We use cookies to give you the best possible experience of our website. Read more here OK The website works better with cookies We use cookies to give you the best possible experience of our website. A cookie is a small text file which is saved in your browser. Two types of cookie There are two types of cookie: permanent and temporary. The latter are also called session cookies. Permanent cookies are stored as a file on your computer or mobile device until they are deleted – by you or by the server that sent them. Temporary cookies are stored for a short time to facilitate your visit to the website, and disappear when you close the browser. We use cookies to develop the website SMA Mineral uses cookies to gather data on how our visitors use the website. For example, it is useful to know which pages are most popular, which operating system or browser our visitors are using, and whether they often run into error messages on some pages. The information is used to develop and improve our website. Here is a list of major cookies that we use Google Analytics (Find out more here) Cookie Expiry time Description _ga 2 years Used to identify visitors. _gid 24 hours Used to identify visitors. _gat 1 minute Used to throttle page calls. pll_language 1 year Used to control the language. If you do not want to store cookies If you previously consented to us using cookies for your visit but then change your mind and do not want to allow cookies, you can set your browser to display a warning every time a website wants to place a cookie on your device. You can also choose to block the storage of cookies altogether. You can find out how to do this from the Help function in your browser. In your settings, you can block all cookies, but you can also opt to accept only first-party cookies or to delete all cookies when you close your browser. Remember that some essential cookies will be needed if you want to go on using our website and our services. Privacy policy Introduction Our privacy policy helps you to understand what data the companies within the SMA Mineral Group collect, how the companies use this data and what options you have as a user of our website or recipient of our information via newsletters, etc. When we use the terms “SMA Mineral Group”, “we”, “our” or “us” in this policy, we are referring to the companies that form part of our corporate group at any given time, as described on our website and/or listed in this document. When we use the term “user”, we are referring to any person who uses our services and/or visitors to our website or social media channels or people who receive our newsletters. Under applicable data protection legislation, personal data can only be collected for “specified, explicit and legitimate purposes”. The data collected may not be further processed in a manner that is incompatible with these purposes. In addition, the party that collects the data must have legal grounds for processing it, known as a legal basis. Our processing of your personal data is based on one or more of the following legal bases: • processing is necessary for the performance of our contract with you (“contract”); • processing is necessary for our compliance with a legal obligation (“legal obligation”); • processing is necessary for our legitimate interests, except where such interests are overridden by your interests in the protection of your personal data (“legitimate interests”); or • in some specific cases, after you have given consent to such processing (“consent”). In the vast majority of cases, the legal basis is a contract, legal obligation or legitimate interests. Sometimes, however, our processing requires your consent. Where this is the case, we will obtain your consent for the processing in question before we begin processing. You can always contact us with any questions about issues of privacy or data protection by emailing sma@smamineral.com Below, we provide a description of the “legitimate purposes” for which we collect your personal data, as well as the legal bases on which we do this. The contents of the policy are as follows: 1. Your rights 2. What are the situations where we need to process your personal data? 3. Newsletters 4. Social media 5. Job vacancies 6. How do we obtain information about you? 7. Who may we share your data with? 8. Where we will process your personal data 9. Contact us Your rights Under applicable data protection legislation, you have the right to information about when and how we process your personal data. You also have the right to have access to your personal data or to have it transmitted, rectified or erased. You can read more about your rights below: 1. Right to information 2. Accurate data 3. Right to erasure (“right to be forgotten”) 4. Right to restriction of processing 5. Data portability 6. Right to object 7. Complaints 8. Compensation Right to information You have the right to receive information free of charge about the personal data we process about you (called a register extract). Such a request for an extract must be made in writing and signed by you. Please note that we only provide such information if we can be sure that it belongs to you. We are also unable to disclose information that infringes the rights of another party. Please send all requests of this kind to the address below. Mark the envelope “Dataskydd”. SMA Mineral AB, Box 329, SE-682 27 FILIPSTAD To ensure that the register extract is not sent to the wrong person, we will send it to your registered address in the Swedish population register. Accurate data We always try to ensure that your personal data is accurate and up to date. If we discover inaccurate or incomplete data, we will try to rectify or remove it. If data is rectified at your request, we must inform those with which we have shared your data about such rectification. This does not apply, however, where it proves impossible or excessively burdensome for us to do so. Your right to information means that you have the right to know who we have shared your data with. The right to be forgotten We store your personal data for as long as you are our customer or for as long as you subscribe to our newsletters. Once the customer relationship has ended, we will erase your personal data within 12 months, except where we are required by law to store it for a longer period (under the Swedish Bookkeeping Act for example). As our customer, you have the right to contact us at any time and ask for your personal data to be erased. We have an obligation to erase your data in the following circumstances: • If the data is no longer necessary in relation to the purposes for which it was collected • If processing is based on your consent and you withdraw your consent • If processing is for the purposes of direct marketing and you object to the data being processed • If the individual objects to the processing of personal data that takes place on the legal basis of legitimate interests and there are no legitimate reasons that override your interests • If the personal data has been unlawfully processed • If erasure is required for compliance with a legal obligation • If data is erased at your request, we must inform those with which we have shared your data about such erasure. This does not apply, however, where it proves impossible or excessively burdensome for us to do so. You also have the right to request information about who we have shared your data with. Restriction of access In some cases, you may have the right to require the processing of your personal data to be restricted. Restriction means that the data is marked in our systems so that in the future it can only be processed for certain specified purposes. The right to restriction applies in situations such as where you believe the data to be inaccurate and have requested rectification. In such cases, you may also request that the processing of your data be restricted while the accuracy of the data is investigated. You must be informed when the restriction is lifted. Data portability The party that has provided their personal data has the right, in certain cases, to obtain and use their personal data elsewhere (data portability). The party that has received the personal data has an obligation to facilitate such transmission of personal data. It is a prerequisite for data portability that the recipient processes the personal data on the basis of consent from you or for the performance of a contract with you and it applies only to personal data that you have provided. Right to object The data subject has the right, in certain cases, to object to the processing of his or her personal data by the controller. The right to object applies when personal data is processed on the basis of legitimate interests. If the data subject objects to such processing, the controller may only continue to process the data where it is able to demonstrate compelling legitimate grounds for the processing of the data which override the interests, rights and freedoms of the individual or where the processing takes place for the establishment, exercise or defence of legal claims. The individual always has the right to object to his or her personal data being used for the purposes of direct marketing. Such objection may be made at any time. If an objection is made to processing for direct marketing purposes, the personal data may no longer be processed for such purposes. Complaints If you believe that we are processing your personal data in contravention of applicable data protection regulations, please notify us as soon as possible. You can also submit your complaint directly to the Swedish Data Protection Authority. Compensation A person who has suffered damage because his or her personal data has been processed in contravention of the General Data Protection Regulation may be entitled to compensation from the controller or controllers involved in the processing. The individual may claim compensation from the controller or processor or initiate compensation proceedings in the courts. What are the situations where we need to process your personal data? We may process your personal data in relation to the following: • Provision of our products and services • Marketing • Visits to our websites • Newsletters • Contact via social media • Job vacancies Provision of our products or services To enable us to provide our products and services to you, we need to process your personal data in a number of situations, specifically if you: • are a customer of one of our companies • represent a customer of one of our companies, e.g. you are the contact person for the company We may need to contact you in order to comply with the requirements of applicable product liability law. The legal basis for this processing is therefore a legal obligation. We may process your personal data for as long as we have a liability under applicable product liability law. Information about our customers and their contact persons is processed in our CRM system, M3, which constitutes a third party in relation to the data subject. Customer If you or the company you represent has purchased products or services from us, in many cases we need to process your personal data; specifically to: • identify you as a customer, • fulfil our contract with you for the delivery of products and services, • handle complaints and claims, • otherwise assert our rights and fulfil our obligations under our contract with you. The data we may process is your contact details (name, address, email address and telephone number) and, if the customer is a sole trader, your personal identity number. The processing described above is necessary in order for us to be able to provide the product or service you have purchased. The legal basis for this processing is therefore performance of our contract with you. We will process your personal data for as long as you are a customer and for 12 months thereafter. Representative of a customer If you are an employee of a company that is our customer or otherwise represent such a company, in many cases we need to process your personal data; specifically to: • identify you as the customer’s contact person, • fulfil our contract with the company for the delivery of products and services, • handle any complaints and claims, • otherwise assert our rights and fulfil our obligations under our contract with you. The data we may process is your contact details (name, address, email address and telephone number). The processing described above is necessary in order for us to be able to provide the product or service your employer or equivalent has purchased. We have not entered into a contract with you, however, in your capacity as a representative of our customer. The legal basis for the processing of your personal data is therefore legitimate interests. We will process your personal data for as long as your employer or equivalent is a customer and for 12 months thereafter. Shown interest in our products or services To enable us to offer our products and services to you, we need to process your personal data in a number of situations; specifically if you: • have requested a quote for our products • have provided us with your information at an event we have organised or attended The data we may process is that which you provide to us when making contact; this is usually your contact details (name, address, email address and telephone number). For the purposes of marketing our products and services, we consider that our interests in processing your personal data override your interests in not being included in our processing. The legal basis for processing is therefore legitimate interests. If you have requested/received a quote, we will store your data for six months from the date of your enquiry. If you have provided us with your data by submitting an enquiry via our website or at an event, we will store your data for 3 months from the date you provided it to us. Marketing We process various kinds of personal data in order to market our products and services directly to you. For these purposes, we may communicate with you by letter, telephone and email, for example. To enable you to unsubscribe from a specific e-mail newsletter or similar mailing, each mailing will contain instructions about how you can opt out of future communications. Our legitimate interests for such processing are to market our existing or new products or services. We may therefore use your contact details (name, address, telephone number and email address) and property references. We will process your personal data for the purposes above for as long as you or your employer are a customer and for 12 months thereafter. Visits to our websites www.smamineral.com When someone visits our website, www.smamineral.se, we use third-party services to collect information and details about visitor behaviour patterns, specifically Google Analytics and Adobe Typekit. We do this so we can identify the number of visitors to the different parts of our website. This information is processed without identifying any individual. We do not attempt to discover the identity of those visiting our website, nor do we allow the third-party service to do so. We will notify you in advance if we wish to collect data through our website that enables you to be personally identified. Where this is the case, we will tell you when we will collect your personal data and explain what we intend to do with it. Newsletters We collect statistics on the opening of emails, which helps us to monitor and improve our newsletter. The data we may process here is your email address. If you are a customer or its representative, the legal basis for our mailings may be legitimate interests. You may also have given your consent to receive newsletters at an event or through other contact with us. Whatever the legal basis on which our processing takes place, you have the right to opt out of further mailings at any time simply by notifying us of this. Your email address will be processed for the purpose above until you opt out of future mailings. Social media If you send us a message via social media, such as Facebook or LinkedIn, this message will be stored for 3 months. The message will not be shared with any other companies or organisations. Job vacancies The information you provide to us in connection with any job application will be used solely to: • evaluate your application • contact you • comply with legal requirements. We will not share any of the information that you provide during the recruitment process with any third party for marketing purposes. Nor will we store any of your data outside the European Economic Area (EEA). The information you provide will be stored securely by us and/or our processors. What information do we request and why? We only collect the information we need for our stated purposes and we will not store it for any longer than necessary. The information we request is subsequently used to assess your suitability for the job. You do not need to provide the information we request, but it may affect your application if you do not do so. Application phase If you apply for a job, your information may be collected by a recruitment consultant on our behalf. We will ask you to share your personal data with us, including your name and contact details. We will also ask about your previous experience, education and training that are relevant to the job for which you have applied. If we do not offer you a job at the end of the recruitment process, we may ask if you would like us to store your information for any potential future recruitments for 12 months from the end of the recruitment process. If you agree, in other words give your consent, we may contact you should other suitable positions arise. Engagement of recruitment consultant If we engage a recruitment consultant, we will transfer your personal data to them. In all such cases, the recruitment consultant constitutes a third party in relation to you. We enter into contracts with every such recruitment consultant engaged in order to ensure that they comply with our requirements. These contracts mean they cannot do anything with your personal data that is in contravention of our instructions. Nor will they share your personal data with any organisation apart from us. They also have an obligation to store your personal data securely and for no longer than as specified by us. If you have any questions about the use of your personal data by a recruitment consultant, you can contact us at sma@smamineral.com for information about which suppliers have processed your personal data. For how long is the data stored? If we do not offer you a job at the end of the recruitment process, the information you have provided up to that point will be stored for 12 months from the end of the recruitment process in order to enable us to demonstrate our compliance with our legal obligations. How do we obtain information about you? Information that you provide to us We collect personal data from you in many different ways. This may take the form, for example, of you providing your details when placing an order or requesting a quote. We may collect the following personal data from you: • contact details (name, address, email address and telephone number) • personal identity number • details about your previous orders Information we collect about you When you purchase our products or visit our website, we may collect the following information about you automatically: • contact details (name, address, email address and telephone number) • purchase history • information about how you interact with us (how you use our website, including page response time, download errors, how you arrived at and left the website). • information about your computer or mobile device (including your IP address, language settings, browser settings, time zone, operating system, platform and screen resolution). Sensitive information We do not normally collect information relating to sensitive personal data (data concerning racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and personal data concerning a person’s health or sex life). We may, however, collect information about food allergies in connection with certain events at which we provide food and/or drink. This information is stored only until the event has ended. Personal identity numbers do not constitute sensitive personal data under applicable legislation, but to the extent that we store personal identity numbers, we treat them as particularly sensitive data. Who may we share your data with? In order to safeguard your rights when we share your data with our service providers or other business partners, all data sharing takes place in accordance with written agreements governing the rights and obligations of the recipient in relation to the processing of your personal data. We will never sell your personal data to third parties without your consent. Nor will we share your personal data with third parties to enable them to use it for their marketing purposes without first obtaining your consent. As with unwanted mailings from us, you have a legal right to opt out of future mailings for marketing purposes from a third party which we have provided with your personal data with your consent. You must contact this third party directly, however, in order to object to the continued processing of your personal data for this purpose. We may share your personal data with the following parties: • Companies within the SMA Mineral Group • Our suppliers Companies in the Group We may share your personal data with companies within the SMA Mineral Group. Such data sharing takes place because the companies perform different tasks, such as sales and production, but as the customer you only interact with one of the companies. Our suppliers We may share your personal data with our suppliers, which constitute third parties in relation to you. To enable them to provide the services we purchase or to develop our products and services, our suppliers need to process your personal data in a number of situations. Our contracts with our suppliers contain clear rules on how they are permitted to process your personal data that we share with them. The SMA Mineral companies and our suppliers are nevertheless separate legal entities. We cannot normally be held liable, therefore, for their failure to comply with applicable legislation. If you have any questions about the use of your personal data by a supplier, you can contact us at sma@smamineral.com for information about which suppliers have processed your personal data. Where we will process your personal data We will process your personal data primarily in Sweden, Finland, Estonia, Bulgaria and Norway. It is possible that it may be transferred to another EU country. Contact us Each company is the respective controller for the processing of your personal data as described above and complies with its country’s data protection legislation. The companies within the SMA Group are as follows: Company Organisation number Registered office SMA Mineral AB 556206-3874 Filipstad, Sweden SMA Mineral Persberg AB 556364-2338 Filipstad, Sweden SMA Mineral Logistik & Entreprenad AB 556164-8857 Filipstad, Sweden SMA Svenska Mineral AB 556305-1241 Filipstad, Sweden SMA Mineral AS 977048931 Oslo, Norway SMA Mineral AS 10328701 Tallinn, Estonia SMA Eesti AS 10569570 Tallinn, Estonia SMA Mineral Oy 1572824-8 Helsinki, Finland SMA Karbonater AB 556284-3432 Filipstad, Sweden Juvéls Åkeri AB 556193-2012 Filipstad, Sweden Svensk Oljeåtervinning AB 556349-1355 Västerås, Sweden SMA Nordland AS 984534701 Skjerstad, Norway SMA Mineral Holding AB 556672-8191 Filipstad, Sweden SMA Mineral BV 33293316 Amsterdam, The Netherlands SMA Mineral Mark AB 556256-4509 Filipstad, Sweden SMA Mineral EOOD 121393885 Sofia, Bulgaria SMA Mineral Bourgas Var OOD 000065763 Bourgas, Bulgaria Tradex AD 126064744 Dimitrovgrad, Bulgaria You can always send any questions you may have about our processing of your personal data to sma@smamineral.com. Amendments We reserve the right to update this policy as necessary. The privacy policy was last updated on 27 June 2019. SMA Mineral AB Box 329 682 27 Filipstad, SWEDEN 0590-164 00 sma@smamineral.com Privacy policy Terms of use