Privacy Policy

1. Introduction

James Hardie is committed to maintaining the accuracy, confidentiality, and security of personal information. This Privacy Policy describes, among other things, the categories of personal information we process, how your personal information may be processed, the purposes for which we process your information, the legal basis for our processing, and how your privacy is protected. Please read this privacy policy carefully to understand our views and practices regarding your personal data and how we treat it.

Where this Privacy Policy refers to "we," "us," "our," or "James Hardie," it refers to the James Hardie Group company or companies that process your personal data as a controller under the GDPR. James Hardie processes personal data from various categories of personal data in the course of its normal business activities. This personal data may relate to individuals working for potential and existing vendors and customers, including employees working for parties such as dealers, distributors, architects, and builders. Personal data may also relate to individuals who visit our websites, download our online applications, contact us via social media or at business events, or call our telephone lines.

The James Hardie Group consists of various individual companies. The controller responsible for processing personal data on this website is: James Hardie Europe GmbH

Whenever one of our group companies is involved, the controller of your personal data is the company that decides why and how your personal data is processed, either alone or jointly with another member of the James Hardie Group or another group company. A list of the James Hardie Group companies to which this privacy policy applies can be found below.

As a general rule, James Hardie only collects and processes personal data when it is legally justified. This includes the need to fulfill a contract or service offered to us by , our legitimate interest in processing the data, or on the basis of consent given.

2. Data subject groups

We may collect and process data about the following categories of data subjects:

Former, current, and potential customers, including dealers, distributors, retailers, sales partners, contractors, architects, and end users (collectively, "customers").
Former, current, and future individuals who provide goods and services to us, including, without limitation, temporary employees, contractors, outsourcers, consultants, experts, board members, auditors, dealers, distributors, suppliers, and vendors (collectively, "Suppliers") of ours;
Participants in sponsored sweepstakes or contests;
Complainants, correspondents, and enquirers;
Current, former, and prospective shareholders;
Plaintiffs or defendants in current or future litigation;
Marketing contacts, journalists, trade associations, and lobbyists; and
Individuals who visit our websites, download our online applications, connect with us via social media or at business events, or call our telephone lines;
Job applicants.

3. Personal data

The data we may collect and process includes, for example
Name
Contact and contract information (address, telephone number, fax, email) and project data relating to construction projects;
The company you work for;
Job title(s) and/or function(s);
Department and/or business area;
Your signature;
Customer records (purchase history, customer service, warranty history, purchase preferences, etc.);
Technical data (log files, IP addresses, and general online identifiers and data stored in cookies);
GEO-cashing data, e.g., if you log in with a mobile device and have activated the function on your mobile device that allows us to locate you via GPS;
Credit rating and bank details;
Credit limit and payment terms;
Identification data in official identification documents, if permitted by national law;
Sales information in connection with the sale of products or services, including order history;
Image recordings (e.g., photo)
Correspondence or other communication with you about our products, services, or business;
Application data, such as references, resume, application photo, or interview results (if your resume mentions religious affiliation or degree of disability, sensitive personal data will also be processed)

4. Cookies and tags

Cookies.
This website uses cookies. Cookies are small text files that a website can store on your computer or mobile device when you visit a website or page, for example to enable language settings, analyze website performance, and recommend content that is relevant to your visit. Cookies are stored in your browser. The cookie helps the website or another website recognize your device the next time you visit. Most cookies do not collect information that identifies you as an individual (personal data), but rather general information, such as how visitors arrive at our website and how they use it. Cookies can be used to create a profile of the visitor's activities on the Internet.

Information about the types and categories of cookies we use and how you can manage the use of cookies by disabling, rejecting, or deleting them can be found in our cookie notices on the cookie banner. All information about the storage period of our cookies can be found here: https://jameshardie.de/de/cookies.

Tags.
This website may use tags. A tag is a generic name for code elements found on our web pages. Most tags simply describe the content of the page, but certain types of tags contain programmatic elements or inject dynamic content such as video or audio files into the page. Some tags, particularly those that add content or functionality from external sources to your domain, may pose privacy risks that require evaluation and management. These are third-party tags and, in most cases, provide additional value to your website. However, you need to be aware of this so that you can focus on where there are higher risks. Most of the cookies set on our websites are set via these tags, but some tags may also collect data about you without the use of cookies.

5. Purposes

We use the information we hold about you for the following customer service purposes, including providing products and services to customers, receiving, reviewing, processing, and fulfilling orders and returns, booking transportation and warehousing services (supply chain management), planning and procurement of raw materials, invoicing and payment processing, credit limit management, warranty, technical support or similar purposes, and setting up and maintaining customer accounts;

Communicating with customers, including responding to requests for assistance and updating the status of their orders by mail, email, telephone, and/or SMS;
Administrative information, including access to and use of our websites (known as analytics) and social media platforms;
Interest-based online marketing;
Marketing and advertising purposes, including by email, telephone, or mail, to send news and newsletters, special offers and promotions, and samples, or to otherwise inform customers about products, services, or other topics;
to verify and execute orders, purchase or sales history from suppliers; to exchange information, including performance indicators, about goods or services; and to organize seminars, events, training courses, and marketing activities;
to enable the administration of the corporate structure, management and management reporting, and organizational contacts;
to update, correct, block, or delete personal data, if necessary; to enable data subjects to access and review their personal data;
research purposes, including market and industry research, for daily correspondence (e.g., email messages, letters, etc.)
compliance with applicable legal obligations, including responding to a court order, and enabling risk management, compliance, legal, and audit functions;
Reviewing and selecting suitable candidates as part of a selection process.
For general legal purposes, including exchanges with notaries, lawyers, and commercial registers for the implementation of corporate law requirements, as well as for claims management and compliance purposes;

6. Legal basis

We process your personal data on the following legal basis:

Legal basis
Type of processing (examples)
Legitimate interest

We base the processing of your data on the implementation of our legitimate interests (Art. 6 (1) (f) GDPR). Our legitimate interests are:

To conduct, promote, and expand our business;
Business development, marketing, and market research;
Serving and understanding our customers and the market in which we operate.
To protect the security, integrity, and availability of our products, systems, and services;
To prevent fraud and other criminal activities;
To enable the administration of the corporate structure, management and management reporting, and organizational contacts;
When you visit our website, we may use essential cookies to ensure functionality;
To exercise or defend legal claims.

Contract fulfillment

The personal data you provide may be processed if this is necessary for us to conclude or perform a contract with you or to take the necessary steps to enable us to conclude or perform a contract with you (Art. 6 (1) (b) GDPR). This includes, for example (but is not limited to):

Supplying you with products or services; or
When you talk to us about a new product or service.
Deliveries to you and your customers;
setting up and maintaining customer accounts, including receiving, checking, processing, and delivering orders and returns, as well as invoicing and processing payments;
placing and managing orders with suppliers; processing invoices and making payments; exchanging information, including performance indicators, about goods or services;
daily communication with customers and suppliers by mail, email, telephone, and/or text message; also for responding to inquiries and for warranty,
technical support, or similar purposes;
When you participate in a contest or promotion, to administer the contest or promotion and notify the winners;
To exercise or defend legal claims.

Compliance with legal obligations

We process personal data to fulfill legal obligations (Art. 6 (1) (c) GDPR).
This is the case, for example, when we process your personal data to comply with applicable law or the request of government or law enforcement authorities.
Consent
We process your personal data on the basis of your consent, provided you have given us such consent (Art. 6 (1) (a) GDPR). If we require your consent as the legal basis for processing your personal data, you can revoke your consent at any time by contacting us using the details at the end of this privacy policy.

We process your personal data on the basis of consent, for example, to

provide you with marketing, including by email, telephone, or mail, to send you news and newsletters, offers and promotions, or to otherwise contact you about products, services, or information;
Use cookies for remarketing on our website
operate our company websites on social media platforms
if you allow us to use your photo or video
if you have given us access data that we would like to use for business purposes.

7. Third-party providers

The James Hardie Europe Group works with various service providers. Personal data is also shared in the course of this cooperation. To the extent permitted by applicable data protection laws, your personal data may be shared with the following recipients or categories of recipients:

Where permitted by applicable data protection laws, your personal data may be shared with and processed by other members of the James Hardie Group, including . This may be the case, for example:

8. Company pages on social media

You can find out more about James Hardie Europe or get in touch with us on our social media websites. You can also link your account with us to third-party social media sites. When you link your account or interact with us on or through third-party social media sites, you may allow us ongoing access to certain information from your social media account (e.g., name, email address, photo, gender, birthday, posts, or likes you have made).

When you interact with our social media pages, for example by liking or commenting on posts, this may be publicly visible, depending on your privacy settings. You can control what information you share via the privacy settings on some social media sites. For more information on how to adjust your privacy settings and how third-party social media websites handle your personal data, please refer to their privacy policies, privacy notices, and terms of use.

We currently use the following social media platform services:

Facebook Fan Page

We operate a Facebook page (known as a "fan page") on Facebook, a service provided by Meta Platforms Ireland Limited, Block J, Serpentine Avenue, Dublin 4, Ireland ("Meta Ireland").

When you visit our Facebook fan page, personal data is processed not only by us but also by Meta Ireland, even if you do not have a Facebook profile or are not logged in. When using our fan page, user data (such as contact details), content data (such as form entries), usage data (such as websites visited, interests in content, access times), and communication data (such as device information, IP addresses) are processed. This is done for the purpose of providing you with information and for communication, for example via contact requests and feedback forms, as well as for marketing.

If you are logged in when you open our fan page, we can view the information contained in your public Facebook profile. Meta Ireland also provides us with statistics and insights that help us gain insights into the types of actions people take on our pages ("page insights"). We use this to improve the user experience. However, we do not have access to the usage data that Meta Ireland uses to compile the statistics, but only to summarized Page Insights.

We are jointly responsible with Meta for collecting data from visitors to our fan page and forwarding it to Meta (this includes creating the above-mentioned events and combining them into Page Insights, which are then made available to us by Meta Ireland). Interests can be derived from this and user profiles can be created, but we cannot draw any conclusions about individual users. Meta also uses the data to provide "page insights," which can be used to gain insights into the interaction with the pages and the associated content. We have therefore entered into an agreement with Meta on joint responsibility for the processing of your data in accordance with Art. 26 GDPR. The agreement with Meta also regulates the security measures that Meta must observe. Meta is also responsible for fulfilling the rights of data subjects, such as requests for information or other inquiries. You can view the terms of this agreement with Meta here. Further processing by Meta is not our joint responsibility.

Further information on Page Insights and information on exercising your rights as a data subject can be found in the "Information on Page Insights Data." More detailed information on how Meta processes personal data, including information on the legal basis and the options for exercising your rights as a data subject vis-à-vis Meta, can be found in Meta's data policy at https://www.facebook.com/about/privacy.

Instagram Fan Page

We operate an Instagram page (known as a "fan page") on Instagram, a service provided by Meta Platforms Ireland Limited, Block J, Serpentine Avenue, Dublin 4, Ireland ("Meta").

When you visit our Instagram fan page, personal data is processed not only by us but also by Meta, even if you do not have an Instagram profile or are not logged in. When using our fan page, user data (such as contact details), content data (such as form entries), usage data (such as websites visited, interests in content, access times), and communication data (such as device information, IP addresses) are processed. This is done for the purpose of providing you with information and for communication, for example via contact requests and feedback forms, as well as for marketing.

If you are logged in when you open our fan page, we can view the information contained in your public Instagram profile. Meta also provides us with statistics and insights that help us gain insights into the types of actions that people take on our pages ("page insights"). We use this to improve the user experience. However, we do not have access to the usage data that Meta uses to compile the statistics, only to summarized Page Insights.

Further information on Page Insights and information on exercising your rights as a data subject can be found in the "Information on Page Insights Data." More detailed information on how Meta Ireland processes personal data, including information on the legal basis and the options for exercising your rights as a data subject vis-à-vis Meta Ireland, can be found in Meta's data policy at https://www.facebook.com/about/privacy.

LinkedIn Fan Page

We operate a LinkedIn page (known as a "fan page") on LinkedIn.com, a service provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.

When you visit our LinkedIn fan page, personal data is processed not only by us but also by LinkedIn, even if you do not have a LinkedIn profile or are not logged in. When using our fan page, user data (such as contact details), content data (such as form entries), usage data (such as websites visited, interests in content, access times), and communication data (such as device information, IP addresses) are processed. This is done for the purpose of providing you with information and for communication, for example via contact requests and feedback forms, as well as for marketing.

If you are logged in when you open our fan page, we can view the information contained in your public LinkedIn profile at . LinkedIn also provides us with statistics and insights that help us gain insights into the types of actions people take on our pages ("page insights"). We use these to improve the user experience. However, we do not have access to the usage data that LinkedIn uses to compile the statistics, only to summarized page insights.

We are jointly responsible with LinkedIn for collecting data from visitors to our fan page and forwarding it to LinkedIn (this includes information about the types of content viewed, interactions with content, actions taken, technical information such as IP address, operating system, browser type, language settings, cookie data). This can be used to derive interests and create user profiles, but we cannot draw any conclusions about individual users. LinkedIn also uses the data to provide "page insights," which can be used to gain insights into interactions with the pages and the associated content. We have therefore entered into an agreement with LinkedIn on joint responsibility for the processing of your data in accordance with Art. 26 GDPR. The agreement with LinkedIn also regulates the security measures that LinkedIn must observe. The rights of data subjects, such as requests for information or other inquiries, must also be fulfilled by LinkedIn. You can view the terms of this agreement with LinkedIn here. Further processing by LinkedIn is not our joint responsibility.

For more detailed information on how LinkedIn processes personal data, including how you can exercise your rights as a data subject vis-à-vis LinkedIn, please refer to LinkedIn's data policy at https://de.linkedin.com/legal/privacy-policy.

Pinterest Fan Page

We operate a Pinterest page (known as a "fan page") on Pinterest, a service provided by Pinterest Europe Ltd. Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest").

We use our Pinterest fan page to interact with Pinterest members, visitors, and followers and to provide information about our company and its products and services (e.g., to promote new products or exclusive offers, gather feedback from customers and prospects, answer questions about our products or services, etc.). In doing so, data such as email address, phone number, IP address, device information, actions and events on websites and applications, including pages visited, purchases, searches, checkout events, wish lists, installations, and user registration methods may be collected.

Further information about the provider can be found at https://policy.pinterest.com/en-gb/privacy-policy.

9. Use of third-party providers on this website

In order to guarantee you the best possible service on our website and to maintain its functionality, we integrate various third-party providers on this website.

We currently use the following third-party services:

Meta Pixel

On this website, we use the Meta Pixel service from Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Meta") for conversion measurement in order to display advertising to you and other interested users on Facebook, Instagram, and other websites and to measure the effectiveness of advertising.

Through the Meta Pixel that we have implemented in our website, your browser establishes a connection with Meta, which allows user data such as IP addresses or user IDs to be matched. If you are registered with Facebook or Instagram, Meta can assign the visit to your account. This allows your behavior to be tracked if, for example, you arrived at our site by clicking on a Facebook or Instagram ad or were redirected to the advertiser by clicking on an ad displayed by us. The ads can thus be evaluated in terms of effectiveness for statistical or other market research purposes and further advertising can be improved. We cannot draw any conclusions about the identity of users from this, but Meta can then adjust the placement of advertisements on and outside of Facebook and Instagram. Meta may use cookies, web beacons, or other storage technologies for this purpose.

Insofar as personal data is collected on our website using the aforementioned tool and forwarded to Meta, we and Meta are jointly responsible for this data processing.

We have entered into a joint controller agreement with Meta regarding the processing of your data in accordance with Art. 26 GDPR, the terms of which can be viewed here. We are responsible for providing data protection information and for the secure implementation of the tool on our website in accordance with data protection law. Meta is responsible for data security. Data subjects' rights regarding the data processed by Meta can be asserted directly with Meta and will be forwarded to Meta in the event of an assertion with us. For more information on which personal data is processed under joint responsibility, please visit https://www.facebook.com/legal/terms/businesstools_jointprocessing. The processing by Meta following the forwarding is not carried out under joint responsibility.

For more information about how Meta processes personal data, including how to exercise your data subject rights with Meta, please see Meta's data policy at https://www.facebook.com/about/privacy.

LinkedIn Insight Tag

We use the Insight Tag from LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, to track conversions, retarget website visitors, and obtain additional information about members who view advertisements. This involves collecting metadata such as IP addresses, timestamps, and page events (e.g., page views). For more information about the provider, please visit https://de.linkedin.com/legal/privacy-policy.

Pinterest Tag

We use the Pinterest Tag service provided by Pinterest Europe Ltd. Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest") to track the behavior of users who visit our store after seeing our Promoted Pins on Pinterest. This information allows us to track conversions and adjust our advertising campaign on Pinterest as needed. For example, device ID, device type, timestamp, operating system used, and IP address are collected jointly by Pinterest and us and transmitted to Pinterest. This information transmitted to Pinterest Europe Limited can be associated with you with the help of additional information that Pinterest has stored about you, e.g., based on your ownership of an account on the social network "Pinterest." Based on the information collected via the pixel, interest-based advertisements for our offers may be displayed in your Pinterest account (retargeting). The information collected may also be aggregated by Pinterest, and the aggregated information may be used by Pinterest for its own advertising purposes and for the advertising purposes of third parties. Pinterest may also combine the information collected with other information that Pinterest has collected about you from other websites and/or in connection with your use of the social network "Pinterest," so that Pinterest can store a profile about you. This profile may be used for advertising purposes.

We have therefore entered into a joint controller agreement with Pinterest regarding the processing of your data in accordance with Art. 26 GDPR, which you can access here https://business.pinterest.com/de/pinterest-advertising-services-agreement/germany/. The agreement also stipulates that it does not give us any right to request the disclosure of personal data of any Pinterest Europe user that is processed in connection with Pinterest Europe services, and that data subjects must assert their rights under Articles 15-21 GDPR with regard to their personal data processed by Pinterest Europe directly against Pinterest Europe.

The further processing of the data transmitted to Pinterest Europe Limited is the sole responsibility of Pinterest Europe Limited.

For more information on data protection at Pinterest Europe Limited, please visit: https://policy.pinterest.com/de/privacy-policy

Salesforce CRM

We use Salesforce, a cloud-based software provided by SFDC Ireland Limited, Salesforce Tower, 60 R801, North Dock, Dublin, Ireland, as our CRM system to manage interactions with customers and potential customers. It helps us streamline processes, build customer relationships, increase sales, improve customer service, and increase profitability.

The following data may be collected (but is not limited to): first and last name, street, postal code, city, title, position, employer, contact information (company, email, phone, physical business address), location data, project data (type of project, duration, size, etc.). For more information about the provider, please visit https://www.salesforce.com/de/company/privacy/.

Salesforce Pardot

We use the Pardot service provided by SFDC Ireland Limited, Salesforce Tower, 60 R801, North Dock, Dublin, Ireland, to create automated email and social media campaigns and to evaluate the data generated from these campaigns on lead behavior and interactions with us using lead scoring. The following data, among other things, may be collected: first and last name, street, postal code, city, title, position, employer, contact information (company, email, phone, physical business address), location data, project data (type of project, duration, size, etc.). Further information about the provider can be found at https://www.salesforce.com/de/company/privacy/.

Picturepark

We use Picturepark, a service provided by Vision Information Transaction AG, Industriestrasse 25, 5033 Aarau, Switzerland. Picturepark is a content management system (CMS) that helps us manage the content of our websites efficiently. Picturepark collects technical data and usage data.

Further information about the provider can be found at:

https://picturepark.com/de/terms/privacy/

Google Analytics

We use web analytics to measure website activity and determine which areas of the website are visited most frequently, thereby improving the visibility of our content. To this end, we use the Google Analytics service provided by Google Ireland Limited, Gordon House Barrow Street Dublin 4, Ireland (hereinafter "Google") to collect and analyze visitor behavior on our website. For this purpose, data is collected in the form of online identifiers, IP addresses, device information, and information about interaction with our website.

Further information about the provider can be found at https://policies.google.com/privacy?hl=de.

10. Other third-party marketing providers

Facebook Lead Ads

We use the Facebook Lead Ads service provided by Meta Platforms Ireland Limited (Block J, Serpentine Avenue, Dublin 4, Ireland) ("Meta") to display advertisements to you and other interested users on Facebook and other websites, giving you the opportunity to provide us with your contact information, such as ... and information about ... In doing so, you can share your data already stored on Facebook with us. We use your name to address you personally, your email address to contact you personally, and the information about ... to personalize newsletter content for you. To do this, Meta may use cookies, web beacons, and other storage technologies and collect your IP address and other information. Meta does not conclusively and clearly state how it uses the data for its own purposes, to what extent activities on the Facebook page are assigned to individual users, how long Meta stores this data, and whether data is passed on to third parties, and we do not have this information.We are jointly responsible with Meta for the processing of personal information in event data, which is related, for example, to your actions on our website and in our apps with integrated Meta business tools. We have therefore entered into an agreement with Meta on joint responsibility for the processing of your data in accordance with Art. 26 GDPR. The agreement with Meta also regulates the security measures that Meta must observe. The rights of data subjects, such as requests for information or other inquiries, must also be fulfilled by Meta. You can view the terms of this agreement with Meta here. For more information on which personal data is processed under joint responsibility, please visit https://www.facebook.com/legal/terms/businesstools_jointprocessing. Further processing by Meta is not our joint responsibility.

For more information about how Meta processes personal data, including how to exercise your rights as a data subject vis-à-vis Meta, please refer to Meta's data policy at https://www.facebook.com/about/privacy.

Google Ads

We use Google Ads, an online advertising program from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter "Google"), which enables us to display advertisements in the Google search engine or on third-party websites when the user enters certain search terms in Google (keyword targeting). Furthermore, targeted advertisements can be displayed based on user data available to Google (e.g., location data and interests) (target group targeting). We can evaluate this data quantitatively, for example, by analyzing which search terms led to the display of our advertisements and how many advertisements led to corresponding clicks.

Details can be found at https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/.

TikTok Lead Generation Ads

We use the Lead Generation Ads service provided by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland, and TikTok Information Technologies UK Limited, WeWork, 125 Kingsway, London, WC2B 6NH, United Kingdom (both collectively referred to as "TikTok" at ) to attract new customers to us and our products. The following data is collected: contact details and data for generating leads.

Further information about the provider can be found at https://www.tiktok.com/legal/privacy-policy?lang=de-DE.

11. Third country transfer

When data is transferred to other members of the James Hardie Group or to third parties, your personal data may be collected and processed in a country outside Europe. Data is transferred to countries outside the European Economic Area. We only transfer personal data to third countries where the EU Commission has confirmed an adequate level of protection or where we can ensure the careful handling of personal data through contractual agreements or other appropriate safeguards, such as certifications or proven compliance with international security standards.

USA (standard contractual clauses, adequacy decision)
United Kingdom (adequacy decision)

12. Security of your data

We maintain physical, technical, and administrative security measures to ensure the protection of personal data. We continuously update and test our security technology. We generally try to restrict access to your personal data to those individuals working for James Hardie Group companies who need this information and who always comply with applicable law.

In addition, we train those who work for us about the importance of confidentiality and maintaining the privacy and security of your personal data. We are committed to taking appropriate disciplinary action to enforce our employees' data protection responsibilities.

Please note, however, that despite our efforts, no security measures are perfect or impenetrable. We cannot and do not guarantee that the information you transmit to us will remain secure, nor do we guarantee that such information will not be accessed, disclosed, altered, destroyed, or used in an unauthorized manner.

If we learn of a security breach, we may attempt to notify you electronically so that you can take appropriate protective measures. We may also post a notice on our website if a security breach occurs. Depending on where you live, you may have the right to receive written notice of a security breach.

13. Data storage and deletion

We store your data. For information on cookie storage periods, see: https://jameshardie.de/de/cookies.

14. Data subject rights

As a data subject, you have the following rights

Request information about the processing of your data and receive a copy of your personal data. Among other things, you can request information about the purposes of the processing, the categories of personal data being processed, the recipients of the data (if it is disclosed), the duration of storage, or the criteria for determining the duration.
to receive the personal data concerning you in a structured, commonly used, and machine-readable format or to transmit it to another controller;
to have your data corrected. If your personal data is incomplete, you have the right to have the data completed, taking into account the purposes of the processing;
to have your data deleted or blocked;
to have the processing restricted;
to object to the processing of your data;
to withdraw your consent to the processing of your data for the future

and

complain to the competent supervisory authority about unlawful data processing.

15. Necessity of data processing

You can interact with us without providing us with personal data. However, please note that in this case, certain functions or services may not be available to you.

16. Links to other websites (only relevant for users of our website)

Our pages may contain links to other sites that are not affiliated with us. When you access these links, you leave our website. We do not control such websites. These websites have their own policies and practices regarding online privacy, and we cannot be held responsible for the privacy practices or content of these unaffiliated websites. For the avoidance of doubt, the personal data you share with independent third-party websites is not covered by this privacy policy.

We may display advertisements from third parties. Such advertisers may also ask you for personal information. We are not responsible for the privacy practices of advertisers on our websites. However, we encourage our partners and advertisers to adopt privacy policies that respect local legal requirements.

17. Data protection authority and data protection officers

James Hardie has established a data protection office with data protection experts in the United States, the European Union, and Australia. In addition, James Hardie has appointed a data protection officer for Germany.

External Data Protection Officer

ePrivacy GmbH

represented by Prof. Dr. Christoph Bauer

Große Bleichen 21, 20354 Hamburg

If you wish to communicate directly with our data protection officer (for example, because you have a particularly sensitive concern), please contact them by post, as communication by email can always have security gaps. Please indicate in your request that your concern relates to the company James Hardie.

If you have any questions regarding the processing of your personal data or if you believe that your privacy has been violated, please contact us:

James Hardie Europe GmbH

Bennigsen-Platz 1

40474 Düsseldorf

Germany

Germany (exclusively): datenschutz@jameshardie.com

Europe (general):Dpo@jameshardie.com

18. Instances

This Privacy Policy applies to the James Hardie Group companies listed below that process your personal data. This Privacy Policy also applies to companies that are not listed, insofar as reference is made to this Privacy Policy.

James Hardie Europe Holdings GmbH
Germany, Bennigsen-Platz 1, 40474 Düsseldorf

James Hardie Europe GmbH
Germany, Bennigsen-Platz 1, 40474 Düsseldorf

James Hardie Batiment SAS
France, 30 Rue de l'Industrie, 92500 Rueil-Malmaison

James Hardie Netherlands B.V.
Netherlands, Loonsewaard 20, 6606 KG Niftrik

James Hardie Spain S.L.U.
Spain, Barrio La Estración s/n, 39719 Orejo, Cantabria

Fermacell Schraplau GmbH
Germany, Bennigsen-Platz 1, 40474 Düsseldorf

James Hardie Insurance Limited
Ireland, Europa House, Harcourt Centre, Harcourt Street, Dublin 2 D02 WR20

James Hardie Holdings Ltd.
Ireland, Europa House, Harcourt Centre, Harcourt Street, Dublin 2 D02 WR20

James Hardie Europe B.V.
Netherlands, Loonsewaard 20, 6606 KG Niftrik

James Hardie Building Products Ltd.
United Kingdom, One Fleet Place, London EC4M 7WS

James Hardie Building Products Inc.
USA, 231 S. LaSalle Street, Ste. 2000, Chicago, IL, 60604

JH Research LLC
USA, 231 S. LaSalle Street, Ste. 2000, Chicago, IL, 60604

CGC Products LLC
USA, 231 S. LaSalle Street, Ste. 2000, Chicago, IL, 60604