Privacy Notice - Code of Conduct
2. What is "personal data" and "processing of personal data"?
The term "personal data" as used in this notice is any piece of information that, either on its own or together with any other pieces of information, can be traced back to a living individual, and any other data that qualifies as personal data in accordance with data protection law applicable to ASSA ABLOY.
This notice includes information on all personal data that is in any form considered processed under the relevant law in relation to you as reporter of a suspected Code of Conduct violation, including personal data that is kept, stored, collected, transferred, disclosed or in any other way handled.
3. What kind of personal data will ASSA ABLOY process?
We process personal data in order to investigate suspected Code of Conduct violations, and to take remedial actions. More specifically, we will only collect and process personal data about an individual who reports a potential Code of Conduct violation as set out in the "Data Processing Matrix" in Schedule A. We will only process this personal data to fulfill the purposes stated in this notice and the Data Processing Matrix, and to comply with applicable law.
6. To what countries will my personal data be transferred?
A legal entity that receives personal data may be located in a country that offers a lower level of protection for personal data than the country in which you are located or a citizen. All personal data transferred to a country that offers a lower level of protection for personal data will be transferred in accordance with ASSA ABLOY's current policies regarding transfer of personal data, as applicable from time to time, to ensure that the transfer of personal data complies with the law. If personal data is transferred to a country that offers a lower level of protection for personal data, the personal data will be transferred in accordance with the "Transfer of Personal Data Matrix" in Schedule B.
12. What should I do if I have any complaints?
If you have any complaints about the way in which the personal data is being processed, or would like further information, please contact the DPM (please see Schedule B for contact details). You can also make a complaint about the data processing to the relevant public authority, such as where you live, work or where an alleged infringement of the applicable data protection law has occurred, please see Schedule B for further information.
13. Updates to the notice or processed data, and non-compliance with this notice
In order to ensure that we comply with data protection law, this notice may be changed by us at any time. We will inform you of any changes made. Any breach of this notice should be reported to the DPM, as specified in Schedule B. Any breach of this notice, including any processing or transfer of personal data for any purpose other than as stated in Schedule A and/or Schedule B, will be taken seriously and will result in necessary actions being taken (including a so called data breach notification being sent to the relevant data protection authority if required by law).
Please notify us of any changes to the personal data relating to you to enable us to process personal data accurately and securely (please see Schedule B for contact details).