Data protection notice

1.1 INTRODUCTION

Nexperia would like to inform you about the collection and processing of your personal data and the rights to which you are entitled in accordance with the General Data Protection Regulation (GDPR).
Personal data is any information about yourself that can be linked to you or can be used to identify you.

1.2 DATA CONTROLLER

Nexperia B.V. is the controller of personal data used for the Materiality Assessment 2022 Survey.
The Postal Address is: Jonkerbosplein 52, 6534 AB, Nijmegen, The Netherlands
If you experience any problems or have any questions or wishes regarding the processing of your personal data in this regard you can contact our Data Protection Officer by email at: ruben.lichtenberg@nexperia.com or privacy@nexperia.com 

1.3 PURPOSE AND PROCESSING PERSONAL DATA 

The purpose of processing your personal data is to send out a survey as part of Nexperia’s Materiality Assessment 2022.
To conduct the survey, we process the following personal data: First and last name, e-mail address and telephone number. 
Responding to the survey is entirely voluntary. The evaluation of the responses and the results of the survey are processed anonymously by auditing firm Mazars and are only used for the purposes described in Materiality Assessment 2022. 

1.4. LEGAL BASIS

The data processing is based on Art. 6 para. 1 lit. f GDPR. Our legitimate interest arises from the interest to assess and prioritize Nexperia’s Environmental, Social and Governance (ESG) topics and on our interest to understand how you rate the relevance the ESG topics.

1.5 YOUR RIGHTS 

Whenever we process personal information, you have certain rights that the GDPR stipulates and that we take very seriously. Regarding every processing of your personal data, you may rely on the following rights:

1.5.1 Right of access (Art. 15 GDPR):
You have the right to obtain confirmation as to whether or not personal data concerning you is being processed, and, where that is the case access to the personal data and the information specified in Art. 15 GDPR.

1.5.2 Right to rectification and erasure (Art. 16 and 17 GDPR):
You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you and, if necessary, the right to have incomplete personal data completed. You also have the right to obtain an erasure of the personal data concerning you without undue delay, if one of the reasons listed in Art. 17 GDPR applies, e.g. if the data is no longer necessary for the intended purpose.

1.5.3. Right to restriction of processing (Art. 18 GDPR):
If one of the conditions set forth in Art. 18 GDPR applies, you shall have the right to restrict the processing of your data to mere storage, e.g. if you revoke consent, to the processing, for the duration of a possible examination.

1.5.4. Right to data portability (Art. 20 GDPR):
In certain situations, listed in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, common, and machine-readable format or demand a transmission of the data to another third party.

1.5.5. Right to object (Art. 21 GDPR):
If the data is processed pursuant to Art. 6 para. 1 lit. f GDPR (data processing for the purposes of the legitimate interests), you have the right to object to the processing at any time for reasons arising out of your particular situation. We will then no longer process your personal data, unless there are demonstrably compelling legitimate grounds for processing, which override the interests, rights and freedoms of the person concerned, or the processing serves the purpose of asserting, exercising, or defending legal claims. 

1.5.6. Right to lodge a complaint with a supervisory authority:
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you consider the processing of the data concerning you infringes data protection regulations. The right to lodge a complaint may be invoked in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement.

1.6 RECIPIENTS OF PERSONAL DATA 

Nexperia will disclose personal data to third parties, unless the disclosure is necessary for conducting the Materiality Assessment 2022 survey and there is a legal basis on which we are allowed to disclose the data.

1.7 DATA STORAGE 

The personal data used to send out the survey will be deleted from the survey tool within 14 days. This does not include participant data that must be stored for a longer period in order to fulfill legal obligations. 

1.8 DATA SECURITY

Nexperia maintains reasonable and appropriate physical, electronic and procedural safeguards, in accordance with Art. 32 GDPR, to protect Personal Data from being manipulated, lost, destroyed, or accessed by unauthorized persons.  Where data is passed on to external service providers, Nexperia has taken technical and organizational measures to ensure that the data protection regulations are observed.