Raute Privacy Notice – Customer relations, sales and marketing

1 Purpose of this notice and the data controller

The purpose of this notice is to give you information regarding how we process personal data in our customer relationship management, sales, and marketing activities. The data controller of your personal data is Raute Corporation and its affiliated group companies (“Raute” or “we”), which jointly determine the purposes and means of personal data processing. Each Raute group company is responsible for the processing of personal data in its own activities for the purposes and on the legal bases set out in this notice. They may use the necessary personal data collected by other group companies for the same purposes. 

Raute is fully committed to protecting your personal data when using or processing them and recognizes the importance of correct and lawful treatment of personal data. Any mandatory national laws or regulations will take precedence in the event that they conflict with and have stricter requirements than this notice. 

If you have any questions related to the processing of your personal data and/or this notice, please contact [email protected]. 

2 For what purpose is your personal data collected?

We collect information related to our business customers, leads, and co-operation partners. When performing sales, marketing or customer relationship management activities, we process personal data of contact persons or decision makers of our customers, leads, and co-operation partners. The processing of personal data is based on an agreement, legitimate interest of Raute (e.g., direct marketing), and your consent (e.g., related to cookies). 

The purposes of processing personal data are: 

• to manage, develop, analyze and create statistics of relationship between Raute and customers or co-operation partners
• communication with customers, lead generation, direct marketing, and targeting online advertising
• to collect customer feedback and carry out opinion and market surveys
• to organize sales and marketing events
• to plan and develop business operations and services
• to identify users and manage access rights. 

3 What type of information is collected about you?

We process the following information on decision makers and contact persons of our customers, leads, and co-operation partners (incl. newsletter subscribers, people who register on the customer portal, individuals who have requested a quote or submitted a contact request, and participants of events): 

• name, title and position in the company, company/employer, contact details (e.g., postal address, e-mail address, phone number)
• customer history (e.g., participation in events)
• login credentials and usage log of electronic services (e.g., customer portal)
• segmentation and profiling data
• direct marketing permissions and/or prohibitions
• possible other information relevant for the business relationship. 

We collect the following data on decision makers and contact persons of potential customer companies or organizations: 

• name, company/employer, contact details (e.g., postal address, e-mail address, phone number)
• information about the individual’s duties and position in business life or a public office
• direct marketing permissions and/or prohibitions. 

4 Where do we collect personal data from?

Personal data is collected from you by phone, in meetings, or by other equivalent means. Data is also collected in connection with the conclusion of the customer or collaboration agreement and otherwise obtained during the customer/collaboration relationship. Personal data may also be originated from Raute’s representatives based on their business interactions with individuals or collected and updated from public and private registers. 

5 To whom do we disclose your personal data, and may data be transferred outside the EEA?

Unless you prohibit the disclosure of your data, we may disclose data, for example, to selected collaboration partners within the limits of the legislation for providing the service. 

We use services of external service providers to, for example, maintain newsletter mailing lists and customer and co-operation partner information and to process information of individuals participating in events. In accordance with data protection agreements, each service provider can only process personal data to the extent that is necessary for the provision of the service in question. 

Raute transfers data to countries outside the EU or EEA within the Raute Corporation. In the absence of adequacy decision by the EU Commission, Raute applies standard contractual clauses approved by the European Union or other approved transfer mechanisms in order to maintain the adequate level of data protection. The SCCs are available at https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en. 

In addition, Raute transfers data outside the EEA to USA in case it is necessary for the purposes of the processing of personal data described above or for the technical implementation of the processing. The level of data protection outside the EEA may be lower than in the EEA. In these situations, Raute will take appropriate safeguards to ensure the protection of your personal data by applying the standard contractual clauses approved by the European Union and requires data to be processed and secured in the EU before being transmitted and stored in the USA. 

6 How is your personal data protected, and for how long do we process the information?

Raute applies physical, technical, and administrative protection measures to protect personal data. Only those parties who have the right to process personal data for their work performance are authorized to use the systems containing data. Raute makes data processing agreements with all subcontractors that process personal data in order to ensure appropriate data protection. 

We store personal data for as long as it is necessary due to the purpose of use (e.g., customer/co-operation relationship), or until the individual requests the erasure of the data. In this case, we will store the data that legislation obligates us to store and the data about the erasure. 

Raute assesses the necessity of retaining data regularly. In addition, we take care of such reasonable measures which ensure that no incompatible, outdated, or inaccurate personal data, taking into account the purpose of the processing, are stored in our registers. 

7 Your rights as a data subject

Right of access, rectification and erasure 

As a data subject you are entitled to obtain information of your personal data processed by Raute. You have also a right to review the personal data concerning yourself, which is stored in the register, and a right to require rectification or erasure of your data. 

Direct marketing prohibition and right to restriction of processing 

You have the right to object or to demand restriction of the processing and prohibit direct marketing. 

Withdrawal of consent 

When the processing of information is subject to your consent, you may withdraw your consent at any time. Withdrawing your consent does not affect the lawfulness of processing before the withdrawal of the consent. Withdrawals can be made by requesting withdrawal from [email protected]. 

Right to lodge a complaint with a supervisory authority 

If you think that the processing of personal data relating to you infringes the data protection regulation, you have the right to lodge a complaint with a supervisory authority. You may lodge your complaint in the EU Member State of your habitual residence, place of work, or the place of the alleged infringement. 

Other rights 

You may also request the personal data collected based on your consent and concerning you to be transmitted to another controller in a case where the data is in machine-readable and transferable format. 

8 Whom can you contact?

If you have any questions related to the processing of your personal data or you want to exercise your abovementioned rights, please contact [email protected].