Thank you for visiting the Duracell Web Order Management website (“the Web platform”). Duracell receives Personal Data, from and about your employees and representatives during the course of our business dealings through the Web platform. “Personal Data” means any information relating to an identified or identifiable natural person; an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to that person’s physical, physiological, genetic, mental, economic, cultural, or social identity.

Duracell is committed to maintaining your trust by protecting personal data that we collect and use. This Privacy Policy (“Privacy Policy”) describes the information that we and our affiliated companies and subsidiaries (“Duracell”, “we”, “us”) collects about you, how we use and protect this information, the choices you can make about how we use this information, and how you can exercise your individual rights provided by applicable law.

Your entry of personal data on our website constitutes your acknowledgement of receipt and understanding of this Privacy Policy. We strongly urge you read this notice and make sure you fully understand our practices in relation to personal data, before you access or use any of our services.

Types of Personal Data

Duracell may hold and process the following types of Personal Data about your employees and representatives including identifying information such as name, title, email, postal address, telephone number, occupation.

This list is non-exhaustive but illustrates examples of Personal Data that you may share with Duracell, or Duracell may acquire from your employees and representatives, in the course of our business relationship and interactions.

Purposes for Processing Personal Data

The processing of Personal Data (i) enables Duracell to execute the contract including processing transactions your employees and representatives request, communicate with you and process, orders placed, invoices and payments. (ii) if it is in Duracell’s legitimate interests and those interests do not outweigh the rights and freedoms of the individual, or (iii) to meet legal requirements. In some cases providing this information is a requirement, as without this information, it will not be possible for Duracell to conduct business with your company.

Disclosure of Personal Data

Duracell may disclose and/or transfer Personal Data to processors or other third parties for the purposes set out above.

Processors may act on our behalf to collect, host, or use Personal Data according to our instructions. Duracell maintains contracts with third-parties who process information on Duracell’s behalf, which are intended to provide adequate safeguards for your Personal Data (e.g., restriction of their access, use and disclosure of Personal Data, solely to meet their contractual obligations in the performance of the specific functions described above).

International Transfers of Personal Data

In the course of operating its business, Duracell may need to transfer Personal Data collected in the European Economic Area (“EEA”) to countries outside the EEA which may not have laws offering the same level of protection for Personal Data as those inside the EEA. For example, the data protection level in the United States is lower than within the European Union and particular governmental bodies in the United States have comprehensive access rights to Personal Data. Duracell has taken reasonable steps designed to ensure adequate safeguards are adopted to safeguard such Personal Data. For further details of these adequate safeguards, please send an email to duracellgdprcompliance@duracell.com.

In any case, Duracell privacy practices are consistent with:

• The European Union General Data Protection Regulation.

• The European Model Clauses regarding the collection, use, and retention of personal data from European Union member countries and Switzerland.

• Applicable country and local data protection laws.

Nothing in this policy shall apply to the extent that it is incompatible with applicable data protection laws.

Personal Data Retention

Duracell will store and maintain Personal Data for as long as necessary (i) for the purposes for which it was collected, (ii) to meet its current and future legal obligations, including in compliance with Duracell’s records retention policy, and (iii) as permitted to meet its legitimate interests. Please note that you may have the right to request the correction or deletion of your Personal Data as explained below.

Rights in relation to Personal Data

Subject to applicable exemptions, individuals about whom we collect and retain their Personal Data may have the right to:

• be informed about the Personal Data that is held about the individual by Duracell;

• request access to or a copy of Personal Data that is maintained by Duracell and be pro-vided information in relation to that data (including the purposes for which the data is processed and how long it will be stored for);

• request that Personal Data be corrected or deleted;

• receive a copy of Personal Data in a machine-readable format or to have Personal Data sent to another entity;

• restrict the processing of their Personal Data;

• object to the processing of their Personal Data; and

• not to be subject to a decision which is based on automated processing or profiling that could result in a significant effect on you, such as discriminatory effects.

An individual can exercise any of these rights by sending an email to duracellgdprcompliance@duracell.com.

Requests with respect to these rights will be honored within 30 calendar days of the request, but (where permissible) the time period may be extended for another 2 months for complex requests. A requestor will be notified within 1 month of the reasons for any extension.

The first time that you visit our website, we notify you about our use of cookies through a notification banner. We collect your explicit permission prior for the use of non-operational cookies. You may withdraw your permission for using these cookies at any time by using the cookie management functionality provided on this website: that appears on every web page on the website.

A cookie is a small piece of data that a web site can send to your browser, which may then be stored on your hard drive as a “tag” that identifies your computer. Cookies can allow us to properly format the web page on subsequent visits for your specific computer and browser, letting us personalise your experience and tailor our inter­actions with you. Cookies also help us to gather anonymous statistics about usage and effectiveness of our site.

Most web browsers automatically accept cookies, but you can change your browser’s settings to disable all or certain cookies if you wish. However, disabling all cookies could diminish the functionality of the site and negatively impact your site experience. You may read more about cookies in our cookie policy : About Cookies

We take reasonable steps designed to keep your personal data accurate. However, we rely on you to provide accurate and complete information and inform us of any changes.

Duracell is committed to keeping personal data secure. We have implemented technical, administrative and physical procedures designed to protect personal data from loss, misuse or alteration.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will have taken measures to protect your personal data , we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use procedures and security features designed to try to prevent unauthorised access.

We will post changes to this Privacy Policy and indicate the effective date when this Privacy Policy is updated. If we make any material changes to this Privacy Policy, we will notify you by posting notice of the changes on this website.