Here information is provided on the general aspects that apply for all processing of personal data at Holmen.
In addition, a more specific description is provided for different categories (see the menu on the left) regarding the purpose, the legal basis and the removal.
The type of data processed
Personal data means all information that can be used in any way to identify or be linked to a specific individual. The personal data Holmen processes may vary depending on the purpose for which it is processed. In largely all cases, however, it covers contact details, such as name, address, phone number and e-mail.
Where the registered person is our contractual party Holmen also processes matter related information and data necessary to manage payments. In some cases, information regarding the data subject's customer and/or supplier segment is processed and possibly also property related data.
How Holmen collect personal data
Holmen collects personal data that is provided voluntarily by the data subject. This may occur in contact in the form of meetings, e-mail, phone calls or in other ways. Data is also collected if you use our web forms and through our websites using cookies that collect data on and from your browser, see further at www.holmen.com/cookies.
Data may also be added and updated with information from publicly accessible sources, such as public registers, e.g. the SPAR register of persons resident in Sweden and the Real Property Register (Sw Fastighetsregistret). In some cases, information is purchased from companies that compile registers.
Purpose, legal basis and removal
The purpose of processing is always to be stated and is crucial to several aspects. With reference to the stated purpose is determined the legal basis for a processing, but also assessments of which data is to be processed, who should be authorised to access data and when data is to be removed. The purposes for Holmen's processing of your personal data, the legal basis for doing this, and how long your data is retained are described separately for the various relationships that the Holmen Group has with you as a data subject, see the menu on the left.
Your personal data will be removed when it is no longer relevant for the purposes for which it was collected. Exceptions may be made to removal if Holmen needs the data to comply with statutory requirements, such as accounting requirements connected to tax and book-keeping, or to protect Holmen's legal interests, i.e. relating to employment, environmental or real estate issues.
Protection and safety
Holmen takes the appropriate organisational and technical security measures to protect your personal data from unauthorised access, change and removal. All data is stored in databases protected by authorisation and access controls and by firewalls. Internal documents set out how personal data is to be processed. The safeguards are examined and tested regularly.
Holmen-companies that are data controllers
Depending on which business operation a data processing of your personal data is assignable to, the responsibility may rest with different companies within the Group. Decisive for the responsibility is which company or companies that choose the purpose of processing data and the way in which the data is to be processed as data controllers. Holmen has an internal arrangement in respect of protecting personal data and a joint management for issues relating to processing pf personal data, see below.
Sharing of personal data
The Holmen-group has several Group-wide functions and your personal data may be shared with other companies within the Group. Your personal data will only be processed by a limited number of people with specific authorisation who need the data for the purposes described.
The data may also be shared with suppliers that Holmen use for different services. Holmen only share your data with external suppliers if, and to the extent, necessary. Where others are used to process personal data on Holmen's behalf (data processors), agreements are entered to ensure that your personal data is processed securely and legally.
If Holmen's processing of your personal data means that personal data is transferred to countries outside the EU/EEA, measures are put in place to ensure a high level of security and legal processing.
Holmen may share your personal data to the police or another authority if required to do so by law or by the decision of an authority, to protect Holmen's legal interests or to investigate, uncover or prevent fraud, other crime or security problems.
You have the right to be provided with information regarding the personal data Holmen process about you. You have the right to correct incorrect data and, in some cases, the right to have your data removed. You can request limits on the data processed and you can object to certain types of processing. In respect of personal data that you provided yourself, you may be entitled to demand that his data is transferred from one data controller to another.
A request for information regarding which of your personal data that Holmen processes must be made in writing and be signed by you. To be able to handle your request it is essential to clarify in what relation the request is made (i.e. as a customer, job-seeker or forest owner) and the Holmen-company or companies the request refers to. Please also specify the categories of data to which you want access. Additional documentation and information may be requested to establish the identity of the person making the request.
You are welcome to contact us with any inquiries, requests for information or objections regarding processing of personal data you may have. Contact details are set forth below. Your matter will be swiftly passed on to the right part of the Group.
Who to contact
Please address communications regarding our processing of personal data to:
Box 5407, 114 84 Stockholm, Sweden
phone: +46 8 666 21 00
You always have the right to make a complaint regarding the processing of personal data to the supervisory authority. As a data subject you can choose which country's supervisory authority you wish to contact.