Privacy and cookie statement Sto Ltd

1 May 2021

Your privacy is very important to Sto Ltd. We therefore comply with the respective privacy legislation and regulations, including the General Data Protection Regulation (referred to below as GDPR). This means that we:

• Clearly define our objectives before processing your personal data based on this privacy statement;
• Store as few personal data as possible and only store those data that are necessary to meet those objectives;
• Explicitly ask permission before processing your personal details, if permission is compulsory;
• Take the necessary security measures to protect your personal data. We also impose these obligations upon parties who process personal details on our behalf;
• Respect your rights, such as your right to view your personal data which we have processed, and to have these data amended or deleted.

We keep your data secure and we will always use these data in accordance with the regulations. In this privacy statement we explain the various ways in which we use the data you divulge to us on the website Sto-Cladding Creator.

If you have any questions or would like to know what type of data we record about you, please contact Sto Ltd

Your account
There are certain sections of this website that require you to register first. This involves entering your personal details and choosing a user name. This enables us to create an account for you, which you can use to log onto the website using your user name and a password of your choice.

For this purpose we use your company name, date of registration, login activities, textures generated in Sto-Cladding Creator, country of registration, telephone number, IP address, name and address details and e-mail address. We do this with your permission. We store this data until you delete the account.

We store this data to avoid you having to re-enter this each time, and if necessary, to enable us to contact you more easily via the website. You can amend your data through your account whenever you wish.

Data transfer to third parties
We collaborate with certain companies that may receive your aforementioned personal data from us.

Contact form
You can use the contact form to ask us questions or send us requests.

For this purpose we use your name and address details, telephone number and e-mail address. We do this with your permission. We store this data until we are certain that you are happy with our response.

Portal access
Via our portal you can gain access to a management environment that allows you to make changes, entries and amendments for the website. We store the entries you have made and log the time of the entry as proof.

For this purpose we use your e-mail address, name and address details and IP address. We do this with your permission. We store this data until we have completed our service provision to you.

Data transfer to third parties
We collaborate with certain companies that may receive your aforementioned personal data from us.

Completing the order
Whenever you place an order with us, we use your personal data to successfully complete it. We may convey your personal data to our delivery company to deliver the order to you. We also receive information about your payment by bank or credit card company.

For this purpose we use your name and address details, telephone number and e-mail address. We need these because of the contract we have entered into with you. We store this data until your order has been completed. Certain customer details are stored for a longer period of time to comply with the legal data storage time limit for tax purposes.

Data transfer to third parties
We collaborate with certain companies that may receive your aforementioned personal data from us.

To manage the orders, we collaborate with:

• Suppliers of the necessary components to produce the samples ordered

Despatch of newsletters
We have a newsletter and you will only be added to the list of subscribers with your permission. The newsletter includes news articles, tips and information about our products and services.

For this purpose we use your name and address details and e-mail address. We do this with your permission. We store this data until you unsubscribe.

You can unsubscribe from the newsletter at any time. Every newsletter includes an unsubscribe link.

Data transfer to third parties
We collaborate with certain companies that may receive your aforementioned personal data from us.

Advertising
We would like to advertise our offers and new products and services to you. We do this:

• by post
• by e-mail
• via social media
• by telephone

You may unsubscribe from this advertising at any time. Every letter gives you information on how to unsubscribe from this. Every e-mail includes an unsubscribe link. You may block us or use the unsubscribe option. You can ask us to unsubscribe you when we telephone you. You can also tell us through your account. You can also tell us via the portal.

Transfer of personal data to other companies or institutions.
Apart from the parties that are necessary to perform the aforementioned services, we do not under any circumstances transfer your personal data to any other companies or institutions, except in cases where we are legally required to do so (e.g. if required by the police if they suspect criminal activity).

Statistics
We keep statistics about the use of our website and we have access to the personal data. However, we only consult this data if it is necessary to meet an objective that forms part of this statement.

Cookies
Our website uses cookies. Cookies are small files in which we can store data to avoid you having to fill it in repeatedly. They also enable us to see that you are a returning visitor.

In your browser you can switch off the installation of cookies, but that does mean that certain aspects of our website will not run as efficiently.

We have entered into agreements about the use of cookies with other companies that install cookies. However, we do not have full control over the way in which they use cookies. Do read their privacy statements too.

Security
Personal data security is very important to us. To protect your privacy, we take the following measures:

• Access to personal data is protected by a user name and password
• We make use of secure connections (Secure Sockets Layer or SSL) that protect all the data between you and our website when you enter your personal data.

Data protection officer
We have appointed a data protection officer. This person is responsible for ensuring privacy within our organisation. Our data protection officer is D.Newton and can be contacted by e-mail at d.newton(at)sto.com and by telephone on 01418928000 for any questions and requests.

Amendments to this privacy statement
Whenever we amend our website, the privacy statement naturally also needs to be amended. Therefore always check the date in the heading and regularly check whether there is a new version. We will do our best to inform you accordingly.

Your rights
If you have any questions or if you would like to know what personal data we hold about you, you can always contact us. Please see the contact details below.

You have the following rights:

• to receive an explanation about what personal data we hold about you and what we do with these data
• to view the exact personal data we hold about you
• to have any errors corrected
• to have outdated personal data removed
• to withdraw permission
• to limit certain types of processing
• to object to a particular use

Do ensure that you always clearly state who you are, so that we can be certain not to amend or delete the personal data of the wrong person.

In principle, we will comply with your request within 30 days. However, this term may be extended due to the specific rights of the persons concerned or the complexity of the request. If we extend this term, we will inform you of this fact in good time.

Lodging a complaint
If you wish to lodge a complaint about the use of your personal data, you may send an e-mail to info.uk@sto.com. We handle all complaints in-house and will communicate with you accordingly.

If you think that we are not giving you the right type of assistance, you have the right to lodge a complaint with the regulator. This is the Personal Data Authority.

Contact details
Sto Ltd
Unit 700 Catesby Park
Kings Norton, Birmingham B38 8SE
E-mail address: info.uk@sto.com
Telephone: 01418928000

Company Reg. No.: SC76742