Privacy statement

1. The right to prohibit direct marketing

The registrant has the right to refuse direct marketing at any time. Every e-mail sent by Ruukin Kehräämö has a link from which you can directly cancel the subscription to the newsletter.

2. The right to check your own data (right to check)

Everyone has the right to know what information about them is stored in the personal register. You can ask us to check your information by proving your identity.

3. The right to demand correction or deletion of information

Ruukin Kehräämö removes, corrects and completes incorrect, unnecessary, incomplete or outdated information at the request of the data subject.

The registered person has the right to request the deletion of data if data processing is not necessary. We process the deletion request, after which we either delete the data or provide a justified reason why the data cannot be deleted.

It should be noted that the controller may have a statutory or other right not to delete the requested information. The registrar is obliged to keep the accounting material in accordance with the period (10 years) defined in the Accounting Act (Chapter 2, Section 10). For this reason, accounting-related material cannot be deleted before the deadline expires.

4. The right to restrict processing

The registered person has the right to demand that the active processing of his personal data be restricted, for example, when they disputes the accuracy of their personal data and demands that this personal data be corrected or deleted. In this case, the personal data in question may only be stored, not processed in any other way.

5. The right to object to the processing of personal data

The registered person can object to the processing of personal data if they feels that the personal data has been processed unlawfully.

6. The right to transfer data from one system to another

Insofar as the data subject has themself submitted information to the customer register, which is processed on the basis of the consent or mandate given by the data subject, the data subject has the right to receive such information, as a rule, in machine-readable form and the right to transfer this information to another data controller.

7. The right to withdraw consent

If personal data is processed based on the data subject's consent, the data subject has the right to withdraw his consent by notifying Ruukin Kehräämö.

8. The right to file a complaint with the supervisory authority

The registered person has the right to file a complaint with the competent supervisory authority if the data controller has not complied with applicable data protection regulations in its operations.

Please note that proof of identity must be provided in connection with all inquiries and requests related to the register.

We process personal data in matters related to customer management (e.g. to produce and deliver services, for invoicing and collection, to process complaints, in customer support and to measure customer satisfaction), in customer communication and in the marketing and development of services offered by Ruukin Kehräämö and its partners.

Your data may also be collected and processed to fulfill legal obligations, such as for accounting and regulatory purposes. We collect, store and process personal data only for predefined purposes.

We make sure that we always have a legal basis for processing your personal data.

We process data mainly for the fulfillment and preparation of contracts (e.g. production and delivery of our services, customer management, processing complaints and customer feedback) and based on our legitimate interest (e.g. direct marketing to our customers and product development of our services).

With your consent, we may use your email address to send newsletters and marketing letters or process your other information based on your consent. If we only process your data based on your consent, you can withdraw your consent at any time.

We may also process your data to fulfill legal obligations, such as for accounting and regulatory purposes.

Information such as the following can be saved from the registration:

• Name
• Telephone number
• Email address
• Address
• Order, billing and delivery information
• Information about purchase transactions
• Consent information
• Publicly available classification information
• Customer feedback information
• IP address information or other identifier
• Information collected through cookies
• Which page do you visit, how long do you stay on the site, how did you come to the site and which links do you click on
• Information collected from social media channels

Other information collected with the customer's consent.

We collect personal information about you from you when contacting us or in connection with a purchase. We also collect data at events or trainings.

With the help of Google Analytics and Microsoft Bing Webmaster tools, we collect visitor information on our website so that we can analyze and develop our website even better. The information is automatically saved in the register when the user leaves the information on our website or when using the www.ruukkinkehraamo.fi/com service. We also collect non-identified information through social media channels using their own tools.

As a rule, your personal data is processed by Ruukin Kehräämö staff in their work. Your information may also be disclosed to our subcontractors and partners based on a written agreement. Our subcontractors and partners process personal data in an agreed manner to promote legal purposes. These include, for example, data center and cloud services for data storage, suppliers of the IT systems we use, and external services purchased to support sales and marketing.

We may also disclose information otherwise to fulfill contractual obligations or when required by law or a competent authority. We may also disclose your information if we are involved in a business transaction.

We may hand over anonymized or statistical information that cannot be linked to a person. If such information can no longer be considered as personal information, we may also disclose information to third parties for purposes other than those mentioned here.

In processing your personal data, we use service providers who may have access to your personal data from outside the EU/EEA area, such as Canada. We take care of the appropriate and legal implementation of the transfers in accordance with the legislation on the processing of personal data.

In all situations, we transfer your personal data outside the EU/EEA area only on one of the legal grounds mentioned below:

• The European Commission has decided that an adequate level of data protection has been ensured in the recipient country in question
• There is another legal basis for transferring your personal data outside the EU/EEA area, such as the Privacy Shield arrangement approved by the European Commission for the United States.

We respect the confidentiality of your personal data.

Personal data is protected from access by outsiders with firewalls, anti-virus programs, personal user IDs and passwords. Access to personal data is only available to persons authorized by Ruukki spinning mill, whose work tasks require the processing of personal data.

We only provide personal data confidentially and limitedly on the basis of agreements to our contractual partners, such as our subcontractors. Our contractual partners must commit to implementing adequate data security and processing personal data in accordance with the law in all respects. Personal data processors are bound by a duty of confidentiality.

Our website uses a TLS-encrypted HTTPS connection, so all personal data is protected in electronic form. In the browser, you can see this by the green lock on the left side of the address bar. If the data is in a manual format, it is stored in rooms locked from outsiders and destroyed securely.

Cookies are small text files that are automatically saved on the computer / terminal device when the visitor visits different websites. Our online service uses cookies so that we can offer our service as user-friendly and high-quality as possible.

The cookies we use are related to our marketing automation system, Google Analytics, and the social media channels we use, i.e. LinkedIn, Youtube, and the services of Facebook companies.

Among other things, these software stores information about which page you visit, how long you stay on the site, how you came to the site and which links you click. We may use cookies to develop our services and website, to analyze website usage, and to target and optimize marketing. By tracking website traffic, we develop our website to make it even better and to be able to provide users with a better visiting experience.

If you do not want the online service to receive information using cookies, you can deny cookies by selecting Reject in the cookie banner.