Privacy Policy

Doosan Bobcat EMEA Data Protection Policy

This Privacy Policy governs the processing of your personal data when

1. you are a visitor of our website http://bobcat.com/eu, 
2. you communicate with us via e-mail, telephone, fax and/or social media,
3. when you apply for a position at our company, or
4. you have a business relationship with us, either as a customer (including dealers) or as a supplier.

Please consider that, in addition to what is written in this Privacy Policy, we do also process personal data via cookies, social plug-ins, pixels, and other types of tracking technology on our website. For more information on this, we kindly refer you to our Cookie Policy.

 

1.    General information

1.1.    Your personal data are processed by Doosan Bobcat EMEA, s.r.o., a company with registered office at U Kodetky 1810, 263 12 Dobříš, Czech Republic and registered under the number 264 89 201 (hereinafter “Doosan”, “we”, “us”, “our”). 

The terms in this Privacy Policy should be interpreted in the sense of the General Data Protection Regulation (Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons regarding the processing of personal data and the free movement of such data), as well as any applicable laws and regulations ruling the same subject matter. 

Where reference is made to certain laws or regulations, such reference shall also include any change, replacement, or annulment of said laws or regulations, including any related administrative decisions.

1.2.    We reserve the right to modify, change, or amend this Privacy Policy at our own discretion, from time to time. Such modification, change, or amendment shall be communicated via our website.

1.3.    For any questions or queries with regard to the processing of your personal data or this Privacy Policy, you can always reach us by sending an e-mail to emeacompliance@doosan.com.

 

2.    Types of personal data we process

2.1    Under this Privacy Policy, we process the following personal data:

• Identity information such as your name and surname;
• Contact information such as your e-mail address, postal address and telephone number;
• Employment information such as the company you work for and your function;
• Financial information such as a bank account number and other relevant financial identifiers;
• Communications information such the content of your communications with us and the technical details of such communication, including with whom you correspond at our end, and the date and time of such communication;
• Order information including the information pertaining to what you ordered/offered and you preferences in relation to such order/offer;
• Advertising information concerns information on your preferences and the interest you have shown in relation to our products and services;
• Marketing preferences such as your preferences regarding receiving our e-mail communications, such as newsletters, promotions, and advertisements. This also includes when you have chosen to receive such communications and you have indicated your preferences in the preference centre (“Preference Centre”). A link to our Preference Centre is made available in each e-mail or other person-to-person communication we send you;
• Technical information associated with the device you use, such as your IP address, browser type, geographical location, and operating system; and
• Any other personal data you choose to provide to us.

2.2.    In general, we receive the listed personal data directly from you. However, do consider that we may receive additional information from third-party service providers.

 

3.    Purposes for processing

3.1    Business interactions

When we engage in business interactions, including by concluding agreements, we collect and process identity information, contact information, employment information financial information, order/offer information, and advertising information. 

For this processing purpose, we rely on our legitimate interest in being able to conclude and perform agreements with our customers and suppliers. 

3.2.    Communication

When you communicate with us via social media, communication forms online, telephone, e-mail, or any other communication channel, or when you hand us your business card, we collect and process identity information, contact information, employment information, and communications information.

For this processing purpose, we rely on our legitimate interest in being able to respond to requests, questions, or comments, or to contact you proactively for questions of any kind and to build and maintain a network of contacts.

3.3.    Social media interactions

When you visit, use, or interact with our social media (such as LinkedIn, Twitter, or Facebook), we collect and process identity information, contact information, communications information, advertising information, as well as any other information you decide to share with us.

For this processing purpose, we rely on our legitimate interest in being able to respond to requests, questions, and comments. In addition, when we track interactions such as customer experiences and reactions to our services, we rely on our legitimate interest in tracking messages about our services or about us as a company, or the industry in which we operate. 

3.4.    Advertising

For communications, promotions, offerings, and other advertisement purposes, we may send you marketing communications. For sending such marketing communications we may collect and process your identity information, contact information, communications information, marketing preferences, and advertising information. 

For this processing purpose, we rely on our legitimate interest to provide you with relevant information on products and services that may interest you as an existing or former customer (opt-out). Where you are not an existing or former customer, we process your personal data only on the basis of your consent (opt-in). 

Please be aware that you have the right in all cases to withdraw your consent to receiving such marketing communications. This can be done by accessing your Preference Centre, as set out above.

3.5.    Order resolution

When you place an order on our website or otherwise, we may collect and process identity information, contact information, employment information, financial information, communications information, and order information. 

For this processing purpose, we rely on our legitimate interest to market and sell our products and to ensure the adequate resolution of orders placed by our customers.

3.6.    Participation to events and training

When you register for or participate to events and trainings, we collect and process identity information, contact information, employment information, and any other information you may choose to provide to us, such as food preferences.

When such events or trainings are held online, we may also collect and processing technical information, communications information, and other information you may choose to share with us, such as your image or voice during recordings. 

To process this personal data, we rely on our legitimate interest to be able to organize events that lead to high interest and attendance rates or to promote our products and services. In some cases, we may also conclude additional agreements with you, upon which the processing of personal data will be based on the basis of that agreement. You will always be informed when this is the case.

3.7.    Recruitment and selection

This Privacy Policy applies to the processing of personal data of people who choose to apply for a job at Doosan Bobcat. This can either be via e-mail, our job applicant platform (https://bobcat.jobs.cz/), or a third-party service such as LinkedIn. For this processing purpose, we process your identity information, contact information, employment information, communications information, as well as any other information you choose to provide to us.

To process this personal data, we rely on the (pre-)contract we negotiate upon receiving your application. If we reject your application, we may ask your consent to retain a copy of your personal data for a limited time.

3.8.    Compliance with legal obligations

To comply with our legal obligations or to comply with any reasonable request from competent police authorities, judicial authorities, government institutions or bodies, including competent data protection authorities we may process all of the personal data stated above.

For processing this data, we rely on our related legal obligations.

3.9.    Fraud, illegal activities, and unauthorized activities

To prevent, detect and combat fraud or other illegal or unauthorized activities, we may process any of the personal data stated above.

For processing this data, we rely on our legitimate interest in keeping our website, services, and operations safe and secure. 

3.10.    Legal proceedings

To defend our interests in legal proceedings, we may process any of the personal data stated above.

For processing this data, we rely on our legitimate interest in using your personal data in these proceedings. 

3.11.    Mergers, demergers, and acquisitions

To inform a third party in the context of a possible merger with, acquisition of/by or demerger by that third party, even if that third party is located outside the EU.  

For processing this data, we rely on our legitimate interest in entering into business transactions.

 

4.    Recipients

4.1.    We generally do not send your personal data in an identifiable manner to any third party not working at or engaged by us without informing you. In any case, anyone receiving access to your personal data will be bound by strict legal and contractual obligations to keep your personal data confidential and secure. 

Please be aware that your personal data may, depending on the processing purposes set out above, be shared with the following categories of recipients:

• You;
• Your employer or business partners;
• Our employees and suppliers;
• Our official dealers;
• Government or judicial authorities to the extent that we are obliged to share your personal data with them (e.g., tax authorities, police, or judicial authorities);
• Service providers in the context of advertising;
• Service providers in the context of social media;
• Service providers in the context of our website and web-shop;
• Service providers in the context of communications; and
• Professional advisors of Doosan Bobcat.

4.2    In addition to the foregoing, Doosan Bobcat may share your personal data with other entities within the Doosan group of companies. In that context, we will ensure that all Doosan group entities will take due care that all processing of your personal data is in line with what is set out in this Privacy Policy.

4.3.    We may send and process your personal data outside the European Economic Area (EEA), consisting out of the European Union, Liechtenstein, Norway, and Iceland. If we transfer your personal data outside the EEA, this will be done upon taking adequate safeguards to protect your personal data. These safeguards may take the form of an adequacy decision or the European Commission Standard Contractual Clauses, where necessary supplemented with the required risk assessments. 

 

5.    Security

5.1.    Doosan takes the appropriate technical and organizational measures to keep your personal data safe from unauthorised access or theft as well as accidental loss, tampering or destruction. Access by personnel of Doosan or our third-party processors will only be on a need-to-know basis and subject to strict confidentiality obligations. We have also taken other measures, such as taking internal policy measures, limiting the processing to the personal data necessary for the fulfilment of the purposes, minimizing the processing of personal data, taking backups of personal data and periodically evaluating our security measures.

 

6.    Data retention

6.1.    Your personal data will only be processed for as long as necessary to achieve the purposes described above or, when we have asked you for your consent, until you withdraw your consent (for which we will periodically remind you). As a general rule, we will de-identify your personal data when it is no longer needed for the purposes described above or when the retention period, as explained here, has expired. Please note that we cannot delete your personal data if there is a legal or regulatory obligation or a court or administrative order preventing us from doing so. 

6.2.    All personal data we collect through our social media is retained as long as necessary to protect our legitimate interests. Messages that you send to us via social media, your identity, contact details and technical details related thereto, will be retained as long as necessary to handle and follow up your question, request, comment, or other input. We will not retain this data longer than five (5) years after your message, after which it will be deleted or de-identified. 

If information about our products or services, our company or our industry based on publicly available social media interactions contains personal data, we will retain it for as long as necessary to protect our legitimate interest. We will not retain this data longer than five (5) years after the collection of this information. 

6.3.    Information related to purchases you made or orders you placed with us will remain stored at least for the performance of the agreement we conclude. We will thereafter retain a copy of the relevant information to be able to provide warranty and support services, as well as to comply with our legal retention obligations under applicable fiscal laws and regulations.

6.4.    We will retain all personal data collected in connection with our events for as long as necessary to protect our legitimate interests. Identity and contact details in the context of your registration for or participation in an event, will be retained until your personal data are no longer necessary in this context. 

Your feedback about a particular event and your identity and contact information to the extent you have provided it to us, we will retain as long as necessary to process your feedback for future events. We will not retain this data longer than two (2) years after the event in question. 

6.5.    We will retain all personal data we collect from you as part of your application for the duration of the application process. If we do not choose to employ you, we may ask for you consent to retain your personal data for up to two (2) additional years after the review process has ended. In that case, you will be added to our recruitment reserve.

6.6. All personal data we collect through our interactions with you through social media, telephone, email, or other digital communication channels will be retained for as long as necessary to communicate with you, but also to maintain a historical record of our communications. This allows us to return to previous communications when you come back to us with new questions, requests, comments, or other input.  

 

7.    Your rights

7.1.    You have the right to request access to all personal data processed by us insofar it pertains to you. You can exercise this right by contacting us as set out below. We reserve the right to refuse multiple requests for access that are clearly submitted for causing nuisance or harm to us or others. 

7.2.    You have the right to ask that any personal data pertaining to you which are inaccurate, are corrected free of charge. If a request for correction is submitted, such request must be accompanied by proof of the flawed nature of the data for which correction is asked.  

7.3.    You have the right to request that personal data pertaining to you will be deleted if they are no longer required in light of the purposes outlined above. However, you need to keep in mind that a request for deletion will be evaluated by us against:  

• our own or a third party’s overriding interests; or 
• legal or regulatory obligations or administrative or judicial orders which may contradict such deletion.  

7.4.    Instead of deletion you can also ask that we limit the processing of your personal data if and when (a) you contest the accuracy of that data, (b) the processing is illegitimate or (c) the data are no longer needed for the purposes which are outlined above, but you need them to defend yourself in judicial proceedings.  

7.5.    You have the right to withdraw your consent that was earlier given for the processing of your personal data at any time. 

7.6.    You have the right to object to the processing of personal data, unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms or for the establishment, exercise, or defence of legal claims. 

7.7.    Where the purposes identified above rely on your consent or a (pre-)contractual obligation, you have the right to receive from us, in a structured, commonly used, and machine-readable format, any personal data you have provided to us. 

7.8.    Each request addressed to us can be send via e-mail to emeacompliance@doosan.com. 

7.9.    An e-mail requesting to exercise a right will not be construed as consent for the processing of your personal data beyond what is required for handling your request. Such request should clearly state and specify which right you wish to exercise and the reasons for it if such is required. It should also be dated and signed, and, where we ask this of you, be accompanied by a digitally scanned copy of the front of your valid identity card proving your identity.

7.10.    We will promptly inform you of having received this request. If the request proves valid, we will notify you as soon as reasonably possible and at the latest thirty (30) days after having received the request. 

7.11.    If you have a complaint about the processing of your personal data by us, you can always contact us at the e-mail address mentioned above. If you are not satisfied with our response, you may lodge a complaint with the competent data protection authority, being the data protection authority of the country of your habitual place of residence, place of work or the place of an alleged infringement.