Privacy Policy
Enerpac Tool Group, including all affiliates and subsidiaries (collectively “Enerpac”)
respects individual privacy and values the confidence of its customers, employees, vendors, business
partners and others. Enerpac strives to collect, store, process and distribute Personal Information
in a manner consistent with the laws of the countries in which it does business, as well as the
GDPR. Enerpac participates in and abides by the EU-U.S. Privacy Shield Framework developed by the
U.S. Department of Commerce and the European Commission, and has also agreed (between Enerpac Tool
Group’s EU based entities and it’s US based corporate parent) to the European
Commission’s Standard Contractual Clauses. This Privacy Policy (the "Policy") sets
forth the privacy principles that Enerpac follows with respect to Personal Information transferred
to Enerpac Tool Group Corporate in Menomonee Falls, WI, and any other transfers of information from
and to anywhere in the world, including transfers from the European Economic Area (EEA) (which
includes the twenty-eight member states of the European Union (EU) plus Iceland, Liechtenstein and
Norway).
I. PRIVACY SHIELD
The United States Department of Commerce and the European Commission have agreed on a set of data
protection principles to enable U.S. companies to satisfy the requirement under EU law that adequate
protection be given to Personal Information transferred from the EU to the United States (EU-U.S.
Privacy Shield Framework). To learn more about the Privacy Shield program, and to view
Enerpac’s certification, please visit http://www.privacyshield.gov/list. Enerpac
acknowledges the effect of the Schrems II decision, but has chosen to keep up it’s membership
in the Privacy Shield program and abide by its principles.
Enerpac entities have also entered into intragroup transfer agreements based on the European
Commission’s Standard Contractual Clauses to satisfy the requirement under EU law that
adequate protection be given to Personal Information transferred from the EU to the United States.
Enerpac has a Data Protection Officer who assists in ensuring compliance with this Policy and data
security issues. Enerpac educates its employees concerning compliance with this Policy and has
self-assessment procedures in place to assure compliance. Enerpac's Data Protection Officer,
Jason Kunschke, and its corporate legal team are available to any of its customers, employees,
business partners or others who may have questions concerning this Policy or data security
practices. Relevant contact information is provided herein. Enerpac is subject to the investigatory
and enforcement powers of the U.S. Federal Trade Commission with respect to the Privacy Shield
Framework.
II. SCOPE
This Policy applies to all Personal Information received by Enerpac in any format including
electronic, paper or verbal. Enerpac collects, stores and processes Personal Information concerning
current and former employees, as well as applicants for employment through its Internet websites,
its intranet site, electronic mail and manually. Enerpac will not sell or share this information
with third parties in ways different than what is disclosed in this Policy. On a global basis,
Enerpac will establish and maintain business procedures that are consistent with this Policy.
Notwithstanding the foregoing, Enerpac has separate policies governing the processing of employee
personal data and external personal data in those countries that are members of the EU. These
policies are consistent with EU data protection law.
Enerpac collects, stores, and processes Personal Information from current and past employees and
applicants for employment, such as name, contact information, government identifier, financial
account information, and family information. This information is maintained at the Corporate and
local level by Enerpac and its authorized agents, depending on the level of the position as well as
the local office of the employee or applicant. Enerpac collects Personal Information for employment
related purposes and legitimate human resource business reasons such as personnel and job candidate
administration and assessment, recruitment and staffing; payroll administration; absence monitoring;
training and development; management planning; appraisal and promotion; union negotiation;
production and publication of company address books and telephone and e-mail directories; managing
email and other communication systems; production of employee Identity cards; monitoring the use of
company resources; information to contact close relatives in case of emergency; filling employment
positions; administration and operations of its benefit and compensation programs; meeting
governmental reporting requirements; security, health and safety management; performance management;
company network access; managing and administering the Ethics Hotline; facilitating workplace
communications; workforce analytics, and authentication. Enerpac does not request or gather
information regarding political opinions, religion, philosophy or sexual preference. To the extent
Enerpac maintains information on trade union membership, medical health, race or ethnicity, Enerpac
will protect, secure and process that information in a manner consistent with this Policy and
applicable law.
Enerpac also collects, stores, and processes Personal Information from prospective customers,
vendors, professional advisers and consultants, distributors, dealers, suppliers, business partners
and others, such as name, contact and financial information. This information may be maintained at
its corporate offices in Menomonee Falls, Wisconsin or at other Enerpac facilities, and its
authorized agents, consistent with local legislation. Enerpac collects this Personal Information
for, among other things, legitimate business reasons such as processing and fulfilling orders;
customer service; the provision of services or products to Enerpac, product, warranty and claims
administration; meeting governmental reporting and records requirements; maintenance of accurate
accounts payable and receivable records; marketing; internal marketing research; safety and
performance management; financial and sales data; and contact information. All Personal Information
collected by Enerpac will be used for legitimate business purposes consistent with this Policy.
Enerpac also may collect information during visits to our websites. This information may
include IP addresses and the pages visited and how our services are to be used.
Enerpac may process and disclose Personal Information to service providers, advisors, potential
transactional partners, or other third parties in connection with the consideration, negotiation, or
completion of a corporate transaction in which an Enerpac business is acquired by or merged with
another business, or sells, liquidates, or transfers all or a portion of its assets.
Enerpac also may process or disclose Personal Information as is reasonably necessary or legally
required on important public interest grounds, to respond to lawful requests by public authorities
(including to meet national security or law enforcement requests), to meet governmental reporting or
records requirements, or for the establishment, exercise or defense of legal claims by Enerpac or
other companies within its corporate group.
III. DEFINITIONS
For purposes of this Policy, the following definitions shall apply:
"Agent" means any third party that processes Personal Information provided by Enerpac to
perform tasks on behalf of or at the instruction of Enerpac.
"Enerpac" means Enerpac Tool Group, its subsidiaries, divisions, groups and legal entities,
with subsidiaries/brands/legal entities such as Actuant, Actuant Corporation, Biach, Cortland,
Enerpac, Equalizer International, HTL Group, Hydratight, Larzep Hydraulic, Mirage, Simplex and
Sweeney.
"Personal Information" means any information or set of information that identifies or could
be used by or on behalf of Enerpac to identify an individual. Personal Information does not include
information that is encoded or anonymized, or publicly available information that has not been
combined with non-public Personal Information.
"Sensitive Personal Information" means Personal Information that reveals race, ethnic
origin, trade union membership, political opinions, or religious or philosophical beliefs, that
concerns health or sex life, or that contains criminal records. In addition, Enerpac will treat as
Sensitive Personal Information any Personal Information received from a third party where that third
party treats and identifies the Personal Information as sensitive.
IV. PRIVACY PRINCIPLES
Enerpac commits to subject the Personal Information covered by this policy to the following
principles:
(1) NOTICE: Where Enerpac collects Personal Information directly from individuals, it will
inform them about the purposes for which it collects, stores and processes Personal Information
about them, the types of non-Agent third parties to which Enerpac discloses that information, and
the choices and means, if any, Enerpac offers individuals for limiting the use and disclosure of
their Personal Information. Notice will be provided in clear and conspicuous language when
individuals are first asked to provide Personal Information to Enerpac, or as soon as practicable
thereafter, and in any event before Enerpac uses the information for a purpose other than that for
which it was originally collected.
(2) CHOICE: Enerpac will offer individuals the opportunity to choose (opt-out) whether their
Personal Information is (a) to be disclosed to a non-Agent third party, or (b) to be used for a
purpose other than the purpose for which it was originally collected or subsequently authorized by
the individual.
For Sensitive Personal Information, Enerpac will give individuals the opportunity to affirmatively
and explicitly consent (opt-in) to the disclosure of the information to a non-Agent third party or
the use of the information for a purpose other than the purpose for which it was originally
collected or subsequently authorized by the individual.
Enerpac will provide individuals with reasonable mechanisms to exercise their choices should
requisite circumstances arise.
(3) DATA INTEGRITY AND PURPOSE LIMITATION: Enerpac will use Personal Information only in ways
that are compatible with the purposes for which it was collected or subsequently authorized by the
individual. Enerpac will take reasonable steps to ensure that Personal Information is relevant to
its intended use, accurate, complete and current.
(4) ACCOUNTABILITY FOR ONWARD TRANSFER: Enerpac uses third-party Agents to assist us in
accomplishing the purposes described in this Policy, for example to support our customers, perform
technical operations, and store and transmit data. Enerpac will confirm that any third party to
which it discloses Personal Information will appropriately safeguard the privacy of that Personal
Information. Examples of appropriate privacy safeguards include: a contract obligating the third
party to provide at least the same level of protection as is required by the relevant privacy
principles, the third party being subject to EU data protection law, Privacy Shield certification by
the third party, or the third party being subject to another European Commission adequacy finding
(e.g., companies located in Switzerland). Where Enerpac has knowledge that a third party is using or
disclosing Personal Information in a manner contrary to this Policy, Enerpac will take reasonable
steps to prevent or stop the use or disclosure. Enerpac holds third parties to which it discloses
Personal Information accountable for maintaining the trust our employees and customers place in the
company. Enerpac may remain liable under the Privacy Shield Principles if any Agent processes
Personal Information in a manner inconsistent with the Privacy Shield Principles, unless Enerpac
first demonstrates that it is not responsible for the event giving rise to the damage.
(5) ACCESS AND CORRECTION: Upon request, Enerpac will grant individuals reasonable access to
Personal Information that it holds about them. In addition, Enerpac will take reasonable steps to
permit individuals to correct, amend or delete information that is demonstrated to be inaccurate or
incomplete. Any employees that desire to review or update their Personal Information can do so by
contacting their local Human Resources Representative.
(6) SECURITY: Enerpac will take reasonable precautions to protect Personal Information in its
possession from loss, misuse and unauthorized access, disclosure, alteration and destruction.
Enerpac protects data in many ways. Physical security is designed to prevent unauthorized access to
database equipment and hard copies of sensitive Personal Information. Electronic security measures
continuously monitor access to our servers and provide protection from hacking or other unauthorized
access from remote locations. This protection includes the use of firewalls, restricted access and
encryption technology. Enerpac limits access to Personal Information and data to those persons in
Enerpac's organization, or as Agents of Enerpac, that have a specific business purpose for
maintaining and processing such Personal Information and data. Individuals who have been granted
access to Personal Information are aware of their responsibilities to protect the security,
confidentiality and integrity of that information and have been provided training and instruction on
how to do so.
(7) RECOURSE, ENFORCEMENT, AND LIABILITY: Enerpac will conduct compliance audits of its
relevant privacy practices to verify compliance with this Policy and the relevant privacy
principles. Any employee that Enerpac determines is in violation of this Policy will be subject to
disciplinary action up to and including termination of employment.
V. DISPUTE RESOLUTION
Any questions or concerns regarding the use or disclosure of Personal Information should be directed
to the Enerpac Data Protection Officer via the contact information below. Enerpac will investigate
and attempt to resolve complaints and disputes regarding use and disclosure of Personal Information
in accordance with the principles contained in this Policy and as required by law.
VI. INTERNET PRIVACY
Enerpac sees the Internet, intranets and the use of other technologies as valuable tools for
communicating and interacting with consumers, employees, vendors, business partners and others.
Enerpac recognizes the importance of maintaining the privacy of Personal Information collected
through websites that it operates. Enerpac's purpose for operating its websites is to provide
information concerning products and services to the public. In general, visitors can reach Enerpac
on the Web without revealing any Personal Information. Visitors on the Web may elect to voluntarily
provide Personal Information via Enerpac websites but are not required to do so. Enerpac collects
information from visitors to the websites who voluntarily provide Personal Information by filling
out and submitting online questionnaires concerning feedback on the website, requesting information
on products or services, or seeking employment. The Personal Information voluntarily provided by
website users is contact information such as the user's name, home and/or business address,
phone numbers and email address. Enerpac collects this information so it may answer questions and
forward requested information. Enerpac does not sell this information.
Enerpac may also collect anonymous information concerning website users through the use of
"cookies" in order to provide better customer service. "Cookies" are small files
that websites place on users' computers to identify the user and enhance the website experience.
Company personnel periodically audit Enerpac’s commercial websites to determine what cookies
are used on each. The cookies used are typically not intrusive and are not typically connected to
visitors’ contact or other identifiable information. Visitors may set their browsers to
provide notice before they receive a cookie, giving the opportunity to decide whether to accept the
cookie. Visitors can also set their browsers to turn off cookies. Visitors can learn how to control
or delete cookies used on Enerpac’s websites by visiting http://www.aboutcookies.org for
detailed guidance. If visitors do suppress the website cookies, however, some areas of Enerpac
websites may not function properly.
The table below describes the cookies used on www.enerpac.com and other Enerpac related websites.
Session Cookies
We use a session cookie that lasts for the duration of your visit to our site and is used for load
balancing. User data is linked to your contact information if you agree to the use of cookies for
the purpose of enhancing your browsing experience and to personalize information to your interests.
Persistent Cookies for Site Analytics
Google Analytics – we use this to understand how the site is being used in order to improve the
user experience. User data is not linked to any of your contact information.
You can find out more about Google’s position on privacy as regards its analytics service at
https://support.google.com/analytics/answer/6004245?hl=en
Adobe Site Catalyst - we use this to understand how the site is being used in order to improve the
user experience. User data is not linked to any of your contact information.
You can find out more about Adobe’s position on privacy as regards its analytics service at
http://www.omniture.com/en/privacy/product
Few, if any, of Enerpac's websites are directed toward children. Nevertheless, Enerpac is
committed to complying with applicable laws and requirements, such as the United States'
Children's Online Privacy Protection Act ("COPPA")
Enerpac website users have the option to request that Enerpac not use information previously
provided, correct information previously provided, or remove information previously provided to
Enerpac. Those that would like to correct or suppress information they have provided to Enerpac
should forward such inquiries to:
Enerpac Tool Group
N86 W12500 Westbrook Crossing
Menomonee Falls, Wisconsin 53201-3241
Attention: Data Protection Officer
00 1 262 293 1983
Jason.kunschke@enerpac.com
The inquiries should include the individual's name, address, and other relevant contact
information (phone number, email address). Enerpac will use all reasonable efforts to honor such
requests as quickly as possible.
Enerpac websites may contain links to other "non-Enerpac" websites. Enerpac assumes no
responsibility for the content or the privacy policies and practices on those websites. Enerpac
encourages all users to read the privacy statements of those sites; their privacy practices may
differ from those of Enerpac.
VII. CHANGES TO THIS POLICY
The practices described in this Policy are current personal data protection policies as of October
11, 2021. Enerpac reserves the right to modify or amend this Policy at any time consistent with the
requirements of the relevant principles and applicable law. Appropriate notice will be given
concerning such amendments.
Enerpac Tool Group (U.S.) PRIVACY SHIELD POLICY
Enerpac Tool Group and each of its related U.S. subsidiaries, business units and other legal entities
("Enerpac Tool Group," “we,” “our,” and “us”),
complies with the EU-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce
regarding the collection, use, and retention of Personal Data (as defined below) from European Union
member countries. Enerpac Tool Group has certified that it adheres to the Privacy Shield Principles
of Notice; Choice; Accountability for Onward Transfer; Security; Data Integrity and Purpose
Limitation; Access; and Recourse, Enforcement, and Liability. If there is any conflict between the
policies in this Enerpac Tool Group Privacy Shield Policy (“Privacy Shield Policy”) and
the Privacy Shield Principles, the Privacy Shield Principles shall govern. To learn more about the
Privacy Shield program, and to view our certification page, please visit
https://www.privacyshield.gov/
.
Definitions
“Enerpac Tool Group” means Enerpac Tool Group as well as each of its related
subsidiaries, business units and other legal entities. The subsidiaries, business units and/or other
legal entities are: Actuant, Actuant Corporation, Biach, Cortland, Enerpac, Equalizer International,
HTL Group, Hydratight, Larzep Hydraulic, Mirage, Simplex and Sweeney.
“Data Subject” means the individual to whom any given Personal Data covered by
this Privacy Shield Policy refers.
“Personal Data” means any information relating to an individual residing in the
European Union that can be used to identify that individual either on its own or in combination with
other readily available data.
“Sensitive Personal Data” means Personal Data regarding an individual's racial
or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership,
physical or mental health, or sexual life.
Scope and Responsibility
This Privacy Shield Policy applies to Personal Data transferred from European Union member countries
to Enerpac Tool Group’s operations in the U.S. in reliance on the respective Privacy Shield
framework and does not apply to Personal Data transferred under Standard Contractual Clauses or any
approved derogation from the EU Directive. Enerpac Tool Group has also entered into Standard
Contractual Clauses for the transfer of Personal Data, which is documented in a separate document.
Some types of Personal Data may be subject to other privacy-related requirements and policies. For
example:
- Some Enerpac Tool Group websites have their own privacy policies.
- Personal Data regarding and/or received from a client is also subject to any specific agreement
with, or notice to, the client, as well as additional applicable laws and professional
standards.
- Employee Personal Information is subject to internal human resource policies including the
Enerpac Tool Group Privacy Notice.
All employees of Enerpac Tool Group that have access in the U.S. to Personal Data covered by this
Privacy Shield Policy are responsible for conducting themselves in accordance with this Privacy
Shield Policy. Adherence by Enerpac Tool Group to this Privacy Shield Policy may be limited to the
extent required to meet legal, regulatory, governmental, or national security obligations, but
Personal Data covered by this Privacy Shield Policy shall not be collected, used, or disclosed in a
manner contrary to this policy without the prior written permission of Enerpac Tool Group’s
Executive Vice President - HR.
Enerpac Tool Group employees responsible for engaging third parties to which Personal Data covered by
this Privacy Shield Policy will be transferred are responsible for obtaining appropriate assurances
that such third parties have an obligation to conduct themselves in accordance with the applicable
provisions of this Privacy Shield Principles, including any applicable contractual assurances
required by Privacy Shield.
Privacy Shield Principles
Enerpac Tool Group commits to subject to the Privacy Shields’ Principles all Personal Data
received by Enerpac Tool Group in the U.S. from European Union member countries in reliance on the
respective Privacy Shield framework, for both HR and Non-HR data.
1. Notice
Enerpac Tool Group notifies Data Subjects covered by this Choice Privacy Shield Policy about its data
practices regarding Personal Data received by Enerpac Tool Group in the U.S. from European Union
member countries in reliance on the respective Privacy Shield framework, including the types of
Personal Data it collects about them, the purposes for which it collects and uses such Personal
Data, the types of third parties to which it discloses such Personal Data and the purposes for which
it does so, the rights of Data Subjects to access their Personal Data, the choices and means that
Enerpac Tool Group offers for limiting its use and disclosure of such Personal Data, how Enerpac
Tool Group’s obligations under the Privacy Shield are enforced, and how Data Subjects can
contact Enerpac Tool Group with any inquiries or complaints.
Specifically, Enerpac Tool Group collects human resources data for use in the context of the
employment relationship, consisting of typical employee data such as name, address, phone number,
email address, and financial and bank information for payment of wages. Enerpac Tool Group also
collects sales, marketing and customer data for use in the sales of products or providing of
services, consisting of typical customer or prospect data such as name, address, phone number, email
address and for a customer, financial and bank information for payment for goods or services. The
data would only be disclosed to "third parties" who assist with IT services and have
contractual obligations to protect data and comply with GDPR and other privacy regulations or third
party providers of typical employee benefit services such as health care providers or financial
services providers.
2. Choice
If Personal Data covered by this Privacy Shield Policy is to be used for a new purpose that is
materially different from that for which the Personal Data was originally collected or subsequently
authorized, or is to be disclosed to a non-agent third party, Enerpac Tool Group will provide Data
Subjects with an opportunity to choose whether to have their Personal Data so used or disclosed.
Requests to opt out of such uses or disclosures of Personal Data should be sent to:
privacy@enerpac.com
.
If Sensitive Personal Data covered by this Privacy Shield Policy is to be used for a new purpose that
is different from that for which the Personal Data was originally collected or subsequently
authorized, or is to be disclosed to a third party, Enerpac Tool Group will obtain the Data
Subject’s explicit consent prior to such use or disclosure.
3. Accountability for Onward Transfer
In the event we transfer Personal Data covered by this Privacy Shield Policy to a third party acting
as a controller, we will do so consistent with any notice provided to Data Subjects and any consent
they have given, and only if the third party has given us contractual assurances that it will (i)
process the Personal Data for limited and specified purposes consistent with any consent provided by
the Data Subjects, (ii) provide at least the same level of protection as is required by the Privacy
Shield Principles and notify us if it makes a determination that it cannot do so; and (iii) cease
processing of the Personal Data or take other reasonable and appropriate steps to remediate if it
makes such a determination. If Enerpac Tool Group has knowledge that a third party acting as a
controller is processing Personal Data covered by this Privacy Shield Policy in a way that is
contrary to the Privacy Shield Principles, Enerpac Tool Group will take reasonable steps to prevent
or stop such processing.
With respect to our agents, we will transfer only the Personal Data covered by this Privacy Shield
Policy needed for an agent to deliver to Enerpac Tool Group the requested product or service.
Furthermore, we will (i) permit the agent to process such Personal Data only for limited and
specified purposes; (ii) require the agent to provide at least the same level of privacy protection
as is required by the Privacy Shield Principles; (iii) take reasonable and appropriate steps to
ensure that the agent effectively processes the Personal Data transferred in a manner consistent
with Enerpac Tool Group’s obligations under the Privacy Shield Principles; and (iv) require
the agent to notify Enerpac Tool Group if it makes a determination that it can no longer meet its
obligation to provide the same level of protection as is required by the Privacy Shield Principles.
Upon receiving notice from an agent that it can no longer meet its obligation to provide the same
level of protection as is required by the Privacy Shield Principles, we will take reasonable and
appropriate steps to stop and remediate unauthorized processing.
Enerpac Tool Group remains liable under the Privacy Shield Principles if an agent processes Personal
Data covered by this Privacy Shield Policy in a manner inconsistent with the Principles, except
where Enerpac Tool Group is not responsible for the event giving rise to the damage.
Enerpac Tool Group is also required to disclose personal information in response to lawful requests
by public authorities, including to meet national security or law enforcement requirements.
4. Security
Enerpac Tool Group takes reasonable and appropriate measures to protect Personal Data covered by this
Privacy Shield Policy from loss, misuse, and unauthorized access, disclosure, alteration, and
destruction, taking into due account the risks involved in the processing and the nature of the
Personal Data.
5. Data Integrity and Purpose Limitation
Enerpac Tool Group limits the collection of Personal Data covered by this Privacy Shield Policy to
information that is relevant for the purposes of processing. Enerpac Tool Group does not process
such Personal Data in a way that is incompatible with the purposes for which it has been collected
or subsequently authorized by the Data Subject.
Enerpac Tool Group takes reasonable steps to ensure that such Personal Data is reliable for its
intended use, accurate, complete, and current. Enerpac Tool Group takes reasonable and appropriate
measures to comply with the requirement under the Privacy Shield to retain Personal Data in
identifiable form only for as long as it serves a purpose of processing, which includes Enerpac Tool
Group’s obligations to comply with professional standards, Enerpac Tool Group’s business
purposes and unless a longer retention period is permitted by law, and it adheres to the Privacy
Shield Principles for as long as it retains such Personal Data.
6. Access
Data Subjects whose Personal Data is covered by this Privacy Shield Policy have the right to access
such Personal Data and to correct, amend, or delete such Personal Data if it is inaccurate or has
been processed in violation of the Privacy Shield Principles (except when the burden or expense of
providing access, correction, amendment, or deletion would be disproportionate to the risks to the
Data Subject’s privacy, or where the rights of persons other than the Data Subject would be
violated). Requests for access, correction, amendment, or deletion should be sent to:
privacy@enerpac.com
7. Recourse, Enforcement, and Liability
Enerpac Tool Group’s participation in the EU-U.S. Privacy Shield Framework is subject to
investigation and enforcement by the Federal Trade Commission. Enerpac Tool Group is also willing to
cooperate with relevant EU data protection authorities regarding this Policy.
In compliance with the Privacy Shield Principles, Enerpac Tool Group commits to resolve complaints
about your privacy and our collection or use of your Personal Data. Data Subjects with inquiries or
complaints regarding this Privacy Shield Policy should first contact Enerpac Tool Group at:
privacy@enerpac.com
Enerpac Tool Group has further committed to refer unresolved privacy complaints under the EU-U.S.
Privacy Shield Principles to an independent dispute resolution mechanism, JAMS Mediation,
Arbitration and ADR Services. If you do not receive timely acknowledgment of your complaint, or if
your complaint is not satisfactorily addressed, please visit
https://www.jamsadr.com/eu-us-privacy-shield
for more information or to file a complaint. The services of JAMS are provided at no cost to
you.
Under certain conditions detailed in the Privacy Shield, Data Subjects may be able to invoke binding
arbitration before the Privacy Shield Panel to be created by the U.S. Department of Commerce and the
European Commission.
Enerpac Tool Group agrees to periodically review and verify its compliance with the Privacy Shield
Principles, and to remedy any issues arising out of failure to comply with the Privacy Shield
Principles. Enerpac Tool Group acknowledges that its failure to provide an annual self-certification
to the U.S. Department of Commerce will remove it from the Department’s list of Privacy Shield
participants.
Changes to this Privacy Shield Policy
This Privacy Shield Policy may be amended from time to time consistent with the requirements of the
Privacy Shield. Appropriate notice regarding such amendments will be given.
Enerpac Tool Group PRIVACY NOTICE
1. Scope
All data subjects whose personal data is collected, in line with the requirements of the GDPR,
including but not limited to, employees and customers of Enerpac Tool Group.
2. Responsibilities
2.1 The Data Protection Officer is responsible for ensuring that this notice is made available to
data subjects prior to Enerpac Tool Group collecting/processing their personal data.
2.2 All employees of Enerpac Tool Group who interact with data subjects are responsible for ensuring
that this notice is drawn to the data subject’s attention and their consent to the processing
of their data is secured.
3. Privacy notice
3.1 Who are we?
Enerpac Tool Group is a pure play tool company with operations in more than 25 countries. The Enerpac
Tool Group businesses are market leaders in industrial tools and services, and are global leaders in
high pressure hydraulic tools, controlled force products and solutions for precise positioning of
heavy loads. Our contact information is:
- Enerpac Tool Group Corp.
N86 W12500 Westbrook Crossing
Menomonee Falls, WI 53051
- Privacy@enerpac.com
- 00 1 262 293 1600 (tel)
Our Data Protection Officer (for all legal entities in all locations) can be contacted directly here:
- Jason Kunschke
N86 W12500 Westbrook Crossing
Menomonee Falls, WI 53051
- Jason.kunschke@enerpac.com
- 00 1 262 293 1983 (tel)
- 00 1 262 293 7031 (fax)
3.2 Personal Data
Under the EU’s General Data Protection Regulation (GDPR), personal data is defined as any
information relating to an identified or identifiable natural person (“data subject”);
an identifiable natural person is one who can be identified, directly or indirectly, in particular
by reference to an identifier such as a name, an identification number, location data, an online
identifier or to one or more factors specific to the physical, physiological, genetic, mental,
economic, cultural or social identity of that natural person.
Personal data will only be processed by Enerpac Tool Group in a reasonable, lawful and fair manner.
This means that Enerpac Tool Group will process personal data in compliance with applicable data
protection laws and/or other laws and regulations. Examples of common types of personal data include
name, address, social security number, salary details and financial information, CV’s,
employee records and reviews, and references regarding employees.
The GDPR distinguishes between ordinary personal data such as name, address and telephone number and
sensitive personal data including information relating to health, sexual orientation, racial or
ethnic origin, political opinions, religious beliefs, and trade union membership. Under the law the
processing of sensitive personal data is subject to additional and stricter conditions.
Enerpac Tool Group will not process personal information without a lawful basis to do so. Our
legal basis for collecting and using your customer information will depend on the information
concerned and the specific context in which we collect it. In general, Enerpac Tool Group will
process customer information on the legal bases of consent, contract (if you have entered into an
agreement with us and such processing is a necessary part thereof), or legal obligation. If we
ask you to provide user information to comply with a legal requirement or so we can perform a
contract with you, we will make this clear at the relevant time and advise you whether the provision
of this user information is mandatory or not (as well as of the possible consequences if you do not
provide this user information).
Employee/applicant/candidate personal data is processed by Enerpac Tool Group on the basis of consent
and/or contract, for the purposes of employment management and compliance with legal requirements.
Individuals should note that Enerpac Tool Group will only process sensitive personal data in limited
circumstances.
Where required by law, the explicit consent of the individuals to such processing will be obtained.
Enerpac Tool Group will take appropriate security measures to safeguard sensitive personal data and
to ensure its confidentiality
This Policy is intended to clarify how Enerpac Tool Group will process employee’s and external
applicants/candidates personal data including sensitive personal data. References to employees
covers external applicants/candidates where applicable.
In order to operate effectively and to meet its legal requirements, Enerpac Tool Group needs to
process personal data for employment-related purposes. Where it does so, personal data will be
collected for specified, explicit and legitimate purposes and not further processed in a way
incompatible with these purposes. Processing of certain data will for some activities continue after
employees have left the service of Enerpac Tool Group.
Examples of the main ways in which Enerpac Tool Group processes personal data in an employment
context may include the following:
- Recruiting and staffing;
- Administration of salaries and expenses, pension, sickness benefit or other payments and
contributions due under the contract of employment;
- Monitoring absence or sickness under an absence control policy;
- Administration of incentive compensation programs;
- Training and development, including performance appraisals;
- Management planning;
- Appraisal, promotion and salary progression reviews;
- Negotiations with trade unions or other employee representatives;
- Administration of Enerpac Tool Group policies;
- Compliance with any legal requirement to provide information about employees including regarding
tax payments or employee membership lists to unions;
- Administration of any applicable disciplinary and grievance procedures;
- Compilation of employee lists and contact information for both internal and external use;
- Production of employee ID cards;
- Monitoring the use of Company resources;
- In relation to the provision of company services and other services;
- To contact emergency contacts or emergency services in the event of an emergency, for example,
illness or serious injury to an employee.
Employees and external candidates/applicants are asked to provide personal data at the point of
application and throughout their employment for the purposes mentioned above. Enerpac Tool Group
will inform employees of any material changes in the way in which employee personal data is used.
Employee data maintained by Enerpac Tool Group will be used for the purposes, as mentioned above, of
supporting company operations and providing employee benefits and compensation. Enerpac Tool Group
HR and Payroll processes include tasks and procedures to keep personal data accurate, complete and
current.
3.3 Consent
Enerpac Tool Group will not process your personal data without a lawful basis to do so. Our
legal basis for collecting and using your personal information will depend on whether you are an
employee or a customer. In general, Enerpac Tool Group will process your personal information
on the legal bases of consent, contract or legal obligation. If we ask you to provide
information to comply with a legal requirement or so we can perform a contract with you, we will
make this clear at the relevant time and advise you whether the provision of this information is
mandatory or not (as well as of the possible consequences if you do not provide this information).
By consenting to this privacy notice you are giving us permission to process your personal data
specifically for the purposes identified. Consent is required for Enerpac Tool Group to
process both types of personal data, but it must be explicitly given. Where we are asking you for
sensitive personal data we will always tell you why and how the information will be used.
You may withdraw consent at any time by following the process set forth in the Withdrawal of Consent
Procedure, GDPR DOC 2.7A.
3.4 Disclosure
Enerpac Tool Group is comprised of a group of companies worldwide. Certain employee data contained on
the centralized database will be accessible to other members of the Enerpac Tool Group companies,
such as the United States and/or other countries, for the purpose of customer or employee management
and as outlined in this Policy. Additionally, there are situations when personal data relating to
employees is transmitted to third parties (EU or non-EU based) to provide HR related services for
Enerpac Tool Group, such as payroll services, compensation, expenses, employee engagement surveys,
cultural and/or employee engagement assessments, healthcare services and other employee benefits and
services/information required by law.
In addition, Enerpac Tool Group, like many businesses, sometimes hires other companies (EU and non-EU
based) to perform certain business-related functions. Examples include mailing information,
maintaining databases and processing payments. When Enerpac Tool Group retains a non-affiliated
company to perform a function of this nature, such third party will be required to take security
measures to appropriately protect the data. Personal data may also be proportionately disclosed
by Enerpac Tool Group to other third parties as required by law, for compliance with legal
requirements or to defend a legal claim, in an emergency to protect the vital interests of an
employee, in cases of business requirements (such as the sale of a business unit), or where the
consent of the employee has been obtained.
Personal Data may be transferred to or processed in locations outside of the European Economic Area
(EEA), some of which have not been determined by the European Commission to have an adequate level
of data protection. In that case, for personal data subject to European data protection laws, we
take measures designed to provide the level of data protection required in the EU, including
ensuring transfers are governed by the requirements of the Standard Contractual Clauses adopted by
the European Commission, or another adequate transfer mechanism. Enerpac Tool Group entities have
entered into intragroup transfer agreements based on the Standard Contractual Clauses which allows
for the processing and transfer of personal data. A copy of these agreements can be requested by
request to Privacy@enerpac.com.
Enerpac Tool Group has the authority to change or terminate this policy in whole or in part at any
time, without prior notice to or the consent of any employee, unless otherwise described by local
and/or European legislation and requirements.
3.5 Retention period
Enerpac Tool Group will process personal data and will store the personal data for as described in
Enerpac Tool Group ’s Retention Period Procedure, GDPR DOC 2.3.
3.6 Your rights as a data subject
At any point while we are in possession of or processing your personal data, you, the data subject,
have the following rights:
- Right of access – you have the right to request a copy of the information that we hold
about you.
- Right of rectification – you have a right to correct data that we hold about you that is
inaccurate or incomplete.
- Right to be forgotten – in certain circumstances you can ask for the data we hold about
you to be erased from our records.
- Right to restriction of processing – where certain conditions apply to have a right to
restrict the processing.
- Right of portability – you have the right to have the data we hold about you transferred
to another organization.
- Right to object – you have the right to object to certain types of processing such as
direct marketing.
- Right to object to automated processing, including profiling – you also have the right to
be subject to the legal effects of automated processing or profiling.
- Right to judicial review: in the event that Enerpac Tool Group refuses your request under rights
of access, we will provide you with a reason as to why. You have the right to complain as
outlined in clause 3.6 below.
All of the above requests will be forwarded on should there be a third party involved (as stated in
3.4 above) in the processing of your personal data.
3.7 Complaints
In the event that you wish to make a complaint about how your personal data is being processed by
Enerpac Tool Group (or third parties as described in 3.4 above), or how your complaint has been
handled, you have the right to lodge a complaint directly with the supervisory authority and Enerpac
Tool Group’s Data Protection Officer.
3.8 Privacy statement
Read more about how and why we use your data in the Enerpac Tool Group privacy statement found at
www.enerpactoolgroup.com
Document Owner and Approval
The Data Protection Officer or designee is the owner of this document and is responsible for ensuring
that this policy document is reviewed in line with the requirements of the GDPR.
A current version of this document is available to all employees on the Enerpac Tool Group corporate
intranet (“the HUB”) and through Human Resources. It does not contain confidential
information and can be released to relevant external parties. This document is also available
by request to the Company at privacy@enerpac.com or from
the DPO at Jason.kunschke@enerpac.com.