Processing of personal data in Valmet Media Bank application

The legal basis for the processing is legitimate interests pursued by the controller. The data items processed include username, user log in name, email address, IP addresses, first name, last name, used communication protocol, connection, and disconnection times, downloaded and viewed files and search terms used.

The data may be accessed by relevant personnel within the Valmet group, as well as data processors Valmet is contracting for supporting its business. By default, the data will be stored in the EU and relevant regional services. However, when needed, the data may be accessed by Valmet personnel from outside of the EU. EU Model Clauses are used as appropriate safeguards for the access from outside of the EEA. The usage logs will be stored for 12 months, the account information will be maintained until the account is deleted according to Valmet security policies.

The data may be used for administration purposes, mainly troubleshooting possible issues. Information may be also used to ensure service is operational and help to make minor improvements to the service based on records that have been clicked on and use the information to list most clicked records. Collected data will not be used for any commercial purposes.               

Valmet will support the applicable data subject’s rights. This includes their rights of access to, rectification of, or erasure of personal data or restriction of processing concerning the data subject or to object to processing including direct marketing. The data subject has the right to lodge a complaint with a supervisory authority (data protection authority).