Notice. When ProAmpac Intermediate, Inc. collects and uses Personal Information, it will inform the individuals to whom the information pertains about the purposes of such collection and usage, how to contact ProAmpac Intermediate, Inc. with any inquiries or complaints, the types of third parties to which ProAmpac Intermediate, Inc. discloses the information, and the choices and means ProAmpac Intermediate, Inc. offers individuals for limiting its use and disclosure. This notice will be provided in clear and conspicuous language when individuals are first asked to provide Personal Information to ProAmpac Intermediate, Inc. or as soon thereafter as is practicable, but in any event before ProAmpac Intermediate, Inc. uses such information for a purpose other than that for which it was originally collected or processed by the transferring organization or discloses it for the first time to a third party.
Choice. ProAmpac Intermediate, Inc. will offer individuals the opportunity to choose (opt out) whether their Personal Information is (a) to be disclosed to a third party or (b) to be used for a purpose that is incompatible with the purpose(s) for which it was originally collected or subsequently authorized by the individual. Individuals will be provided with clear and conspicuous, readily available, and affordable mechanisms to choose. For Sensitive Information, individuals will be given affirmative or explicit (opt in) choice if the information is to be disclosed to a third party or used for a purpose other than those for which it was originally collected or subsequently authorized by the individual through the exercise of opt in choice.
Onward Transfer. To disclose Personal Information to a third party, ProAmpac Intermediate, Inc. will apply the Notice and Choice Principles. Where ProAmpac Intermediate, Inc. wishes to transfer information to a third party that is acting as an Agent, it will first either ascertain that the third party subscribes to the Principles or is subject to the European Commissionâ€™s Directive on Data Protection or another adequacy finding or enter into a written agreement with such third party requiring that the third party provide at least the same level of privacy protection as is required by the relevant Principles. If ProAmpac Intermediate, Inc. complies with these requirements, it will not be held responsible (unless ProAmpac Intermediate, Inc. agrees otherwise) when a third party to which it transfers such information processes it in a way contrary to any restrictions or representations, unless ProAmpac Intermediate, Inc. knew or should have known the third party would process it in such a contrary way and ProAmpac Intermediate, Inc. has not taken reasonable steps to prevent or stop such processing.
Security. ProAmpac Intermediate, Inc. will take reasonable precautions to protect Personal Information from loss, misuse and unauthorized access, disclosure, alteration and destruction.
Data Integrity. Consistent with the Principles, Personal Information will only be used if it is relevant for such purposes. ProAmpac Intermediate, Inc. will not process Personal Information in a way that is incompatible with the purposes for which it has been collected or subsequently authorized by the individual. To the extent necessary for those purposes, ProAmpac Intermediate, Inc. will take reasonable steps to ensure that Personal Information is reliable for its intended use, accurate, complete, and current.
Access. Individuals can access Personal Information about them that ProAmpac Intermediate, Inc. holds and will be able to correct, amend, or delete that information where it is inaccurate, except where the burden or expense of providing access would be disproportionate to the risks to the individual's privacy in the case in question, or where the rights of persons other than the individual would be violated.
Enforcement. ProAmpac Intermediate, Inc. will conduct compliance audits of its relevant privacy practices on a six-month basis. The audits will be conducted by the Privacy Officer, or the Privacy Officerâ€™s designee, and are designed to verify adherence to this Policy. Any employee that ProAmpac Intermediate, Inc. determines is in violation of this Policy will be subject to disciplinary action including termination of employment or other form of association with ProAmpac Intermediate, Inc.
Dispute Resolution. Any questions or concerns regarding the use or disclosure of Personal Information should be directed to the Privacy Officer of ProAmpac Intermediate, Inc., at the address given below. Any individual presenting a question or concern about Personal Information must submit a written dispute resolution request providing the details of the issue in order for the Privacy Officer effectively to evaluate the issue. The Privacy Officer will investigate and attempt to resolve complaints and disputes regarding use and disclosure of Personal Information in accordance with the principles contained in this Policy. For complaints that cannot be resolved between ProAmpac Intermediate, Inc. and the complainant, ProAmpac Intermediate, Inc. elects to participate in the dispute resolution procedures of the home country of the complainant and will cooperate with the European data protection authorities to investigate and resolve disputes pursuant to the Principles. ProAmpac Intermediate, Inc. will comply with any advice given by the competent European data protection authority where the European data protection authority takes the view that ProAmpac Intermediate, Inc. needs to take specific action to comply with the Principles, including remedial or compensatory measures for the benefit of individuals affected by any non-compliance with the Principles. ProAmpac Intermediate, Inc. will provide the competent European data protection authority with written confirmation that such action has been taken.
Limitation on Application of Principles
Adherence by ProAmpac Intermediate, Inc. to these Principles may be limited (a) to the extent required to respond to a legal or ethical obligation (for example a national security requirement); and (b) to the extent expressly permitted or required by an applicable law, rule or regulation.
Questions or comments regarding this Policy should be submitted to our Privacy Officer by mail as follows:
ProAmpac Intermediate, Inc.
12025 Tricon Road, Cincinnati, OH 45246 Telephone: 513-671-1777
This Policy may be amended from time to time, consistent with the requirements of the Principles.
Agent means any person or third party that collects or uses Personal Information under the instructions of, and solely for, ProAmpac Intermediate, Inc. or to whom ProAmpac Intermediate, Inc. discloses Personal Information for use on ProAmpac Intermediate, Inc.'s behalf.
Personal Information means any information relating to an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to physical, physiological, mental, economic, cultural or social identity.
Sensitive Information is defined as Personal Information specifying medical or health conditions, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership or information specifying the sex life of the individual.
Privacy Officer means the individual responsible for internal audit of processes and procedures to safeguard Personal Information and for ensuring that transfers are consistent with applicable law.
CINLibrary 0115697.0562180 2202459v1