Effective Date: November 10, 2020
- B. Applicant Privacy Notice
1. Categories of Personal Data and Processing purposes - What personal data do we process about you and why?
You may use the Rexnord Website without providing any personal data about you. In this case, we will collect only the following metadata that result from your usage of the Rexnord Website: browser type and version, operating system and interface, website from which you are visiting us (referrer URL), webpage(s) you are visiting on our Rexnord Website, date and time of accessing our Rexnord Website, and internet protocol (IP) address. Your IP address will be stored once you access our Rexnord Website. Metadata will be used in anonymized form and to prevent fraud and misuse of our IT systems, as well as to ensure physical, IT and network security.
2. Processing Basis and Consequences - What is the legal justification for processing your personal data and what happens if you choose not to provide it?
We rely on the following legal grounds for the collection, processing, and use of your personal data:
- the processing is necessary to enable you the use of the Rexnord Website;
the processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of you which require protection of personal data; such legitimate interests are the fulfilment of the processing purposes set out above in Section 1, in particular improvement of the quality and services of our Rexnord Website and services, prevention of fraud, misuse of our IT systems, physical, IT and network security, as well as marketing relating to our products and services; or
the processing is necessary for compliance with a legal obligation to which we are subject.
3. Categories of Recipients and International Transfers - Who do we transfer your personal data to and where are they located?
We may transfer your personal data to third parties for the processing purposes described above as follows:
Within the Rexnord Group: Each of our affiliates and subsidiaries (each affiliate or subsidiary including us referred to as "Rexnord Affiliate") within the global Rexnord Group may receive your personal data as necessary for the processing purposes described above. Depending on the categories of personal data and the purposes for which the personal data has been collected, different internal departments within the Rexnord Company may receive your personal data. For example, our IT department may have access to your metadata. Moreover, other departments within the Rexnord Company have access to certain personal data about you on a need to know basis, such as the legal department, the finance department or internal auditing.
With data processors: Certain third parties, whether affiliated or unaffiliated, may receive your personal data to process such data under appropriate instructions ("Processors") as necessary for the processing purposes described above, such as website service providers, IT support service providers, and other service providers who support us to run our website. The Processors will be subject to contractual obligations to implement appropriate technical and organizational security measures to safeguard the personal data, and to process the personal data only as instructed.
You can ask for further details of the currently engaged Processors by contacting us as set out in Section 8 below.
Other Recipients: We may transfer - in compliance with applicable data protection law - personal data to law enforcement agencies, governmental authorities, judicial authorities, legal counsel, external consultants, or business partners. In case of a corporate merger or acquisition, personal data may be transferred to the third parties involved in the merger or acquisition. We will not disclose your personal data to third parties for advertising or marketing purposes or for any other purposes without permission.
Any access to your personal data is restricted to those individuals that have a need-to-know in order to fulfill their job responsibilities.
International transfers. You should expect that the recipients identified above which will receive or have access to your personal data, are located inside or outside the European Economic Area ("EEA").
For recipients located outside of the EEA, some are certified under the EU-U.S. Privacy Shield and others are located in countries with adequacy decisions pursuant to Art. 45 GDPR (in particular, Canada, Switzerland, Israel), and, in each case, the transfer is thereby recognized as providing an adequate level of data protection from a European data protection law perspective. Other recipients might be located in countries, such as the USA, which do not adduce an adequate level of protection from a European data protection law perspective.
We will take all necessary measures to ensure that transfers out of the EEA are adequately protected as required by applicable data protection law. With respect to transfers to countries not providing an adequate level of data protection, we will base the transfer on appropriate safeguards, such as standard data protection clauses adopted by the European Commission or by a supervisory authority (Art. 46(2)(c) or (d) GDPR), approved codes of conduct together with binding and enforceable commitments of the recipient(Art. 46 (2)(e) GDPR), or approved certification mechanisms together with binding and enforceable commitments of the recipient (Art. 46 (2)(f) GDPR). You can ask for a copy of such appropriate safeguards by contacting us as set out in Section 8 below.
4. Retention Period - How long do we keep your personal data?
Your personal data will be retained as long as indicated below.
If we are required by applicable law to retain certain of your personal data, we will not delete them. We may also retain your personal data if we need your personal data to establish, exercise or defend a legal claim, on a need to know basis only. To the extent possible, we will restrict the processing of your personal data for such limited purposes after the termination of the contractual relationship.
5. Your Rights - What rights do you have and how can you assert your rights?
Right to withdraw your consent: If you have declared your consent regarding certain collecting, processing and use of your personal data (in particular, regarding the receipt of direct marketing communication via email, and telephone), you can withdraw this consent at any time with future effect. Such a withdrawal will not affect the lawfulness of the processing prior to the consent withdrawal. You can withdraw your consent as follows email: Dataprivacy@rexnord.com. Further, you can object to the use of your personal data for the purposes of marketing without incurring any costs other than the transmission costs in accordance with the basic tariffs.
Additional data privacy rights: Pursuant to applicable data protection law, you may have the right to: (i) request access to your personal data; (ii) request rectification of your personal data; (iii) request erasure of your personal data; (iv) request restriction of processing of your personal data; (v) request data portability; and/or (vi) object to the processing of your personal data (including objection to profiling).
Please note that these aforementioned rights might be limited under the applicable local data protection law. Below please find further information on your rights to the extent that the GDPR applies:
Right to request access to your personal data: As provided by applicable data protection law, you have the right to obtain from us confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, to request access to the personal data. This access information includes – inter alia – the purposes of the processing, the categories of personal data concerned, and the recipients or categories of recipient to whom the personal data have been or will be disclosed. However, this is not an absolute right and the interests of other individuals may restrict your right of access.
You may have the right to obtain a copy of the personal data undergoing processing free of charge. For further copies requested by you, we may charge a reasonable fee based on administrative costs.
Right to request rectification: As provided by applicable data protection law, you have the right to obtain from us the rectification of inaccurate personal data concerning you. Depending on the purposes of the processing, you may have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
Right to request erasure (right to be forgotten): As provided by applicable data protection law, you have the right to obtain from us the erasure of personal data concerning you and we may be obliged to erase such personal data.
Right to request restriction of processing: As provided by applicable data protection law, you have the right to obtain from us restriction of processing your personal data. In such case, the respective data will be marked and may only be processed by us for certain purposes.
Right to request data portability: As provided by applicable data protection law, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you may have the right to transmit those data to another entity without hindrance from us.
Right to object: Under certain circumstances, you may have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data by us and we are required to no longer process your personal data. Such right to object may especially apply if we collect and process your personal data for profiling purposes in order to better understand your interests in our products and services or for direct marketing.
If you have a right to object and you exercise this right, your personal data will no longer be processed for such purposes by us. You may exercise this right by contacting us as stated in Section 8 below.
Such a right to object may, in particular, not exist if the processing of your personal data is necessary to take steps prior to entering into a contract or to perform a contract already concluded
To exercise your rights, please contact us as stated under Section 8 below. You also have the right to lodge a complaint with the competent data protection supervisory authority in the relevant Member State (e.g., the place where you reside, work, or of an alleged infringement of the GDPR).
6. Cookies and other tracking technologies
Description and storage time
Tracks if a session is valid for the user (Necessary Cookie) 1-year storage
Stores the culture of the user (Necessary Cookie) 1-year storage
Performance Cookie 2-years storage
These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information.
These cookies allow us to count visits and traffic sources, so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know when you have visited our site and will not be able to monitor its performance.
7. Questions and Contact Information
California "Shine the Light" law
California Civil Code Section 1798.83, also known as California's "Shine the Light" law, permits residents of California to request certain details about information we may disclose to third parties for direct marketing purposes. If you are a California resident and would like to request this information, please contact us as stated under Section 8 below.
California Consumer Privacy Act
The California Consumer Privacy Act of 2018 ("CCPA") requires us to provide additional privacy-related information to residents of California.
CA Personal Data. Consistent with the "Categories of Personal Data and Processing purposes" Section above, we collect certain categories and specific pieces of information about individuals that are considered "Personal Information" in California under the CCPA ("CA Personal Information"). Specifically, we may collect the following types of CA Personal Information:
- Identifiers: IP address; and
- Internet or other electronic network activity information: browser type and version, operating system and interface, website from which you are visiting us (referrer URL), webpage(s) you are visiting on our Rexnord Website, and date and time of accessing our Rexnord Website.
- Our site not intended for use by those under the age of 16 and we do not knowingly collect, use, process or otherwise disclose information about minors.
Sources. We may collect certain categories of CA Personal Information from you and your device(s) via your usage of the Rexnord Website as described in the "Categories of Personal Data and Processing purposes" Section above.
Purposes. We collect CA Personal Information for the business and commercial purposes described in the "Processing Basis and Consequences" Section above. We also share and/or disclose your CA Personal Information as follows:
- Sharing your CA Personal Information for business purposes: As described in the "Categories of Recipients and International Transfers" Section above, we may share the categories of your CA Personal Information listed above with Rexnord Affiliates, Processors, public or government authorities and future business partners for our business purposes. Examples of business purposes include internal operations, prevention of fraud and other harm, ensuring physical, IT and network security, and legal compliance.
- California Consumer Rights.
- Subject to certain exceptions and qualifications, as a California resident, you have the right to: (i) request access to your personal information; (ii) request deletion of your personal information. To exercise your rights, or to have an authorized agent exercise them on your behalf, please contact us as stated under Section 8 below or as instructed below. Please note that, for your security, we will take steps to help verify your identity and/or the authorization of your authorized agent.
- Exercising California Consumer Rights. Should you wish to request the exercise of your rights as detailed above with regard to your CA Personal Information, we will not discriminate against you by offering you different pricing or products, or by providing you with a different level or quality of products, based solely upon this request. Please contact us as stated under Section 8 below if you have questions or would like to exercise such rights.
8. Questions and Contact Information
A. Applicant Privacy Notice
Rexnord Corporation ("Company") provides this Job Applicant Privacy Notice ("Notice") to explain our practices regarding the collection, use, and other processing of certain individually identifiable information about job applicants or other potential employees ("Applicant Personal Information "), in connection with recruiting and hiring activities in Canada and the United States.
I. CATEGORIES OF APPLICANT PERSONAL INFORMATION
Company collects, uses and otherwise processes the following categories of Applicant Personal Information, including but not limited to:
Identifiers, including name, date of birth, and contact information (e.g., personal and business address, personal and business phone/fax numbers, email addresses);
Characteristics of protected classifications, including nationality, gender, race, physical disability, military/veteran status, and country of birth;
Professional or employment-related information, including languages spoken and skills, software experience, professional memberships, summaries of strengths and technical areas of expertise, pre-Company work history information (e.g., previous employers and positions held, dates, locations, supervisors, responsibilities, salary), resume and cover letter information, references and information obtained from them, and related background check (to the extent permitted, and in accordance with applicable law);
Education information, including education, and certificates and degrees obtained; and
Other information, including any other information reasonably necessary for us to carry out our legal or regulatory obligations.
II. PURPOSES FOR PROCESSING APPLICANT PERSONAL INFORMATION
Company will process Applicant Personal Information for the following purposes:
III. DISCLOSURES OF PERSONAL INFORMATION
We may share Applicant Personal Information in the following situations, as permitted by applicable law:
Service providers. We share Applicant Personal Information with service providers as necessary for them to provide services to us, subject to appropriate confidentiality and data protection agreements. Service providers assist us with data storage and other activities related to the management of our business. Our service providers are located in the United States, the United Kingdom, Germany, Singapore and Australia.
To comply with laws and protect legal interests. We may share Applicant Personal Information to comply with any applicable law, regulation, judicial process, court order, legal process, or proper government request; and establish or exercise our rights, defend against a legal claim, and investigate, prevent or take action regarding possible illegal activities or a violation of our policies.
In connection with mergers and acquisitions. We may provide Applicant Personal Information to a potential or actual buyer in connection with a proposed or actual merger, acquisition, sale, or other change of control.
IV. YOUR RIGHTS
You may have rights under applicable privacy laws. To submit a request to exercise any rights you may have under applicable privacy laws, please contact us using the contact details at the end of this Privacy Notice and clearly describe your request. If you have such rights under applicable privacy laws and your request complies with the requirements under such laws, we will give effect to your rights and respond within any mandatory timeframes as required by law.
If you have any questions about this Applicant Privacy Notice, you should contact us at firstname.lastname@example.org.