Privacy Policy 

Enerpac Tool Group, including all affiliates and subsidiaries (collectively “Enerpac”) respects individual privacy and values the confidence of its customers, employees, vendors, business partners and others. Enerpac strives to collect, store, process and distribute Personal Information in a manner consistent with the laws of the countries in which it does business, as well as the GDPR. Enerpac participates in and abides by the EU-U.S. Privacy Shield Framework developed by the U.S. Department of Commerce and the European Commission, and has also agreed (between Enerpac Tool Group’s EU based entities and it’s US based corporate parent) to the European Commission’s Standard Contractual Clauses. This Privacy Policy (the "Policy") sets forth the privacy principles that Enerpac follows with respect to Personal Information transferred to Enerpac Tool Group Corporate in Menomonee Falls, WI, and any other transfers of information from and to anywhere in the world, including transfers from the European Economic Area (EEA) (which includes the twenty-eight member states of the European Union (EU) plus Iceland, Liechtenstein and Norway).

I. PRIVACY SHIELD

The United States Department of Commerce and the European Commission have agreed on a set of data protection principles to enable U.S. companies to satisfy the requirement under EU law that adequate protection be given to Personal Information transferred from the EU to the United States (EU-U.S. Privacy Shield Framework). To learn more about the Privacy Shield program, and to view Enerpac’s certification, please visit http://www.privacyshield.gov/list.  Enerpac acknowledges the effect of the Schrems II decision, but has chosen to keep up it’s membership in the Privacy Shield program and abide by its principles.

Enerpac entities have also entered into intragroup transfer agreements based on the European Commission’s Standard Contractual Clauses to satisfy the requirement under EU law that adequate protection be given to Personal Information transferred from the EU to the United States.

Enerpac has a Data Protection Officer who assists in ensuring compliance with this Policy and data security issues. Enerpac educates its employees concerning compliance with this Policy and has self-assessment procedures in place to assure compliance. Enerpac's Data Protection Officer, Jason Kunschke, and its corporate legal team are available to any of its customers, employees, business partners or others who may have questions concerning this Policy or data security practices. Relevant contact information is provided herein. Enerpac is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission with respect to the Privacy Shield Framework.

II. SCOPE

This Policy applies to all Personal Information received by Enerpac in any format including electronic, paper or verbal. Enerpac collects, stores and processes Personal Information concerning current and former employees, as well as applicants for employment through its Internet websites, its intranet site, electronic mail and manually. Enerpac will not sell or share this information with third parties in ways different than what is disclosed in this Policy. On a global basis, Enerpac will establish and maintain business procedures that are consistent with this Policy. Notwithstanding the foregoing, Enerpac has separate policies governing the processing of employee personal data and external personal data in those countries that are members of the EU. These policies are consistent with EU data protection law.

Enerpac collects, stores, and processes Personal Information from current and past employees and applicants for employment, such as name, contact information, government identifier, financial account information, and family information. This information is maintained at the Corporate and local level by Enerpac and its authorized agents, depending on the level of the position as well as the local office of the employee or applicant. Enerpac collects Personal Information for employment related purposes and legitimate human resource business reasons such as personnel and job candidate administration and assessment, recruitment and staffing; payroll administration; absence monitoring; training and development; management planning; appraisal and promotion; union negotiation; production and publication of company address books and telephone and e-mail directories; managing email and other communication systems; production of employee Identity cards; monitoring the use of company resources; information to contact close relatives in case of emergency; filling employment positions; administration and operations of its benefit and compensation programs; meeting governmental reporting requirements; security, health and safety management; performance management; company network access; managing and administering the Ethics Hotline; facilitating workplace communications; workforce analytics, and authentication. Enerpac does not request or gather information regarding political opinions, religion, philosophy or sexual preference. To the extent Enerpac maintains information on trade union membership, medical health, race or ethnicity, Enerpac will protect, secure and process that information in a manner consistent with this Policy and applicable law.

Enerpac also collects, stores, and processes Personal Information from prospective customers, vendors, professional advisers and consultants, distributors, dealers, suppliers, business partners and others, such as name, contact and financial information. This information may be maintained at its corporate offices in Menomonee Falls, Wisconsin or at other Enerpac facilities, and its authorized agents, consistent with local legislation. Enerpac collects this Personal Information for, among other things, legitimate business reasons such as processing and fulfilling orders; customer service; the provision of services or products to Enerpac, product, warranty and claims administration; meeting governmental reporting and records requirements; maintenance of accurate accounts payable and receivable records; marketing; internal marketing research; safety and performance management; financial and sales data; and contact information. All Personal Information collected by Enerpac will be used for legitimate business purposes consistent with this Policy.

Enerpac also may collect information during visits to our websites.  This information may include IP addresses and the pages visited and how our services are to be used.

Enerpac may process and disclose Personal Information to service providers, advisors, potential transactional partners, or other third parties in connection with the consideration, negotiation, or completion of a corporate transaction in which an Enerpac business is acquired by or merged with another business, or sells, liquidates, or transfers all or a portion of its assets.

Enerpac also may process or disclose Personal Information as is reasonably necessary or legally required on important public interest grounds, to respond to lawful requests by public authorities (including to meet national security or law enforcement requests), to meet governmental reporting or records requirements, or for the establishment, exercise or defense of legal claims by Enerpac or other companies within its corporate group.

III. DEFINITIONS

IV. PRIVACY PRINCIPLES

V. DISPUTE RESOLUTION

Any questions or concerns regarding the use or disclosure of Personal Information should be directed to the Enerpac Data Protection Officer via the contact information below. Enerpac will investigate and attempt to resolve complaints and disputes regarding use and disclosure of Personal Information in accordance with the principles contained in this Policy and as required by law. 

VI. INTERNET PRIVACY

Enerpac sees the Internet, intranets and the use of other technologies as valuable tools for communicating and interacting with consumers, employees, vendors, business partners and others. Enerpac recognizes the importance of maintaining the privacy of Personal Information collected through websites that it operates. Enerpac's purpose for operating its websites is to provide information concerning products and services to the public. In general, visitors can reach Enerpac on the Web without revealing any Personal Information. Visitors on the Web may elect to voluntarily provide Personal Information via Enerpac websites but are not required to do so. Enerpac collects information from visitors to the websites who voluntarily provide Personal Information by filling out and submitting online questionnaires concerning feedback on the website, requesting information on products or services, or seeking employment. The Personal Information voluntarily provided by website users is contact information such as the user's name, home and/or business address, phone numbers and email address. Enerpac collects this information so it may answer questions and forward requested information. Enerpac does not sell this information.

Enerpac may also collect anonymous information concerning website users through the use of "cookies" in order to provide better customer service. "Cookies" are small files that websites place on users' computers to identify the user and enhance the website experience. Company personnel periodically audit Enerpac’s commercial websites to determine what cookies are used on each. The cookies used are typically not intrusive and are not typically connected to visitors’ contact or other identifiable information. Visitors may set their browsers to provide notice before they receive a cookie, giving the opportunity to decide whether to accept the cookie. Visitors can also set their browsers to turn off cookies. Visitors can learn how to control or delete cookies used on Enerpac’s websites by visiting http://www.aboutcookies.org for detailed guidance. If visitors do suppress the website cookies, however, some areas of Enerpac websites may not function properly.

The table below describes the cookies used on www.enerpac.com and other Enerpac related websites.

Session Cookies

We use a session cookie that lasts for the duration of your visit to our site and is used for load balancing. User data is linked to your contact information if you agree to the use of cookies for the purpose of enhancing your browsing experience and to personalize information to your interests.

Persistent Cookies for Site Analytics

Google Analytics – we use this to understand how the site is being used in order to improve the user experience. User data is not linked to any of your contact information.

You can find out more about Google’s position on privacy as regards its analytics service at https://support.google.com/analytics/answer/6004245?hl=en

Adobe Site Catalyst - we use this to understand how the site is being used in order to improve the user experience. User data is not linked to any of your contact information.

You can find out more about Adobe’s position on privacy as regards its analytics service at http://www.omniture.com/en/privacy/product

Few, if any, of Enerpac's websites are directed toward children. Nevertheless, Enerpac is committed to complying with applicable laws and requirements, such as the United States' Children's Online Privacy Protection Act ("COPPA")

Enerpac website users have the option to request that Enerpac not use information previously provided, correct information previously provided, or remove information previously provided to Enerpac. Those that would like to correct or suppress information they have provided to Enerpac should forward such inquiries to:

Enerpac Tool Group 
N86 W12500 Westbrook Crossing 
Menomonee Falls, Wisconsin 53201-3241
Attention: Data Protection Officer 
00 1 262 293 1983
Jason.kunschke@enerpac.com

The inquiries should include the individual's name, address, and other relevant contact information (phone number, email address). Enerpac will use all reasonable efforts to honor such requests as quickly as possible.

Enerpac websites may contain links to other "non-Enerpac" websites. Enerpac assumes no responsibility for the content or the privacy policies and practices on those websites. Enerpac encourages all users to read the privacy statements of those sites; their privacy practices may differ from those of Enerpac.

VII. CHANGES TO THIS POLICY

The practices described in this Policy are current personal data protection policies as of October 11, 2021. Enerpac reserves the right to modify or amend this Policy at any time consistent with the requirements of the relevant principles and applicable law. Appropriate notice will be given concerning such amendments.

Enerpac Tool Group (U.S.) PRIVACY SHIELD POLICY

Enerpac Tool Group and each of its related U.S. subsidiaries, business units and other legal entities ("Enerpac Tool Group," “we,” “our,” and “us”), complies with the EU-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of Personal Data (as defined below) from European Union member countries. Enerpac Tool Group has certified that it adheres to the Privacy Shield Principles of Notice; Choice; Accountability for Onward Transfer; Security; Data Integrity and Purpose Limitation; Access; and Recourse, Enforcement, and Liability. If there is any conflict between the policies in this Enerpac Tool Group Privacy Shield Policy (“Privacy Shield Policy”) and the Privacy Shield Principles, the Privacy Shield Principles shall govern. To learn more about the Privacy Shield program, and to view our certification page, please visit https://www.privacyshield.gov/ .

Definitions

“Enerpac Tool Group” means Enerpac Tool Group as well as each of its related subsidiaries, business units and other legal entities. The subsidiaries, business units and/or other legal entities are: Actuant, Actuant Corporation, Biach, Cortland, Enerpac, Equalizer International, HTL Group, Hydratight, Larzep Hydraulic, Mirage, Simplex and Sweeney.

“Data Subject” means the individual to whom any given Personal Data covered by this Privacy Shield Policy refers.

“Personal Data” means any information relating to an individual residing in the European Union that can be used to identify that individual either on its own or in combination with other readily available data.

“Sensitive Personal Data” means Personal Data regarding an individual's racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, physical or mental health, or sexual life.

Scope and Responsibility

This Privacy Shield Policy applies to Personal Data transferred from European Union member countries to Enerpac Tool Group’s operations in the U.S. in reliance on the respective Privacy Shield framework and does not apply to Personal Data transferred under Standard Contractual Clauses or any approved derogation from the EU Directive. Enerpac Tool Group has also entered into Standard Contractual Clauses for the transfer of Personal Data, which is documented in a separate document.

Some types of Personal Data may be subject to other privacy-related requirements and policies. For example:

• Some Enerpac Tool Group websites have their own privacy policies.
• Personal Data regarding and/or received from a client is also subject to any specific agreement with, or notice to, the client, as well as additional applicable laws and professional standards.
• Employee Personal Information is subject to internal human resource policies including the Enerpac Tool Group Privacy Notice.

All employees of Enerpac Tool Group that have access in the U.S. to Personal Data covered by this Privacy Shield Policy are responsible for conducting themselves in accordance with this Privacy Shield Policy. Adherence by Enerpac Tool Group to this Privacy Shield Policy may be limited to the extent required to meet legal, regulatory, governmental, or national security obligations, but Personal Data covered by this Privacy Shield Policy shall not be collected, used, or disclosed in a manner contrary to this policy without the prior written permission of Enerpac Tool Group’s Executive Vice President - HR.

Enerpac Tool Group employees responsible for engaging third parties to which Personal Data covered by this Privacy Shield Policy will be transferred are responsible for obtaining appropriate assurances that such third parties have an obligation to conduct themselves in accordance with the applicable provisions of this Privacy Shield Principles, including any applicable contractual assurances required by Privacy Shield.

Privacy Shield Principles

Enerpac Tool Group commits to subject to the Privacy Shields’ Principles all Personal Data received by Enerpac Tool Group in the U.S. from European Union member countries in reliance on the respective Privacy Shield framework, for both HR and Non-HR data.

1. Notice

Enerpac Tool Group notifies Data Subjects covered by this Choice Privacy Shield Policy about its data practices regarding Personal Data received by Enerpac Tool Group in the U.S. from European Union member countries in reliance on the respective Privacy Shield framework, including the types of Personal Data it collects about them, the purposes for which it collects and uses such Personal Data, the types of third parties to which it discloses such Personal Data and the purposes for which it does so, the rights of Data Subjects to access their Personal Data, the choices and means that Enerpac Tool Group offers for limiting its use and disclosure of such Personal Data, how Enerpac Tool Group’s obligations under the Privacy Shield are enforced, and how Data Subjects can contact Enerpac Tool Group with any inquiries or complaints.

Specifically, Enerpac Tool Group collects human resources data for use in the context of the employment relationship, consisting of typical employee data such as name, address, phone number, email address, and financial and bank information for payment of wages. Enerpac Tool Group also collects sales, marketing and customer data for use in the sales of products or providing of services, consisting of typical customer or prospect data such as name, address, phone number, email address and for a customer, financial and bank information for payment for goods or services. The data would only be disclosed to "third parties" who assist with IT services and have contractual obligations to protect data and comply with GDPR and other privacy regulations or third party providers of typical employee benefit services such as health care providers or financial services providers.

2. Choice

If Personal Data covered by this Privacy Shield Policy is to be used for a new purpose that is materially different from that for which the Personal Data was originally collected or subsequently authorized, or is to be disclosed to a non-agent third party, Enerpac Tool Group will provide Data Subjects with an opportunity to choose whether to have their Personal Data so used or disclosed. Requests to opt out of such uses or disclosures of Personal Data should be sent to: privacy@enerpac.com .

If Sensitive Personal Data covered by this Privacy Shield Policy is to be used for a new purpose that is different from that for which the Personal Data was originally collected or subsequently authorized, or is to be disclosed to a third party, Enerpac Tool Group will obtain the Data Subject’s explicit consent prior to such use or disclosure.

3. Accountability for Onward Transfer

In the event we transfer Personal Data covered by this Privacy Shield Policy to a third party acting as a controller, we will do so consistent with any notice provided to Data Subjects and any consent they have given, and only if the third party has given us contractual assurances that it will (i) process the Personal Data for limited and specified purposes consistent with any consent provided by the Data Subjects, (ii) provide at least the same level of protection as is required by the Privacy Shield Principles and notify us if it makes a determination that it cannot do so; and (iii) cease processing of the Personal Data or take other reasonable and appropriate steps to remediate if it makes such a determination. If Enerpac Tool Group has knowledge that a third party acting as a controller is processing Personal Data covered by this Privacy Shield Policy in a way that is contrary to the Privacy Shield Principles, Enerpac Tool Group will take reasonable steps to prevent or stop such processing.

With respect to our agents, we will transfer only the Personal Data covered by this Privacy Shield Policy needed for an agent to deliver to Enerpac Tool Group the requested product or service. Furthermore, we will (i) permit the agent to process such Personal Data only for limited and specified purposes; (ii) require the agent to provide at least the same level of privacy protection as is required by the Privacy Shield Principles; (iii) take reasonable and appropriate steps to ensure that the agent effectively processes the Personal Data transferred in a manner consistent with Enerpac Tool Group’s obligations under the Privacy Shield Principles; and (iv) require the agent to notify Enerpac Tool Group if it makes a determination that it can no longer meet its obligation to provide the same level of protection as is required by the Privacy Shield Principles. Upon receiving notice from an agent that it can no longer meet its obligation to provide the same level of protection as is required by the Privacy Shield Principles, we will take reasonable and appropriate steps to stop and remediate unauthorized processing.

Enerpac Tool Group remains liable under the Privacy Shield Principles if an agent processes Personal Data covered by this Privacy Shield Policy in a manner inconsistent with the Principles, except where Enerpac Tool Group is not responsible for the event giving rise to the damage.

Enerpac Tool Group is also required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

4. Security

Enerpac Tool Group takes reasonable and appropriate measures to protect Personal Data covered by this Privacy Shield Policy from loss, misuse, and unauthorized access, disclosure, alteration, and destruction, taking into due account the risks involved in the processing and the nature of the Personal Data.

5. Data Integrity and Purpose Limitation

Enerpac Tool Group limits the collection of Personal Data covered by this Privacy Shield Policy to information that is relevant for the purposes of processing. Enerpac Tool Group does not process such Personal Data in a way that is incompatible with the purposes for which it has been collected or subsequently authorized by the Data Subject.

Enerpac Tool Group takes reasonable steps to ensure that such Personal Data is reliable for its intended use, accurate, complete, and current. Enerpac Tool Group takes reasonable and appropriate measures to comply with the requirement under the Privacy Shield to retain Personal Data in identifiable form only for as long as it serves a purpose of processing, which includes Enerpac Tool Group’s obligations to comply with professional standards, Enerpac Tool Group’s business purposes and unless a longer retention period is permitted by law, and it adheres to the Privacy Shield Principles for as long as it retains such Personal Data.

6. Access

Data Subjects whose Personal Data is covered by this Privacy Shield Policy have the right to access such Personal Data and to correct, amend, or delete such Personal Data if it is inaccurate or has been processed in violation of the Privacy Shield Principles (except when the burden or expense of providing access, correction, amendment, or deletion would be disproportionate to the risks to the Data Subject’s privacy, or where the rights of persons other than the Data Subject would be violated). Requests for access, correction, amendment, or deletion should be sent to: privacy@enerpac.com

7. Recourse, Enforcement, and Liability

Enerpac Tool Group’s participation in the EU-U.S. Privacy Shield Framework is subject to investigation and enforcement by the Federal Trade Commission. Enerpac Tool Group is also willing to cooperate with relevant EU data protection authorities regarding this Policy.

In compliance with the Privacy Shield Principles, Enerpac Tool Group commits to resolve complaints about your privacy and our collection or use of your Personal Data. Data Subjects with inquiries or complaints regarding this Privacy Shield Policy should first contact Enerpac Tool Group at: privacy@enerpac.com

Enerpac Tool Group has further committed to refer unresolved privacy complaints under the EU-U.S. Privacy Shield Principles to an independent dispute resolution mechanism, JAMS Mediation, Arbitration and ADR Services. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit https://www.jamsadr.com/eu-us-privacy-shield for more information or to file a complaint. The services of JAMS are provided at no cost to you.

Under certain conditions detailed in the Privacy Shield, Data Subjects may be able to invoke binding arbitration before the Privacy Shield Panel to be created by the U.S. Department of Commerce and the European Commission.

Enerpac Tool Group agrees to periodically review and verify its compliance with the Privacy Shield Principles, and to remedy any issues arising out of failure to comply with the Privacy Shield Principles. Enerpac Tool Group acknowledges that its failure to provide an annual self-certification to the U.S. Department of Commerce will remove it from the Department’s list of Privacy Shield participants.

Changes to this Privacy Shield Policy

This Privacy Shield Policy may be amended from time to time consistent with the requirements of the Privacy Shield. Appropriate notice regarding such amendments will be given.

 

Enerpac Tool Group PRIVACY NOTICE

1. Scope

All data subjects whose personal data is collected, in line with the requirements of the GDPR, including but not limited to, employees and customers of Enerpac Tool Group.

2. Responsibilities

2.1 The Data Protection Officer is responsible for ensuring that this notice is made available to data subjects prior to Enerpac Tool Group collecting/processing their personal data.

2.2 All employees of Enerpac Tool Group who interact with data subjects are responsible for ensuring that this notice is drawn to the data subject’s attention and their consent to the processing of their data is secured.

3. Privacy notice

3.1 Who are we?

Enerpac Tool Group is a pure play tool company with operations in more than 25 countries. The Enerpac Tool Group businesses are market leaders in industrial tools and services, and are global leaders in high pressure hydraulic tools, controlled force products and solutions for precise positioning of heavy loads. Our contact information is:

• Enerpac Tool Group Corp.
  N86 W12500 Westbrook Crossing
  Menomonee Falls, WI 53051
• Privacy@enerpac.com
• 00 1 262 293 1600 (tel)

Our Data Protection Officer (for all legal entities in all locations) can be contacted directly here:

• Jason Kunschke 
  N86 W12500 Westbrook Crossing
  Menomonee Falls, WI 53051
• Jason.kunschke@enerpac.com
• 00 1 262 293 1983 (tel)
• 00 1 262 293 7031 (fax)

3.2 Personal Data

Under the EU’s General Data Protection Regulation (GDPR), personal data is defined as any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Personal data will only be processed by Enerpac Tool Group in a reasonable, lawful and fair manner. This means that Enerpac Tool Group will process personal data in compliance with applicable data protection laws and/or other laws and regulations. Examples of common types of personal data include name, address, social security number, salary details and financial information, CV’s, employee records and reviews, and references regarding employees.

The GDPR distinguishes between ordinary personal data such as name, address and telephone number and sensitive personal data including information relating to health, sexual orientation, racial or ethnic origin, political opinions, religious beliefs, and trade union membership. Under the law the processing of sensitive personal data is subject to additional and stricter conditions.

Enerpac Tool Group will not process personal information without a lawful basis to do so.  Our legal basis for collecting and using your customer information will depend on the information concerned and the specific context in which we collect it.  In general, Enerpac Tool Group will process customer information on the legal bases of consent, contract (if you have entered into an agreement with us and such processing is a necessary part thereof), or legal obligation.  If we ask you to provide user information to comply with a legal requirement or so we can perform a contract with you, we will make this clear at the relevant time and advise you whether the provision of this user information is mandatory or not (as well as of the possible consequences if you do not provide this user information). 

Employee/applicant/candidate personal data is processed by Enerpac Tool Group on the basis of consent and/or contract, for the purposes of employment management and compliance with legal requirements. Individuals should note that Enerpac Tool Group will only process sensitive personal data in limited circumstances. 

Where required by law, the explicit consent of the individuals to such processing will be obtained. Enerpac Tool Group will take appropriate security measures to safeguard sensitive personal data and to ensure its confidentiality

This Policy is intended to clarify how Enerpac Tool Group will process employee’s and external applicants/candidates personal data including sensitive personal data. References to employees covers external applicants/candidates where applicable.

In order to operate effectively and to meet its legal requirements, Enerpac Tool Group needs to process personal data for employment-related purposes. Where it does so, personal data will be collected for specified, explicit and legitimate purposes and not further processed in a way incompatible with these purposes. Processing of certain data will for some activities continue after employees have left the service of Enerpac Tool Group. 

Examples of the main ways in which Enerpac Tool Group processes personal data in an employment context may include the following:

• Recruiting and staffing;
• Administration of salaries and expenses, pension, sickness benefit or other payments and contributions due under the contract of employment;
• Monitoring absence or sickness under an absence control policy;
• Administration of incentive compensation programs;
• Training and development, including performance appraisals;
• Management planning;
• Appraisal, promotion and salary progression reviews;
• Negotiations with trade unions or other employee representatives;
• Administration of Enerpac Tool Group policies;
• Compliance with any legal requirement to provide information about employees including regarding tax payments or employee membership lists to unions;
• Administration of any applicable disciplinary and grievance procedures;
• Compilation of employee lists and contact information for both internal and external use;
• Production of employee ID cards;
• Monitoring the use of Company resources;
• In relation to the provision of company services and other services;
• To contact emergency contacts or emergency services in the event of an emergency, for example, illness or serious injury to an employee.

Employees and external candidates/applicants are asked to provide personal data at the point of application and throughout their employment for the purposes mentioned above. Enerpac Tool Group will inform employees of any material changes in the way in which employee personal data is used.

Employee data maintained by Enerpac Tool Group will be used for the purposes, as mentioned above, of supporting company operations and providing employee benefits and compensation. Enerpac Tool Group HR and Payroll processes include tasks and procedures to keep personal data accurate, complete and current.

3.3 Consent

Enerpac Tool Group will not process your personal data without a lawful basis to do so.  Our legal basis for collecting and using your personal information will depend on whether you are an employee or a customer.  In general, Enerpac Tool Group will process your personal information on the legal bases of consent, contract or legal obligation.  If we ask you to provide information to comply with a legal requirement or so we can perform a contract with you, we will make this clear at the relevant time and advise you whether the provision of this information is mandatory or not (as well as of the possible consequences if you do not provide this information).

By consenting to this privacy notice you are giving us permission to process your personal data specifically for the purposes identified.  Consent is required for Enerpac Tool Group to process both types of personal data, but it must be explicitly given. Where we are asking you for sensitive personal data we will always tell you why and how the information will be used. 

You may withdraw consent at any time by following the process set forth in the Withdrawal of Consent Procedure, GDPR DOC 2.7A.

3.4 Disclosure

Enerpac Tool Group is comprised of a group of companies worldwide. Certain employee data contained on the centralized database will be accessible to other members of the Enerpac Tool Group companies, such as the United States and/or other countries, for the purpose of customer or employee management and as outlined in this Policy. Additionally, there are situations when personal data relating to employees is transmitted to third parties (EU or non-EU based) to provide HR related services for Enerpac Tool Group, such as payroll services, compensation, expenses, employee engagement surveys, cultural and/or employee engagement assessments, healthcare services and other employee benefits and services/information required by law. 

In addition, Enerpac Tool Group, like many businesses, sometimes hires other companies (EU and non-EU based) to perform certain business-related functions. Examples include mailing information, maintaining databases and processing payments. When Enerpac Tool Group retains a non-affiliated company to perform a function of this nature, such third party will be required to take security measures to appropriately protect the data. Personal data may also be proportionately disclosed by Enerpac Tool Group to other third parties as required by law, for compliance with legal requirements or to defend a legal claim, in an emergency to protect the vital interests of an employee, in cases of business requirements (such as the sale of a business unit), or where the consent of the employee has been obtained.

Personal Data may be transferred to or processed in locations outside of the European Economic Area (EEA), some of which have not been determined by the European Commission to have an adequate level of data protection. In that case, for personal data subject to European data protection laws, we take measures designed to provide the level of data protection required in the EU, including ensuring transfers are governed by the requirements of the Standard Contractual Clauses adopted by the European Commission, or another adequate transfer mechanism. Enerpac Tool Group entities have entered into intragroup transfer agreements based on the Standard Contractual Clauses which allows for the processing and transfer of personal data. A copy of these agreements can be requested by request to Privacy@enerpac.com.

Enerpac Tool Group has the authority to change or terminate this policy in whole or in part at any time, without prior notice to or the consent of any employee, unless otherwise described by local and/or European legislation and requirements.

3.5 Retention period
Enerpac Tool Group will process personal data and will store the personal data for as described in Enerpac Tool Group ’s Retention Period Procedure, GDPR DOC 2.3.

3.6 Your rights as a data subject
At any point while we are in possession of or processing your personal data, you, the data subject, have the following rights:

• Right of access – you have the right to request a copy of the information that we hold about you.
• Right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete.
• Right to be forgotten – in certain circumstances you can ask for the data we hold about you to be erased from our records.
• Right to restriction of processing – where certain conditions apply to have a right to restrict the processing.
• Right of portability – you have the right to have the data we hold about you transferred to another organization.
• Right to object – you have the right to object to certain types of processing such as direct marketing.
• Right to object to automated processing, including profiling – you also have the right to be subject to the legal effects of automated processing or profiling.
• Right to judicial review: in the event that Enerpac Tool Group refuses your request under rights of access, we will provide you with a reason as to why. You have the right to complain as outlined in clause 3.6 below.

All of the above requests will be forwarded on should there be a third party involved (as stated in 3.4 above) in the processing of your personal data.

3.7 Complaints
In the event that you wish to make a complaint about how your personal data is being processed by Enerpac Tool Group (or third parties as described in 3.4 above), or how your complaint has been handled, you have the right to lodge a complaint directly with the supervisory authority and Enerpac Tool Group’s Data Protection Officer.

3.8 Privacy statement
Read more about how and why we use your data in the Enerpac Tool Group privacy statement found at www.enerpactoolgroup.com

Document Owner and Approval  

The Data Protection Officer or designee is the owner of this document and is responsible for ensuring that this policy document is reviewed in line with the requirements of the GDPR.

A current version of this document is available to all employees on the Enerpac Tool Group corporate intranet (“the HUB”) and through Human Resources. It does not contain confidential information and can be released to relevant external parties.  This document is also available by request to the Company at privacy@enerpac.com or from the DPO at Jason.kunschke@enerpac.com.