Raute Privacy Notice – Investor relations

Updated December 2024

1 Purpose of this notice and the data controller

The purpose of this notice is to give you information regarding how we process personal data related to investor relations, whether you are an investor or prospective investor and/or interested in our business and solutions. The data controller of your personal data is Raute Corporation and its affiliated group companies (“Raute” or “we”), which jointly determine the purposes and means of personal data processing. Each Raute group company is responsible for the processing of personal data in its own activities for the purposes and on the legal bases set out in this notice. They may use the necessary personal data collected by other group companies for the same purposes. 

Raute is fully committed to protecting your personal data when using or processing them and recognizes the importance of correct and lawful treatment of personal data. Any mandatory national laws or regulations will take precedence in the event that they conflict with and have stricter requirements than this notice. 

If you have any questions related to the processing of your personal data and/or this notice, please contact [email protected]

2 For what purpose is your personal information collected, and what type of information is collected?

We publish a range of global reports to share information about Raute’s business and solutions. You can order material and our Investor Newsletter which is published both in Finnish and English. Raute's Investor Newsletter is published generally once a month or always when necessary. 

When you wish to subscribe for information from us, such as Raute’s Investor Newsletter, press releases, and financial reports, we ask you to provide such personal data as is required to fulfill the particular service. Examples of the categories of personal data that we collect and process include name, contact details (such as email address, postal address), details of the company or organization that you represent, your position, and other professional details. Personal data is used to distribute press releases, financial reports, invitations to seminars, and similar events. We process personal data on the basis of a legitimate interest of conducting our business and maintaining contacts with you and the companies and organizations that you represent, and on the basis of subscription of, for example, Investor Newsletter. 

3 Where do we collect personal data from?

Personal data is collected from you by webpage forms, by phone, in meetings, or by other equivalent means. 

4 To whom do we disclose your personal data, and may data be transferred outside the EEA?

We use services of external service providers to, for example, maintain newsletter mailing lists and to process information of individuals. In accordance with data protection agreements, each service provider can only process personal data to the extent that is necessary for the provision of the service in question. 

Raute transfers data to countries outside the EU or EEA within the Raute Corporation. In the absence of adequacy decision by the EU Commission, Raute applies standard contractual clauses approved by the European Union or other approved transfer mechanisms in order to maintain the adequate level of data protection. (The SCCs are available at https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en.) 

In addition, Raute transfers data outside the EEA to USA in case it is necessary for the purposes of the processing of personal data described above or for the technical implementation of the processing. The level of data protection outside the EEA may be lower than in the EEA. In these situations, Raute will take appropriate safeguards to ensure the protection of your personal data by applying the standard contractual clauses approved by the European Union and requires data to be processed and secured in the EU before being transmitted and stored in the USA. 

5 How is your personal data protected, and for how long do we process the information?

Raute applies physical, technical, and administrative protection measures to protect personal data. Only those parties who have the right to process personal data for their work performance are authorized to use the systems containing data. Raute makes data processing agreements with all subcontractors that process personal data in order to ensure appropriate data protection. 

We store personal data for as long as it is necessary to initiate, maintain or manage a professional relationship with you, the company or organization that you represent, or until the individual requests the erasure of the data. In this case, we will store the data that legislation obligates us to store and the data about the erasure. You may unsubscribe from our subscription services and similar distributions at any time, following which your personal data will not be stored for these purposes. 

Raute assesses the necessity of retaining data regularly. In addition, we take care of such reasonable measures which ensure that no incompatible, outdated, or inaccurate personal data, taking into account the purpose of the processing, are stored in our registers. 

6 Your rights as a data subject

Right of access, rectification and erasure 

As a data subject you are entitled to obtain information of your personal data processed by Raute. You have also a right to review the personal data concerning yourself, which is stored in the register, and a right to require rectification or erasure of your data. 

Right to restriction of processing

You may unsubscribe from our subscription services and similar distributions at any time. You have the right to object or to demand restriction of the processing. 

Right to lodge a complaint with a supervisory authority 

If you think that the processing of personal data relating to you infringes the data protection regulation, you have the right to lodge a complaint with a supervisory authority. You may lodge your complaint in the EU Member State of your habitual residence, place of work, or the place of the alleged infringement. 

7 Whom can you contact?

If you have any questions related to the processing of your personal data or you want to exercise your abovementioned rights, please contact [email protected].