Identity and contact details of the data controller
Unless we say otherwise in this Privacy Statement or a specific notice, the company responsible for deciding how and why your personal data is used (called the “data controller” under EU privacy law) is Akzo Nobel N.V., Christiaan Neefestraat 2, 1077 WW Amsterdam, or the relevant subsidiary listed [here].
Scope of this Privacy Statement
This Privacy Statement applies to all personal data processed by AkzoNobel in connection with anyone who interacts with us online or offline – including, but not limited to, customers, suppliers, website visitors, and other business partners. It covers all our domains, including websites, mobile apps, social media channels, products, services, and any other forms of interaction, such as participation in events, surveys or customer support communications (collectively referred to as “our services”).
Please note we have a separate Privacy Statement specifically for job applicants. You can find it on our vacancies website.
What is personal data?
“Personal data” means any information that relates to you as an individual and can identify you directly or indirectly. This could be obvious details such as your name, phone number, address, or email, but also technical data like your IP address or customer account number. It can even include information about your behavior, such as your purchase history or browsing activity.
In this Privacy Statement, “processing” simply means anything we do with personal data — for example collecting, storing, using, sharing, or deleting it.
What personal data we use and why
We process various categories of personal data to support different business activities, each in accordance with a lawful basis under applicable data protection laws. The table below outlines the types of data we may collect, the purposes for which we may use it, the corresponding legal bases (such as consent or a contract), and the sources from which the data is obtained. The appropriate legal basis depends on the specific activity and will be selected in line with applicable legal requirements. Where consent is required, we will ask for it clearly and specifically before processing your personal data. Where we rely on legitimate interests, we ensure these are not overridden by your rights and freedoms, by conducting a balancing test.
We are committed to handling your personal data responsibly and in accordance with key privacy principles, such as fairness, transparency, purpose limitation, data minimization, and data security.
Your data protection rights
You have rights under applicable data protection laws, which may include the right to:
- Access or review the personal data we hold about you;
- Request correction, update, or deletion of your personal data;
- Object to or restrict how we use your personal data;
- Withdraw your consent at any time (without affecting the lawfulness of prior processing);
- Request a copy of your personal data in a portable format where it is technically feasible.
- To exercise these rights, please use our online form. In your request, please specify which rights you wish to exercise and the personal data it concerns. We may need to verify your identity to protect your privacy and security.
We will respond in accordance with applicable laws. Please note:
- Certain data may be retained for legal, contractual, or operational reasons, such as completing a transaction you initiated (e.g., a purchase or promotion);
- Some requests may be restricted or denied where permitted or required by law (e.g., for compliance, fraud prevention, or legal claims).