Privacy policy

1. Right to prohibit direct marketing

The registrant has the right to prohibit direct marketing at any time. Every newsletter sent by Ruukin Kehräämö contains a link where you can unsubscribe from the newsletter.

2. Right to inspect own data (right of inspection)

Everyone has the right to know what information about them is stored in the personal data register. You can request to have your data reviewed by proving your identity.

3. The right to request correction or deletion of information 

Ruukki's Spinning Mill removes, corrects, and supplements incorrect, unnecessary, incomplete, or outdated information at the request of the registrant. 

The registrant has the right to request the deletion of data if the processing of the data is not necessary. We will process the deletion request, after which we will either delete the data or provide a justified reason why the data cannot be deleted.

It should be noted that the data controller may have a statutory or other right not to delete the requested information. The data controller is obliged to retain accounting records in accordance with the Accounting Act (Chapter 2, Section 10) for the specified period (10 years). For this reason, accounting-related materials cannot be deleted before the expiration of the retention period.

4. Right to Restrict Processing

The data subject has the right to request the restriction of the active processing of their personal data, for example, when they dispute the accuracy of their personal data and request the correction or deletion of their personal data. In such cases, the personal data in question may only be stored, not otherwise processed.

5. Right to object to the processing of personal data

A registered person can object to the processing of personal data if they believe that the personal data has been processed unlawfully.

6. The right to transfer data from one system to another

To the extent that the data subject has provided information to the customer register, which is processed based on the data subject's consent or assignment, the data subject has the right to receive such data in a generally machine-readable format and the right to transfer this data to another controller.

7. Right to withdraw consent

If personal data is processed based on the consent of the data subject, the data subject has the right to withdraw their consent by notifying Ruukki Spinning Mill.  

8. The right to appeal to the supervisory authority

Registered individuals have the right to file a complaint with the competent supervisory authority if the data controller has not complied with the applicable data protection regulations in their operations.

Please note that identity must be verified in connection with all inquiries and requests related to the register.

We process personal data in matters related to customer relationship management (including for the provision and delivery of services, billing and collection, handling complaints, customer support, and measuring customer satisfaction), customer communication, as well as in the marketing of services offered by Ruukki Spinning Mill and its partners, and in the development of services.

Your information may also be collected and processed to fulfill statutory obligations, such as accounting and official purposes. We collect, store, and process personal data only for predefined purposes.  

We ensure that we always have the legal basis required by law for processing your personal data.

We mainly process information to fulfill and prepare contracts (e.g., providing and delivering our services, customer management, handling complaints and customer feedback) as well as based on our legitimate interest (e.g., direct marketing to our customers and product development of our services).

With your consent, we may use your email address to send newsletters and marketing emails or process other data based on your consent. If we process your data solely based on your consent, you can withdraw your consent at any time. 

We may also process your data to fulfill statutory obligations, such as for accounting and regulatory purposes.

The following types of information can be recorded about the registrant:

• Name
• Phone number
• Email address
• Address
• Order, billing, and delivery information
• Purchase transaction details
• Consent information
• Generally available classification data
• Customer feedback information
• IP address information or other identifier
• Data collected through cookies
• Which page you visit, how long you stay on the site, through which channel you came to the site, and which links you click
• Data collected from social media channels

Other information to be collected with the customer's consent

We collect personal data about you from yourself during contacts or purchase transactions. We also collect data at events or training sessions.

We collect visitor data from our website using Google Analytics and Microsoft Bing Webmaster tools in order to analyze and improve our site. The data is automatically stored in a register when the user leaves information on our website or uses the www.ruukinkehraamo.fi/com service. We also collect anonymized information through social media channels using their own tools. 

As a rule, your personal data is processed by the staff of Ruukki Spinning Mill in their work. Your data may also be disclosed to our subcontractors and partners under a written agreement. Our subcontractors and partners process personal data in an agreed manner to promote lawful purposes. Examples of this include data center and cloud services intended for data storage, suppliers of the IT systems we use, and external services purchased to support sales and marketing.

We may also disclose information to fulfill contractual obligations or as required by law or a competent authority. We may also disclose your information if we are involved in a corporate or business transaction.

We may disclose anonymized or statistical data that cannot be linked to an individual. If such data is no longer considered personal data, we may also disclose information to third parties for purposes other than those mentioned here.

We use service providers in the processing of your personal data who may have access to your personal data from outside the EU/EEA area, such as Canada. We ensure that transfers are carried out properly and legally in accordance with the legislation on the processing of personal data.

We transfer your personal data outside the EU/EEA area in all cases only on one of the lawful bases listed below:

• The European Commission has decided that an adequate level of data protection has been ensured in the recipient country in question
• There is another lawful basis for transferring your personal data outside the EU/EEA area, such as the Privacy Shield arrangement approved by the European Commission for the United States.

We respect the confidentiality of your personal data.

Personal data is protected from external use by firewalls, antivirus software, personal user IDs, and passwords. Access to personal data is only granted to authorized personnel of Ruukki's spinning mill, whose job duties require the processing of personal data.

We only provide personal data confidentially and on a limited basis to our contractual partners, such as our subcontractors, based on agreements. Our contractual partners must commit to implementing adequate data security and to processing personal data in full compliance with the law. Processors of personal data are bound by confidentiality obligations.

Our website uses TLS-encrypted HTTPS connection, ensuring that all personal data is protected in electronic form. You can notice this in the browser by the lock icon on the left side of the address bar. If data is in manual form, it is stored in locked facilities protected from outsiders and destroyed securely.

Cookies are small text files that are automatically saved to the computer/device when a visitor browses different websites. Our online service uses cookies to provide our service in the most user-friendly and high-quality way possible.

The cookies we use are related to our marketing automation system, Google Analytics, and the social media channels we use, namely LinkedIn, YouTube, and Meta company services.

These software record information such as which page you visit, how long you stay on the site, how you arrived at the site, and which links you click. We may use cookies to develop our services and website, analyze website usage, and target and optimize marketing. By tracking website traffic, we improve our website to make it better and provide users with a better browsing experience.

If you do not want the online service to obtain information through cookies, you can refuse cookies by selecting No thanks in the cookie banner.