Privacy and Cookie Notice
This privacy policy provides a summary of how we process your personal data in relation to the administration of the Steinhoff class action service where we are the Data Controller. It also explains your rights over your personal data and how you can exercise them. If you have any questions about any of our privacy policies or how we use your personal data, please contact our Privacy Officer by writing to: The Pavilions, Bridgwater Road, Bristol, BS13 8AE or you can email us.
In this policy the words we, us and our always mean a member of the Computershare group of companies.
What Personal Data do we use?
When we say personal data, we mean any information that is about you or which can help identify you.
We may collect your personal data in a number of ways. You may provide personal data to us directly, or we may collect your personal data from your use of our systems.
Information you provide to us
You may provide personal data to us when you contact us. This could be by email, letter, phone, or when you submit personal data online where processing of the personal data is at our direction and not at the direction of our Client. We will always only collect and process personal data required for the provision of services.
Other information we collect
When you visit our websites, we may collect information about your website use so that we can improve our services.
Where you use our systems we monitor activity including keeping logs of access and actions performed where these logs can be linked to user accounts or internet identifiers.
How we use your personal data
We use your personal data in the following ways:
To deal with requests you send us.
To respond to your queries.
To provide you services and to enable us to provide services to our clients.
To provide you updates on changes to our policies or terms and conditions.
To validate your identity and authenticate you.
To help us improve our services.
To analyse how people use our websites and systems.
For trend analysis to help us develop and improve our products and services.
To comply with our legal and regulatory obligations.
To monitor the security and use of IT systems.
To deal with any complaints or legal claims.
To perform audit activities that provide us with comfort over the effectiveness of systems and controls.
To manage our business in an efficient and proper manner, including the management of our financial position, our resources, the risks to which we are exposed and the way in which we arrange our internal operations.
What are our legal reasons for processing your personal data?
We will only use your personal data where we have a valid legal basis for doing so. The legal bases for us processing your personal data are that:
- It is necessary for us to process your personal data for us to perform our obligations under either a contract you have with us, or to take steps at your request before entering a contract with you or a contract we have with a client you have a relationship with.
- It is necessary for us to comply with a legal obligation to which we are subject.
- It is necessary for the purposes of legitimate interests pursued by us or by a third party, and those interests are not overridden by your interests or your fundamental rights and freedoms.
Who do we share your personal data with?
We may share your personal data with other companies to help us deliver services as follows:
- Other Computershare group companies who help us administer our services.
- Non-Computershare companies who help us provide services to you, including technology and communications providers and any video conferencing facility providers.
We will also share your personal data in the following circumstances:
- Where we need to do so to comply with our legal or regulatory obligations (which may include sharing information with regulators, auditors or law enforcement agencies).
- Where necessary to protect or defend our legal rights or the legal rights of another company or person.
- If our business, or any part of it, is transferred or sold, we will transfer your personal data to the company taking over our role, which could include a purchaser or the provider replacing us.
We will never sell your information to anybody for unsolicited marketing.
How long do we keep your personal data for?
We keep your personal data for as long as we need to for the purposes for which it was collected or (if longer) for any period for which we are required to keep personal data to comply with our legal and regulatory requirements
Do we transfer your personal data overseas?
We may administer accounts and provide you with some services through another member of the Computershare group, or another company which is based in a country where data protection laws and standards differ from those in your home jurisdiction. If you are in Europe this means we may send your personal data to countries outside the European Economic Area.
Where we send your personal data to another country, we will always ensure adequate measures are in place to safeguard it and to ensure you can exercise your rights effectively. If you would like more information about transfers to other countries and the ways in which we protect your personal data, please contact our Privacy Officer by email.
Your rights
Depending on your location, you may have privacy rights under applicable legislation that may include:
Accessing your information
You may ask for a copy of the personal data we hold about you by contacting us at your nearest office. You may also request that personal data you have provided to us is transmitted to you or another organisation in an electronic format.
Correcting your information
We try to ensure all of your personal data is accurate. If you find any inaccuracies or if your details change, please notify us promptly and we will correct them.
Erasing or restricting use of your information
You may ask us to erase or restrict use of your personal data. If you do, we will comply with your request unless there is a legal reason for us not to (for example, if a law says we must retain records for a fixed period and to do so we must retain your personal data, or if it is necessary for us to retain the personal data for the purpose of performing a contract with a client). However, it should be noted that in the event you request us to restrict the use of your personal data, we may not be able to provide the services to you.
Objecting to processing
Where the legal basis for us processing your personal data is that it is necessary for the purposes of legitimate interests pursued by us or by a third party, you have the right to object to this processing. Where you object to such processing we will no longer process the personal data unless we can demonstrate legitimate grounds for the processing.
Please note that where you contact us to exercise your data protection rights we may ask you to provide a form of identity verification before we can process your request.
Cookies
The Steinhoff settlement website (https://www.steinhoffsettlement.com/) uses cookies like many other websites. Cookies are small text files saved on your computer, smartphone or any other device used to visit a website.
All cookies used on the Steinhoff settlement website are essential cookies that are fundamental to website functionality and that cannot be switched off without blocking features on the site. We do not collect any personal data through the use of cookies or attempt to associate any cookie information with a personally identifiable indicator.
The list below describes the essential cookies we use on the Steinhoff settlement website and what they are used for.
| Cookie Name | Cookie Duration | Cookie Description |
|---|---|---|
| NSC_vncsbdp.hjmbsej.dpn_ldd_443 | Until end of session | Load Balancer cookie for maintaining persistence during session. |
| _cfduid | 1 Month | This cookie is set to differentiate visitors to the site who have the same IP address and apply security settings on a per-visitor basis. |
Complaints
If you have any complaints about the way we use your personal data please contact our Privacy Officer who will try to resolve the issue.
You also have the right to complain to the data protection supervisory authority in your country. If you need more information about how to contact your local data protection authority please let us know by contacting our Privacy Officer.
