Privacy Policy

The protection of your privacy and your Personal Data is an important matter we pay attention to in all our business relations. We respect the confidentiality of your Personal Data and always act in accordance with the provisions of applicable data protection law and this Privacy Policy.

This Privacy Policy is intended to inform you about how Wienerberger Limited, a company registered in England and Wales with company number 05299520, of Wienerberger House, Brooks Drive, Cheadle Royal Business Park, Cheadle, Cheshire, SK8 3SA, (referred to as “we”, “us”, “our”, and “Company”) uses Personal Data and what information about the users of our websites (including www.wienerberger.co.uk, www.keymer.co.uk, and those with the subdomain .wienerberger.co.uk), applications, mobile platforms, trade merchant rewards programmes or other services (“Services”) is collected, used, stored and shared.

“Personal Data” is defined as any information that relates to an identified or identifiable individual.

We want you to feel confident about the privacy and security of your Personal Data, understand how it used in connection with our Services, and also to outline your rights.

The Company is registered as a data controller under the UK’s Data Protection Act 2018 with the Information Commissioners Office (“ICO”), registration number ZA180054. The Company is the data controller in relation to the processing activities described below. This means that we decide why and how your Personal Data is processed.

When you use this website, our products or Services, the categories of information that we may collect about you are as follows:

2.1. Personal Data you give to us:

This is information about you that you give to us by entering information via:

• our sites (https://wienerberger.co.uk/, https://knowledgebuilder.wienerberger.co.uk/, https://specialbricks.wienerberger.co.uk/, https://roofspec.wienerberger.co.uk/Default.aspx, http://www.keymer.co.uk, http://all4roof.co.uk/, https://www.wienerbergerbenefits.co.uk/, https://portal.wienerberger.co.uk/ and https://www.vip.wienerberger.co.uk);
• our mobile applications and tools;
• social media platforms;
• our events and exhibitions;
• corresponding with us by phone, email or otherwise,

and is provided entirely voluntarily. This includes information provided at the time of using our site, subscribing to the Services we provide through our site, posting material or requesting further services, managing your account or profile online (including accessing documentation and engaging in correspondence with us by phone, email or otherwise). We may also ask you for information when you report a problem with our site.

If you complete any surveys that we request you complete for research or marketing purposes, we will collect information in such circumstances as well.

The information you give us includes your title, name, address, occupation/job title, email address and phone number, your marketing preferences, information contained in correspondence with you about our Services or business, details of your order/enquiry details, and may include record of any correspondence and responses to surveys.

2.2. Personal Data we collect about you:

We may automatically collect the following information: details of transactions you carry out through the site, and your visits to our site, including, but not limited to, traffic data, location data, weblogs and other communication data, and the resources you access. We may also automatically collect technical information, including anonymous data collected by the hosting server for statistical purposes, the Internet protocol (IP) address used to connect your computer or device to the Internet, browser type and version, time zone setting, browser plugin types and versions, operating system and platform. Please see our Cookies Policy at https://wienerberger.co.uk/cookies for further information.

2.3. Personal Data we may receive from other sources:

We obtain certain Personal Data about you from sources outside of our business which may include our group companies or other third party companies, including our media partners, event and exhibition organisers, magazine publishers, brokers, and online directories.

We may also collect Personal Data where lawful to do so from (and combine it with information from) public sources, third party service providers, government, tax or law enforcement agencies and other third parties.

The Personal Data received is as described in items 2.1 and 2.2 above. The third parties that may send us Personal Data about you are as follows:

2.4. Legal grounds for collection

The purposes for which we use your Personal Data and the legal basis under data protection laws on which we rely to do this are explained below.

• Performance of the contract with you or to take steps to enter into it. We may use and process your Personal Data where we have supplied you (or continue to supply you) with any Services or orders, or where you are in discussions with us about any new Services or orders. We will use this information in connection with the contract for the supply of Services or orders when it is needed to carry out that contract with you or for you to enter into it, and to manage your account with us. The Services in this context include our rewards programmes.

Legitimate interests or that of a third party for the following purposes:

• Responding to and managing your queries and complaints;
• Providing marketing content (other than where we rely on your consent to do this);
• Providing the Services (including our Accredited Installer Club reward programme) and/or information to you or our business customer whom you represent;
• Transmitting Personal Data for internal administrative purposes;
• Hosting and maintaining our sites;
• Providing technical support to you;
• Preventing and detecting fraud and other criminal offences;
• To assess and improve our service through recordings of any calls with our contact centres;
• Ensuring network and information security in order for us to take steps to protect your information against loss or damage, theft or unauthorised access;
• To comply with a request from you in connection with the exercise of your rights (for example where you have asked us not to contact you for marketing purposes, we will keep a record of this on our suppression lists in order to be able to comply with your request);
• For assessing the quality of our Service and to provide staff training within the business;
• For the management of queries, complaints, or claims; and
• For the establishment and defence of our legal rights.

• Compliance with a legal obligation. We will use your Personal Data to comply with our legal obligations: (i) to assist any public authority or criminal investigation body; (ii) to identify you when you contact us; and/or (iii) to verify the accuracy of data we hold about you.

• Consent. We will ask for your consent to send you direct marketing communications. Please see item 7 below for more information.

2.5. Cookies

Like many other websites, our website uses cookies. 'Cookies' are small pieces of information sent to your computer or device and stored on its hard drive to allow our websites to recognise you when you visit. It is possible to switch off cookies by setting your browser preferences. To obtain further information relating to the cookies operating on our website, please visit our Cookies Policy at https://wienerberger.co.uk/cookies.

2.6. Data anonymisation and use of aggregated information

Your Personal Data may be converted into statistical or aggregated data in such a way as to ensure that you are not identified or identifiable from it. Aggregated data cannot be linked back to you as a natural person. We may use this data for analytical and research purposes. For more information on how we use cookies and how to switch them off, please visit our Cookies Policy at https://wienerberger.co.uk/cookies.

2.7 Social media

• Pinterest: On our site we link to our presence on Pinterest, which allows us to better present our company to our customers and to communicate with them as well as increase our visibility and further our image building as a legitimate interest in the sense of Article 6 paragraph 1 point (f) GDPR. Pinterest is operated in the United States by Pinterest Inc. at 651 Brannan Street, San Francisco, CA 94103, USA and in Europe by Pinterest Europe Ltd. at Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland. When you are using one of our online services equipped with a Pinterest plugin, a connection to the Pinterest servers is established and information as well as data about the online services you are using is communicated to the Pinterest server. We wish to point out that we, as the provider of the online services, do not obtain any knowledge of the content of the data transmitted and their usage by Pinterest. Pinterest provides business account operators with the “Pinterest Web Analytics” function, which lets us have anonymized statistical data about the users and visitors of our account, our walls and pins. These so-called “Pinterest Web Analytics” are summarized statistics that are created based on certain actions (so-called “events”) and logged by Pinterest when users and visitors interact with our account, walls or pins and its associated content. For further information, please refer to Pinterest’s privacy policy at https://policy.pinterest.com/en/privacy-policy. You can change the privacy settings of your Pinterest account at https://www.pinterest.co.uk/. 
  
  
• YouTube: We have implemented components from YouTube on this website for further marketing purposes such as a better reach of the specific target group, increased visibility, image building, user information and employer branding as a legitimate interest in the sense of Article 6 paragraph 1 point (f) GDPR. YouTube is operated by Google, i.e. by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube is an Internet video portal that allows video publishers to post video clips for free and other users to view, rate and comment on them, also free of charge. YouTube allows the publication of all types of videos, which is why complete movies and TV shows, but also music videos, trailers or videos created by users themselves can be accessed via the Internet portal. When you are using one of our online services equipped with a YouTube feature, a connection to the YouTube servers is established and information about the online services you are using is communicated to the YouTube server. If the person visited is also logged in to YouTube, YouTube recognizes which specific page of our website the person visited by calling up a page containing a YouTube video. This information is collected by YouTube and Google and linked to the respective YouTube account of the person concerned. YouTube and Google receive information via the YouTube component that the data subject has visited our website whenever the data subject is logged on to YouTube at the same time when he or she visits our website, regardless of whether or not the data subject clicks on a YouTube video. If the data subject does not wish this information to be transmitted to YouTube and Google, he or she can prevent the transmission by logging out of his or her YouTube account before visiting our website. For further information about YouTube’s usage of user data, please refer to YouTube’s privacy policy at https://www.google.com/intl/en/policies/privacy/.
  
  
• Twitter: On our site we link to our presence on the social media network Twitter. Our Twitter appearance allows us to present our company to the users of this network and to communicate with them as well as increase our visibility and further our image building as a legitimate interest in the sense of Article 6 paragraph 1 point (f) GDPR. The Twitter service is provided by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. As soon as you use such a plug-in, your browser makes direct contact with Twitter and your information is sent directly to a Twitter server. Posting a comment or clicking the “Twitter” button will also send this information to a Twitter server in the USA, where it will be stored. When you are using Twitter and the “re-tweet” function, the online services used by you are linked with your Twitter account and communicated to other users. Your Twitter interactions will also be posted directly on Twitter and may therefore be visible to your Twitter contacts. We wish to point out that we, as the provider of the online services, are not made aware of the content of the data transmitted and their usage by Twitter. For further information, please refer to Twitter’s privacy policy at http://twitter.com/privacy. You can change the privacy settings of your Twitter account at: http://twitter.com/account/settings.
  
  
• LinkedIn: On our site we link to our presence on LinkedIn. Our LinkedIn appearance allows us to present our company to the users of this network and to communicate with them. The data provided directly by you and by LinkedIn will be used exclusively for the purpose of customer and prospective customer communication, increase of our visibility and image building as a legitimate interest in the sense of Article 6 paragraph 1 point (f) GDPR, in order to be able to offer you information most interesting to you. LinkedIn is operated by LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Irland. If you are logged in to your LinkedIn account and visit our Company Page, this may be associated with your profile. We have no influence on the data collection and further processing by LinkedIn, to what extent this happens and how long this data is stored. Please note that we have no control over LinkedIn's terms of use, privacy and cookie policies. If you are not registered with LinkedIn, we may still receive statistical analysis of your personal data when you access our Company Page. We do not have access to the data stored in the cookies in personal form and therefore cannot pass them on to third parties in personal form. For information on the legal basis of the data processing, any recipients and any transfer of your data to a third country by LinkedIn, please refer to LinkedIn’s Privacy Policy at https://www.linkedin.com/legal/privacy-policy and the LinkedIn cookie guidelines at https://de.LinkedIn.com/legal/cookie-policy.
  
  
• Facebook Plugins ("Share Button"): You can recognize Plugins from Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA by the Facebook logo or the "share button". Click here for an overview of Facebook plugins: http://developers.facebook.com/docs/plugins/. When you use our online services, the plug-in establishes a direct connection between your browser and the Facebook server. For example, Facebook is informed that you have used our online services with your IP address. When you click on the Facebook "Share button" while you are logged in to your Facebook account, you can link the content of our online services to your Facebook profile. Facebook can then link the use of our online services to your user account. We would like to point out that we, as the provider of the online services, do not take cognizance of the content of the transmitted data and their use by Facebook. For more information, please refer to Facebook's privacy policy at https://www.facebook.com/policy.php. If you do not want Facebook to associate the use of our online services with your Facebook user account, please log out of your Facebook user account.

As a matter of principle, all Personal Data is processed and used by us exclusively for the purposes specified in this Privacy Policy. We will also not keep your Personal Data for longer than is necessary for the purposes for which we collect it unless we believe that the law or other regulation requires us to preserve it. The purposes and retention periods for the Personal Data are set out below.

Provision, improvement and support of our Services: This includes data analyses, the identification of usage trends, as well as calculations and statistics on user access patterns.

Marketing: Where you have provided Personal Data by signing up to receive marketing information, it will only be used for marketing purposes, such as surveys, promotions, events, incentives or other advertising campaigns, in accordance with your marketing preferences. In this case, we will store your Personal Data for as long as you are subscribed to our email marketing list. Your consent to use your Personal Data for marketing purposes can be withdrawn at any time. If you withdraw your consent, we will keep your email address on our suppression list to ensure that we do not send you marketing emails.

Mailing of communications: If you register for our email communications, we exclusively use the Personal Data provided by you to verify that you are the owner of the email address indicated and wish to receive the content, to compile a mailing list, and to analyse the usage of our communications. In this case, your Personal Data will be stored for the duration of 2 years after the last interaction.

Ordering of documents, reports or other materials: If you order reports or other materials from us, the personal information provided by you is used for processing your order and will subsequently be stored for a maximum period of 2 year after the last consignment.

Use of contact forms: If you use a contact form for enquiries or complaints, the Personal Data provided by you in the contact form is used to process the enquiry and stored for as long as it reasonably required to resolve your enquiry or complaints. Your Personal Data will be stored for the duration of processing the enquiry and a maximum period of 2 years after completion of processing.

Job exchange: Job applications contain Personal Data (e.g. curriculum vitae, contact data, etc.). We may use such Personal Data within the Wienerberger Group (see item 4) to decide on whether to offer the applicant a position or to reply to the letter of application. Only if you explicitly agree, we will keep the data on record for a maximum period of 2 years after the last contact (unless longer storage is legally permissible for other reasons) for possible consideration at a later point in time.

Cleansing and consolidation of data: From time to time, the Personal Data provided by you can be cross-checked against or consolidated with (i) data from our existing registers (online and offline), (ii) data taken over from a legal predecessor, or (iii) data from other sources.

The exceptions to the above are where:

• we need your Personal Data to establish, bring or defend legal claims or to comply with a legal or regulatory requirement;
• the law requires us to hold your Personal Data for a longer period, or delete it sooner;
• you exercise your right to have the information erased (where it applies) and we do not need to hold it in connection with any of the reasons permitted or required under the law or you exercise your right to require us to retain your Personal Data for a period longer than our stated retention period (see “Your Rights” at item 7 below); or
• in limited cases, the law permits us to keep your Personal Data indefinitely provided we put certain protections in place.

When it is no longer necessary to retain your data, we will delete the Personal Data that we hold about you from our systems. After that time, we may aggregate the data (from which you cannot be identified) and retain it for analytical purposes. If we collect your Personal Data, the length of time we retain it is determined by a number of factors including the purpose for which we use that information and our obligations under other laws. We do not retain Personal Data in an identifiable format for longer than is necessary.

Depending on the type of interaction you requested (e.g. call to be returned, placement of an order, request for services, information, etc.), your Personal Data may be exchanged with third parties involved in order execution (e.g. mail order companies, banks, hauliers, stockists, contractors, etc.) or other companies of the Wienerberger Group. We may also be required to disclose Personal Data in order to meet legal requirements or to enforce rights and agreements.

Third parties: For the execution of certain orders and for the provision of certain services, we may disclose your Personal Data to our external third party service providers, agents, subcontractors and other organisations (e.g. forwarding agents). Such third parties may include cloud service providers (such as hosting and email management), events and marketing management, software providers, courier services, advertising agencies, rewards programmes administrators and administrative services. Our third party service providers are allowed to use or transmit the data collected and processed by us for no other purpose but execution of the order placed by the Company. When we use third party service providers, we only disclose to them any Personal Data that is necessary for them to provide their service and we have a contract in place that requires them to keep your information secure and not to use it other than in accordance with our specific instructions.

Group Companies: The Company is part of the Wienerberger Group, an international group of companies with cross-border internal operational processes, structures and technical systems. We may share your Personal Data within the Wienerberger Group and, if need arises, transmit them to our sites in other countries for the purposes indicated under Item 3 and in accordance with this Privacy Policy, including transferring queries and complaints, and internal reporting. Our Group-wide data protection guidelines and procedures are designed in such a way as to ensure an equally high level of data protection in all countries we operate in.

For a complete list of the companies of our Group, please visit https://www.wienerberger.com/contact or https://www.wienerberger.com/thecompany/company-sites.

Compliance with laws and similar obligations: We will transfer your Personal Data if we are under a duty to disclose it in order to (i) enforce or comply with a law, a regulation, an order issued by a public authority or compulsory measures, (ii) detect and prevent security threats, fraud or other malicious activities, (iii) protect and/or enforce the rights and the property of the Company or of third parties, and (iv) protect the rights and the personal security of our employees and of third persons.

Business restructuring or reorganisation: We may transfer your Personal Data to a third party as part of a sale of some or all of our business and assets to any third party or as part of any business restructuring or reorganisation.

All Personal Data you provide to us is stored on our secure servers which are located within the UK or members of the EEA.

If at any time we transfer your Personal Data to, or store it in, countries located outside of the EEA (for example, if our hosting services provider changes) we will ensure that appropriate safeguards are in place for that transfer and storage as required by applicable law. This is because some countries outside of the EEA do not have adequate data protection laws equivalent to those in the EEA.

If you use our Services whilst you are outside the EEA, your Personal Data may be transferred outside the EEA in order to provide you with those Services.

the following ways:

• when you sign up online or through the mobile app and indicate that you would like to receive such marketing from us;
• if you place an order and/or engage our Services and indicate (by opting in) you would like to receive marketing information;
• when you meet us at an event or exhibition and indicate (by opting in) you would like to receive marketing information; or
• when you update your marketing preferences via email, SMS, telephone or post, or when responding to a request from us to do so.

You have the right to opt-out of our use of your personal information to provide marketing to you in any of the ways mentioned above. Please see “Your Rights” at item 7 below for further details on how you can do this.

You have a number of rights in relation to your Personal Data under data protection law. In relation to certain rights, we may ask you for information to confirm your identity and, where applicable, to help us to search for your Personal Data. Except in rare cases, we will respond to you within one month from either (i) the date that we have confirmed your identity or (ii) where we do not need to do this because we already have this information, from the date we received your request.

• Accessing your Personal Data. You have the right to ask for a copy of the Personal Data that we hold about you by emailing or writing to us at the address at the end of this Privacy Policy. We may not provide you with a copy of your Personal Data if this concerns other individuals or we have another lawful reason to withhold that information.
• Correcting and updating your Personal Data. If you change your name or address/email address, or you discover that any of the other information we hold is inaccurate or out of date, please let us know by contacting us by email, SMS, telephone or post using the details described at the end of this Privacy Policy, or by using our online contact form on our website.
• Withdrawing your consent. Where we rely on your consent as the legal basis for processing your Personal Data, you may withdraw your consent at any time by contacting us using the details at the end of this Privacy Policy. If you would like to withdraw your consent to receiving any direct marketing to which you previously opted in, you can opt out via the “Unsubscribe” link in the email or by using the unsubscribe form (https://wienerberger.co.uk/unsubscribe) on our website. If you withdraw your consent, our use of your Personal Data before you withdraw is still lawful.
• Objecting to our use of your Personal Data and automated decisions made about you. Where we rely on your legitimate business interests as the legal basis for processing your Personal Data for any purpose(s), you may object to us using your Personal Data for these purposes by emailing or writing to us at the address at the end of this Privacy Policy. Except for the purposes for which we are sure we can continue to process your Personal Data, we will temporarily stop processing your Personal Data in line with your objection until we have investigated the matter. If we agree that your objection is justified in accordance with your rights under data protection laws, we will permanently stop using your Personal Data for those purposes. Otherwise we will provide you with our justification as to why we need to continue using your Personal Data. You may also contest a decision made about you based on automated processing by contacting us at the details below.
• Erasing your Personal Data or restricting its processing. In certain circumstances, you may ask for your Personal Data to be removed from our systems by emailing or writing to us at the address at the end of this Privacy Policy. Unless there is a reason that the law allows us to use your Personal Data for longer, we will make reasonable efforts to comply with your request. You may also ask us to restrict processing your
• Personal Data where you believe it is unlawful for us to do so, you have objected to its use and our investigation is pending or you require us to keep it in connection with legal proceedings. In these situations, we may only process your Personal Data whilst its processing is restricted if we have your consent or are legally permitted to do so, for example for storage purposes, to protect the rights of another individual or company or in connection with legal proceedings.
• Transferring your Personal Data in a structured data file (“data portability”). Where we rely on your consent as the legal basis for processing your Personal Data or need to process it in connection with your contract, you may ask us to provide you with a copy of that information in a structured data file. We will provide this to you electronically in a structured, commonly used and machine readable form, such as a CSV file. You can ask us to send your Personal Data directly to another service provider, and we will do so if this is technically possible. We may not provide you with a copy of your Personal Data if this concerns other individuals or we have another lawful reason to withhold that information.
• Complaining to the UK data protection regulator. You have the right to complain to the Information Commissioner’s Office (ICO) if you are concerned about the way we have processed your Personal Data. Please visit the ICO’s website https://ico.org.uk/ for further details.

The Company employs a large variety of data security measures to ensure the confidentiality and integrity of your Personal Data. Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your Personal Data, we cannot guarantee the security of your information transmitted to our website and any transmission is at your own risk. Once we have received your Personal Data, we put in place reasonable and appropriate controls to ensure that it remains secure against accidental or unlawful destruction, loss, alteration, or unauthorised access.

Where we have given (or where you have chosen) a password which enables you to access an account, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

Our website may contain links to other websites run by other organisations. This Privacy Policy does not apply to those other websites‚ so we encourage you to read their privacy statements. We cannot be responsible for the privacy policies and practices of other websites even if you access them using links that we provide. In addition, if you linked to our website from a third party website, we cannot be responsible for the privacy policies and practices of the owners and operators of that third party website and recommend that you check the policy of that third party website.

Further details on technical and organisational security measures are available on request, enquiries should be directed to the contact information indicated under item 9.

For any questions relating to this Privacy Policy or about the way we process your Personal Data, please contact:

Information Security
Wienerberger Limited
Wienerberger House
Brooks Drive
Cheadle Royal Business Park
Cheadle
Cheshire
SK8 3SA
United Kingdom

If you would prefer to speak to us by phone, please call: 0161 516 0978

Our email address for data protection queries is: privacy.uk@wienerberger.com

We keep this Privacy Policy under regular review. Any changes to this Privacy Policy from time to time will be notified to you by updating our website and/or by contacting you by email. The date at the foot of this Policy will be updated accordingly.

Any changes will take effect 7 days after the date of our email or the date on which we post the updated terms on our website, whichever is the earlier. We encourage you to check and review this Privacy Policy whenever you visit our website for any updates or changes. If you do not agree with any aspect of the updated Privacy Policy you must immediately notify us and cease using our Services.

(Last updated 05/03/2024)