Activity

Types of personal data we collect

(for illustration purposes)

Purpose(s)

Legal basis

General business operations

Name, contact details and other information necessary for conducting business with you or your organisation.

As part of general VELUX business operations, we collect personal data about individuals, customers, suppliers (including third-party service providers) and other stakeholders. We may also use your data for testing systems.

Based on general business operations being a legitimate interest and necessary in ensuring business handling throughout VELUX, within what is reasonably

expected by you.

Assisting with enquiries

Name, email address, phone numbers, conversations, other contact details, photos, floor plans of your house when you

provide this to VELUX.

You may choose to provide us with personal data, such as contact details when you contact us by phone, email, post, our chatbot or by using our digital platforms available.

Based on our assistance with enquiries and contact being a

legitimate interest

This personal data enables us to respond to requests for information on such matters as VELUX products, to arrange a measure and quote for installation of VELUX products, or to arrange for a window to be serviced, or to present claims under the VELUX guarantee.

The information may be disclosed to VELUX A/S or other VELUX sales companies within the Group, relevant independent installers or dealers in order for us to assist customers with their enquiry or arrange for services or a quote.

and necessary in ensuring communication with you and throughout the organization, within what is reasonably expected by you.

We record calls for training purposes. We may also ask you to provide your feedback through surveys after the interaction.

Sales (including web sales) and order fulfilment.

Name, contact details, payment and credit card details, credit information, and credit check etc.

We may collect personal data of customers and prospective customers in order to conduct business with you or your organisation. We use your data to analyse shopping trends through your web shop activity and purchase history to provide you a personalised browsing experience. Furthermore, we use the data for processing and fulfilling web shop orders by facilitating the delivery of product orders and providing relevant customer service, including processing your returns.

Necessary for the performance of a contract to which you or the organisation you work for is a party.

We may disclose the information to dealers or independent installers and logistic partners to process a customer’s order, including arranging delivery of VELUX products to the customer or assisting with enquiries such as arranging

consultation between you and our product advisors. We also share your information with third parties for credit

check purposes.

Campaigns

Name, contact details, etc.

Execution of various campaigns (e.g., reward programs, cashback campaigns, sweepstakes). Acceptance of terms and conditions is collected before entry to the activity.

Necessary for the performance of a contract to which you or the organisation you

work for is a party.

Product claims

Name, contact details, etc.

Facilitate service of VELUX products under the VELUX guarantee or by paid service, i.e., we solve claims by call, email, and visits to building sites. In this connection, we may share your personal data with VELUX partners to assist you with a service.

We may ask you to provide your feedback through surveys

after the interaction.

Necessary for the performance of a contract to which you or the organisation you work for is a party.

Business development and VELUX apps

Personal data, which is collected at our digital platforms and in VELUX apps.

The personal data you provide to us, and personal data collected at our digital platforms will be used to enhance our consumer insights and drive relevant communication and offers across all touch points you may have with VELUX. Personal data will also be used for product and service development.

Based on our business development being a legitimate interest and necessary ensuring the improved effectiveness of our business operations, within what is reasonably

expected by you

Marketing

Contact information,

browsing history, sales and

Based on your consent or legitimate interest, when

applicable, we process your personal data for the purpose

Based on your

informed consent

subscription service information, such as name, address, email, phone number, purchase history, unique identifiers such as cookie IDs or device IDs, tracked browsing history based on these IDs, etc.

Please be aware that this list is not exhaustive as we may process any personal information collected in connection with your interactions with our parent company, VELUX A/S, our websites, mobile applications, products, and services.

of informing you of VELUX business operations, products, and services.

For the above purposes, we create marketing, tailored to your preferences and profile, e.g.:

• To optimise and tailor the content and delivery of our marketing communications when you want to receive them, and

• To give you tailored marketing based on your preferences and profile, both when engaging with us on our own channels as well as via third party channels (e.g., social media, search sites, marketplaces).

If you do not wish to receive any further information, you can easily and free of charge unsubscribe from our marketing communication anytime. You will find ways to unsubscribe in connection with subscribing to or receiving marketing communication from us. You can also contact us by email or post to unsubscribe.

For some marketing activities we act as joint controller with other VELUX companies and have entered into joint controller agreements dividing the roles and responsibilities between the VELUX companies.

when legally required for sending you newsletters, or based on this being a legitimate interest necessary in sending you newsletters, within what is reasonably expected by you.

The personalisation of the marketing will be based on a legitimate interest in profiling being necessary when improving marketing impact, within what is reasonably expected by you.

Your participation in

If you have agreed to it and

We will use the photo, testimonials etc. as described in the

Necessary for the

photos, video,

sent a photo to us or if your

contract signed by you.

performance of a

testimonial and

photo is taken by a

contract with

campaigns

photographer hired by us.

compensation to

which you are a party.

For our internal marketing this will be based on our marketing being a legitimate interest and necessary in using the photos etc. in internal marketing purposes, within what is reasonably

expected by you.

Website visitors, customer surveys and market research

Personal data from digital platforms or customers as part of surveys.

To improve the products and services we offer, we may collect personal data from digital platform visitors or customers as part of surveys.

We will contact you with a survey and process personal data as part of surveys through either consent or legitimate interests.

Surveys processing personal data for marketing purposes will be used only with your consent.

Based on our surveys and market research being a legitimate interest and necessary when improving products and services, within what is reasonably expected by you.

Recruitment and employment contracts

Name, contact details, working history, educational diplomas, relevant record checks, information about

professional interests, etc.

When a person applies for a job or enters into an employment contract with us, we may collect certain information such as name, contact details, information about working history, educational diplomas, relevant

Based on our recruiting being a legitimate interest and necessary in

improving a

record checks and information about professional

successful match

interests.

between our

This may be collected from the person directly, from a

company and you

recruitment consultant including references and publicly

as a candidate,

available sources.

within what is

This information is used to inform or assist us in the

reasonably

decision as to make the person an offer of employment or

expected by you.

engage the person under a contract.

For further information please read our VELUX Recruitment

Notice in WorkDay.

Compliance

All types of personal

We may collect personal data to comply with the law, a

Necessary for the

including anti-

information.

court or authority’s decision and/or to disclose information

compliance with a

corruption,

to relevant public authorities as required or permitted by

legal obligation to

Whistleblower

law.

which we are

hotline and

subject.

sanctions check

Your rights

Legal basis

Elaboration

Access to your data

PIPEDA

Schedule 1,

clause 4.9

You have the right to request information about whether VELUX processes personal data relating to you, and if so, you have the right to request a copy of the personal data we have processed.

There are some exemptions, which means you may not always receive all the data we process.

Request rectification

PIPEDA

Schedule 1,

clause 4.9

At any time, you have the right to request correction of any incorrect or incomplete personal data we may process on you.

Request erasure

PIPEDA

Schedule 1,

clauses 4.5.3

and 4.9.5

You have the right to request deletion of your personal data depending on the processing activity, and under certain circumstances, before we would normally be obligated to cease processing.

Withdraw your consent

PIPEDA

Schedule 1,

clause 4.3.8

You have the right to withdraw your consent at any time by opting out in the e-mail or by contacting us. However, this will not affect our right to process personal data obtained prior to the withdrawal of your consent, or our right to continue parts of the processing based on other legal bases than your consent.

Right to object

PIPEDA

Schedule 1,

clause 4.10

If you are not satisfied with how we process personal data in VELUX, you can send your objections to veluxcanada@velux.com