Register of External Stakeholders – Privacy Notice

 

Name of register

External stakeholder register of Finnish Minerals Group and its wholly-owned subsidiaries

Controller and contact person

Finnish Minerals Group (business ID 2674050-9) P.O. box 800, FI-00101 Helsinki firstname.lastname@mineralsgroup.fi. The controller’s contact person is Emil Viitala.

Purpose and legal basis of processing personal data

Personal data is collected for the purposes of communicating with and conducting research. The register contains information on the contact persons of the commercial and research partners of Finnish Minerals Group. Additionally, the register contains information on persons whose role or position in civil society, business life or public administration is deemed relevant to the communications and corporate responsibility of Finnish Minerals Group or otherwise related to the persons’ employment or positions of trust. The legal basis for processing is the controller’s legitimate interest.

Stakeholders

External stakeholders of the Finnish Minerals Group include, among others, commercial undertakings, non-governmental organizations, research organizations, media and authorities.

Categories of personal data

The register contains information about the names, organisations and email addresses of representatives of Finnish Minerals Group’s stakeholders, as well as information about language preferences (Finnish/English) and the stakeholder group.

Sources of personal data

Data stored in the register are collected from public websites and data subjects themselves.

Recipients and recipient categories of personal data

We disclose personal data to our corporate partners that are bound by the obligations on confidentiality and data processing, particularly communication agencies and research institutions that manage technical communication with stakeholders in the manner agreed with Finnish Minerals Group.

Transfer of data to third countries

Finnish Minerals Group cooperates with communications and research companies whose data communications servers are located in the area of EU. Finnish Minerals Group does not transfer personal data to countries outside the EU.

Retention period of personal data

The personal data shall be retained for two years, to the extent a longer retention period is applicable under law.

Rights of data subjects

The data subject shall have the right, according to applicable data protection legislation and at any time, to:

- be informed about the processing of their personal data

- obtain access to their personal data and review their personal data being processed

- require rectification and completion of inaccurate and incorrect personal data

- require erasure of their personal data

- object to the processing of their personal data on grounds relating to their particular situation in so far as the processing is based on legitimate interest

- require restriction of the processing of their personal data.

Data Security Principles

Finnish Minerals Group only allows personnel that is responsible for these operations and that has been trained for their tasks to take part in the processing of personal data. The server equipment and data communications connections used by Finnish Minerals Group are protected by firewalls and other information technology software and equipment. The premises of Finnish Minerals Group and its service providers are always secured by access control. The information systems service providers used by Finish Minerals Group are committed to maintaining a high level of data security and ensuring that data security is up to date.

Supervisory authority

Data subjects dissatisfied have the right to make a complaint about the register to the national supervisory authority. In the EU, complaints may be lodged in the member state in which the data subject has a permanent residence or place of employment, or in which the possible breach of data protection regulations occurred. In Finland, the supervisory authority is the Data Protection Ombudsman.