Pentair Blue Network – Pentair Water Purification

Consent

The Pentair Blue Network Use Agreements

I. Revisions

Date: 5/25/2018

II. Introduction

Your data privacy and security are important to us, so we're updating our Personal Information Policies.

Effective May 25, 2018, a new standard of data protection called General Data Protection Regulation (GDPR) will take effect across the EU and introduces new standards for handling or tracking personal data. Below are our NEW Personal Information Policies for citizens within the European Union and all other citizens throughout the world.

III. The Pentair Blue Network Loyalty Program Rules

PLEASE READ CAREFULLY

By ENROLLING in the PENTAIR BLUE NETWORK, you are AGREEING to the conditions governing the PENTAIR BLUE NETWORK and its related services, such as – but not limited to – Mon eau & moi, My water & me, etc.

PENTAIR BLUE NETWORK is a LOYALTY and REWARDS incentive benefit offered by Pentair Water Purification EMEA.

The PENTAIR BLUE NETWORK's purpose is to reward Pentair Water Purification professionals (Dealers and Installers) for their use, replacement and installation of Pentair Water Purification products.

PENTAIR BLUE NETWORK is FREE and EASY to join!

A. Eligibility Requirements

Must be a water purification professional (Dealer or Installer) doing business within Europe, Middle East or Africa.

Must be approved by your assigned Pentair Dealer Development Specialist (DDS).

B. The 2019 PENTAIR BLUE NETWORK Loyalty and Rewards Calendar of Events
- 2019 PENTAIR BLUE NETWORK Program starts January 1, 2019 and ends December 31, 2019
- Purchases reported between January 1 2019 and 31 December 2019 will be placed into the 2019 points bank
- Purchases reported after 31 December 2019 and before 31 December 2019 will be placed into the 2019 points bank
- ALL 2019 unspent points must be redeemed by 31 March 2020 (at 11:59 PM)
C. Becoming a member of the PENTAIR BLUE NETWORK

To become a member of the PENTAIR BLUE NETWORK, click on Enroll Now.

Step 1 – complete the online PENTAIR BLUE NETWORK enrollment form and you will receive a temporary online account. Once you've completed your enrollment application, an automated email confirming your membership application will be sent to your registered email address; your affiliated business office, and the assigned Pentair Dealer Development Specialist (DDS).

Step 2 – if you are the first person to enroll in PENTAIR BLUE NETWORK from your company, your online membership application will be forwarded directly to your Pentair Dealer Development Specialist for review and processing. If your business is already registered, then an automated e-mail will be sent to your employer for review and approval.

Step 3 – your online membership application will be reviewed and you will receive an e-mail regarding your membership application, you can login to PENTAIR BLUE NETWORK to determine the up to date status of your membership.

Once your membership is approved, you can begin earning points that are redeemable toward rewards.

IV. The Pentair Blue Network Site User Terms and Conditions

Thank you for using Pentair Blue Network's products and services. By using our products and services, you are agreeing to these terms. Please read them carefully.

A. Privacy Policy

We take your privacy seriously and will only use your personal information to administer your account and to provide the products and services you have requested from us.

B. Cookie Policy

This Cookie Policy is designed to tell you about our practices regarding the collection of information from you when visiting our website through Cookies and other tracking technologies.

i. What are Cookies?

A cookie is a small piece of data or a small text file stored by the browser on your computer, mobile phone, or other device at the request of our server.

We may use cookies to deliver content specific to your interests and to save your personal preferences so you do not have to re-enter them each time you connect to our website.

It's important to clarify that cookies do not collect any personal data stored on your hard drive or computer.

To find out more about cookies, how to control your cookie settings and browser settings, or how to delete cookies on your hard drive, please visit www.aboutcookies.org.

ii. Types of Cookies

Session Cookies - A session cookie, also known as an in-memory cookie or transient cookie, exists only in temporary memory while the user navigates the website. Web browsers normally delete session cookies when the user closes the browser. Unlike other cookies, session cookies do not have an expiration date assigned to them, which is how the browser knows to treat them as session cookies.

Persistent Cookies – A persistent cookies expire at a specific date or after a specific length of time. This means that, for the cookie's entire lifespan (which can be as long or as short as its creators want), its information will be transmitted to the server every time the user visits the website that it belongs to, or every time the user views a resource belonging to that website from another website (such as an advertisement).

For this reason, persistent cookies are sometimes referred to as tracking cookies because they can be used by advertisers to record information about a user's web browsing habits over an extended period of time. However, they are also used for "legitimate" reasons as well, such as keeping a user logged into her email account so she does not have to enter her login credentials every time she opens her browser.

Secure Cookies - A secure cookie can only be transmitted over an encrypted connection (i.e. HTTPS). This makes the cookie less likely to be exposed to cookie theft via eavesdropping.

Http Only Cookies - Http Only cookies can only be used when transmitted via HTTP (or HTTPS). They are not accessible through non-HTTP APIs such as JavaScript. This restriction eliminates the threat of cookie theft via cross-site scripting (XSS), while leaving the threats of cross-site tracing (XCT) and cross-site request forgery (CSRF) intact. Http Only cookies are supported by most modern browsers.

Third-Party Cookies - Normally, a cookie's domain attribute will match the domain that is shown in the web browser's address bar. This is called a first-party cookie. Third-party cookies, however, belong to domains different from the one shown in the address bar. These sorts of cookies typically appear when web pages feature content, such as banner advertisements, from external websites. This opens up the potential for tracking the user's browsing history and is often used by advertisers in an effort to serve relevant advertisements to each user.

iii. Which Cookies do we use?

We use:
- Session Cookies to temporarily store your Pentair Blue Network preferences while navigating the site. For example, holding your items in your shopping cart while navigating the catalog.
- Secure Cookies to encrypt sensitive information (such as credit card or bank information) when placing orders through Pentair Blue Network.
- Third-Party Cookies to store your personalization preferences when placing orders through third-party sites.
C. About these Terms

We may modify these terms or any additional terms that apply to a Product or Service, for example, to reflect changes to the law or changes to our Products or Services. We will post notice of modifications to these terms on this page.

V. The Pentair Blue Network GDPR Compliance Notice

We have made some policy updates to be GDPR complaint.

A. What is GDPR?

General Data Protection Regulation is a data protection and privacy regulation for all individuals residing in the European Union. GDPR addresses the how EU personal data is administered outside of the EU. The GDPR aims primarily to give EU citizens and residents control over their personal data, and to simplify the regulatory environment for international business by unifying the regulation within the EU. The GDPR replaces the 1995 Data Protection Directive.

B. When does GDPR come into effect?

The GDPR was adopted in April 2016 but will officially be enforceable beginning on May 25, 2018.

C. Who does it affect?

The GDPR not only applies to organizations located within the EU but it will also apply to organizations located outside of the EU if they offer goods or services to, or monitor the behavior of, EU data subjects. It applies to all companies processing and holding the personal data of data subjects residing in the European Union, regardless of the company's location.

D. The Pentair Blue Network and GDPR

The operators of Pentair Blue Network understand the commercial and professional significance associated with the collection of Personal Information (for complete details about our site use polices please refer to The Pentair Blue Network Use Agreement, located at www.bluenetwork.pentair.com).

All information collected through The Pentair Blue Network is considered private and is not traded or transferred to any brokers or aggregators. Additionally, Pentair's collection of Personal Information via The Pentair Blue Network is exclusively to fulfill the business objectives of The Pentair Blue Network and to promote and sell Pentair products and services to Pentair Wholesale Distributors, Pentair Dealers and Pentair Retail Consumers.

E. How does Pentair Blue Network comply with the GDPR?

Beginning May 25, 2018, the operators of The Pentair Blue Network will maintain compliance with the regulations defined as GDPR.

F. How we use your information

We have a legitimate interest in running a successful and efficient business and in providing you with the products and services you need. We use the information we collect from you for the following purposes:
- To provide the requested products and services to you
- To provide you with useful content
- To offer and improve our products and services
- To provide you with requested information or support
- To facilitate your movement through our website or your use of our products and services
- To diagnose any issues with our servers or our products or services
- To administer our website
- To track pages you view or update
- To communicate with you. This could be important details relating to your account, administrative messages, and other information via email or phone.
- To produce reports or dashboards on trends or statistics
- Bank account or payment information you provide to us, will only be used to facilitate payment or redemptions for our products and services.
- To assist us in offering you a personalized experience or otherwise tailor our products and services to you; and
- As otherwise described in The Pentair Blue Network Use Agreements.
G. Sharing of information

As described below, we will only share certain personal information with:
- Our partners
- Third party service providers and vendors. This could be for fulfillment of orders, reward or rebate redemptions, reporting purchases, online payments, or data analytics. Third party recipients include: warehouse distribution centers, third-party applications for processing orders and reporting purchases. Third parties whom we share personal information with:
  - Spectrum E-Commerce Solutions
- Authorized users within your organization; and
- For legal reasons
H. Information About The Pentair Blue Network Compliance Process

Following is our compliance plan outline. We are providing this outline as a means of conveying with the regulations about creating and maintaining compliance with GDPR. For security reasons, we will NOT be providing specific details of our compliance plan within this forum, however the outline should provide interested parties with insight into our general compliance approach.

i. Our Code of Conduct

ii. Definition of Auditable Actions

iii. Our Policies

iv. IT Training and GDPR Upkeep

Key people in our organization have been educated on GDPR compliance. This includes educating key decision makers and implementing employee training on data protection.

v. Third Party Policies and Procedures

vi. GDPR Standards for Pentair Blue Network
- 1. Data Collection and Assessment
  
  We have conducted an information audit across our systems for maintaining personal data and processing activities. Processing of your personal data is necessary for Pentair Blue Network reporting and tasks which requires your consent. This complies with Article 6 of the GDPR regarding the lawfulness of processing data. We store this data we collect in a variety of places within our infrastructure, including system log files, databases and analytics systems. Your personal information may include:
  - PII (Personal Identifiable Information) – see Definitions
    - First Name or First Initial and Last Name
    - Home Address
    - Business Address
    - Pentair Blue Network Account Number
    - Email
    - Phone Number
    - Country
    - IP address and cookie data (for account security and monitoring)
  - SII (Sensitive Identifiable Information) – see Definitions
    - N/A
  2. Data Retention and Deletion
  
  Generally, personal information should only be retained for as long as necessary. The retention period of your personal information can differ based on the type of data processed, the purpose of processing or other factors.
  
  Exceptions may apply to the processing for historical, analytical, or reporting purposes.
  
  3. Security and Technologies Assessment
  
  We have implemented the necessary safeguards to protect your personal data from unauthorized access, use, disruption, modification, inspection, recording or destruction. Our IT infrastructure is secured at all times to prevent cyber-attacks which includes:
  - Firewalls
  - Anti-virus software
  - Virtual private networks (VPN)
  - SSL certificates
  - Data encryption, and more.
  This complies with Article 25 and Article 32 of the GDPR, which requires organizations to be able to show how they comply with data protection.
  
  In the event there is a data breach, a notification will be made to affected users within 72 hours of detection per Recital 85 of the GDPR.
  
  4. Controls and Notifications
  
  5. Explicit and Retractable Consent
  
  We have provided consent in clear and plain language at the bottom of this page for processing your personal data in accordance to Article 12 of the GDPR. You may easily withdraw consent at any time per Article 7 of the GDPR, but you will not be able to access the Pentair Blue Network site as personal data is needed in reporting and processing activities. To update your consent, please login to Pentair Blue Network and access your profile information under My Account.
  
  6. Right to Access and Portability
  
  Per Article 15 of the GDPR, you may request confirmation as to whether or not personal data concerning you is being processed, where and for what purpose. Further, Pentair shall provide a copy of your personal data, free of charge, in a standard electronic format. However, we may charge a fee when a request is manifestly unfounded or excessive. We may also charge a fee to comply with requests for further copies of the same information. We have a process in place to ensure:
  - That we respond to a request a copy of your personal information without undue delay within one month of your request.
  If you request to have a copy of your personal information, please contact:bluenetwork@pentair.com.
  
  7. Right to Restriction of Processing
  
  You may have the right to suppress or restrict the processing of your personal information. This is not an absolute right and only applies in certain circumstances (see Article 18 of the GDPR). Methods by which to restrict the processing of personal data could include:
  - Temporarily moving your data to another processing system
  - Making your selected personal data unavailable or inactive
  - Temporarily removing published data from Pentair Blue Network.
  If you request to restrict your personal information from being processed, please contact: bluenetwork@pentair.com.
  
  8. Right to Rectification
  
  Per Article 16 of the GDPR, you may request for rectification of your personal information if your data is inaccurate or incomplete. We have a process in place to ensure:
  - That we respond to a request for rectification without undue delay within one month of your request.
  - We have appropriate procedures in place to rectify or complete information or provide a supplementary statement.
  If you request to have your personal information rectified, please contact: bluenetwork@pentair.com.
  
  9. Right to be Forgotten
  
  You may have the right to be forgotten or have your personal information deleted per Article 17 of the GDPR. This may be the mere technical delisting or inactivation of your personal data from being displayed within the Pentair Blue Network website search results. We have a process in place to ensure:
  - That we respond to a request for erasure without undue delay within one month of your request.
  - We have appropriate procedures in place to erase information.
  If you request to have your personal information erased, please contact us at: bluenetwork@pentair.com.
  
  10. Evolution of The Pentair Blue Network GDPR Compliance Plan
I. Children

Our products and services are not directed to persons under 18. We do not knowingly collect personal information from children under 18. If a parent or guardian becomes aware that his or her child has provided us with personal information without such parent or guardian’s consent, he or she should contact us. If we become aware that a child under 18 has provided us with personal information, we will delete such information from our files.

VI. Definitions

A. PII (Personal Identifiable Information)

Information to identify, contact, or locate a single person, or to identify an individual in context.

Personal identifiable information does not include publicly available information that is lawfully made available to the general public or through governmental records.

B. SPI (Sensitive Personal Information)

For purposes of this definition, "sensitive personal information" means financial information, account numbers, passwords and transaction activities. Personal identifiable information does not include publicly available information that is lawfully made available to the general public or through governmental records.

VII. Contact Information

If you have any questions regarding The Pentair Blue Network Use Agreements please contact: bluenetwork@pentair.com

VIII. The Pentair Blue Network GDPR Compliance Statement

As a member of The Pentair Blue Network, you have the following rights and assurances:
1. The Pentair Blue Network will provide notices for PII and SPI information Consent and Collection.
2. You will have access to your data stored on The Pentair Blue Network.
3. You can correct errors contained within your personal data.
4. You can withdraw personal data stored on The Pentair Blue Network.
5. You can opt out of Pentair Blue Network processing of your personal data.
6. You can export your Pentair Blue Network data.
7. The Pentair Blue Network will maintain a history of your individual data processing events.

Consent Statement

By submitting your information, you confirm that you agree to the storing and processing of your personal information by Pentair Blue Network as described in the Privacy Notice.

Yes, I would like to receive email communications from Pentair Blue Network regarding my account, bonus promotions and programs/redemption milestones. I understand that I can withdraw my consent at any time as described in the email communications or by updating my Privacy Preferences on my account page. We will handle your personal information in accordance with our Privacy Notice.

Enter Name

Pentair Internal Users Only
User/Employee ID


Enroll	Register the serial number of the product	Redeem for gifts