Privacy Policy

DATA PRIVACY NOTICE

This Data Privacy Notice explains how Lafarge Iraq, located at Hawary Shar 508, Daban St 17, processes personal data and outlines the rights of individuals under applicable data protection laws. We are committed to handling personal data responsibly, with diligence, and in compliance with legal requirements. We employ state-of-the-art security measures to protect the integrity and confidentiality of personal data.

WHO IS RESPONSIBLE FOR YOUR PERSONAL DATA?

Lafarge Iraq, located at Hawary Shar 508, Daban St 17, is the data controller responsible for the personal data provided in connection with our business relationship.

WHICH PERSONAL DATA DO WE COLLECT?

We collect only the necessary personal data required for our business relationship. This includes contact information (such as name, job title, address, telephone number, email address, and other contact details), unique identifiers of mobile devices, and IP addresses when using our websites, online platforms, or apps. Additionally, we collect business-related data, such as information on purchases, services, product feedback, and other information provided by individuals.

If you use our websites, please note that we use cookies and analytical tools, such as Tracking Pixel and Google Analytics. Please refer to our website for more information on our use of such tools.

HOW DO WE COLLECT PERSONAL DATA?

We collect personal data directly from individuals when they interact with us, such as when visiting our website, communicating with us regarding our products and services, placing orders, subscribing to our newsletter, or participating in customer surveys.

WHY WE PROCESS PERSONAL DATA

We process personal data to provide the products and services we offer, manage accounts, and maintain records of our business interactions. We may contact individuals for customer assistance, service purposes, or to provide information about our products and services. Failure to provide personal information may result in our inability to fulfill requests for products or services.

We also process personal data as required by law (e.g., for tax purposes) or with individuals' express consent.

HOW WE USE PERSONAL DATA

We may store, process, or share personal data with recipients inside or outside Iraq, to the extent permitted by applicable law. We implement appropriate safeguards to ensure the security and integrity of personal data. For further information on these safeguards, please contact us using the details provided below.

WHO WE SHARE PERSONAL DATA WITH

We may share personal data with our affiliates when necessary to provide goods and services or as permitted or required by law. We may also share personal data with credit reference agencies and other companies for credit decisions, fraud prevention, and debt recovery purposes. Additionally, we may engage service providers (e.g., cloud providers) domestically or internationally to process personal data on our behalf and in accordance with our instructions. We retain control over personal data and remain fully responsible when engaging service providers.

In the event of a business sale or acquisition, personal data may be disclosed to prospective sellers or buyers and their professional advisors. If Lafarge Iraq or its assets are acquired by a third party, personal data held by us about customers will be one of the transferred assets.

Personal data will not be accessible to third parties unless legally required or with explicit permission from individuals.

HOW LONG DO WE STORE PERSONAL DATA?

We retain personal data as long as necessary to provide requested services, products, or information and to administer business relationships. If individuals request no further communication, we retain their information to comply with their request. We are also required by law to retain certain personal data (e.g., related to business transactions) for specific retention periods. Personal data will be promptly deleted when no longer needed for these purposes.

WHAT IF I'M UNDER 16?

Individuals under the age of 16 must obtain parental/guardian consent before providing personal data. We do not knowingly collect personal data from individuals under 16 without such consent.