Privacy statement

This is the privacy statement of Outokummun Metalli Oy. Updated on October 1, 2024.
(The original privacy statement of our company is in Finnish. This is an unofficial translation.)

1. Register controller
Outokummun Metalli Oy
Sysmäjärventie 4, FI-83500 Outokumpu
Business ID: 0357188-8
Phone: +358 13 555 111

2. Contact person for data protection matters
Chief Financial Officer Sari Karhu
Phone: +358 40 564 8376
Email: sari.karhu@outokummunmetalli.fi

3. Name of the register
Customer and Partner Register of Outokummun Metalli

4. Purpose and legal basis for processing personal data
Personal data is collected and processed for the following purposes:

  • Managing and maintaining customer relationships
  • Delivering products and services
  • Marketing, communication, and recruitment
  • Fulfillment of legal obligations

The legal bases for processing are as follows:

  • Performance of a contract
  • Legitimate interests of the controller
  • Compliance with the law
  • Consent

5. Contents of the register
The register may contain the following information:

  • Name of the person
  • Email address
  • Phone number
  • Address
  • Company name and position in the company
  • Purchase history, orders, contracts
  • IP addresses and data collected through cookies
  • Consents and objections related to email marketing

6. Regular sources of information
Personal data is primarily collected from the customer themselves when they order products, register for services, provide feedback, make complaints or warranty claims, or use the company’s website. In addition, data may be collected from third parties, such as public registers and partners.

7. Regular disclosures of data and transfer of data outside the EU or EEA
Data is not disclosed to external parties except in legal cases or to manage customer relationships (e.g., payment service providers, logistics partners).

8. Data retention period
Personal data is retained as long as the customer relationship is valid and thereafter to the extent necessary due to accounting and other legal obligations. Data collected for marketing purposes can be retained until the customer withdraws their consent or requests the deletion of the data. Open job applications are retained for a maximum of six months.

9. Rights of the data subject
The data subject has the following rights:

  • Right of access: The right to check what information about you has been recorded.
  • Right to rectification: The right to request the correction of incorrect or incomplete data.
  • Right to erasure: The right to request the deletion of your data in certain situations (“right to be forgotten”).
  • Right to restrict processing: The right to restrict the processing of personal data in certain situations.
  • Right to object to processing: The right to object to the processing of personal data if the processing is based on the legitimate interest of the controller.
  • Right to data portability: The right to receive personal data in a structured, machine-readable format and to transfer it to another controller.

You can exercise your rights by contacting the contact person for data protection matters (contact details in section 2).

10. Right to lodge a complaint with a supervisory authority
If you believe that your personal data has been processed in violation of the GDPR, you have the right to lodge a complaint with the data protection authority (in Finland, the Office of the Data Protection).

11. Principles of data protection
We ensure the security of the processing of our customers’ personal data and the confidentiality, integrity, and availability of personal data through appropriate technical and administrative measures in accordance with the data security principles of the Outokummun Metalli Group. Personal data is protected from unauthorized access and from illegal and accidental processing. We train and guide our employees handling customer data on data protection matters.