Privacy and Cookies

Summary

Michelin is committed to protecting your personal information and adopting a clear and transparent approach with regards to the information that we collect and how we use it. This policy explains how we process the personal information that we collect or that you provide to us when you use our website or digital services.

Please read this policy carefully to understand our approach and practices regarding your personal information and how we will process it.

• Who are we and how can you contact us?
• Websites covered by this privacy policy
• About our Data Protection Officer
• Other policies we encourage you to read
• Information we are likely to collect about you
• Information about our marketing communications
• Information we collect about you from other locations
• Where do we store your personal information?
• Sharing your personal information
• International transfers of personal data
• How long we keep your personal information
• The rights you have from personal data protection legislation
• Your options if you are not satisfied with how we use your information
• About data security
• Changes to our privacy policy

1. Who are we and how can you contact us?

Our full legal name is Michelin Tyre Public Limited Company (“Michelin”) and when you use our website or our services, we act as the data controller. If you need to contact us, you can do so through the following means:

• You can send us an email to michelin@rewardsteam.co.uk
• You can send us a letter to Michelin Tyre Public Limited Company, Campbell Road, Stoke-on-Trent, ST4 4EY, United Kingdom
• You can contact us by telephone on 0330 041 2603.

2. Websites covered by this privacy policy

The information presented in this policy applies to the following website https://rewards.michelin.co.uk.   

3. About our Data Protection Officer

Although all Michelin employees are committed to protecting and respecting your privacy, we have a Data Protection Officer who is responsible for all aspects relating to personal data at Michelin. You can contact our Data Protection Officer by sending an email to legal.general@michelin.com.

4. Other policies and information we encourage you to read

While this privacy policy contains all the information you need about how we collect and use your personal information on rewards program website, there is some further information in other places which may be relevant and that we encourage you to read.

Additional policies relating to personal data

Our cookies policy

Our website terms of use

Related platforms

 

Additional policies relating to personal data

This document is our main privacy policy with regards to the use of the website and digital products and services offered by Michelin through the rewards program. However additional information can be found in privacy policies unique to certain specific digital products and services. Please read these policies when you register or sign up for these products or services. Additional privacy policies provided by Michelin will be made clear to you.

Our cookies policy

When you use our website or the other digital products and services that we provide, information can be collected via cookies to distinguish you from other website users and other digital products and services. We have a separate cookies policy which explains our use of cookies and the reason why we use them. We encourage you to read our cookies policy below.

Terms of use

The website is hosted and provided by Incentivesmart Limited on our behalf.  Website terms of use indicate the terms under which you can use the website. They must be read alongside this privacy policy. You can read our website terms of use here.

Program Conditions

The terms on which the Program is run are set out in the Program Conditions. Once logged in, you can find the full Program Conditions by logging in here.

Related platforms

The website is likely to contain links to and from websites and digital platforms provided by our partner networks, advertisers, affiliates and social networks. If you follow a link to one of these websites, please note that these websites have their own privacy policy and we cannot be held liable for these policies under any circumstances. Please read these policies before providing personal information to these websites.

5. Information we are likely to collect about you

This section presents:

• the way we collect your personal information,
• the categories of data we collect,
• the way we plan to use the information we collect,
• the legal basis on which we process the collected information,
• how long we keep collected information; and
• the specific types of data.

We are likely to collect and keep the following information about you:

Collected data	Purposes	Type of data	Legal basis for processing	How long the data is kept
When you register for an account on this website, we will collect information to enable us to identify you and your business (“Login Data”)	Login Data is used to enable you to log in and access the digital services available to you.	The Login Data includes your username (which can be your email address) and your password.	The legal basis for processing Login Data is the performance of the agreement between you and us for the provision of the digital product and services.	We keep Login Data for as long as you are a user authorised by us or by your employer. We will also retain Login Data for 12 months following the termination of your account with us. If you do not access your account for over 24 months, we will delete your data.
Account profile data registered against your business account (“Account Data”)	Account Data is used to manage the business account which individual professional users are assigned to.   Account data can also be used to process purchases and in particular your date of birth can be used for age verification on certain age restricted products.	Surname, first name, postal address and email address, Landline and mobile number, mainly relating to the customer’s business. We may also collect your job role in Account Data.   Account Data can also include date of birth as a security criteria when you require a password reset or login details.	The legal basis for processing Account Data is the performance of the agreement between you and us for the provision of the digital product and services to our customers and their employees.	We keep Account Data for as long as you are a user authorised by us or your employer. We will also retain Account Data for 12 months following the termination of your account with us. If you do not access your account for over 24 months, we will delete your data.
Information you provide us when you communicate with us, e.g. by email or contact us form via our website contact forms or through any live chat function on our website (“Communication Data”)	Communication Data is used to managing professional users and enabling us to respond to or follow up on your comments, queries or questions.	Communication Data will vary depending on your chosen method of communication but will usually include your name, email address and contact telephone number. It will also include any additional information you choose to provide in your communication.	We will use our legitimate interests in the assisting you and answering your communications as the legal basis for processing Communication Data.	We keep Communication Data for as long as necessary to enable us to deal with the matter relating to that communication. Once you matter has been dealt with, unless we notify you otherwise, Communication Data will be retained for no longer than Profile Data.
Connection Data linked to your use of the digital services	Connection data is used to analyse the site usage and provide information for timestamp details	IP address, device ID, connection timestamp	This processing is based on legitimate interest to the data controller to provide the service	6 months

 

Voluntary information

When you provide information (for example the information listed in the scenarios above), in certain cases we will also ask for additional information on a voluntary basis. This information will be identified as optional and is used to help us to better understand our customers and tailor our service to them and you.

Statistical information

We also collect and use aggregated data such as statistical or demographic data (“Aggregated data"). Aggregated Data can come from your personal information, but it will never reveal your identity. For example, we could combine your Usage and Device Data to calculate the percentage of website users who access a specific website functionality. Aggregated Data is used only for our own purposes.

Sensitive personal information

Although we do not ask for sensitive data, we have sections on our website where you can submit additional information, for example when you submit a review. If you submit information in this free text section, only submit information that you are happy to provide, and always bear in mind that it could be sensitive information. If you submit comments or suggestions on our website, do not forget that this information will be visible to other website users.

Call Recording

When you contact us, or any third party working on our behalf, by telephone, such calls may be recorded for training and quality purposes. Any recordings will be retained for a maximum of 6 months.

6. Information about our marketing communications

We will only communicate to you about the program and information about promotions associated with the Program. If you choose not to receive these communications please let us know. 

We can also use your business preferences to make online suggestions and recommendations on the goods or services likely to interest you. This processing is based on a legitimate interest for the development of our products and services.

7. Information we collect about you from other locations

To allow us to provide you with our services, we can receive personal information about you from other sources, notably:

• We may receive information about you if you use one of the other websites that we operate or other products and/or services that we provide. We also work closely with third parties (including, for example, business partners, technical subcontractors, payment services, analysts, researchers) and we can receive information about you from them.

The legal basis for processing is our legitimate interest to monitor and improve our website, our products and our services.

• Information from our web server logs, for example information about your computer such as your IP address, your operating system or your browser. We can also gather information on searches that you complete on our website and your interaction with the communications that we send, for example when you open our emails. (“Usage and device data”). We use this information to administer our system and analyse how our websites and digital platforms are used. It also allows us to provide the best possible infrastructure for your digital activities.

The legal basis for processing is our legitimate interest to monitor and improve our website, our products and our services.

• As mentioned above, we collect information using cookies or other similar technologies stored on your device, regarding the way you use our website as well as our digital products and our services. Cookies contain information which is transferred to the hard drive of your computer or mobile/tablet. They allow us to improve our website and provide you with a superior and more personalised service. You can read our cookies policy below.

The legal basis for processing is your consent or, where applicable, our legitimate interest to monitor and improve our website, our products and our services.

• The website may enable you to share your experience and connect with us through third party social networks such as Facebook and Twitter. We may collect this information from our social media sites, including likes, shares and tweets, and about the content on social networking sites. We do not control the privacy of the information you provide on social media networks and the privacy policies of those social media networks will apply when using their services.

8. Where do we store your personal information?

The information you provide to us is stored on secure servers in the EEA. All information you provide to us is stored on secure servers, including servers own and managed by Michelin and those of our carefully selected service providers.

While many of the servers are situated within the European Economic Area (EEA), some servers of sub-processors may be based outside of the EEA. We only transfer data outside the EEA in accordance with section 10.

Although we commit to protecting your personal information, transferring this information online via the internet is not totally secure. Along with our service providers, we will endeavor to protect your personal information, but the information is provided at your own risk.

9. Sharing your personal information

Your personal data will only be sent to people who need to know this information to carry out their tasks.

We are likely to share your personal data as follows:

• With Incentivesmart Limited (“Incentivesmart”)

Michelin uses a service provider to host and manage the Michelin Rewards Program platform. Incentivesmart is a service provider working for and on behalf of Michelin. Incentivesmart hosts and manages the platform on which Michelin offers the Michelin Rewards Program.

• With other subcontractors

Michelin may share your personal data with subcontractors, notably the company Incentivesmart Limited, who is the program platform provider and the company who manages the program on our behalf. These subcontractors are contractually bound to guarantee the confidentiality and security of personal data and to only process your personal data on our instructions.

• With third parties for legal reasons

If we are required to disclose or share your personal information to comply with a legal requirement, or to enforce or apply our terms of use or any other contract; or in order to protect our rights, property or the safety of the Michelin group, its customers or others. In this context and to the extent that it is needed, we can send your personal information to any external consultant which is bound by a duty of confidentiality.

10. International transfers of personal data

Michelin is an international group with databases in the different countries where it operates. Michelin may be required to transfer your personal data within the group to one of its databases or one of its external partners located in a country other than your own.

Given that the level of data protection varies depending on the country, we will only send your personal data to Michelin group companies or third-party companies outside the European Union if they offer the same level of personal data protection as Michelin.

For transfers within the Michelin group, the company has adopted internal rules (known as Binding Corporate Rules) which govern the transfer of personal data from the European Union or European Economic Area (EEA).

Whenever there is a transfer of personal information out of the EEA, we ensure a similar degree of protection is afforded to that personal information by ensuring at least one of the following safeguards is implemented:

• we will only transfer your personal information to countries that have been deemed to provide an adequate level of protection for personal information by the European Commission;
• where we use certain service providers, we may use specific contracts approved by the European Commission which give personal information the same protection it has in Europe;
• where we use providers based in the US, we may transfer data to them if they are part of the Privacy Shield which requires them to provide similar protection to personal data shared between the Europe and the US; or
• we have some other appropriate safeguards in place in accordance with data protection legislation.

Although we commit to protecting your personal information, transferring this information online via the internet is not totally secure. In collaboration with our service providers, we endeavor to protect your personal information, but you supply your information at your own risk.

11. How long we keep your personal information

By default, we will not keep your personal information for longer than needed for the purposes for which we collected it, whatever the purpose, including to meet any legal, accounting or reporting requirement. To obtain more specific details on how long we keep your personal information, please refer to paragraph 5 of this policy.

To determine an appropriate period to keep your personal data, we take into consideration the quantity, nature and sensitivity of the personal data, the potential risk of unauthorised disclosure or use of your personal data, the reasons why we are processing your personal data, our potential capacity to pursue these purposes in other ways and the legal requirements in force.

In certain circumstances, you can ask us to delete your data: see your right to deletion below for more information.

In certain circumstances, we can anonymise your personal data (so that it cannot be linked to you) for research or statistical purposes. In this case, we can use this information indefinitely, and without informing you.

12. The rights you have from personal data protection legislation

Data protection regulation provides you with certain rights regarding the processing of your information. These are the right to:

1. be informed
2. access your information
3. correct your information
4. delete your information
5. restrict processing
6. transfer information
7. object to processing

The right to be informed

You have the right to be informed on the way that we collect and process your personal information, including who we are, how we use your personal information and your rights with regards to your personal information. We have gathered all the necessary information in this privacy policy.  

The right to access your information

You have the right to access your personal information that we hold. We can confirm if your information is processed or not and give you access to your personal information.

The right to correct your information

If your personal information is inaccurate or incomplete, you are permitted to correct and update it. If we have disclosed your information to third parties, where possible we will inform them of any update that you have reported to us. You can update your own personal information that we hold by contacting us via the contact methods presented in this privacy policy.

The right to delete your information

You have the right to ask for your personal information to be deleted or withdrawn if we no longer need it to be processed. The circumstances in which you can request deletion of your information include situations where the information is no longer needed for the purpose for which it was collected or processed originally, and situations where you have withdrawn your consent for processing. In certain limited circumstances, the right to be forgotten does not apply. Please contact us for more information.

The right to limit processing

You have the right to “block” or prevent the processing of your personal information. If you ask us to delete your personal information, we will stop any processing.

The right to transfer your data

If you want to move or transfer your personal information to another service provider or copy your information for your own purposes, you have the right to transfer your information to another person. 

The right to object to processing

You have the right to ask us not to process your personal information where we are relying on a legitimate interest and there is something which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes.

If you want to exercise your any of your rights detailed in this Privacy Policy, you can do this at any time by emailing us at legal.general@michelin.com.

For more information on your rights

You can find further information on your data protection rights from the Information Commissioner’s Office (the “ICO”) at www.ico.org.uk.

13. Your options if you are not satisfied

We endeavor to protect and respect your privacy. However, if you are not satisfied with the way we collect or process your information, or if you just want to receive more information on your rights, you can contact us at the following addresses:

• You can send us an email to michelin@rewardsteam.co.uk
• You can send us a letter to Michelin Tyre Public Limited Company, Campbell Road, Stoke-on-Trent, ST4 4EY, United Kingdom
• You can contact us by telephone on 0330 0412603.

We will endeavor to work with you to resolve your problem and answer your questions as soon as possible.

After contacting us, if you believe that your rights are not being respected or that the access control system does not comply with data protection rules, you can make a complaint to the ICO – further information can be found at https://ico.org.uk/concerns/.

14. About data security

Michelin and Incentivesmart have implemented measures to protect the confidentiality, security and integrity of your personal data. Access to personal data is restricted to employees and service providers who need access to this information and who have received training on confidentiality.

Michelin will make sure your personal data is not altered or damaged and that unauthorised third parties cannot access it.

15. Changes to our privacy policy

We may make changes to our policy from time to time. Any future changes to this policy will be published on this page. If you have an online account with us, we can inform you of any change via email or via your account when you next log in.

 

COOKIE POLICY

This policy provides you with information about how we use cookies on our website. By continuing to use this site you are agreeing to the use of cookies as detailed above.

1. What is a cookie?

A cookie is a small text file or piece of code or software that is stored on your computer and provides information about your general internet usage. Cookies help us to distinguish you from other users of our website.

2. Why do we use cookies?

We are always seeking new ways to offer you a better service and experience when using our sites. Cookies help us to provide you with a good experience when you browse our website and also allow us to improve our site. The information saved enables and supports the functionality of the website you are using.

3. What types of cookies are used on our website?

• Strictly necessary cookies. These are cookies that are required for the operation of our website. Strictly necessary cookies do not retain information once you leave the site. They permit, for example, to identify the terminals to dispatch the communication, to assign numbers to the data “packets” in order to dispatch them in the requested order, and to detect transmission errors or data loss.

The following strictly necessary cookies are used on this website:

Cookie	Implemented by:	Purpose:	Duration:
__RequestVerificationToken	Incentivesmart	Used to prevent CSRF attacks.	Lifetime of the session but is renewed for each request.
.ibauth	Incentivesmart	Used for authentication; set after user is logged in.	Lifetime of the session if not using “remember me” option; else within 7 days.

 

• Functionality cookies. These are used to recognise you when you return to our website. This enables us to personalise our content for you, greet you by name and remember your preferences (for example, cookies that save the preferences of the user such as language or region, cookies that save a user session, or cookies that provide a virtual shopping basket). The information is conserved beyond your browsing session on the internet website, and can be transmitted to partners, uniquely for means of supplying provisions necessary to the services.

The following functionality cookies are used on this website:

Cookie	Implemented by:	Purpose:	Duration:
__l	Incentivesmart	Used to persist language selected by the user.	Lifetime of the session.
__shidden	Incentivesmart	Used to remember user setting for “collapsed sidebar” in admin.	Lifetime of the session.

 

Please note that third parties (including, for example, advertising networks and providers of external services like web traffic analysis services) may also use cookies, over which we have no control. These cookies are likely to be analytical/performance cookies or targeting cookies.

4. How can you refuse and/or uninstall cookies?

You block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. This process will differ from browser to browser however a useful place to start is you ‘Help’ section on your internet browser.  Please remember, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our site.