Privacy Policy

Privacy and cookie Policy

This website is provided to you by Hydro Building Systems UK Ltd, Severn Drive, Tewkesbury, Gloucestershire, GL20 8SF, United Kingdom. Referred to as "Hydro" in these terms and conditions.

Hydro respects the privacy of users and processes all personal data in accordance with the General Data Protection Regulation (GDPR) and other relevant laws.

The parent company Norsk Hydro ASA has established Binding Corporate Rules (BCR) that apply to all Hydro legal entities, providing a legal basis for transfer of personal data within the Hydro group. You can read the BCR here.

This Privacy Policy is intended to inform you about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior. We have taken extensive technical and operational measures to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security procedures are regularly reviewed and adapted to technological progress.

1. Controller for data processing

Hydro Building Systems UK Ltd Severn Drive Tewkesbury Gloucestershire GL20 8SF United Kingdom

2. Purpose and legal basis for processing

Personal data is only collected if you provide it to us of your own accord, e.g. when filling out the contact form. We use this data exclusively for the purpose for which you entered your data. For other purposes, it will only be used after express notice or after obtaining your consent, Art. 6 para. 1 lit. a) GDPR. In certain cases, personal data is processed on the basis of a legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR (see section 4).

3. Processing on the basis of a legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR

Processing of personal data on the basis of Art. 6 para. 1 lit. f) GDPR takes place in the following cases:

3.1. Collection of personal data when visiting our website

If you use the website for information purposes only, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security:

- Browser type and browser version - Operating system used - Referrer URL - Host name of the accessing computer - Time of the server request - IP address

The legitimate interest lies in the flawless presentation of its website as well as in ensuring the stability and security of our website.

3.2. Use of cookies

What are cookies? Cookies are data that are stored on your computer by a website you visit and enable your browser to be reassigned. Cookies are used to transmit information to the entity that uses the cookie. Cookies can store various information, such as your language setting, the duration of your visit to our website or your entries made there. This avoids, for example, that you have to re-enter the required form data each time you use it. The information stored in cookies can also be used to identify preferences and tailor content to areas of interest.

There are different types of cookies: Session cookies are amounts of data that are only temporarily stored and deleted when you close your browser. Permanent or persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie. With this type of cookie, the information can also be stored in text files on your computer. However, you can also delete these cookies at any time via the settings of your browser.

First-party cookies are set by the website you are visiting. Only this website is allowed to read information from these cookies. Third-party cookies are set by organizations that are not the operators of the website you are visiting. These cookies are used, for example, by marketing companies.

The legal basis for possible processing of personal data by means of cookies and their storage period may vary. If you have given us your consent, the legal basis is Art. 6 para. 1 lit. a) GDPR. Insofar as the data processing is carried out on the basis of our overriding legitimate interests, the legal basis is Art. 6 para. 1 lit. f) GDPR. The stated purpose then corresponds to our legitimate interest.

We use cookies to ensure the proper operation of the website, to provide basic functionalities, to measure reach and - with your consent - to tailor our services to preferred areas of interest. For this purpose, we use both transient cookies and persistent cookies

You can delete cookies already stored on your device at any time. If you want to prevent the storage of cookies, you can do so via the settings in your Internet browser. Instructions for common browsers can be found here: Internet Explorer, Firefox, Google Chrome, Google Chrome mobile, Microsoft Edge, Safari, Safari mobile. Alternatively, you can also install so-called ad blockers. Please note that individual functions of our website may not work if you have deactivated the use of cookies.

3.3 Cookiebot

Cookiebot is a consent management platform that allows websites to protect user privacy and comply with the GDPR when it comes to cookies and tracking. "Cookiebot" is an offer from the provider Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark, hereinafter referred to as "Cybot". Through the "Cookiebot" function, we inform our website visitors about the use of cookies and other technologies on our website and enable them to make a decision about their use. If the visitor gives his consent to the use of cookies, the following data is automatically logged:

- The IP address of the user - Date and time of consent - user agent of the end user's browser - The URL of the provider - The user's approved cookies (cookie status), which are required as proof of consent - An anonymous, random and encrypted key.

The encrypted key and the cookie status are stored on the user's device using a cookie in order to establish the corresponding cookie status on future page views. This cookie is automatically deleted after 12 months.  The legal basis for this is Art. 6 para. 1 lit. f ) GDPR. Our legitimate interest lies in the user-friendliness of the website as well as in the fulfillment of the legal requirements from the GDPR. The installation of the cookie as well as its storage, and thus the cookie consent, can be prevented or terminated by the user at any time by changing the settings of his browser. You can open the settings for the Cookiebot via the following link: Website Cookies

Further information about Cookiebot can be found at: Privacy Policy - Your CMP Partner - Cookiebot™

4. Website Analytics

For the purpose of analyzing and optimizing our websites, we use various services, which are presented below. For example, we can analyze how many users visit our site, what information is most in demand or how users find the offer. Among other things, we collect data on the website from which a data subject came to a website (so-called referrer), which subpages of the website were accessed or how often and for how long a subpage was viewed. This helps us to design and improve our offers in a user-friendly way. The data collected is not used to personally identify individual users.

Google Tag Manager

For reasons of transparency, we would like to point out that we use the Google Tag Manager. This is a tag management system for managing JavaScript and HTML tags, which is used for the implementation of tracking and analysis tools. The provider of the service is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. The Tag Manager makes it easier for us to integrate and manage our tags. Tags are small code elements that are used, among other things, to measure traffic and visitor behavior, to record the impact of online advertising and social channels, to set up remarketing and targeting and to test and optimize websites. If you have made a deactivation, this deactivation will be taken into account by the Google Tag Manager. For more information about Google Tag Manager, see:

Google Tag Manager Use Policy | Google Tag Manager – Google

Tag Manager Help (google.com)

Data privacy settings & controls – Google Safety Centre

Siteimprove

If you have given your consent, Hydro uses Siteimprove, a web analytics service provided by Siteimprove A/S, Sankt Annæ Plads 28, 1250 Copenhagen, Denmark.Siteimprove uses cookies to help the website analyze how users use our website: - Viewed content - Anonymized IP address - Use of Online Services

The information collected by means of cookies about your use of this website is usually processed in the European Union. This service can redirect visitors to the USA, which does not provide an adequate level of data protection. There is a risk that your data may be processed by US authorities for control and monitoring purposes without you possibly having any legal remedy. The data will be deleted as soon as they are no longer needed for the processing purposes.

The legal basis and revocation option for this data processing is your consent, Art. 6 para. 1 lit. a) GDPR. You can revoke your consent at any time with effect for the future by opening the privacy settings below Website cookies and making the appropriate changes there.

LinkedIn Analytics

If you have given your consent, Hydro uses LinkedIn Analytics, a web analytics service provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. LinkedIn Analytics uses cookies that enable an analysis of your use of our websites:

- About add-ons - Browser information - Device Type - IP address - Referrer URL

The information collected by means of cookies about your use of this website is usually processed in the European Union. This service can redirect visitors to the USA and Singapore, which do not offer an adequate level of data protection. In the U.S., there is a risk that your data may be processed by U.S. authorities for control and monitoring purposes without you possibly having any legal remedy. The data will be deleted as soon as they are no longer needed for the processing purposes.

Hotjar

If you have given your consent, Hydro uses Hotjar, a web analytics service provided by Hotjar Limited, Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141, Malta. Hotjar uses cookies that enable an analysis of your use of our websites:

- Date and time of the visit - Device Type - IP address - Mouse movements - Visited pages - Referrer URL - Screen resolution - Unique device identifier - Language information - Browser type - Clicks - Domain-Name - Unique user ID - Responses to surveys

The legal basis and right to withdrawal for this data processing is your consent, Art. 6 para. 1 lit. a) GDPR. You can withdraw your consent at any time with effect for the future by opening the privacy settings below Website cookies and making the appropriate changes there.

Google-Re/Marketing-Services

We use the marketing and remarketing services ("Google Marketing Services" for short) provided by Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA, to optimize and economically operate our online offer. The responsible body for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.The Google Marketing Services allow us to display advertisements for our website in a more targeted manner in order to present you only with advertisements that potentially correspond to your interests. If, for example, you are shown advertisements for our services on other websites, this is referred to as "remarketing". For these purposes, when our and other websites on which Google marketing services are active are accessed, a code is executed directly by Google and so-called (re)marketing tags (invisible graphics or code, also known as "web beacons") are integrated into the website. With their help, an individual cookie, i.e. a small file, is stored on your device (comparable technologies can also be used instead of cookies).

The cookies can be set by different domains, including google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com or googleadservices.com. This file records which websites you visited, what content you were interested in and what offers you clicked on, as well as technical information about the browser and operating system, referring websites, visiting time and other information about the use of the online offer. Your IP address is also recorded, whereby we inform you within the framework of Google Analytics that the IP address is shortened within member states of the European Union or in other contracting states of the Agreement on the European Economic Area and only in exceptional cases is it transmitted in full to a Google server in the USA and shortened there.

The IP address will not be merged with your data within other Google offers. The above information may also be linked by Google to such information from other sources. If you subsequently visit other websites, you may be shown the advertisements tailored to you according to your interests. We process your data pseudonymously as part of the Google marketing services. This means that Google does not store and process, for example, your name or e-mail address, but processes the relevant data cookie-related within pseudonymous user profiles. The information collected about users by Google Marketing Services is transmitted to Google and stored on Google's servers in the United States. One of the Google marketing services we use is the online advertising program "Google Ads" (formerly: "Google AdWords"). In the case of Google Ads, each Ads customer receives a different "conversion cookie". This means that cookies cannot be tracked via the websites of Ads customers. The information obtained with the help of the cookie is used to create conversion statistics for Ads customers who have opted for conversion tracking. Ads customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. Insofar as data is processed outside the EEA, where there is no level of data protection corresponding to the European standard, we have concluded EU standard contractual clauses with the service provider to establish a secure level of data protection. Further information on the use of data for marketing purposes by Google can be found on the overview page:

https://www.google.com/policies/technologies/ads Google's privacy policy is available at https://www.google.com/policies/privacy

5. Advertising

We use cookies for marketing purposes in order to address our users with interest-based advertising. In addition, we use cookies to limit the likelihood of an advertisement being displayed and to measure the effectiveness of our advertising measures. This information may also be shared with third parties, such as ad networks. The legal basis for this is Art. 6 para. 1 lit. a) GDPR.

DoubleClick by Google

If you have given your consent, Hydro uses the online marketing tool DoubleClick by Google. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

DoubleClick uses cookies to display ads that are relevant to users, to improve campaign performance reports, or to prevent users from seeing the same ads more than once. For this purpose, Google uses a cookie ID to record which ads are displayed in which browser. This prevents the same ad from being placed more than once. In addition, DoubleClick can use cookie IDs to record so-called conversions related to ads. This is the case, for example, when a user sees a DoubleClick ad and later uses the same browser to visit the advertiser's website and buy something there.

When you visit a page that uses DoubleClick and where the DoubleClick script is allowed, your browser automatically establishes a direct connection to the Google server. By integrating DoubleClick, Google receives the information that you have accessed the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account.

Please note that this service may transfer data outside the European Union and the European Economic Area and to a country that does not provide an adequate level of data protection. If the data is transferred to the US, there is a risk that your data may be processed by US authorities for control and monitoring purposes without you possibly having any legal remedy.

You can prevent the collection of data by this tracking procedure in various ways: a. by setting your browser accordingly. The suppression of third-party cookies means that you will not be shown any third-party ads. b. By disabling cookies for conversion tracking, you prevent you from being shown interest-based advertising. To do this, you must block cookies from the domain "www.googleadservices.com" in your browser. c. Ad Settings (google.com) You can set an opt-out cookie under [https://www.google.com/settings/ads](https://adssettings.google.com/anonymous?hl=en). However, this setting will be deleted if you delete all your cookies. d. by deactivating the interest-based ads of the providers that are part of the self-regulation campaign "About Ads" via the link [http://www.aboutads.info/choices](https://optout.aboutads.info/?c=2&lang=EN), whereby this setting will be deleted when you delete your cookies; d) by permanently disabling cookies in your browser under the link [https://www.google.com/settings/ads/plugin](https://www.google.com/settings/ads/plugin). We would like to point out that in this case you may not be able to use all functions of our website to their full extent. For more information about DoubleClick by Google, please visit [DoubleClick Digital Marketing - Google Help](https://support.google.com/faqs/answer/2727482?hl=en) and[ How AdSense works - Google AdSense Help](https://support.google.com/adsense/answer/6242051?hl=en-GB#zippy=%2Cwhat-is-adsense) as well as data protection at Google in general: [Privacy Policy – Privacy & Terms – Google](https://policies.google.com/privacy?hl=en&gl=en). Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at [https://www.networkadvertising.org](https://www.networkadvertising.org).

The legal basis and right to withdrawal

for this data processing is your consent, Art. 6 para. 1 lit. a) GDPR. You can withdraw your consent at any time with effect for the future by opening the privacy settings below Website cookies and making the appropriate changes there.

LinkedIn Ads

If you have given your consent, Hydro uses the online marketing tool LinkedIn Ads. The responsible service provider in the EU is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.

For this purpose, we define target groups of users in the LinkedIn Campaign Manager on the basis of certain characteristics, who are subsequently displayed advertisements within the LinkedIn network. Users are selected by LinkedIn on the basis of the profile information they provide, as well as other data provided when using LinkedIn. If a user clicks on an advertisement and then arrives at our website, LinkedIn receives the information via the conversion tag integrated on our website that the user has clicked on the advertising banner. The LinkedIn tag thus enables the collection of visited websites, including the URL, referrer ID, IP address, device and browser properties and time stamp. The IP addresses are shortened or hashed by LinkedIn (in the case of cross-device use).

With the help of the LinkedIn pixel, we can show personalized ads outside of our website without identifying individual members. It also uses data that doesn't identify you to improve ad relevance and reach LinkedIn members across different devices. LinkedIn members can control the use of their personal information for advertising purposes through their account settings. LinkedIn refers to the following link to adjust advertising preferences: https://www.linkedin.com/psettings/advertising/actions-that-showed-interest. We process this data in order to evaluate our advertising campaigns. Further information about the purpose and scope of the data collection and the further processing and use of the data by LinkedIn, as well as your setting options for protecting your privacy, can also be found in LinkedIn's privacy policy. For more information about LinkedIn Conversion Tracking, please visit: https://business.linkedin.com/marketing-solutions/conversion-tracking. Further information on data processing and storage duration can be found at LinkedIn Insight Tag FAQs | LinkedIn Help.

6. Use of social plugins and embedded functions

Google YouTube

If you have given your consent, Hydro uses the services of YouTube, a provider of video content from Google LLC. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). This serves to improve our online offer.

When you visit a website that contains YouTube , your browser establishes a direct connection to Google's servers and processes the following data: - Device information - Viewed videos - IP address

The information collected about your use of this website is usually processed in the European Union. This service can redirect visitors to the US, which does not provide an adequate level of data protection. There is a risk that your data may be processed by US authorities for control and monitoring purposes without you possibly having any legal remedy. The data will be deleted as soon as they are no longer needed for the processing purposes.

More information on the handling of user data can be found below:

Privacy Policy – Privacy & Terms – Google How Google uses cookies – Privacy & Terms – Google Data privacy settings & controls – Google Safety Centre

7. Data transfer and recipients or categories of recipients

As a matter of principle, your data will not be transferred to third parties unless we are legally obliged to do so, or the data transfer is necessary for the execution of the contractual relationship or you have previously expressly consented to the transfer of your data.

8. Retention period

Personal data that we collect will be deleted when the purpose of the processing ceases to apply or within the statutory retention periods

9. Information on the data subject's obligations to provide information

When using our website, you are not subject to any legal or contractual obligation to provide it.

10. Existence of automated decision-making, including profiling

Automated decision-making, including profiling, in accordance with Art. 22 GDPR does not take place.

11. Your rights

You have the following rights towards us with regard to your personal data:

11.1. General rights

You have a right to information, correction, deletion, restriction of processing, objection to processing and data portability. Insofar as processing is based on your consent, you have the right to revoke it with effect for the future.

11.2. Rights in data processing based on legitimate interest

In accordance with Art. 21 (1) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6 (1) (e) GDPR (data processing in the public interest) or on the basis of Article 6 (1) (f) GDPR (data processing for the protection of a legitimate interest), this also applies to profiling based on this provision. In the event of your objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the purpose of asserting, exercising or defending legal claims.

11.3. Rights in the case of direct marketing

If we process your personal data for direct marketing purposes, you have the right to object to your personal data in accordance with Art. 21 para. 2 GDPR, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising, this also applies to profiling insofar as it is related to such direct marketing.

In the event of your objection to processing for the purpose of direct marketing, we will no longer process your personal data for these purposes

11.4. Right to lodge a complaint with a supervisory authority

You also have the right to complain to a competent data protection supervisory authority about the processing of your personal data by us.

12. Contact by e-mail or contact form

When you contact us by e-mail or via a contact form, the data you provide (your e-mail address and name) will be stored by us in order to answer your questions. Insofar as we request information via our contact form that is not required for contacting us, we have always marked this as optional. This information is used to substantiate your request and to improve the processing of your request. This information is provided expressly on a voluntary basis and with your consent, Art. 6 para. 1 lit. a) GDPR. Insofar as this involves information on communication channels (e.g. e-mail address, telephone number), you also agree that we may also contact you via this communication channel in order to answer your request. Of course, you can revoke this consent at any time for the future.

We delete the data arising in this context after the storage is no longer necessary, or restrict the processing if there are legal storage obligations.

13. Data integrity

We have taken extensive technical and operational measures to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security procedures are regularly reviewed and adapted to technological progress.