External Personal Data Policy– Alumeco Group

 

About Alumeco Group

The present personal data policy is applicable for all companies in the Alumeco Group (in the following named “Alumeco”)

 

Introduction
Due to the Alumeco Group structure – including in particular the extent of shared services and the consequent joint data responsibility, Alumeco has one overall personal data policy.

In Alumecos interaction with customers, suppliers and other trading partners, Alumeco is granted access to personal data concerning natural persons with connection to customers, suppliers and trading partners. The subject for this personal data policy is this processing of data.

 

Customers and Suppliers

Categories of Data Subjects:
Alumeco processes data about former, current and potential customers, suppliers, trading partners and natural contact persons at the just mentioned categories of persons (hereinafter: “Data Subject”).

Purpose:

The purpose with the processing of personal data is to be able to offer a professional service towards our customers, suppliers and trading partners. The registered personal data is therefore used for marketing, sales, purchase, manufacturing, delivery, market research, product development, business development and statistics.

Types of data:

Alumeco processes ordinary data including contact information in the form of names on natural contact persons, e-mail addresses and telephone numbers.

Legal basis:

If a basis for contract is present, this will be the legal basis for the processing. In the case that the processing of personal data is not a consequence of contract basis, the legal basis for the processing will be balance of interest.

It is estimated that Alumeco’s interest in being able to process personal data for the listed purposes surpasses the data subject’s interest in the personal data not being processed by Alumeco. In particular is mentioned that the personal data is only stored in the extent that is assessed necessary and the data is not private.

Storage:

Alumeco processes personal data in absolute confidence. Personal data can only be passed on internally in the Alumeco Group when the purpose is not disregarded.
Alumeco has defined groups of employees with access to specific Personal Data.

The storage of personal data takes place as long as the purpose entitles Alumeco to.
The storage period is determined from Alumeco’s legal rights and obligations. Personal data about the data subject is as a rule deleted not later than 5 years after the last interaction between the data subject and Alumeco.

Transmission

Alumeco transfers personal data to consolidated companies.

Alumeco makes use of data processors that processes personal data on behalf of Alumeco.
According to Alumeco’s data processor agreements, data processors are obliged to sustain sufficient technical and organisational precautionary measures and Alumeco is obliged to control that the applied data processors are acting in accordance with Alumeco’s instructions.
Personal data will not be the subject of other external transmissions without consent from the data subject with the exception of transmission to public authorities and in case of court orders.

 

Website

Purpose
The purpose with the website is to sell and market our aluminium products and services towards professional metal consumers. Our website also contains information and technical data to help customers in connection with the use of aluminium in general.

Types of data

Ordinary personal data is registered from the use of the website.

Especially about “cookies”:
A cookie is a small text file stored in the web browser on the unit that the data subject uses to access websites with. Cookies make it possible to recognize the applied unit and to gather information about the data subject’s behaviour on the Internet as well as to secure that the technology of the unit works.

When a user visits our website, a number of modules are installed with the purpose of collecting and organizing data.

Legal basis

The legal basis for registering personal data by virtue of visits to the Alumeco website is balance of interest. It is estimated that Alumeco’s interest in being able to process personal data for the listed purposes surpasses the data subject’s interest in the personal data not being processed by Alumeco. In particular is mentioned that the personal data is only stored in the extent that is assessed necessary and the data is not private.

Storage

Alumeco uses different programs from Google to organize, analyze and structure data about the data subject.

Transmission

Data is transferred to Google with an eye to organizing, analyzing and structuring data. It is estimated that Google has an adequate security level and has made the sufficient technical and organisational precautionary measures against that information about the Data Subject by accident or illegally is forfeited or brought to the attention of unauthorized persons or abused by other means.

 

Chat function

Purpose
The purpose with the chat function is to provide users of the website access to advice and guidance in a fast and flexible way. At the same time, Alumeco utilizes the opportunity to generate statistics.

Types of data

The personal data is ordinary. As a result of the chat function, Alumeco registers name, telephone number and e-mail address on the individuals using the chat function.

Legal basis

The legal basis for registering personal sata through the Alumeco chat function is balance of interest. It is estimated that Alumeco’s interest in being able to process personal data for the listed purposes surpasses the data subject’s interest in the personal data not being processed by Alumeco. In particular is mentioned that the personal data is only stored in the extent that is assessed necessary and the data is not private.

Storage

No data is stored locally at Alumeco.

Transmission

The information is transferred to Netop Business Solutions A/S. It is estimated that Netop Business Solutions A/S has an adequate security level and has made the sufficient technical and organisational precautionary measures against that information about the Data Subject by accident or illegally is forfeited or brought to the attention of unauthorized persons or abused by other means.

 

Webshop

Purpose

The purpose with Alumeco’s webshop is to sell our products to our customers.

Types of data

Alumeco registers ordinary personal data in the form of information about contact persons, such as name and e-mail address.

Legal basis

The legal basis for registering personal data by virtue of visits to the Alumeco webshop is balance of interest. It is estimated that Alumeco’s interest in being able to process personal data for the listed purposes surpasses the data subject’s interest in the personal data not being processed by Alumeco. In particular is mentioned that the personal data is only stored in the extent that is assessed necessary and the data is not private.

Storage

The webshop is integrated with the ERP system of Alumeco.

On our website a SSL or safety certificate is installed in which an encryption technology makes sure that only the sender (the user) and the receiver (Alumeco) can read the information sent between them.

Transmission

None

 

Social media

Purpose

The purpose with the social media platforms is to market Alumeco and our aluminium products as well as interact with customers and stakeholders.

Alumeco uses the following social media platforms: YouTube, LinkedIn, Facebook and Instagram.

Types of data

Alumeco registers ordinary personal data in the form of user data and behaviour on the users on the mentioned social media platforms.

Legal basis

The legal basis for registering personal data by virtue of visits to Alumeco’s social media platforms is balance of interest. It is estimated that Alumeco’s interest in being able to process personal data for the listed purposes surpasses the data subject’s interest in the personal data not being processed by Alumeco. In particular is mentioned that the personal data is only stored in the extent that is assessed necessary and the data is not private.

Storage

YouTube: Alumeco has a channel with videos about Alumeco, aluminium products and cases. Alumeco has access to a statistics module where Alumeco can analyze the user data and behaviour.

LinkedIn: Alumeco has a corporate page where relevant information about Alumeco and the products as well as job adverts are posted. Alumeco has access to a statistics module where Alumeco can analyze the user data and behaviour.

Facebook/Instagram: Alumeco has a Facebook and Instagram profile where relevant information about Alumeco and our products as well as job adverts are posted. Via Facebook Business Manager, Alumeco has access to a statistics module where Alumeco can analyze the user data and behaviour.

Transmission

The above mentioned data is stored by YouTube, LinkedIn, Facebook and Instagram respectively.
It is estimated that both Youtube, LinkedIn, Facebook and Instagram have an adequate security level and have made the sufficient technical and organisational precautionary measures against that information about the data subject is by accident or illegally forfeited or brought to the attention of unauthorized persons or abused by other means.

 

Rights of the data subject

As a data subject you have certain rights which Alumeco is obliged to fulfill. You can contact Alumeco and gain insight in which personal data Alumeco processes about you. In addition to this, you are entitled to have any incorrect information corrected.

If you wish to have personal data deleted, to have Alumeco’s processing of your personal data limited or to take exception to processing, you can contact Alumeco on the following e-mail address: GDPR@alumeco.dk.

If Alumeco is processing personal data based on your consent, you have the right to withdraw this consent at any time. To withdraw consent for our processing of your personal data, please contact: GDPR@alumeco.dk.

 

Various

Apart from this personal data policy, Alumeco has an IT security policy with the purpose of securing that the processing of personal data is made on the basis of an adequate security level. Alumeco’s IT security policy is revised in connection with the annual IT revision.

Alumeco makes certain reservations for at any time to one-sidedly be able to change the personal data policy. The existing personal data policy is available on Alumeco’s website.
Enquiries concerning the personal data policy can be directed at Alumeco’s Legal department on: GDPR@alumeco.dk.

Last revision; 01.05.2018