General Terms and Conditions of Use, Privacy and Cookie Policy

Aptar cares about the protection of personal data and we process Personal Data provisions that apply to Aptar’s business (in particular in accordance with the GDPR for EU data subjects).

Type of Data processed and stored

Please note that the following personal data will be stored and processed by Aptar for the purpose of performance of contracts, mandatory legal obligations and other legitimate business interests (lawful purposes under Art. 6 GDPR):

• Name
• Account details and related contact information
• Postal address
• Telephone or fax number
• Email address and other identifying addresses for electronic communications
• Date of birth
• Only when appropriate, details from passports and other government or state issued forms of personal identification
• Only when appropriate, photographic or video images
• In the course of our business, we may also receive from you, or third parties, information including employment related information and CVs;

We have received these data either from you, your company or from public sources such as company register, your website, telephone book, etc.

Use of personal data

We, and certain of our designated service providers, may use personal data for our legitimate business interests, including the following:

• to validate authorized signatories when concluding agreements and transactions;
• to contact nominated individuals in connection with existing transactions and contractual agreements;

• to respond to inquiries and fulfill requests from our clients and/or relevant third parties who require information as a necessary part of the provision of the services, and to administer account(s) and manage our relationships;

• to inform our clients about products or services which we believe may be of interest, including tailored ads, marketing proposals or offers;
• to verify an individual’s identity and/or location (or the identity or location of our client’s

representative or agent) in order to allow access to client accounts, or conduct online transactions;

• to protect the security of personal data;
• for information and relationship management purposes, and business purposes, including data analysis, audits, developing and improving products and services, identifying usage trends and determining the effectiveness of promotional campaigns, and enhancing, improving or modifying our services;
• for risk management, compliance with our legal and regulatory obligations and for fraud detection, prevention and investigation, including “know your customer”, anti-money laundering, conflict and other necessary on-boarding and ongoing customer checks, due diligence and verification requirements, credit checks, credit risk analysis, compliance with sanctions procedures or rules, and tax reporting;
• to comply with laws and regulations (including any legal or regulatory guidance, codes or opinions), and to comply with other legal process and law enforcement requirements including any internal policy based on or reflecting legal or regulatory guidance, codes or opinions);
• to send administrative information to clients, such as changes to our terms, conditions and policies in the course of our business relationship.

All employees of Aptar or its affiliates who take care of our customers and/or suppliers (directly or indirectly) have access to these data (and other Aptar support services, when required).

Furthermore, your name and your address (and the telephone number) may be provided to the transport company/shipping company commissioned with the delivery of the goods and other agreed sub-contractors and services required to deliver our goods and services.

Where do we store personal data of EU citizens?

We primarily process personal data on servers located within the EU/EEA.

However, we may need to transfer your personal data from a location within the EU/EEA to a third country. With regard to transfers of personal data to countries where the local data protection legislation does not provide an adequate level of data protection, we will implement appropriate safeguards under the GDPR to ensure that your personal data remains protected and secure. Such international transfers of personal data will be based on the standard contractual clauses approved by the European Commission.

We store the personal data necessary for the fulfillment of the contract for the duration of the entire business relationship as well as in accordance with the legal obligations for storage and documentation.

Rights for EU citizens

You have the rights of access (Art 15 GDPR), rectification (Art 16 GDPR), deletion (“right to be forgotten” – Art 17 GDPR), when appropriate restriction of processing (Art 18 GDPR) or data portability (Art 20 GDPR), revocation of your consent (Art 7 (2) GDPR) and objection (Art 21 GDPR). If you believe that the processing of your data violates data protection law or your data protection rights have otherwise been violated in any way, you can complain to the supervisory authority (right of appeal to a supervisory authority – Art 77 GDPR).

All data protection authorities of the EU member states are listed under the following link:

http://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm

We would like to point out that in the event that personal data is not provided or in the event of your revocation, the fulfillment of (contractual) obligations by Aptar will be made more difficult or even impossible.

You can reach us by sending an email to: informationgovernance@aptar.com