Privacy statement

Privacy Policy

Wabtec Netherlands B.V. respects the privacy of visitors, customers, suppliers, business partners and other users of its websites, products and services. This Privacy Statement explains how Wabtec Netherlands B.V. collects, uses, stores, shares and protects personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the Dutch GDPR Implementation Act.

This Privacy Statement applies to personal data processed through the websites and digital services operated by Wabtec Netherlands B.V. for the brands Akapp and Nieaf-Smitt, including akapp.com and nieafsmitt.com.

1. Who we are

Item

Details

Legal entity

Wabtec Netherlands B.V.

Chamber of Commerce number

65631668

VAT number

NL856195212B01

Registered address

Darwinstraat 10
6718 XR Ede
The Netherlands

Telephone

+31 (0)88 600 4500

Privacy requests

wnl_hr@wabtec.com

Privacy contact

Frank Boss

 

For the purposes of applicable data protection laws, Wabtec Netherlands B.V. is the controller for the personal data processed through the websites and forms described in this Privacy Statement, unless stated otherwise.

2. Brands covered by this statement

  • Akapp
  • Nieaf-Smitt

These brands are operated by Wabtec Netherlands B.V. for the websites covered by this Privacy Statement.

3. Personal data we may collect

Depending on how you interact with our websites, we may process the following categories of personal data:

  • Contact details, such as name, company name, business email address, telephone number and business address.
  • Business request information, such as product interests, RFQ or quotation details, registration forms, service requests, repair and calibration requests, demo day registrations, helpdesk requests and licence activation requests.
  • Customer and supplier information needed for commercial, administrative or service-related follow-up.
  • Marketing information, such as newsletter subscriptions, product update preferences and survey responses.
  • Website and technical information, such as IP address, device information, browser information, cookie preferences and website usage data.

4. Forms and website interactions

The following interactions may involve the processing of personal data:

  • Akapp: contact forms, customer registration forms, RFQ/quotation requests, service requests, product information requests and newsletter registrations.
  • Nieaf-Smitt: repair requests, calibration requests, demo day registrations, newsletter registrations, repair of new equipment forms, helpdesk forms and PatManager licence activation forms.
  • Wabtec Netherlands corporate website: currently no contact form, application form, open application form or general information request form is used.

5. Why we process personal data and legal bases

Purpose Examples Legal basis
Responding to requests Contact requests, product information requests, helpdesk questions. Legitimate interest or steps prior to entering into a contract.
Handling quotations and commercial requests RFQ forms, customer registration forms, quotations and sales follow-up. Contract performance, steps prior to contract, or legitimate interest.
Providing service and support Repair requests, calibration requests, service systems and product support. Contract performance or legitimate interest.
Managing customers and suppliers Customer records, supplier records and related administration. Contract performance, legitimate interest or legal obligation.
Marketing communication Newsletters, product updates and customer satisfaction surveys. Consent where required, or legitimate interest where permitted by law for existing business contacts.
Website analytics and cookie management Google Analytics 4 and Usercentrics consent management. Consent where required, or legitimate interest for strictly necessary website functions.
Compliance and records management Retention of business records and compliance with internal record retention policies. Legal obligation or legitimate interest.

 

6. Marketing communications

Wabtec Netherlands B.V. may send newsletters, product updates and customer satisfaction surveys where permitted by applicable law. If consent is required, we will ask for consent before sending such communications. You may unsubscribe from marketing communications by using the unsubscribe option provided in the communication or by contacting us.

Marketing systems may change over time. Salesforce has been identified as a platform used or expected to be used for certain newsletter activities. If additional marketing tools are implemented, this Privacy Statement should be updated where necessary.

7. Systems, service providers and recipients

Personal data may be processed in systems used by Wabtec Netherlands B.V. and its service providers, including:

  • Microsoft 365 / Outlook
  • Microsoft Teams
  • SharePoint / OneDrive
  • CRM systems, databases and service systems
  • Website hosting and website-related technical services
  • Usercentrics for consent management
  • Google Analytics 4 for website analytics

Wabtec Netherlands B.V. may share personal data with Wabtec group companies, IT service providers, hosting providers, CRM and service system providers, professional advisers and public authorities where required by law. Wabtec Netherlands B.V. does not sell personal data.

8. International transfers

Wabtec Netherlands B.V. is part of a global group. Personal data may be accessible to Wabtec Corporation in the United States for purposes such as IT support and CRM support, and may also be accessible to other Wabtec group companies outside the European Economic Area where this is necessary for business, support, service or administrative purposes.

Where personal data is transferred outside the European Economic Area, Wabtec Netherlands B.V. will use appropriate safeguards where required by applicable law. International transfers of personal data within Wabtec are supported by centrally arranged transfer mechanisms, including a Wabtec Intra-Company Data Transfer Agreement and standard privacy and data protection provisions for suppliers.

9. Retention periods

Wabtec Netherlands B.V. retains personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law. Wabtec applies a central Record Retention Policy (WC-P-LG-020) and related retention schedules, including a GDPR Compliance Retention Schedule for personal data.

Category

Retention period

Contact form data

1 year

Unsuccessful quotations / RFQs

2 years

Successful quotations / RFQs

7 years

Customer data

2 years; customer files 7 years

Supplier data

2 years; supplier files 7 years

Newsletter subscriptions

Until opt-out or unsubscribe. Evidence of subscription may be retained as needed to demonstrate compliance.

Event registrations / demo days

12 months

 

10. Cookies and analytics

Our websites use cookies and similar technologies. Usercentrics is used as the consent management platform on the websites. Google Analytics 4 is used for website analytics. Marketing and tracking cookies are placed only after consent has been given where consent is required. More information is available in the Cookie Statement.

11. Data security

Wabtec Netherlands B.V. applies appropriate technical and organisational measures to protect personal data against unauthorised access, misuse, loss, alteration or disclosure. Access to personal data is limited to persons and service providers who need access for legitimate business purposes.

12. Your privacy rights

Subject to applicable law, you may have the following rights in relation to your personal data:

  • Right of access
  • Right to rectification
  • Right to erasure
  • Right to restriction of processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent where processing is based on consent
  • Right to lodge a complaint with a supervisory authority

You can submit privacy requests to wnl_hr@wabtec.com. We may ask you to provide additional information to verify your identity before responding to a request.

13. Complaints

If you believe that your personal data is not being processed properly, please contact us first. You also have the right to lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens.

14. Automated decision-making

Wabtec Netherlands B.V. does not use automated decision-making or profiling through the websites covered by this Privacy Statement that produces legal effects or similarly significant effects on individuals.

15. Changes to this Privacy Statement

Wabtec Netherlands B.V. may update this Privacy Statement from time to time. The latest version will be published on the relevant websites.