Privacy Statement - Suppliers & Potential Suppliers

IMPORTANT INFORMATION REGARDING PROTECTION OF YOUR PERSONAL DATA, PLEASE READ AND AGREE TO THE TERMS AND CONDITIONS DESCRIBED IN THIS PRIVACY STATEMENT BEFORE ENTERING ANY PERSONAL DATA OR CREATING A PROFILE.

At Kautex, we care about the protection of your personal data. Because we care, we have adopted the practices described in this Privacy Statement for Suppliers and Potential Suppliers based on the EU General Data Protection Regulation (EU) 2016/679 (hereinafter “GDPR”) and other applicable laws. You should carefully read this Privacy Statement and agree to the terms and conditions described in it.

Privacy Statement for Suppliers and Potential Suppliers

Kautex and its subsidiaries and business units (“Kautex”) respect the privacy of our business partners and are committed to complying with applicable privacy laws in every country in which we operate. This Privacy Statement for Suppliers and Potential Suppliers is intended to inform you about how Personal Data you submit within your company profile (“Personal Data”) through this Site and throughout the Kautex supplier registration process will be handled and protected by Kautex. This statement supplements the general Privacy Policy posted on the Textron website www.textron.com.

Our Collection and Use of Personal Data

Personal Data We Collect 

Kautex’s supplier registration process is designed to collect information about your company’s qualifications as a potential Kautex supplier. When you choose to participate in the Kautex supplier registration process you probably will be asked to provide Kautex with information about your company and its capabilities together with certain Personal Data.

Personal Data includes, but is not limited to the following:

  • First and Last Name;
  • Contact Information for key personnel, such as phone numbers or mailing addresses;
  • Email addresses; and
  • Other relevant information disclosed during the supplier registration process.

Kautex collects and stores the Personal Data that you provide to us, including but not limited to information submitted during the supplier registration process. The third-party servers are located in the United States.

Retention and Deletion of Your Personal Data

The criteria used to determine the period of storage of Personal Data is the respective statutory retention period. After the expiration of that period, the corresponding data is routinely deleted, as long as it is no longer necessary for business continuity, the fulfillment or initiation of a contract or other valid legal purposes.

Why We Collect The Information and Your Personal Data 

We collect and use information about you which will help us administer and improve our business. Among other things, we use the information we learn about you to help us personalize and improve the experience you have on our website.

By providing this Personal Data to us, you explicitly agree to our collection and usage of such information as described in this Privacy Statement. The Personal Data that you provide will be used to assist us in matching your company’s capabilities to Kautex supplier requirements. This Personal Data will also be used to contact and identify you throughout the supplier evaluation process. For example, Kautex may contact your company, using the contact information you have provided, for purposes of responding to your Profile. In addition, you may be contacted about other procurement-related issues.

Legal Basis For The Processing

Art. 6 (1) lit. a GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which you are the party, as is the case, for example, when processing operations are necessary for the supply of goods or to provide any other service, the processing is based on Article 6 (1) lit. b GDPR. The same applies to such processing operations, which are necessary for carrying out pre-contractual measures, for example in the case of inquiries concerning your products or services. The non-provision of the personal data would have the consequence that the contract with you could not be concluded. Is our company subject to a legal obligation by which processing of personal data is required, such as for the fulfillment of tax obligations, the processing is based on Art. 6 (1) lit. c GDPR. In rare cases, the processing of personal data may be necessary to protect your vital interests or of another natural person based on Art. 6 (1) lit. d GDPR, e.g. if a visitor were injured in our company. Finally, processing operations could be based on Article 6 (1) lit. f GDPR. This legal basis is used for processing operations which are not covered by any of the abovementioned legal grounds, if processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data. Such processing operations are particularly permissible because they have been specifically mentioned by the European legislator. A legitimate interest could be assumed if there is an appropriate relationship between you and Kautex (Recital 47 Sentence 2 GDPR).

Disclosures of Your Personal Data

We are not in the business of selling your Personal Data to others.

Access to your Personal Data will be restricted to Kautex staff and designated third party agents who have a need to know the specific information in question in order to carry out their responsibilities with regard to Kautex’ procurement process. Your Personal Data may also be disclosed to governmental entities pursuant to and in compliance with applicable laws and regulations, or a subpoena or court order.

We do not reveal Personal Data about you to affiliated or unaffiliated third parties, unless:

  1. you request or authorize it;
  2. the information is provided to help complete a transaction for you;
  3. the information is provided to comply with the law, applicable regulations, court orders or subpoenas, to enforce our Terms of Use or other agreements, or to protect our employee’s rights, property or safety or the rights, property or safety of our users or others (e.g., to a consumer reporting agency for fraud protection etc.); or
  4. the disclosure is done as part of a purchase, transfer or sale of services or assets (e.g., in the event that substantially all of the assets of an applicable Kautex business are acquired by another party).

Kautex has established inter-company Data Processing Agreements based on the recognized EU Model Contracts to authorize worldwide transfer, and subsequent sub-Processing, of Personal Data throughout the global network of Textron Businesses.  Kautex takes adequate safeguards to restrict access to Personal Data to individuals who have a legitimate business need for such access.  Kautex trains individuals who have access to Personal Data to act in accordance with this Privacy Statement and all applicable laws and regulations. 

We may also gather aggregated data about you and disclose such aggregated (but not personally identifiable) information to third parties for analysis or other purposes.

Disclosures and Transfers outside the EEA

Disclosure and Transfer of Personal Data outside the EEA will only be made in the following circumstances and where reasonable and adequate safeguards have been taken to establish and maintain the required level of security with respect to Personal Data:

  • you have given your unambiguous consent;
  • The transfers are needed for the performance of a contract between you and us or to implement a pre-contractual commitment made at your request;
  • The transfers are needed for the conclusion or performance of a contract concluded in your interest between Kautex and a Third Party;
  • The transfers are needed to protect your vital interests;
  • To enforce or protect the rights or personal safety of Kautex or its employees;
  • The transfer is required by law in response to an authorized request from a governmental or law enforcement agency, a governmental agency notification or disclosure requirement or other valid legal order; or
  • The transfer is necessary or legally required on important public interest grounds, or for the establishment, exercise or defense of legal claims.

Your Rights Relating to the Information We Collect

If you are an EU resident or you are in the EU and you wish to confirm whether Kautex is processing your personal data, or to have access to the personal data that Kautex may have about you, please contact us at dataprivacy@kautex.textron.com. According to the EU General Data Protection Regulation (EU) 2016/679 you may also request information about: the purpose of the processing; the categories of personal data concerned; what the source of the information was (if you didn’t provide it directly to Kautex); and how long it will be stored. You have a right to correct (rectify) the record of your personal data maintained by Kautex if it is inaccurate. You may request that Kautex erase that data or cease respectively limit processing it (for example, when the data is no longer necessary for the purpose of processing), subject to certain exceptions. You also have the right to object the further processing of your data. You may also request that Kautex cease using your data for direct marketing purposes. When technically feasible, Kautex will—at your request—provide your personal data to you or transmit it directly to another controller.

Reasonable access to your personal data will be provided at no cost upon request made to dataprivacy@kautex.textron.com. If access cannot be provided within a reasonable time frame, Kautex will provide you with a date when the information will be provided. If for some reason access is denied, Kautex will provide an explanation as to why access has been denied. In addition, for suppliers residing in the EU or who are in the EU, there is a right to complain to a data protection supervisory authority (Art. 77 GDPR).

Access to Your Personal Data

Once you have submitted your profile to us to get access to the supplier portal, you can at any time correct or update your information by sending us an email.

Safeguards

Kautex uses reasonable administrative, technical, personnel, and physical measures to safeguard your Personal Data against loss, theft, and unauthorized use or modification. This includes any credit card information that you may provide in order to pay the registration fee. Our site uses a combination of encryption technology, digital certificates and authentication to protect your Personal Data. As long as the web browser you are using supports Secure Sockets Layer (SSL), your information will be submitted to us with a high level of security. We update and test our security technology on an ongoing basis. It is also important for you to help protect against unauthorized access by signing off of our Site each time you finish using the Site.

Kautex has obtained assurances from its partners (third party data processors) that they have similar practices in place.

No Contract

This Privacy Statement does not constitute a contract between Kautex and any Supplier or Potential Supplier.

Changes to This Statement

As our business changes, this Privacy Statement is expected to change from time to time, and we reserve the right to change it at any time. The use of your information is subject to the Privacy Statement for Suppliers and Potential Suppliers in effect at the time of use. The provisions contained herein supersede all previous notices or statements regarding our privacy practices with respect to this Site. We may email periodic reminders of our notices and terms and conditions and post any changes to the Privacy Statement for Suppliers and Potential Suppliers to our Site. We encourage you to check our Site frequently to see the current Privacy Statement and Terms of Use in effect and any changes that may have been made to them.

Website Terms of Use

In addition to the Privacy Statement above, your use of this site is also governed by our website Terms of Use.  By using this site and submitting any information to it, you agree to abide by these Terms of Use as published.

HOW TO CONTACT US WITH QUESTIONS ABOUT THIS STATEMENT

Controller for the purposes of the GDPR, other data protection laws applicable in member states of the European Union and other provisions related to data protection is:

KAUTEX TEXTRON GmbH & Co. KG

Kautexstraße 52, D-53229 Bonn

0049 (0) 228 448-0

To contact us regarding any questions about this Statement or to register a complaint with Kautex please contact us at dataprivacy@kautex.textron.com.