Kunda Nordic Tsement is committed to protecting your personal data. This privacy notice describes how Kunda Nordic Tsement processes and uses the personal data that we receive from you in connection with this website and how you can contact us if you have additional questions regarding our processing of your personal data.
Kunda Nordic Tsement collects and stores personal data (for example name, address, e-mail address and telephone number) that you submit in order to obtain information from us. This personal data helps Kunda Nordic Tsement to process your request for information.
Kunda Nordic Tsement also collects and stores personal data that you submit (a) as part of your account details (if applicable) and/or (b) in connection with your requests for, or purchase of, products on our website (where such functions exist).
In addition to the above mentioned use and purposes, we may also use your personal data to administrate and improve this website, for our internal records, for statistical analysis and (if applicable), to complete your product orders and/or to contact you regarding sales and as a part of our customer relation procedures.
Kunda Nordic Tsement’s collection of personal data is based on the need to carry out the processes stipulated above. To the extent that Kunda Nordic Tsement uses the personal data to improve this website or for analyzing statistics, the basis for collection of data is Kunda Nordic Tsement’s legitimate interest to conduct such improvements and analysis.
The personal data that is collected and stored is exclusively used by companies within the HeidelbergCement Group, except in the following cases where we may submit the data to recipient parties:
- When required by law;
- To a buyer or a potential future buyer of our business, and/or;
- To service providers appointed by HeidelbergCement who provides services connected to this website or its functions, but only to the extent it is necessary in order to provide these services – for example our IT service provider(s) which hosts, develops and offers support for this website.
HeidelbergCement will take measures to protect all personal data transferred to such third party, or that has been transferred to other countries, in accordance with applicable data protection laws and as stated above.
Kunda Nordic Tsement stores the personal data as long as it is necessary to fulfil the purpose for which the data has been collected. This means that Kunda Nordic Tsement deletes your personal data when such data is no longer necessary to process a request or our client relationship. Statistics which has been anonymized may be saved thereafter.
You may at any time request the rectification or erasure of your personal data. Please note however that deletion could mean that Kunda Nordic Tsement cannot process requests or orders. You have the right to request a copy of your personal data from our record. You have the right to request a limitation of the use of your personal data (for example if you deem the data to be incorrect) or the termination of use of your personal data (for example as regards the use of the data to improve Kunda Nordic Tsement’s website). You are entitled to request the personal data used to process an order or our client relationship in a machine-readable format which you are entitled to transfer to another data controller. If processing of your personal information is based on your consent, you have the right to withdraw your consent at any time. Your withdrawal will not affect the lawfulness of the processing carried out before you withdrew your consent.
Kunda Nordic Tsement (company registration number 10156772) is responsible for the processing of your personal data, and requests to exercise your rights as stated above shall be addressed to AS Kunda Nordic Tsement, Jaama 2, 44106 Kunda, Estonia in an envelope marked with “Att: Data Protection Line Manager”.
If you have a complaint regarding the processing of your personal data by Kunda Nordic Tsement you are entitled to report such dissatisfaction to the supervisory authority for the personal data processing.
1. Information regarding processing of your personal data
1.1 The purpose of this privacy notice is to provide information on how AS Kunda Nordic Tsement (“we”) process your personal data in connection with you being our customer, cooperation partner, supplier of product or service or otherwise a business associate of us.
1.2 We respect your privacy and duly protect the personal data we process about you. All processing of personal data is carried out in accordance with the European Union’s General Data Protection Regulation (the “GDPR”). The following describes how we collect, process and share your personal data.
2. what personal data will be processed?
2.1 We will collect and process the following personal data about you (your “Personal Data”):
- business title;
- email and telephone number;
- personal identity number;
- bank and account details.
2.2 As a general rule, we will collect the Personal Data directly from you. However, we may also collect Personal Data about you through publicly accessible sources, such as the Estonian Tax and Customs Board, Commercial Register and Creditinfo in order to fulfil our obligations under agreements and applicable law.
3. What are the purposes of processing your personal data?
3.1 We process your Personal Data for the following purposes:
3.1.1 in order to provide you with marketing information by post and email;
3.1.2 In order to fulfil our obligations under applicable law;
3.1.3 In order to fulfil agreements entered into with you or the company that you represent;
3.1.4 In order to carry out customer satisfaction surveys and collect feedback about our product and services according to our management system.
3.2 The provision of your Personal Data is necessary to enter into and fulfil your customer agreement. If you do not provide your Personal Data to us, we will not be able to fulfil our obligations under the customer agreement.
4. What are the legal grounds for processing your personal data?
4.1 The processing of your Personal Data for purpose 3.1.2 to 3.1.4 in Section 3.1 above are based on that the processing is necessary for us in order to fulfil our contractual obligations and obligations under applicable law.
4.2 The processing of your Personal Data for purpose 3.1.2 to 3.1.4 in Section 3.1 above is based on that we are under the legal obligation to process your Personal Data
4.3 The processing of your Personal Data for purpose 3.1.2 to 3.1.4 in Section 3.1 above is based on our legitimate interest since it enables to produce and market our services and products according to company`s goals and contractual obligations in compliance with applicable law. The Processing of your Personal Data for the purposes listed in Section 3.1 is based on our legitimate interest to market our services or products. We have conducted a balancing interest test with the result that our legitimate interest overweighs your interest in not having your Personal Data processed for this purpose. You are always entitled to object to this assessment. You can read further about your rights below.
5. Who has access to your personal data?
5.1 We have implemented appropriate technical and organisational measures to protect your Personal Data against loss, unlawful access, etc. The number of persons with access to your Personal Data is limited. Only individuals associated with Kunda Nordic Tsement AS that need to process your Personal Data in accordance with the purposes above will have access to your Personal Data.
5.2 We may share your Personal Data with other departments of the companies within the HeidelbergCement Group, namely with Communications, HR, R&D, Finance and IT department in order to obtain relevant information according to Section 4.
5.3 We may also share your Personal Data with suppliers and partners that carry out services on our behalf such as IT systems and solutions for information transfer. We conclude data processing contract with all suppliers who are processing Personal Data of our customers and contact persons.
5.4 We do not transfer your Personal Data to a country outside of EU/EEA.
6. For how long is your personal data stored?
Your Personal Data will only be stored as long as the purpose for which it is kept exists and as long as permitted or required under local law. We have implemented a Personal Data Storage Guideline to ensure that your Personal Data is not stored longer than necessary for the purposes for which the data was collected or processed. The time period of storage depends on the purpose for which the data is processed. As long as we are business associates we will store your Personal Data. In case of emails sent for marketing or similar purposes we will store your Personal Data as long as you quit from receiving further emails or ask us to delete you from sender`s list.
7. What are your rights?
7.1 Kunda Nordic Tsement AS, reg. no. 10156772, address Jaama 2, 44106 Kunda, and email address is the controller of the processing of your Personal Data. This means that we are responsible for your Personal Data being processed correctly and in accordance with applicable laws. Our Data Protection Officer can be contacted at email address provided above.
7.2 You are entitled to know what Personal Data we are processing about you, and you can request a copy of such data. You are entitled to have incorrect Personal Data about you corrected, and in some cases you may request that we delete your Personal Data. If you have given your consent to processing of your personal data for an explicit purpose you may always withdraw your consent. If you want to withdraw your consent, you may contact us through the contact information provided in Section 7.1. You are also entitled to object to certain processing of your Personal Data, and request that the processing of your Personal Data be limited. Please note that limitation or deletion of your Personal Data may result in us not being able to fulfil our obligations under the customer agreement. You are also entitled to extract your Personal Data in a machine-readable format and to transfer the Personal Data to another controller.
7.4 If you have any objections or complaints about the way we process your Personal Data, you have the right to file a complaint to the Estonian Data Protection Inspectorate.
If any changes are made concerning the processing of your Personal Data, we will inform you of the changes by publishing an updated version of this policy notice on the website of Kunda Nordic Tsement.