customers or others, or to obtain legal advice.

Corporate change. We may disclose, share or otherwise transfer user information, including personal data, in connection with a corporate merger, acquisition, consolidation, the sale of a portion of our business or the sale of substantially all of GCP’s assets, or other fundamental corporate change, whatever form it may take. You will be notified via email or prominent notice on our Site prior to a change of ownership or control of your personal data, if your personal data will be used contrary to this Privacy Policy. For clarification and the removal of doubt, GCP reserves the right to transfer or share a copy of personal data collected pursuant to this Privacy Policy, offline or otherwise, to the buyer of that portion of its business related to that data.

Aggregate data. We may disclose aggregated, non-identifiable user statistics (such as the number of users who visited a page on the Site during a specific time period) to third parties for a variety of purposes, including describing our products to prospective partners and other third parties. 

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

Cookie

Like many other websites, our Site uses cookies to obtain an overall view of visitor habits and visitor volumes to our website). 'Cookies' are small pieces of information sent to your computer or device and stored on its hard drive to allow our websites to recognize you when you visit. 

It is possible to switch off cookies by setting your browser preferences. For more information on how we use cookies and how to switch them off on your device, please visit our  Cookies Policy.

How We Protect Your Personal Data

Unfortunately, the transmission of information via the internet is not completely secure. We will do our best to protect your personal information and GCP maintains physical, technical and administrative controls to reasonably safeguard personal data.  No website, internet transmission, computer system or network is completely secure, however. Therefore, GCP cannot guarantee that unauthorized access to information, data loss, or data destruction or alteration will never occur. Once we have received your personal information, we put in place reasonable and appropriate controls to ensure that it remains secure against accidental or unlawful destruction, loss, alteration, or unauthorised access.

Our Site may contain links to other websites run by other organisations. This policy does not apply to those other websites‚ so we encourage you to read their privacy statements. We cannot be responsible for the privacy policies and practices of other websites even if you access them using links that we provide. In addition, if you linked to our Site from a third-party website, we cannot be responsible for the privacy policies and practices of the owners and operators of that third-party website and recommend that you check the policy of that third-party website.

Data Retention

We will retain your personal data for as long as required to provide you with access to the Site and our services and for as long as necessary for the protection and pursuit of our legal rights and to fulfil obligations under laws applicable to our operations. After that time, GCP will destroy your personal data in accordance with GCP’s record retention schedule.

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

Links to Other Websites

Our Site may contain links to other third-party websites that are not under our control and that we do not sponsor, endorse or maintain. We are not responsible for the content or the privacy practices of such websites, and they are not governed by this Privacy Policy or any other GCP policies or terms of use. Please consult the privacy policies of those websites for information about their privacy practices.

Location and Transfer of Personal Data  

Our Sites are available in countries worldwide, and information you provide to us may be stored on servers and with third-party service providers in the United States and other countries in which we do business and whose data protection laws may differ from the jurisdiction in which you live. When we transfer the personal data of users who are located in the EU and the U.K. to a location, including outside of the UK and/or EEA for processing, we use an approved transfer mechanism.  A copy of the transfer mechanism that we use to effect such transfer is available to users by contacting privacy@GCPat.com.

Additional State- and Country- Specific Notices

The following additional notices apply to users located in the State of California, the EU and the U.K.

Notice to Residents of California

Pursuant to California Civil Code Section 1798.83(c)(2), GCP does not share your personal data with third parties for those third parties’ direct marketing use.

In addition to the rights outlined in our Privacy Policy, where the California Consumer Privacy Act, or related data protection laws apply, you may have certain rights in relation to your personal information including the right to:

  • Request to know the categories of personal information we collect about you, as well as the sources from which the personal information is collected; the business or commercial purpose of our collection; and the specific pieces of personal information we hold about you;
  • Request access to and receive a portable copy of your personal information; 
  • Request certain information regarding, and/or opt-out of, our disclosure of your personal information to third parties; 
  • Request that we delete the personal information we hold about you in certain limited circumstances; 
  • Right to be free from discrimination in response to exercising these rights conferred by the CCPA.

To exercise any of these rights, please contact us at privacy@GCPat.com.

Notice to Residents of the U.K. and European Union

  • GCP processes personal data for the purposes described above. If we use personal data in ways other than described in this Privacy Policy, we will provide you with specific notice at the time of collection.

Your Rights 

Where applicable under the relevant local laws governing the jurisdiction in you live, you may have certain rights regarding the personal data that we maintain about you which, in certain circumstances, you will be able to exercise as follows: 

  • You may request a copy of the personal data that we maintain about you. If we maintain your information based on your consent or so that we could enter into a contract with you, you can also request that we provide you a copy of your data in a structured, commonly used, and machine-readable format.
  • If your personal data is incorrect, you may request that we correct, amend, or delete personal data that is inaccurate or incomplete.
  • You may request that we erase or restrict the processing of your personal data.
  • You may object to the processing of your personal data in certain circumstances when we process your data for the purposes of our legitimate interests.
  • You may withdraw your consent at any time where we are relying on consent to process your personal data. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.

Subject to applicable local laws, we will comply with your request as soon as practicable, and where applicable within one month after receiving a valid request. If your request is particularly complicated, we may have to extend this period to 2 months. 

Any request to exercise these rights will be assessed in accordance with applicable local laws and there may be circumstances where we are not legally required to comply with your request. For example, we may reject requests that we determine are unreasonably repetitive or that risk the privacy of others. 

Access and correction may be done for free, unless requests are repetitive, excessive or unfounded, in which case we may charge you the administrative costs we have incurred handling the request. Some of these rights can be exercised online via your account. For example, you can review, modify, and delete certain information relating to your use of our Site and unsubscribe to email messages. If you are unable to manage your request via your online account, then please contact us at privacy@GCPat.com.

Complaints

If you are unhappy or have concerns about the way in which we have handled your personal data, please contact us (see “How You Can Contact Us”) so that we can try to resolve the issue. We encourage you to get in touch with us first; however, you also have the right to lodge a complaint with the applicable supervisory authority. 

How You Can Contact Us

Please contact us if you have any questions or comments about our privacy practices or this Privacy Policy.  You can reach us online at privacy@GCPat.com.  You also can write to us at:

General Counsel
GCP Applied Technologies Inc.
62 Whittemore Avenue
Cambridge, MA 02140
U.S.A.