PRIVACY NOTICE FOR CUSTOMERS 

This Privacy Notice (hereinafter the “Notice”) explains how Aurubis Finland Oy collects, processes and discloses the personal data of customers. 

 

DATA CONTROLLER 

The data controller under the applicable data protection law is Aurubis Finland Oy (“Aurubis Finland Oy”, “we”, “us” or “our”). Aurubis Finland Oy is responsible for ensuring that your personal data are processed in accordance with this Notice and with all relevant data protection legislation. 

Contact details of the data controller: 
Aurubis Finland Oy 
Business ID: 2413477-5 
Address: Kuparitie 5, 28330 Pori, Finland 

 

Data Protection Officer 
Address: Kuparitie 5, 28330 Pori, Finland 
Email: tietosuoja@aurubis.com 

 

COLLECTION OF PERSONAL DATA 

Your personal data is collected in various ways. We collect and process personal data that 

  • you provide to us when you interact with us or conduct business with us, e.g. during the customer relationship, when you subscribe to our newsletter, or when you contact us to request a quotation or information;
    • is generated when you visit our website;
    • you provide to us at trade fairs or other events; 
    • you supply to us in a country-specific sales situation. 

You are not obliged to provide us with personal data, but if you choose not to do so, we may be unable to supply our products or services to you. 

We collect and process the following categories of personal data: 

  • basic details, such as name, job title, your relationship to the company you represent, contact information (email, address and telephone number) and preferred language;
    • customer relationship data, such as information on the ordered product, payment data, invoicing details, and marketing consents or refusals;
    • data related to product quality assurance; 
    • customer enquiries and related correspondence, including records of data subject requests; 
    • data generated during use of our website, e.g. information collected via cookies or similar technologies (device identifier and type, operating system and application settings); and 
    • other data specified case by case on the basis of your consent. 

 

PURPOSES AND LEGAL BASES FOR PROCESSING PERSONAL DATA 

We collect and process only personal data that is necessary for operating our business, managing the customer relationship and pursuing legitimate commercial purposes. 

We process your personal data for the following purposes: 

  1. Provision of products and management of customer relationships 
    We process personal data to offer and deliver our products to you or the company you represent. To that end, we maintain and manage the customer relationship between you – or the company you represent – and us. In this case the processing is based on our legitimate interest in maintaining customer relationships. 
  1. Marketing 
    We may contact you to inform you of new products or to market and sell other products to you. We may also process personal data for market research and customer survey purposes. In this case the processing is based on our legitimate interest. 
  1. Invoicing 
    We process personal data to issue and receive invoices. In this case the processing is based on a legal obligation related to accounting and on our legitimate interest. 
  1. Service development, information security and internal reporting 
    We also process personal data to ensure the security of the customer relationship and of the website, and to improve and develop quality. Personal data may additionally be compiled into internal reports for management purposes. In these cases the processing is based on our legitimate interest. 
  1. Compliance with the law 
    We process personal data to meet statutory obligations, e.g. in relation to accounting, or to comply with lawful requests from authorities. In these cases the processing is based on a legal obligation. 
  1. Other purposes to which you have consented 
    We also process your personal data for other purposes where you have consented to such processing. In such cases, the processing is based on consent. 

 

TRANSFERS AND DISCLOSURES OF PERSONAL DATA 

We may disclose personal data to other companies belonging to the Aurubis Finland Oy group within the limits permitted by law for the purposes described in this Notice. Personal data may also be transferred between Aurubis Finland Oy group companies for internal administrative purposes, such as reporting, and to operate our business efficiently (for example by using centralised IT and communications systems). Disclosures within the Aurubis Finland Oy group are based on our legitimate interest. 

We may disclose personal data to third parties: 

  • to the extent permitted or required by law, e.g. to comply with a lawful request from a competent authority or in connection with legal proceedings;
    • when our partners process personal data on our behalf and in accordance with our instructions. We always ensure appropriate protection of your personal data;
    • if we are involved in a merger, corporate reorganisation or sale of all or part of our business; 
    • when we consider the disclosure necessary to protect our rights, your safety or the safety of others, to investigate misuse, or to respond to a public authority’s request; and 
    • with your consent, to the parties covered by that consent. 

 

TRANSFERS OF PERSONAL DATA OUTSIDE THE EU OR EEA 

As a rule, personal data is not transferred outside the European Union or the European Economic Area. In exceptional cases we may transfer personal data outside the EU or EEA where our partner handling an assignment is located outside these areas. In such cases we implement appropriate safeguards to protect the rights and freedoms of data subjects in accordance with applicable data-protection legislation, such as the EU General Data Protection Regulation (EU) 2016/679. 

 

COOKIES 

We use cookies and similar technologies on our website https://www.nordiccopper.com/. Cookies are small text files placed on your device to collect and remember useful information and to improve the functionality and usability of the website. We may also use cookies and similar technologies for statistical purposes, such as compiling statistics on website usage to understand how users use the site and to enhance the user experience. 

You can block, restrict or delete cookies in your browser. Because cookies enable our website to function, restricting their use may affect usability. 

You can read more about cookies here: https://www.nordiccopper.com/cookies-2/ 

 

RETENTION OF PERSONAL DATA 

Personal data is stored only for as long as necessary to fulfil the purposes defined in this Notice. 

Personal data is stored for the duration of the customer relationship, order-related data is stored for 6 years from the date of the order, and customer-relationship data is stored for 3 years after the customer relationship ends. We may also retain personal data as necessary to comply with any direct marketing prohibition you have issued. 

Personal data is erased when retention is no longer required by law or for the exercise or defence of legal claims. 

 

YOUR RIGHTS 

You have the right to access your personal data. You may at any time request the rectification, updating or deletion of your personal data. Please note, however, that data necessary for the purposes set out in this Notice or that we are legally obliged to retain cannot be deleted. 

You have the right to object to or restrict the processing of your personal data to the extent provided by law. 

Under certain circumstances you also have the right to data portability, i.e. the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format and to transmit that data to another data controller. 

Where we process personal data on the basis of consent, you have the right to withdraw that consent at any time. We will then cease processing unless another legal basis exists. 

You can exercise your rights by sending a request to tietosuoja@aurubis.com. 

If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with the Office of the Data Protection Ombudsman. Contact details are available at https://tietosuoja.fi/en/contact-information. 

 

DATA SECURITY 

We take appropriate physical, technical and organisational measures to protect personal data against loss, destruction, misuse and unauthorised access or disclosure. Access to personal data is granted only to persons who need the data to perform their duties. 

Please note that even appropriate measures cannot prevent all possible security breaches. In the event of a personal data breach, we will notify you in accordance with applicable law. 

 

CHANGES TO THE NOTICE 

We reserve the right to amend this Notice. We will inform you of changes on our website https://www.nordiccopper.com/, where the latest version of the Notice is always available. 

 

CONTACT 

If you have any questions about this Notice or you need further information on how we process your personal data, please contact us by email at tietosuoja@aurubis.com.