At Greif we take personal data protection and privacy seriously.

In this Privacy Policy we wish to inform you about the information we collect during your visit to Greif’s website and what Greif does with this information.

If you have any questions after reading this Privacy Policy, please contact us by using the contact details stated below.

Responsible for data processing and contact details:

Controller:

Greif, Inc.

425 Winter Road

Delaware, Ohio 43015

United States of America

EU representative for Controller:

Greif International Holding B.V.

Parktoren 5th Floor, Van Heuven Goedhartlaan 9A

1181 LE Amstelveen

The Netherlands

You may contact Greif’s Data Privacy Team via email: DataPrivacyTeam@greif.com

Types of Information:

Anonymous Information 

When you visit Greif’s website, Greif will automatically collect general information on the visitor activity to the Greif website by using IP addresses and setting temporary cookies to track user sessions. This data allows Greif to keep track of the number of visitors and helps Greif run and constantly improve the performance, content and functionalities of the Greif website. This information is analyzed in anonymous form. Greif may pass on data to external service providers in order to effectively run the website. Greif has taken technical and organizational measures to ensure that the data protection regulations are observed by these external service providers. Please see the sections on Cookies and Site Experience and Analytics for more information.

Registration Information

If you provide Greif with your email address or other personal information (for example, when you fill out a form or when you request to download brochures or product sell sheets), this information will be used to process any orders or to initiate contact with you by Greif only. You may be offered the choice of being added to email or postal mailing lists, but you are not required to do so.

Please be aware that once you provide us with your email address, you become a “known user” and the Greif website contains a web beacon that collects information on the usage of known users, which is used by Greif to provide you with more information on topics that appear to be of interest to you. If you wish, you can become an anonymous user again by clearing your browser settings.

We do not wish to process your information without you being aware and therefore we provide you with further information through the cookie notice (see: privacy center). See the Cookies section below for more information.

Use of Personal Data / Purpose and legal basis of processing:

Your personal data is only used in accordance with this Privacy Policy and the applicable data privacy laws and specifically in accordance with the European Union General Data Protection Regulation (GDPR) 2016/679.  No further usage or disclosure will take place without your explicit consent.

Please also see our separate statement on California Privacy Rights.

Greif is committed to protecting the privacy of visitors to the Greif website and will not use any personal information for any purpose other than Greif’s internal use, unless you choose to be added to certain mailing lists (this is a choice you make when you fill out a form on the website).

The purpose for processing the information provided by your browser is to:

• Be able to provide you with the website’s content
• Ensure the stability, security and proper functioning of our website
• Be able to offer a better user experience for the website

The legal basis for this processing is Greif legitimate interests following from the purposes stated above.

The purpose for processing the information you provide us by registering or contacting us:

• To answer your question or request
• To be able to contact you as requested
• To provide you with the information, products or services you requested
• To prevent abuse of our contact forms and ensure the security of our website

The legal basis for this processing is Greif’s legitimate interest following from the purpose stated above and where applicable also additionally as needed for the purpose of entering into and/or performing a contract or your explicit consent.

Cookies:

Greif websites use browser cookies to support site functionality and to store your browsing preferences. If you wish to opt out or adjust your cookie preferences, please refer to the privacy settings or “help” functionality of your internet browser and to the cookie notice displayed on the site.

Site Experience and Analytics:

We use Google Analytics to gain more insights on the usage of our site and to allow constant improvements of the site and the products and services we offer through the site. We generate a unique ID associated with you and share that information with Google. We do not share any additional personal information (such as account name, email addresses, name, national ID, or similar) that would allow Google to personally identify you. We use this information to better provide you with suggested products and services. For more information on Google Analytics see: www.google.com/policies/privacy/partners/.

To opt-out of Google Analytics tracking, you may decline cookies or install the Google Analytics Opt-out Add-on, available at https://tools.google.com/dlpage/gaoptout.

We use Hotjar in order to better understand your needs as a site visitor and to optimize our service and experience. Hotjar is a technology service that helps us better understand your experience (e.g. how much time you spend on which pages, which links you choose to click, what you do and don’t like, etc.) and this enables us to build and maintain our service with your feedback. Hotjar uses cookies and other technologies to collect data on your behavior and your devices. This includes a device’s IP address (processed during your session and stored in a de-identified form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language used to display our website. Hotjar stores this information on our behalf in a pseudonymized user profile. Hotjar is contractually forbidden to sell any of the data collected on our behalf. For further details, please see the ‘about Hotjar’ section of Hotjar’s support site.

Transfers to Third Parties:

Greif uses third party service providers for running and managing its websites. These third parties are required to comply with this Privacy Policy in performing their activities. If for processing your request or question, Greif needs to engage a third party, we will ensure contractually the confidentiality and security of your data.

Marketing mails:

For European contacts we work with an opt-in system in accordance with the GDPR. You can at any time let us know you wish to discontinue receiving communications.

Your privacy rights:

You have the right to ask Greif which personal information we have collected. You can also send Greif an email requesting us to delete or rectify this information or to withdraw at any time your consent for being included in mailing lists. For any such request, please see our contact details stated above. We will address your request as soon as possible. Under EU law, you also have the right to file a complaint with your data protection authority.

Storage, retention and security:

Greif stores personal data for as long as it is necessary to perform the services you requested and in compliance with Greif’s data retention policies and the retention periods required by law.    

Greif has implemented adequate technical and organizational measures to protect the information you have made available from being accidentally lost, destroyed or corrupted and from being accessed or manipulated by any unauthorized persons. Your personal information is stored in a database on a secure server. The database is password protected and is only accessible by Greif’s servers and authorized personnel of Greif. Greif reviews its security measures on an ongoing basis to ensure these are up to date and compliant.

Data Integrity and Purpose Limitation.

Greif will take reasonable steps to ensure that data is reliable for its intended use, and is accurate, complete, and current. Greif will take precautions to assure the personal information is relevant for the purposes for which it is to be used. In certain situations, Greif may be required to disclose personal data in response to lawful requests by public authorities, including for the purpose of meeting national security or law enforcement requirements. Where requests are made by US authorities to provide data of European data subjects, we do not automatically comply with such requests, but rather Greif will carefully weigh your privacy rights under the GDPR against any legal obligations and duties Greif may have to cooperate with such requests.

Transfer of data outside of the European Union:

Please be aware that this is Greif’s global website and that information you submit will be transferred to the United States of America. Greif, Inc., also on behalf of Greif’s subsidiaries in the U.S., has entered into the EU approved Standard Contractual Clauses as a valid transfer mechanism and therefore has contractually committed itself to comply with the obligations stated therein.

Third-Party websites and this Privacy Policy:

Please be aware that other third party websites that may be accessed through our website may collect personally identifiable information about you. The data privacy practices of those third party websites are not covered by this Privacy Policy.

Revisions and updates:

Technological changes related to the development of the Internet and changes in the applicable legislation may require Greif to make changes to our data protection rules from time to time. We reserve the right to implement appropriate changes and update our Privacy Policy accordingly at any time.

Version date: 10^th April 2023