External privacy notice
1. Introduction and scope
BillerudKorsnäs AB or one of its subsidiary companies is the data controller in respect of the processing of your data, as indicated in Section 4.1 below.
The External Privacy Notice applies to our processing of personal data relating to you as a:
(i) Representative/contact person of our business customers and suppliers, including where you are using customer portals that we may provide; and
(ii) visitor of our public websites or social media profiles/pages or subscriber to our newsletter or other information from us.
We appreciate your interest in our company and your visit to our website. We are committed to your privacy and have a duty to fulfil the provisions of the EU Regulation 2016/679 (General Data Protection Regulation). Please read the following information regarding how we process your personal data.
If you have any questions about this information, or if you wish to exercise any of your rights as set out below, please contact BillerudKorsnäs via the contact information listed under Section 4.2 below.
2. Collection and processing of personal data, including legal grounds
The term "personal data" means any information which, either directly or indirectly via other data, can be linked to a natural individual, such as name, address, telephone number, e-mail address, personal identification number, IP address and logs from a web browser.
The term "processing of personal data" means any operation performed on personal data, such as the collection, storage, adaptation, disclosure or compilation of personal data.
2.2 Collection, processing and deletion of personal data, including legal grounds
2.2.1 Contact persons or other representatives at our business customers/supplier
Data and purpose: We process personal data that you or your employer (i.e. our business customer or supplier) have provided to us for the purpose of (a) administering the relationship with you in your capacity as contact persons, signatory or other representative of an entity registered as a business customer or supplier with us and (b) sending relevant marketing, invitations and information to the business customer or supplier that you represent. For example, this may concern name, contact details, personal identification number (if the customer/supplier is a sole trader), preferences/interests as well as the history of purchased products and services (for the purpose of providing relevant marketing, invitations and information for our business customers).
If you have been granted access to a customer portal that we provide, we will process your log in details in order to provide the customer portal.
Retention and erasure: The data will be kept until we have been notified of a new person that shall be the contact person and/or representative or, if you are a user of a customer portal, until you have deleted your account at the customer portal.
Legal ground: We base the processing on our legitimate interest of maintaining the relation with our business partners (business customers/supplier), including to provide customer portals (where applicable).
2.2.2 Websites and social media
Data and purpose: BillerudKorsnäs collects personal data such as name, e-mail address and other information which you voluntarily provide. BillerudKorsnäs also automatically receives and stores information from your web browser, such as IP address, cookie information and the pages you visit, to log files on our server.
BillerudKorsnäs uses the information collected to respond to your requests regarding products and services, to improve the content on our website and the services we provide and to develop anonymous usage statistics.
We also use personal data for direct marketing in accordance with law and market practice. We use the information we collect with regard to how you, as a user, use of the website so that we can analyse search behaviour and be able to provide you with personalised content. Personal data may also be processed indirectly in connection with the development and administration of BillerudKorsnäs' IT systems.
Personal data that we request from you and indicated as mandatory is required to be provided in order for us to fulfil your request, e.g. to send news letters that you subscribe to. Please note that BillerudKorsnäs is not responsible for your privacy or the content on external websites to which we may provide links on this website.
Retention and erasure: BillerudKorsnäs deletes collected personal data when the purpose of the processing has been completed.
Legal ground: We will process your personal data when it is necessary to fulfil a request from you or otherwise when it is necessary for the purposes of a legitimate interests for BillerudKorsnäs, inter alia, for improving the website. If a certain data process requires your prior consent, we will collect such consent before carrying out the processing in question.
2.3 Disclosure of personal data to a third party
BillerudKorsnäs will not sell your personal data to a third party. We only share personal data with other companies in the BillerudKorsnäs Group of Companies, with business partners who process personal data on BillerudKorsnäs' behalf, and when we are required to do so in accordance with law or decisions by public authorities. Where personal data is transferred to Group companies and partners outside the EU/EEA, it is BillerudKorsnäs' responsibility to ensure that such personal data is protected in the same way as in the EU/EEA, for example by putting data transfer agreements in place.
2.4 Your rights in relation to your personal data
According to the General Data Protection Regulation, you are entitled to certain rights. If you want to exercise any of these rights, please contact us at the address specified in section 6 below.
As specified in the General Data Protection Regulation you have the right to:
- request access to and rectification of the personal data we process in relation to you;
- request erasure of your personal data;
- request that we restrict the processing of your personal data;
- object to the processing of your personal data and, in respect of processing based on your consent, to withdraw your consent at any time; and
- receive personal data about you that you have provided to us (data portability).
You are also entitled, at any time, to submit complaints to the relevant supervisory authority if you think that your personal data is being processed in violation of applicable legislation.
3.1 What is a cookie and what is it used for?
A cookie is a small text file that the website you visit stores on your computer (or a similar device, such as a tablet or mobile phone).
There are two types of cookies - persistent cookies and session cookies. This website uses both types of cookies.
Persistent cookies are stored as a file on your computer for a certain period of time until they are deleted by the visitor to the website or the server that sent them.
Session cookies are stored temporarily while the visitor is browsing on a webpage and disappear when the visitor closes their web browser.
The following tables list the types of cookies placed on our websites, their function, the purposes for which the data are collected and how long data collected by cookies are kept:
|Name on cookie||Type of cookie||Purpose, data collected and retention period||Disclosure to third parties?|
|Google Analytics||Third party cookie (persistent)||Measure and analyse visitor patterns as well as to improve the website's features and the user’s experience of it|
|Hubspot||Third party cookie (persistent)||Gather information to follow up on sales campaigns and marketing, as well as for marketing purposes. The HubSpot cookie can, among other things, be used to administer the mailing of BillerudKorsnäs’ newsletter.||Hubspot
3.4 If you do not want to accept cookies
If you do not want to accept any cookies, you can set your web browser to block cookies. However, this may mean that you do not have full access to all pages and functions on the website.
Visit www.aboutcookies.org for more information on how to handle and remove cookies.
4. Data controller and Contact
4.1 Data controller
Websites, social media and newsletters: The BillerudKorsnäs Group company that provides the specific website, social media profile/page or the newsletter is the data controller. BillerudKorsnäs AB is the data controller in respect of the corporate site of BillerudKorsnäs Group.
Business customers/suppliers: The BillerudKorsnäs Group company that has entered into an agreement with the business customer or supplier is the data controller.
4.2 Contact details
If you have any questions on how we process your personal data or want information about further contact details for the data controllers above, please contact us by e-mail or post.
If you have any questions concerning this External Privacy Notice, or otherwise regarding BillerudKorsnäs' processing of personal data, you should may contact us using the contact details indicated below.
PO Box 703
SE-169 27 Solna, Sweden
Tel: +46 (0)8 553 335 00
For general questions: firstname.lastname@example.org
For questions or requests relating to Section 2.4: email@example.com
5. Updating the External Privacy Notice
BillerudKorsnäs may, at any time, revise this External Privacy Notice by posting an updated version on the website.
This External Privacy Notice was last updated on May 20th 2018.