At PPG we are committed to protecting your privacy. This privacy statement sets out how the European entities of the PPG Industries, Inc. group (hereafter “PPG”, “we”, or “us”) use and protect any of your personal data (“Personal Data”) that you may have provided to us through your use of our websites or apps, by social media (collectively “Sites”), by phone, in writing or otherwise. This statement will apply whenever you are located or your Personal data is processed by a PPG entity established in the European Union (EU), the European Economic Area (EEA) or Switzerland. However, for certain products and services specific privacy notices may apply instead of this statement.

By reading this privacy statement, you will learn about the bases on which we process your Personal Data when you access our Sites or otherwise interact with us. Any Personal Data that you provide will be treated as set forth below.

Who is responsible for the processing of Personal Data?
The PPG entity which is providing the respective Site you are visiting or which you interact with is the controller, and therefore responsible for the processing, of the Personal Data that you provide in course of such visit or interaction.

What Personal Data do we collect?
We may collect the following information when you visit our Sites or interact with us:
•            Personal information such as name and job title;
•            Contact information including home, office, phone and email address;
•            Areas of interests and marketing preferences;
•            Other information relevant to customer surveys/feedback;
•            Order history;
•            Payment information including credit/debit card number or other financial information;
•            Account information including username and encrypted password;
•            Information collected automatically while you visit our Sites, including IP addresses, generic locations, service providers, time of activity, technology and device identifiers, and information gathered through cookies/tracking pixels (please also see our Cookies Policy for more information).

All of which you submit to us, for example, by:
•            Purchasing, ordering and paying for products or services;
•            Completing forms on our Sites;
•            Signing up to our newsletters;
•            Participating in our promotions, offers, surveys, quizzes, questionnaires, and/or contests;
•            Creating a user account at our Sites;
•            Providing us with your feedback or leaving a product review;
•            Contacting PPG with questions and comments.

Why do we process Personal Data?
We may process your Personal Data for the following purposes (the legal bases for our processing are highlighted in bold characters):
•            To perform our obligations under a contract between you and us in relation to our products or services, that is to respond to your queries and fulfil your requests or orders, process payments, administer and process surveys, quizzes, questionnaires, and/or contests;
 
•            To pursue our legitimate interests which include, for instance:
o            Providing you with customer service;
o            Handling and attending to your complaints;
o            Understanding your needs and providing you with a better service and understanding you better as our customer;
o            Improving the content, general administration and customization of our Sites, for example, by customizing user experience, measuring effectiveness of communications and Sites’ performance, and optimizing Sites’ performance;
o            Improving our products and services;
o            Providing you with offers, products, samples, invitations to events and training courses, and other advertisement information which we have reason to believe you may find interesting based on your previous requests or based on similar products you have bought or expressed your interest in before;
o            Compiling market insights;
o            Setting up and administering user accounts on our Sites;
o            Troubleshooting software issues, security and operational problems;
o            To enable us to carry out corporate transactions such as mergers and acquisitions; and
o            To enable us to comply with our policies and procedures including PPG Global Code of Ethics.
 
•            Where you have given us your consent, for example, to periodically contact you via email about promotions, new products or services, or events or to provide you with other advertisement information;
•            To comply with our legal obligations which include, for instance:
o            Maintaining our business records;
o            Preventing fraud;
o            Complying with requests of public authorities; and
o            Conducting verification, vetting and background checks
Where we ask you for your Personal Data due to statutory or contractual requirements, we will indicate which information is voluntary. However, if you do not provide us with certain information voluntarily, we may not be able to provide you with the respective products or services, or respond to your requests, for which we need that information.

How long do we retain Personal Data?
Your Personal Data will only be retained by PPG for as long as it is required: (i) for the purpose(s) for which it was collected; (ii) to be retained by law; and/or (iii) to address any issues that may have arisen at a later date (in which case we will provide you with any further information as required by law).
Categories of recipients of Personal Data
We may transfer your Personal Data to third parties as follows:
•            PPG group entities may be recipients of your Personal Data, so that we can benefit from our corporate structure to facilitate quicker and more efficient service to you by sharing within the group information systems, financial administration or other administrative tasks and customer service.
•            Processors and service providers are sometimes engaged by PPG to assist us with their services and may, in course of their engagement, receive, or have otherwise access to, your Personal Data. These processors and service providers include: (i) media, design, printing, promotional, and event agencies in order to conduct promotional and marketing activities or execute communications on PPG's behalf; (ii) survey and market research companies, in order to obtain market intelligence; (iii) IT and other technical providers in order to obtain hosting, storage, or recovery services in case PPG's computer systems were ever damaged, destroyed, or inaccessible; (iv) shipping entities and logistics service providers (e.g., courier, postal services) to ship to you products and other materials on PPG's behalf; (v) payment processing service providers; and (vi) customer services agencies for providing service to you where you ordered online.
•            In case of a legal requirement, We may also disclose your Personal Data and other information to relevant third parties if we are required to do so by law or that disclosing such information is necessary to: (i) conduct investigations of possible breaches of law; (ii) identify, contact, or bring legal action against someone who may be violating an agreement they have with PPG; or (iii) to avoid imminent physical harm to any person or to protect PPG's rights, safety, or property. We may also disclose your Personal Data to relevant third parties (e.g., forensics investigators, external legal counsel, law enforcement) to investigate, respond to, and/or to prevent a security/data breach, or to cooperate with government or law enforcement authorities pursuant to other legal matters.
•            In the course of corporate transactions, PPG may share your Personal Data and other information with a third party (and its attorneys, accountants and other relevant parties) in the event that PPG merges with, acquires, is acquired by, or becomes a legal affiliate with, such third party, or should such a transaction be proposed.
Except as described above, your Personal Data is not transferred to any person or entity. Where we transfer your Personal Data to third parties (as described above), we always ensure that all required contractual arrangements will be agreed between us and the third parties. This may include contractually requiring them to only act on our instructions, to implement appropriate measures for the protection of your Personal Data and not to use it for their own purposes.

International transfers of Personal Data
In general, we use your Personal Data within your country or another member state of the European Union. However, as an international company, PPG may transfer your Personal Data throughout PPG’s worldwide organization or engage third party service providers based in countries outside the European Union. Some of these countries may not ensure an adequate level of protection with regard to the processing of your Personal Data. In such cases, we do not transfer your Personal Data unless we have provided appropriate safeguards such as data processing agreements on the basis of standard data protection clauses adopted by the EU Commission (which PPG has implemented for transfers to its group entities in the U.S., for example). You may request a copy of any such safeguards in place concerning the processing of your Personal Data by contacting us as described in the “How to contact us” section below.

How we protect Personal Data
PPG takes appropriate steps to protect your Personal Data against accidental or unlawful destruction, loss, alteration, or unauthorized disclosure or access by using a range of physical, operational and technological safeguards. When your Personal Data is no longer required (as described in this privacy statement), it is destroyed, anonymized, or otherwise disposed of using secure methods.

Your rights
You have the following rights:
•            Right to access: You may require us to provide you with confirmation as to whether we process your Personal Data and, where that is the case, obtain from us access to your Personal Data and information on how we process it.
•            Right to rectification: You may require us to correct inaccurate Personal Data concerning you or complete any such data which is incomplete.
•            Right to erasure (“right to be forgotten”): Under certain circumstances, you may obtain from us erasure of your Personal Data.
•            Right to restriction of processing: Under certain circumstances, you may obtain from us restriction of the processing of your Personal Data.
•            Right to data portability: Where our processing of your Personal Data is based on your consent or on a contract between you and us, you may require us to provide you with your Personal Data which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit such data to another controller without hindrance from us or, where technically feasible, to have the data transmitted directly from us to another controller.
•            Right to object: You may object to our processing of your Personal Data (i) for direct marketing purposes at any time; or (ii), on grounds relating to your particular situation, where we are performing a task in the public interest or pursuing our legitimate interests or those of a third party.
Where you have given us your consent to process your Personal Data, you can withdraw your consent at any time and at no cost with effect for the future. If you do, we will stop the respective processing of your Personal Data based on that consent. However, this may, for example, prevent us from providing you with certain services for which we processed your Personal Data.
If you would like to exercise any of the above rights, please contact us by using the contact details provided in the “How to contact us” section below.
In any case and at any time, you may lodge a complaint with the data protection authority.

How to contact us?
Should you have any questions about this privacy statement or how we process your Personal Data or if you like to exercise your rights, please contact us by clicking here, or write to us using the contact information provided for the relevant European PPG entity on its respective website or in any of its communication you may have received.

Cookie Policy

How we use cookies and similar technologies
PPG uses cookies (including Google Analytics), Flash cookies, tracking pixels, and social media/network plug-ins ("first party cookies"). Certain vendors may place and read cookies on our Sites ("third party cookies") to help PPG deliver marketing messages on the Sites and on other online locations you visit after you leave the Sites (see below for more details).
Cookies are text files containing small amounts of information which are downloaded onto a user's computer, smartphone, or similar device when they visit a website. Cookies are then sent back to the originating website on each subsequent visit, or to another website that recognises that cookie.
More detail on how businesses use cookies is available here.
PPG uses the following types of cookies on its Sites:

• Strictly Necessary Cookies

Some cookies are essential for the operation of the Sites. For example, some cookies allow us to identify registered users and ensure they can access the Sites. If a user opts to disable these cookies, the user may not be able to access all of the content of the Sites.

• Performance Cookies

Other cookies may be used to analyse how users use the Sites and to monitor its performance. This allows us to provide a high quality experience by customising the offering and quickly identifying and fixing any issues that arise. For example, performance cookies may be used to keep track of which pages are most popular and to determine why some pages are receiving error messages.
Google Analytics is a web analysis service provided by Google, Inc. We use Google Analytics to monitor how visitors use the Sites, to compile reports and to help us improve the Sites. Please see Google’s privacy policy here for further information on the data Google collects and how it is processed. If you prefer to not have data reported by Google Analytics, you can install the Google Analytics Opt-Out Browser Add-On by following the instructions here. You may opt out of Google's use of tracking technologies by visiting the Google advertising opt-out page here.

• Functionality Cookies

Functionality cookies are used to allow us to remember users’ preferences and tailor the Sites to provide enhanced features.

• Targeting Cookies

Targeting cookies are used to serve users with adverts, and to collect information about users' browsing habits and usage of the Sites in order to make adverts more relevant to users and their interests. They are also used to limit the number of times users see an advert as well as help measure the effectiveness of an advertising campaign.

• Social Media Cookies

These cookies allow users to share what they’ve been doing on the Sites on social media such as Facebook and Instagram (e.g. if you use a "like" or a "share" button for a feature on our Sites) – when this is the case, such third party providers will share information with us.

• Flash Cookies (or 'local shared objects') are text files containing small pieces of information which are downloaded onto a users'  computer, smartphone or other device when a website uses Adobe Flash. PPG uses them on certain Sites for purposes such as map functionality and animations.

• Tracking pixels are small image files which are embedded within, for example, a webpage or in emails which businesses use to track things like website visits, digital ad impressions, email opens, sales conversions and other types of activity on the web. PPG uses tracking pixels to help manage online advertising and conduct traffic analysis on the Sites'. These image files are provided by third parties for external ad management, search marketing tracking, affiliate marketing, and analytics. In all such instances, the tracking pixels are programmed to collect your computer's IP address and certain other limited information when you are on our Sites.

• Social media/network plug-ins
  • AddThis: Our Sites use AddThis plug-ins provided by Oracle America, Inc. (“Oracle”). These plug-ins enable you to share content with other users, for example, via social media/networks. This helps us to improve our content and to make it more interesting for you as a user. Through these plug-ins, your browser establishes a direct connection with the Oracle servers and, as the case may be, with the selected social media/network service. The recipients get the information that you have visited the respective Site along with related information such as IP address, date and time of request, browser, the Site from which the request originated, transmitted data volume, and operating system used. This information is processed on Oracle servers in the U.S. If you share content from our Sites, for example, via social media/networks, your visit of our Sites may be associated with your user profile on the respective social network. We do not have any influence or further information on the processing of your data. Oracle stores your data in user profiles and uses them for purposes of marketing, market research, and/or demand-based design of its website. Even with regard to users not logged in, such analysis especially serves the provision of demand-based advertising and to inform other users of the respective social network about your activities on our Sites. Additional information is available at http://www.addthis.com/privacy.
  • Social media/network providers: Generally, the above also applies to other social media/network plug-ins we use on our Sites provided directly from social media/network providers, namely Facebook, Instagram, Pinterest, and Twitter. You can identify the respective provider by the name and/or logo on the plug-in button. Depending on the PPG website, by using these plug-ins, you can either share content or you will be simply redirected from our website you are visiting to our respective social media/network page. Additional information is available at https://www.facebook.com/policy.php, https://help.instagram.com/155833707900388, https://policy.pinterest.com/en/privacy-policy, and https://twitter.com/en/privacy.

Third-parties
You learn about cookies that our partners who may place cookies through our sites and manage your preferences directly with them:

Partner	Type of cookie	Links
Facebook	Advertising cookie	https://www.facebook.com/policy.php
Google	Performance cookie	https://policies.google.com/privacy?hl=en
Instagram	Advertising cookie	https://help.instagram.com/155833707900388
Pinterest	Advertising cookie	https://policy.pinterest.com/en/privacy-policy
Twitter	Advertising cookie	https://twitter.com/en/privacy

Opt-out of cookies or similar technologies
You have choices about whether certain information collected on websites, including PPG Sites, is used, for example, to customize advertising based on predictions generated from your visits over time and across different websites. Please keep in mind that refusing cookies may affect your experience on PPG Sites.

• Cookies: You have the right to object to the setting of cookies. You can do so by following the instructions contained in the help section of your browser. For certain cookies that target advertising, you may visit the European Interactive Digital Advertising Alliance at http://www.youronlinechoices.com/ and opt out of the behavioural advertising delivered by the EDAA's member companies. Also, most browsers can be set to notify you when a cookie is being placed on your computer or other device. On the Site you can withdraw consent  at any time for all cookies other than those that are Strictly Necessary by clicking the "Edit cookie settings" link at the bottom of the page.

• Flash Cookies: You have the right to object to the setting of Flash cookies. You can do so by managing your Flash Player settings with Adobe. To delete or prevent placement of Flash cookies, you will need to visit the Adobe Flash Player Help site at http://www.adobe.com/support/documentation/en/flashplayer/help/, click on the hyperlink for "Website Privacy Settings panel" on the left hand side of the screen, and follow the instructions for preventing third party Flash content from storing data on your computer.

• Tracking pixels: Because tracking pixels are included within the recipe for a web page or contained in emails, you cannot opt out or refuse them. However, where they are used in conjunction with cookies, they can be rendered ineffective by either opting out of cookies or by changing the cookie settings in your browser. In other instances, such as in the case of emails, tracking pixels are not used in conjunction with cookies and if you are unhappy with the use of tracking pixels in such manner, then you should not use the Sites or subscribe to receive emails.

• Social media/network plug-ins: You have the right to object to the collection and storage of your Personal Data as described above. With regard to AddThis, you can do so by clicking on the opt-out button at http://www.addthis.com/privacy/opt-out. Moreover, you can prevent that the cookies are stored like you can with cookies (please see above). Also, you have the right to object to the creation of user profiles. To exercise this right you need to directly contact AddThis or the respective social media/network provider. Additional information on your rights is available at http://www.addthis.com/privacy, https://www.facebook.com/policy.php, https://help.instagram.com/155833707900388, https://policy.pinterest.com/en/privacy-policy, and https://twitter.com/en/privacy.