Source: https://www.nexperia.com/about/terms-and-policies/privacy/
Timestamp: 2019-04-25 12:30:42+00:00

Document:
Nexperia would like to inform you about the management of your personal data in accordance with Art. 13 General Data Protection Regulation (GDPR).
There are multiple situations, in which we process your personal data. In the following, we would like to describe how we collect, process and secure your personal data.
Personal data is any information about yourself that can be linked to you or can be used to identify you.
2.2.1 Right of access (Art. 15 GDPR): You have the right to obtain confirmation as to whether or not personal data concerning you is being processed, and, where that is the case access to the personal data and the information specified in Art. 15 GDPR.
2.2.2 Right to rectification and erasure (Art. 16 and 17 GDPR): You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you and, if necessary, the right to have incomplete personal data completed. You also have the right to obtain an erasure of the personal data concerning you without undue delay, if one of the reasons listed in Art. 17 GDPR applies, e.g. if the data is no longer necessary for the intended purpose.
2.2.3. Right to restriction of processing (Art. 18 GDPR): If one of the conditions set forth in Art. 18 GDPR applies, you shall have the right to restrict the processing of your data to mere storage, e.g. if you revoke consent, to the processing, for the duration of a possible examination.
2.2.4. Right to data portability (Art. 20 GDPR): In certain situations, listed in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, common and machine-readable format or demand a transmission of the data to another third party.
2.2.5. Right to object (Art. 21 GDPR): If the data is processed pursuant to Art. 6 para. 1 lit. f GDPR (data processing for the purposes of the legitimate interests), you have the right to object to the processing at any time for reasons arising out of your particular situation. We will then no longer process your personal data, unless there are demonstrably compelling legitimate grounds for processing, which override the interests, rights and freedoms of the person concerned, or the processing serves the purpose of asserting, exercising or defending legal claims.
2.2.6. Right to lodge a complaint with a supervisory authority: Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you consider the processing of the data concerning you infringes data protection regulations. The right to lodge a complaint may be invoked in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement.
In some cases, we may transfer personal data to third countries outside of the EU. In each case, we ensure an appropriate level of data protection according to European standards.
Internally, we have concluded an intragroup agreement on data protection and data transfers using Standard Contractual Clauses.
If data is transferred outside the Nexperia Group and the EU / EEA, we have ensured that the recipients offer an adequate level of data protection, by either relying on Privacy Shield, Standard Contractual Clauses or other means recognized by the GDPR to establish an adequate level of personal data protection. We regularly audit our processors.
Nexperia maintains reasonable and appropriate physical, electronic and procedural safeguards, in accordance with Art. 32 GDPR, to protect Personal Data from being manipulated, lost, destroyed or accessed by unauthorized persons. Where data is passed on to external service providers, Nexperia has taken technical and organizational measures to ensure that the data protection regulations are observed.
If you and / or your employer conduct business with Nexperia, in various situations, it may be necessary to process your personal data.
Controller of your data is the Nexperia entity that you are doing business with. The relevant entity is indicated in every E-Mail Footer, business letter and other official communication that you have received from us.
We process personal according to Sec. 6 para. 1 lit. b GDPR for the purpose to perform a contract, including to register your purchase so you can receive all the benefits to which your purchase entitles you. This comprises your business contact data (name, business phone, business e-mail, business fax).
3.2.1 Contractual obligations: The personal data which is necessary for the performance of a contract or a quotation will be deleted within 6 months after termination/performance of the contract; during that time, it will only be kept in order to be able to respond to queries. The data will not be deleted as long as there are any outstanding invoices which are to be collected. Should there be any legal retention requirements, the affected data will be archived for the statutory period. We process data only in order to exercise our rights and to perform our obligations of any specific contract with us. Scope and content are subject to the contract’s provisions.
3.2.2 Legitimate Interests: There may be situations when it is necessary to contact you in matters that are not directly connected to the performance of a contract. This may include general remarks, inquiries, requests, etc. In these situations, we may process your data in our legitimate interests. The legitimate interest arises from the interest to conduct, maintain or initiate the business relationship with customers, interested parties, suppliers and other business partners and to maintain personal contact with contact persons.
3.2.3. Your Rights: The Rights described in Section 2 apply.
4.1 Controller: Controller of your data is the Nexperia entity that you are doing business with. The relevant entity is indicated in every E-Mail Footer, business letter and other official communication that you have received from us.
4.2 Personal Data and Purpose: We process your data for purposes of direct marketing, inter alia for sending marketing mailings and or newsletters, specific to your interests. The data processing is based on Art. 6 para. 1 lit. f GDPR and on our interest to inform you about new products and services and share further relevant news with you that are related to our business relationship. Every data subject has a separate right to object to this type of data processing; if you exercise this right, we will stop processing your data for purposes of direct marketing. If your data is solely stored for direct marketing purposes, it will be deleted after you have objected.
Should we not have had previous business contact, we shall only contact you, if you have given us unambiguous free and informed consent.
This website or mobile application (hereinafter "Site") is owned and operated by Nexperia.
4.3. Your Rights: The Rights described in Section 2 apply.
Additionally, if you visit our career portal, we shall also ask you for further personal data as part of the intake for your application. We will only ask you for data, pursuant to Art. 6 para. 1 lit. b GDPR, that is indispensable in the course of your application.
Please note that not providing this personal data may result in us not being able to process your application.
Your personal data is being collected and processed for the handling of your application in consideration for employment at Nexperia. In other words, we process your data at your request for the purpose of taking steps towards the conclusion of a contract.
Once the application process has been completed the data necessary to complete your employment application will, for non-recruited candidates, be erased within 3 months and, for recruited candidates, be stored in your personnel file.
Only the HR team that will consider your application may access your application data. We shall especially not grant access to any of your personal data to any party outside the Nexperia organization. Since Nexperia is organized in matrix organization with functional hierarchies, across company boundaries, this may mean that your application data may be accessed by persons outside the legal entity that you have applied with.
The data itself, however, is stored within the territory of the European Union with Nexperia B.V., Netherlands. They process the data on our behalf yet have to access rights to that data. We secure our internet data transmissions with TLS encryption.
Owing to functional hierarchies and our service providers it may become necessary to grant access to persons outside the European Union. To ensure the protection of your personal data we have entered into contracts regarding the data exchange that contain EU-standard clauses, pursuant to Art. 46 para 2 lit. c GDPR. These contracts help to establish a level of data protection that is equal to the EU’s level.
We will not process your personal data for any other purpose that your application unless we are explicitly required to do so by law.
The Rights described in Section 2 apply.
Controller of your data is the Nexperia B.V. regarding your activities on our homepages.
Some data is provided by Users directly. Some of it is obtained by observing how Users interact with this Site and Nexperia's products and services. Nexperia collects data in a variety of ways, including from web forms, technologies like cookies, web logging and software on Users' computers or other devices. Regardless of the source, Nexperia believes that it is important to treat your data with care and to help maintain the privacy of Companies and Users.
This information is analyzed in anonymized form. It is used solely for the purpose of improving the attractiveness, content and functionality of this Site. The legal basis for the processing of this personal data is provided for in Art. 6 para. 1 lit. f GDPR.
Registration - When a User registers to use this Site, he or she will be required to provide certain personal information (e.g., the Company's name and the User's full name, email address, mailing address, telephone number and mobile phone number). We process this data according to Art. 6 para. 1 lit. b GDPR. Data transferred to us in the contest of the registration will be used by Nexperia to process and fulfil orders, to notify Users of the status of their orders and to provide Users with other services. You may change or delete your profile within your account at any time. Data will then be deleted from our system automatically after a maximum of 6 months, if there are no retention requirements or the data is not required on an individual case basis (e.g. in the case of open claims).
permit third parties to perform technical, logistical and other services.
All information collected by Nexperia on or through this Site is the property of Nexperia; Nexperia will not sell any personal information pertaining to any Company or User ("Personal Data") for commercial purposes.
To protect life and safety.
Most web browsers will automatically accept cookies but can be modified to block cookies. Please be aware that if cookies are blocked, a User may not be able to sign in or use other interactive features of this Site or services that depend on cookies. In addition, if cookies are deleted after leaving this Site, any settings and preferences controlled by those cookies will be deleted and may need to be recreated.
In the case of Google Analytics an appropriate level of data protection is ensured by the corresponding participation in the Privacy Shield Agreement as provided for in Art. 45 para. 1 GDPR. (More information regarding Google Analytics may be found below.This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies” to help the website analyze how users use the site.
The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. In case of activation of the IP anonymization, Google will truncate/anonymize the last octet of the IP address for Member States of the European Union as well as for other parties to the Agreement on the European Economic Area. Only in exceptional cases, the full IP address is sent to and shortened by Google servers in the USA. On behalf of the website provider Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage to the website provider. Google will not associate your IP address with any other data held by Google.
As an alternative to opting out from being tracked by Google Analytics you can also click the following link, https://developers.google.com/analytics/devguides/collection/gajs/?hl=de#disable. An opt-out cookie will be stored, which means that no web analysis will take place as long as the opt-out cookie is stored by your browser.

References: Art. 13
 Art. 15
 Art. 17
 Art. 18
 Art. 20
 Art. 6
 Art. 77
 Art. 32
 Art. 6
 Art. 6
 Art. 46
 Art. 6
 Art. 6
 Art. 45