Continental IPP Data Privacy
Continental Tire Canada, Inc. and its affiliates and subsidiaries (collectively “Continental”, “our”, “we”, or “us”) are committed to protecting the privacy of your Personal Information. This Policy informs you of the Continental’s practices concerning the collection, use, and disclosure of Personal Information collected from you in connection with your registration for and use of the Site and associated Content.
CATEGORIES OF PERSONAL INFORMATION THAT WE COLLECT
Continental may collect, process, transfer, or otherwise have access to various information and data, including your Personal Information. “Personal Information” refers to any information relating to an identified or identifiable natural person and includes but is not limited to “personal data”, “personal information”, and such other substantially equivalent terms defined in applicable data protection laws.
The types of Personal Information that we have collected about you during your use of the Site during the preceding 12 months are:
- Identifiers, such as real name, alias, postal address, unique personal identifier, online identifier, internet protocol address, email address, account name, or other similar identifiers.
- Account information, such as your username, account number, account password, and answers to account security questions.
- Financial information, such as your credit card number and debit card number.
- Commercial information and preferences, including records of products or services purchased, obtained, or considered, or other purchasing and consuming histories or tendencies related to your use of the Site.
- Internet or other electronic network activity information, such as information regarding your interactions with the Site. For more information about our use of cookies on the Site, please see the Cookies and Analytics Tools section below.
- Professional or employment information, such as your title/position, business address and other contact details associated with your employer.
- Customer support data, including information collected when you contact us for help with your account or otherwise in connection with your registration and use of the Site.
- Inferences, inferences drawn from any of the above information to create a profile about you reflecting your preferences, characteristics, and habits.
SOURCES OF PERSONAL INFORMATION
We collect information, including Personal Information, about you and how you interact with us in several ways, including:
- Information You Provide to Us Directly. We collect the Personal Information you provide to us directly.
- Information From Your Employer.
- Information Automatically Collected or Inferred from your Interaction with Us. We automatically collect technical information about your interactions with the Site (such as IP address and browsing preferences), as well as from your interactions with Continental representatives and agents.
HOW WE USE YOUR PERSONAL INFORMATION
- To Provide and Maintain the Site and Enable Transactions/Interactions Between You and Continental. We will process your Personal Information to deliver, develop and maintain the Site. This includes, but is not limited to, facilitating registration and administration of your account; supporting and facilitating your interactions with us; diagnosing, repairing and tracking service and quality issues; facilitating an order, download, return, or exchange; providing requested information; communicating with you about your account or our data practices; installing and configuring changes and updates to the Site, programs and technologies related to interactions with us; authenticating the identity of those who interact with us; or investigating and responding to your requests, complaints, and inquiries.
- Auditing. Auditing related to current interactions with employees and concurrent transactions.
- Legal and Compliance Purposes. Legal compliance requirements, compliance training, investigating and responding to claims against the Continental and its customers and employees, due diligence purposes (like in connection with a corporate transaction), and other such purposes.
- Security. Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity, environmental, health and safety, including monitoring and maintaining the security of the working environment with security cameras, maintenance of medical and sickness records and occupational health programs, keeping emergency contacts, behavioral safety, and statutory reporting obligations.
- Debugging. Debugging to identify and repair system, network and equipment errors that impair existing intended functionality of Continental’s systems, networks, and devices.
- To Provide Customer Support. We strive to provide quality products and services, and to provide appropriate support when you need it. To do this, we may use your personal information to investigate and assist in resolving questions or issues you have regarding Continental products and services, and provide you support or respond to you. The legal basis for the use of your data for such purposes is either the contractual obligation with you or legitimate interests.
- For Our Internal Business Purposes. We may use your Personal Information for our internal business purposes related to providing the Site and Content, as well as other products and technologies. This includes, but is not limited to, evaluating or auditing the usage and performance of Service, programs and technologies related to interactions with us; evaluating and improving the quality of your interactions with us and the Site, programs and technologies related to interactions with us; designing new services; performing internal research for technological development and demonstration; conducting data analysis and testing; maintaining proper business records and other relevant records. The legal basis for the use of your data for such purposes is either the contractual relationship with you or our legitimate interests.
- Quality Assurance. Undertaking activities to verify or maintain the quality or safety of, and to improve, upgrade, or enhance, our services, products, and premises. This may include certain recordkeeping, such as accounting, commercial, procurement, document management and other similar activities. This may also include certain reporting functions like financial information and financial background checks, and consultancy and advisory services.
- For any Other Purpose For Which You Provide Consent. If we use your Personal Information for any additional purpose for which your consent is required, we will notify you in advance and obtain your consent prior to engaging in such activities.
WITH WHOM WE SHARE YOUR PERSONAL INFORMATION
We do not currently sell your Personal Information, nor do we have any future plan to do so. However, to provide the Site and facilitate interactions and orders that you make with the Site, we may share your Personal Information with these recipients:
- Our Affiliates and Subsidiaries. We may share your Personal Information within the Continental group of companies, which includes parents, corporate affiliates, subsidiaries, business units and other companies that share common ownership for the purposes described above. Where we share your Personal Information within the Continental group of companies, we do so based on our Binding Corporate Rules, available at https://www.continental.com/en/data-protection.
- Service Providers. We may share your Personal Information with third party service providers working on behalf of us in order to provide the Service or otherwise facilitate an interaction with Continental you request or support our relationship with you, such as our Licensor, hosting service providers, IT providers, operating systems and platforms, internet service providers, analytics companies, and marketing providers (e.g., we may share your email address with our outbound email marketing provider). We may contract with other companies to provide certain services, including shipping, identity verification, email distribution, market research, promotions management and payment processing. We provide these companies with only the information they need to perform their services and work with them to ensure that your privacy is respected and protected. These companies are prohibited by contract from using this information for their own marketing purposes or from sharing this information with anyone other than Continental. As of the Effective Date identified below, our service providers include:
- Merscient Inc., 76 Berkeley St., Toronto, Ontario M5A 2W7
- Business Partners. We may also provide your Personal Information or provide access to your Personal Information to our business partners. If legally required, we will seek your consent before engaging in such sharing.
- For Legal, Security and Safety Purposes. We may share your Personal Information with third parties such as law enforcement or other government agencies to comply with law or legal requirements; to enforce or apply our Terms of Use and other agreements; and to protect our rights and the property or safety of Continental, our users, or third parties.
- In Connection with a Transaction. If we sell some or all of our assets, or merge or are acquired by another entity, including through a sale or in connection with a bankruptcy, we will share your Personal Information with that entity.
YOUR RIGHTS
Please note that under applicable data protection laws and regulations you may have the following rights in connection with Continental’s processing and use of your Personal Information:
- Right of Information/Notice. You have the right to be informed about the types of Personal Information that we collect and how we use such Personal Information. Continental provides this Policy, detailing how Personal Information is processed, including the third parties with which Continental has shared your Personal Information. Continental will provided updated notice and information any time the types of Personal Information processed and/or Continental’s use and sharing of your Personal Information materially change.
- Right to Revoke Consent (where applicable). Where processing of your Personal Information is based upon your consent, you may withdraw consent at any time, and the Continental will stop processing and delete your Personal Information, subject to the Continental’s right to retain the data as allowed for lawful purposes, including to comply with its legal obligations and to use it exclusively on an anonymized basis. Consent must be withdrawn in writing to dataprotectioncanada@conti-na.com. See Cookies section above for additional information regarding placement of cookies and associated processing activities.
- Right of Access. You may obtain from the Continental confirmation regarding whether Personal Information is being processed and, if it is, access to the Personal Information and additional information about the processing of such Personal Information.
- Right to Correction/Rectification. You may have inaccurate Personal Information corrected and have incomplete Personal Information made complete.
- Right to Deletion. You may have Personal Information deleted in certain circumstances.
- Right to Restrict Processing. You may have additional processing of Personal Information restricted and/or temporarily blocked while the sufficiency, necessity, accuracy, or legality of processing of the Personal Information is contested.
- Right to Data Portability. You may be able to receive Personal Information for the purpose of providing that Personal Information to another controller, either through you as our business customer or directly by Continental.
- Right to Object. You may object, at any time and on grounds relating to their particular situation, that processing of Personal Information is unnecessary or excessive.
- Right to Complain to the Relevant Supervisory Authority. If you have a complaint about our privacy practices, you have the right to submit a complaint to a relevant supervisory authority.
Continental may request additional information from you as necessary to allow you to exercise your rights, and we may deny your request where we have a legitimate basis to do so.
RETENTION
We may store your Personal Information in physical or digital format in Mississauga, Ontario, Canada; Arlington Heights, Illinois, United States of America.
We will retain your Personal Information for as long as is necessary to satisfy the purposes for which it was collected or for such longer period as it may be required to protect Our interests, comply with applicable law or defend against claims. Generally, this would mean that your Personal Information will be retained for the duration of our relationship with you, and up to three (3) years following the end of such relationship, though this may vary depending upon applicable legal requirements.
In some circumstances we will anonymize your Personal Information (so that it can no longer be associated with or used to identify you) and use the anonymized data for research or statistical purposes, in which case we may use this information indefinitely without further notice to or consent from you, except as required by applicable law.
INTERNATIONAL TRANSFERS OF PERSONAL INFORMATION
We may transfer or store your Personal Information outside of Canada, including to or in the United States. Personal Information transferred or stored outside of Canada will be subject to the laws of the jurisdiction(s) where it is transferred or stored, and may be accessible to foreign courts, law enforcement and national security authorities in the jurisdiction(s) where it is transferred or stored.
You may contact dataprotection@conti-na.com to obtain written information about our policies and practices with respect to service providers (including affiliates) outside of Canada, or to ask questions about the collection, use, disclosure or storage of your Personal Information by such service providers and affiliates outside of Canada.
SECURITY
We take your privacy seriously and use reasonable precautions to protect your Personal Information. For example, we encrypt certain communications using industry standards for encrypting such communications. However, we do not guarantee the security of your Personal Information. There is always a risk that information we collect or that you provide to us may be compromised, including due to unauthorized interception or access by third parties. To mitigate this risk, you should (a) use unique and secure usernames and passwords for your account and carefully protect them from disclosure and (b) implement up-to-date security and virus protection on your device. If you suspect that your device’s security or your Personal Information has been compromised, or your password accessed or used by an unauthorized third party, please immediately change your password and/or contact us at dataprotection@conti-na.com.
POLICY FOR CHILDREN
The Site is intended for and marketed to adults only. We do not knowingly solicit information from or market to children under the age of 16. If you become aware of any Personal Information that we have collected from children under age 16, please contact us using the contact information provided above.
ACCEPTANCE OF POLICY
By accessing and/or using the Site, you signify tour acceptance of this Policy. If you do not agree to this Policy, please immediately discontinue your use of the Site and any associated Content.
MODIFICATIONS
We may modify this Policy from time to time as the Site and applicable laws change. If we change our Policy, we will post a new statement on this Site and update the effective date stated at the end of the Policy. You are encouraged to review this Policy from time-to-time for any updates or changes. If we make any material changes, we will inform you through the Site or by some other method of communication that we deem appropriate.
COMPLAINTS OR QUESTIONS
For Continental’s data protection policy, including the Continental’s Binding Corporate Rules for processing your personal data, please see:
https://www.continental.com/en/data-protection
For questions regarding your personal information or this Policy, please contact at dataprotectioncanada@conti-na.com.