Personal data or personal information means any information relating to an identified or identifiable natural person (‘data subject’). An identifiable natural person is someone who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
This privacy notice applies to the personal data we obtain through our normal business activities, both online and offline i.e. collection in connection with sales and marketing, partner and supplier engagement and investor relations. As this privacy notice is intended to cover a variety of situations, there may be information contained in the privacy notice that does not apply to you. Also, this Privacy Policy does not apply to personal data obtained through our Careers website, which is subject to the Applicant’s Privacy Notice.
It is clear that Epiroc will always abide local laws and regulations and will refrain from the collection or use or personal data in a location where it is prohibited by law.
We may collect, use and process your personal data in order to provide you with services, products or information that you request. The collection of personal data will be transparent to you, and you will have the opportunity to decide whether or not to provide it. In order to provide you with a specific product, service, or information or to process a transaction, we may request your personally identifiable information. This will be indicated whenever we collect it.
For further information on the type of personal data that we may collect, please see below under “Categories of personal data, purposes of process and legal bases”.
Further, we may process your personal data for the purpose of marketing, meaning that we may send you information and offers about products or services which we believe may be of interest to you. The legal basis for our processing is that it is necessary for our legitimate interest of maintaining good customer relations. You may always object to marketing from us, please see below under “Your Rights”.
When you enter our website, we may collect your computer’s IP address. The IP address does not identify you as an individual but does identify your Internet service provider. Other non-personally identifiable information that we may collect include the type of Internet browser used, the type of computer operating system used, and the domain name of the website from which you visited our site. The information is aggregated to provide broad demographic information, such as the geographic location of visitors and how long they stay on our site. Collecting this type of information allows us to administer our site, diagnose server problems, analyze trends and statistics, and provide better customer service.
In addition, we may use your personal data for the purposes of analyzing and developing our website and its services and for marketing purposes. The legal ground for our processing is that the processing is necessary for our legitimate interests to improve our services and our marketing measures. For the avoidance of doubt, data available to Epiroc through your use of the website and its services shall belong to Epiroc without any restrictions (provided that it doesn’t contain your personal data).
Personal data is only collected when necessary to provide a product, service, information, process a transaction or if you submit it to us for other purposes, and provided that we have legitimate legal bases for such processing. If you choose not to provide any of the personal information requested, Epiroc may be unable to complete your transaction, or provide the information, services or products you have requested. When collected, we will clearly state the purposes for which the personal data might be used as well as the period during which the personal data will be kept by us.
For further information on the purposes for our collection and use of personal data, as well as the legal bases for such collection and use, please see below under “Categories of personal data, purposes of process and legal bases”.
If required, we may need to get your consent to allow to use your personal data. Such consent may be withdrawn at any time (as further set out under the section “Your rights”).
Because Epiroc is a global company with locations in many different countries, we may transfer your Personal Information from one legal entity to another or from one country to another in order to accomplish the purposes listed above. We will transfer your Personal Information consistent with applicable legal requirements and only to the extent necessary for the purposes set out above. Within the Epiroc group of companies, Personal Information is transferred subject to the same rules and levels of security. If required, data processing agreements will be in place to ensure the necessary level of protection and, in the event of a transfer of your Personal Information to a country outside the EU/EEA, such transfer will be made in compliance with the applicable rules for a transfer to a third country.
Epiroc relies on available legal mechanisms to enable the legal transfer of Personal Information across borders. To the extent that Epiroc relies on the standard contractual clauses (also called the model clauses) to authorize transfer, Epiroc will comply with those requirements, including where there may be a conflict between those requirements and this Notice.
Epiroc will not sell or otherwise share your personal information outside the Epiroc group of companies, except to:
We respect these rights and have processes in place to recognize and respond to individuals wishing to exercise these rights. We will respond to your request no later than within one month. You may request to exercise any of these rights through your local contact or via gdpr@epiroc.com.
Epiroc is committed to making sure that your personal information processed iskept secure and has implemented appropriate technical measures and security policies that protect the information it has under its control from:
All Epiroc personnel and any third parties which Epiroc engages to process your personal information are obliged to respect the confidentiality of your information.
However, no server or transmission over the Internet can be guaranteed to be 100 percent secure. Therefore, any activity or communication is conducted at your own risk.