Privacy Notice for Contractors

This privacy notice is for personnel working for companies providing services for Valmet in site projects.

The data is controlled and processed by Valmet Oyj for running Valmet services business. The data is used for service operations by Valmet authorized users. The data is used for managing site projects, including health and safety at site, possible authority obligations, and site access.

The legal bases for the processing are legal obligations and legitimate interests pursued by Valmet, the data controller.  The data items processed can include names of service professionals, their companies, titles, addresses, tax and other identity numbers or identification documents as requested by authorities, and other contact details such as telephone numbers and email addresses.

The data may be accessed by relevant personnel within the Valmet group, as well as data processors Valmet is contracting for supporting its business. By default, the data will be stored in the EU. However, when needed, the data may be accessed by Valmet personnel from outside of the EU. EU Model Clauses are used as appropriate safeguards for the access from outside of the EEA. The data will be stored for a Valmet business relevant duration. Valmet will maintain contractor information for a period which may exceed 10 years.

Valmet will support the applicable data subject’s rights. This includes their rights of access to, rectification of, or erasure of personal data or restriction of processing concerning the data subject or to object to processing including direct marketing. The data subject has the right to lodge a complaint with a supervisory authority (data protection authority).