Home

PRIVACY NOTICE

This privacy notice (hereinafter the “Notice”) explains how Aurubis Finland Oy collects, processes and discloses personal data. The Notice applies to the processing of personal data of the following groups of individuals: customers and potential customers, website visitors, job applicants, applicants for sponsorship, and employees of subcontractors and cooperation partners. 

CONTROLLER 

The controller under applicable data protection law is Aurubis Finland Oy (hereinafter “Aurubis Finland Oy”, “we”, “us” or “our”). Aurubis Finland Oy is responsible for ensuring that your personal data is processed in accordance with this Notice and applicable data protection laws. 

Controller’s contact details: 
Aurubis Finland Oy 
Business ID: 2413477-5 
Address: Kuparitie 5, 28330 Pori, Finland 

Data Protection Officer: 
Address: Kuparitie 5, 28330 Pori, Finland 
Email: tietosuoja@aurubis.com 

COLLECTION OF PERSONAL DATA 

Your personal data is collected in different ways. We collect and process personal data that 

  • you have provided to us when contacting us or doing business with us, for example during a customer relationship, when subscribing to our newsletter or when contacting us to request an offer or information, 
  • is generated when visiting our website, 
  • you have provided to us in connection with trade fairs or other events, 
  • you have provided to us in connection with a country-specific sales situation, 
  • you have provided to us during the recruitment stage, in connection with submitting a job application, a job interview or aptitude tests, 
  • you have provided to us in connection with a sponsorship application, and 
  • we have received from your employer, subcontractor or cooperation partner when your employer cooperates with us.

You are not required to provide us with your personal data, but if you decide not to do so, we may not be able to provide our services and products to you. 

We collect and process the following categories of personal data: 

  • basic customer information, such as name, professional title, your relationship with the company you represent, contact details (email address, address and telephone number) and language of communication, 
  • information related to the customer relationship, such as information concerning the ordered product, payment information, invoicing information, marketing consents and marketing opt-outs, 
  • information related to product quality assurance, 
  • customer contacts and related correspondence, as well as records concerning data subject rights, 
  • personal data related to job applications, such as name, contact details, professional competence, education information, salary expectations, aptitude assessment information, referee contact details, and professional cards and qualifications, 
  • personal data included in sponsorship applications, such as the name, telephone number and email address of the contact person for the sponsorship application, 
  • information generated in connection with the use of our website, for example information collected from the website using cookies or similar technologies (device identifier and type, operating system and application settings), and 
  • other information defined on a case-by-case basis on the basis of your consent. 
PURPOSES OF PROCESSING PERSONAL DATA, PERSONAL DATA PROCESSED AND LEGAL BASES FOR PROCESSING 

We collect and process your personal data for the following purposes: 

CUSTOMERS AND POTENTIAL CUSTOMERS 

Purposes of processing: managing and developing customer relationships, offering products and services, communication, contract management, invoicing and marketing. 

Personal data processed: basic customer information, such as name, professional title, your relationship with the company you represent, contact details (email address, address and telephone number) and language of communication; information related to the customer relationship, such as information concerning the ordered product, payment information, invoicing information, marketing consents and marketing opt-outs. 

Legal basis for processing: the legal basis for processing related to customer relationships and marketing is the controller’s legitimate interest in offering services, developing its operations and maintaining and promoting customer relationships with existing and potential customers. Contract is the legal basis where the data subject is a party to the contract. In addition, personal data is processed to comply with legal obligations applicable to the controller, such as accounting obligations. 

WEBSITE VISITORS 

Purposes of processing: ensuring the functionality and usability of the website, improving the user experience, analysing website use and ensuring information security. 

Personal data processed: information generated in connection with the use of the website, such as information collected by means of cookies and similar technologies (e.g. device identifier and type, operating system and application settings). 

Legal basis for processing: legitimate interest in ensuring the functionality, information security and development of the website, as well as consent for the use of cookies. 

JOB APPLICANTS 

Purposes of processing: carrying out the recruitment process, processing applications, assessing suitability, and communicating with applicants and referees. 

Personal data processed: information related to job applications, such as name, contact details, professional competence, education information, salary expectations, aptitude assessment information and referee contact details. 

Legal basis for processing: legitimate interest in carrying out the recruitment process and assessing applicants. The legal basis is consent when we retain an application for future employment opportunities. 

SPONSORSHIP APPLICANTS 

Purposes of processing: processing sponsorship applications, evaluating applications and communicating with applicants. 

Personal data processed: personal data included in sponsorship applications, such as the contact person’s name, telephone number and email address. 

Legal basis for processing: legitimate interest in processing sponsorship applications and communicating with applicants. 

EMPLOYEES OF SUBCONTRACTORS AND PARTNERS

Purposes of processing: managing cooperation relationships, induction, access management to systems and premises, ensuring safety and security, and fulfilling contractual obligations. 

Personal data processed: information provided by the employer, such as name, contact details, organisation and job title, as well as other information necessary for the cooperation, such as information related to induction and qualifications. 

Legal basis for processing: legitimate interest in carrying out and managing partner relationships and, where applicable, compliance with a legal obligation. 

TRANSFERS AND DISCLOSURES OF PERSONAL DATA 

We may disclose personal data to other companies belonging to the Aurubis Group within the limits permitted by applicable law for the purposes described in this Notice. Personal data may also be transferred between Aurubis Group companies for internal administrative purposes, such as reporting purposes and to conduct our business efficiently, including by using centralised IT systems. The disclosure of personal data within the Aurubis Group is based on legitimate interest. 

We may disclose personal data to third parties: 

  • to the extent permitted or required by law, for example to comply with a request for information from a competent authority or in connection with legal proceedings, 
  • when our partners process personal data on our behalf and in accordance with our instructions. We always ensure the appropriate processing of your personal data, 
  • if we are involved in a merger, corporate restructuring or the sale of our business or part of it, 
  • when we consider that disclosure is necessary to exercise our rights, protect your or others’ safety, investigate misconduct or respond to a request from an authority, and 
  • with your consent, to the parties covered by the consent. 
TRANSFERS OF PERSONAL DATA OUTSIDE THE EU OR EEA 

As a rule, personal data is not transferred outside the EU or the European Economic Area. In certain situations, we may transfer personal data outside the EU or the European Economic Area where our cooperation partner handling the assignment is established outside these areas. In such cases, we ensure appropriate safeguards to protect the rights and freedoms of data subjects in accordance with applicable data protection legislation, such as the EU General Data Protection Regulation (679/2016). 

COOKIES 

We also use cookies and other similar technologies on the website https://www.aurubis.com/finland/. Cookies are small text files placed on your device to collect and remember useful information and to improve the functionality and usability of our website. We may also use cookies and other similar technologies for statistical purposes, such as compiling statistics on website use in order to understand how users use the website and to improve the user experience. 

You can manage cookie settings on our website using the consent management tool, which you can open from the Cookies link at the bottom of the website. With this tool, you can completely prevent the setting of cookies other than strictly necessary cookies and limit the use of other cookies. You can also use your browser’s cookie settings to manage or delete cookies from your browser. Because cookies enable our website to function, restricting or deleting cookies completely may affect the usability of the website. 

 
RETENTION OF PERSONAL DATA 

Personal data is retained only for as long as necessary to fulfil the purposes defined in this Notice. 

We retain personal data for the duration of the customer relationship, information concerning orders for six years from the date of the order, and information concerning the customer relationship for three years after the end of the customer relationship. We may also retain personal data to the extent necessary, for example, to comply with your direct marketing opt-out. 

We retain information related to job applications for two years to ensure equal pay. The data is deleted manually. 

We retain personal data provided in sponsorship applications for no more than one year after the applications have been processed. We retain sponsorship agreements for the duration of the contractual relationship and thereafter for six years to fulfil statutory obligations, such as accounting obligations. 

Personal data is deleted when its retention is no longer necessary under the law or for the realisation of the rights or obligations of either party. 

YOUR RIGHTS 

You have the right to access your personal data. You may also request the rectification, updating or deletion of your personal data at any time. Please note, however, that personal data that is necessary for the purposes defined in this Notice, or that we are required by law to retain, cannot be deleted. 

You have the right to object to or restrict the processing of your personal data to the extent required by applicable law. 

In certain cases, in accordance with applicable law, you have the right to transfer the personal data you have provided to us from one system to another, i.e. the right to receive your personal data in a structured, commonly used and machine-readable format and to transmit your personal data to another controller. 

Where we process your personal data on the basis of consent, you have the right to withdraw your consent at any time. After this, we will no longer process the personal data unless there is another legal basis for the processing. 

You can exercise your rights by sending a request to us at tietosuoja@aurubis.com. 

If you consider that the processing of your personal data is not appropriate, you have the right to contact the Data Protection Ombudsman. You can find the contact details of the Data Protection Ombudsman on the Data Protection Ombudsman’s website: https://tietosuoja.fi/en/contact-information/. 

INFORMATION SECURITY 

We implement appropriate measures, including physical, digital and administrative measures, to protect personal data against loss, destruction, misuse and unauthorised access or disclosure. Access to personal data is limited to persons who need the data to perform their work duties. 

Please note that even appropriate measures cannot prevent all possible personal data breaches. In the event of a personal data breach, we will notify you in accordance with applicable laws. 

AMENDMENTS TO THIS NOTICE 

We have the right to amend this Notice. We will inform you of any changes on our website https://www.aurubis.com/finland/, where you can also find the latest version of this Notice. 

CONTACT US 

If you have any questions about this Notice or would like more information about the processing of your personal data, you can contact us by email at tietosuoja@aurubis.com. 

 

 Updated 03.09.2026