1. Data Controller Metsäliitto Cooperative ( Metsä Wood ) registered address of the head office at Revontulenpuisto 2, Espoo, Finland

Transcription

1 5 December (4) Privacy Statement This privacy statement and description of the file ( Privacy Statement ) describes the personal data handling practices including a description of the gathered personal data and how the personal data is processed. This Privacy Statement may be changed without prior notice to the extent possible under the applicable legislation. 1. Data Controller ( Metsä Wood ) registered address of the head office at Revontulenpuisto 2, Espoo, Finland 2. Contact Person Mr. Mikko Saavalainen Mailto: [firstname.lastname]@metsagroup.com 3. Name of the Register User register of Metsä Wood s opensourcewood.com service ( Register ) 4. The purpose for processing personal data The Register is used by Metsä Wood and its subsidiaries. Processing of personal data is based on Metsä Wood s legitimate interest (performance of the Service contract) and/or consent of the registered person. The Register contains personal data of persons who have registered for the opensourcewood.com service ( Service ) and created their own account. Information may be also collected by using cookies whether or not the user of the Service has created an account (see later). The type of information collected depends on whether the user decides to register to the Service or use the Service without registration. However, if information requested by Metsä Wood is not provided, Metsä Wood may not be able to provide the information or services requested or otherwise fulfil the purpose(s) for which Metsä Wood has asked for the personal information. Metsä Wood uses the personal data collected in connection with the Service to provide, maintain, protect, develop and improve the Service. Metsä Wood may also use personal data for supporting its business analysis and operations, business intelligence, product development, improving products and services, personalizing content and providing advertising. Metsä Wood may share personal data with its subsidiaries for the above purposes as well as with other companies which Metsä Wood has hired to provide services for Metsä Wood.

2 5 December (4) 5. Processed Personal Data Personal Data collected in connection with the registration for the Service, such as: Name; Street address, postal code, city, country; address; Organisation; Job title Education Links to Twitter, Facebook, LinkedIn profile page Profile picture Description Personal Data collected in connection with the use of the Service by the registered person (e.g. trough cookies and similar technologies), such as: Use and ways of use of the Service; Device information; Log information; IP address; Location information; 6. Regular sources of information and cookies Personal data is provided by the registered person himself/herself upon registration and use of the Service. Personal data is also collected by Metsä Wood in connection with the use of the Service by the registered person. The Service uses cookies and similar technologies for the purposes of acquiring personal data. A cookie is a small text file saved on the user s device by a web browser. More information on cookies is available at By using the Service, the registered person approves the use of cookies. If the registered person wants to disable cookies, he/she should refer to his/her browser help menu to learn how to disable cookies. If the registered person denies accepting cookies, he/she may not be able to access or use the Service. 7. Regular destinations of disclosed data and whether the data is transferred to countries outside the EU/ EEA Metsä Wood may process personal data in such jurisdictions Metsä Wood has presence. Metsä Wood uses external service providers to collect, use, analyze and otherwise process information on its behalf. These service providers are bound to use personal information shared with them only to perform their services Metsä Wood has hired them to provide. Metsä Wood may also share your personal

3 5 December (4) information to the extent necessary to meet any applicable law, regulation, legal process or enforceable governmental request. The personal data may be uploaded to Metsä Wood customer management system ( Metsä Wood CRM register ). Metsä Wood CRM register s privacy policy is available upon a request to Metsä Wood s contact person. The personal data can be processed within EU/EEA and outside EU/EEA provided that any such activities are done in accordance with applicable legislation valid at the time the processing activities take place. The personal data can be processed within EU/EEA and outside EU/EEA. Metsä Wood will only transfer personal data outside the EU/EEA in accordance with one of the legal grounds described below: the recipient country is regarded by the European Commission to provide adequate protection for personal data; Metsä Wood has put in place appropriate safeguards for the transfer by using the model contracts for the transfer of personal information to third countries issued by the European Commission. Registered person may receive a copy of these contracts by contacting Metsä Wood at the address set out in Section 9; or Registered person has given a consent to the transfer, or there is another legal basis for the transfer under the data protection legislation. 8. Data Security Personal data is handled with care and in confidence. The register is only used by personnel whose job requires executing the Service. Users login to the Register by either giving their personal user ID and password, or by utilizing single-sign on technology. User rights require separate approval from nominated Metsä Wood business area approvers. All data is protected by regularly reviewed appropriate technical data security measures. 9. Right of access The registered person has a right of access to the personal data on him/her in the personal data file The registered person has the right to: access, update, remove and correct his/her personal data cancel his/her consent, where the processing of personal data is based on consent

4 5 December (4) object to the use of your personal data, on grounds relating to your particular situation demand Metsä Wood to restrict the processing of his/herpersonal information; and receive his/her personal data in machine-readable format and transfer such information to another controller, where he/she has provided the personal data to Metsä Wood and where the processing of such information is based on his/her consent The registered person may exercise any of rights above by contacting Metsä Wood in person, by post or by at the address set out in this Section 9. Metsä Wood may request you to specify your request in writing and to authenticate your identity before handling your request. If the registered person is unhappy with the way Metsä Wood processes his/her personal data, he/she has a right to make a complaint to the competent supervisory authority, who is responsible for monitoring compliance with the applicable data protection legislation. Requests shall be submitted in writing to:, Metsä Wood Attn: Mikko Saavalainen [firstname.lastname]@metsagroup.com Revontulenpuisto Espoo Finland. Request can be submitted in person at: Revontulenpuisto Espoo Finland. When submitting a request in person, a valid identification card containing a photo must be presented. 10. Updating your data Personal data included in the Register can be updated by contacting Metsä Wood s contact person 11. Data retention policy Personal data along with the Service user account will be kept as long as the user account is active and there was no request made by the registered person to delete the user account. In case of inactive user account, after 2 years of continuous inactivity the user account will be deleted along with the personal data. After deletion of the account and the personal data, the account cannot be used anymore.

5 5 December (4)