Customers and partners are valuable assets to the Stena Metall Group. Therefore, it is important to us that you feel confident about how we treat your personal data. It must be treated in a safe and secure manner and comply with the General Data Protection Regulation (GDPR) (EU) 2016/679. You can read more about your rights below and visit the EU GDPR website for more information.
Personal data is any information that can be linked directly or indirectly to an individual. Typically, personal data includes personal identification numbers, names and addresses. Photographs of individuals or IP numbers can also be classified as personal data.
An organization number is personal data if it relates to a self-employed individual. However, GDPR/Data Protection legislation does not apply to legal entities.
Stena Metall AB (organization number 556138-8371) and its affiliate companies are legally responsible for the personal data that they hold.
Personal data is collected before entering into any customer relationship, contract or assignment. Personal data may also be collected from suppliers, partners and other stakeholders.
Personal data is mainly collected and processed by us when entering into, administering and fulfilling agreements and contracts, or when it is legally required.
We collect and process personal data from individuals that use our support functions, visit our websites or attend events that we organize or when they otherwise contact us.
Personal data that we collect and process includes:
We collect and process personal data for different purposes. We primarily do this in order to:
We base our collection and processing of personal data on a range of legislation, which is described below.
For example, we process personal data in order to fulfill agreements and contracts with customers - to make bookings, purchases and produce invoices.
In some cases, we are legally obliged to collect and process personal data, for example, in order to comply with accounting legislation. In these cases, we only save data to ensure legal compliance.
Some of the personal data processing that we carry out is based on so-called legitimate interest. For example, this applies to personal data processing carried out in order to send offers about our goods and services. We do not process sensitive personal data in order to do this and do not perform any processing that constitutes profiling based on legitimate interest.
Finally, we can only process personal data with your explicit consent. You can withdraw your consent by contacting us. Our contact details are given below.
Personal data is only stored for as long as it is necessary for the purposes described in this document. It will only be saved for longer periods if it is required to fulfill legal requirements or to safeguard our legal interests.
We may share personal data with third parties, such as Stena Metall Group companies and other partners and suppliers. We may also provide personal data to companies that offer address update services, in order to ensure that we have up-to-date information.
Personal data may also be shared in order to comply with applicable legislation or government requirements. It may also be shared in order to safeguard our legal interests or detect and prevent security and technical problems.
We may transfer your personal data to countries outside the EU/EEA, if Stena Metall Group suppliers or partners are located there. If personal data is transferred to any country outside the EU/EEA, we will take steps to ensure that it remains protected and will also make sure that this is done in accordance with the relevant legislation.
We will not sell your personal data to third parties unless we have specific consent from you.
It is important that you feel confident when submitting your personal data to us. We have therefore taken the necessary security, technical and organizational measures to protect your personal data and ensure that it is processed in accordance with all relevant legislation.
Stena Metall is responsible for processing the personal data it holds in accordance with all relevant legislation.
On request, or on our own initiative, we will correct, de-identify, delete or supplement information that is found to be incorrect, incomplete or misleading.
You are entitled to:
You are entitled to data portability, which means that you have the right, under certain conditions, to extract and transfer personal data concerning you in a structured, commonly used and machine-readable format and have the right to transmit it to another personal data controller.
You are entitled to object to personal data processing performed on the basis of a legitimate interest. If you object to this, we will only continue processing your personal data if there are legitimate reasons that outweigh your interests.
If you do not want us to process your personal data for direct marketing purposes, you are entitled to object by sending an email to firstname.lastname@example.org or contacting us (see below). Once we have received your instruction, we will cease processing your personal data for these purposes.
You are entitled to lodge any complaints regarding the processing of your personal data with the supervisory authorities.
This information is valid as of 25-05-2018