1. Who is this information addressed to?
The information is addressed to anyone who:
- visits and interacts with us via our website (https://www.boliden.com/), e.g. those who:
- registers a profile on our website or otherwise contacts Boliden to subscribe for information from Boliden, e.g. press-releases, quarterly reports and annual reports, as well as to obtain stock price information or to order printed information through our website or otherwise; or
- communicates with us e.g. via forms on our website, such as Boliden Mines portal for stakeholder feedback, or via e-mail.
- visits one of our sites;
- gets in touch with Boliden in relation to work or assignment with any of our customers, suppliers or business partners; or
- gets in touch with Boliden representing investors, potential investors, financial institutions, “buy-side” and “sell-side” equity and credit analysts etc. or as a journalist or politician.
This information does not apply:
- when you use Boliden’s whistleblower reporter system (our Whistleblowing and Data Privacy Policyapplies instead);
- when you apply for a position at Boliden (our Applicant Privacy Policy) applies instead).
2. What is personal data?
Personal data means any information which relates to an identified or identifiable natural person, e.g. name, address, telephone number, email address, personal ID number, title, role, photograph and IP address.
3. Who is the controller for the processing of your personal data?
Boliden Mineral AB, reg. no. 556231–6850, Box 44, 101 20 Stockholm, is the controller of personal data for Boliden’s processing of personal data which takes place when you visit our website; communicate with us via forms on our website, register a profile on our website or otherwise contact Boliden for subscription to information or order printed information via our website or otherwise.
For the processing of personal data which takes place in connection with your contacts with Boliden in your work or assignment with any of our customers, suppliers or business partners, it is the legal entity (company) within Boliden that has a relationship with your employer or customer, e.g. through an agreement, that is the controller of personal data.
In other cases, it is the legal entity (company) that you visit or with which you communicate within Boliden that is the controller of personal data for the processing which takes place when you visit a site or communicate with us via e-mail or in other ways.
4. What personal data do we process about you and why?
4.1 For visitors on our website
In this section you can find information about how we process your personal data when you visit and interact with us via our website.
4.1.1 Cookies and similar technologies
The personal data we process
When you visit our website and give your consent via our consent-banner or via the Privacy Preference Center, we will use cookies and similar technologies on your device which collects and shares information with us, such as your IP address, as well as information about your IT equipment (e.g. operating system and whether the visit is done by computer or smartphone). For more information about the types of cookies we use, the personal data categories processed, the purposes of processing and retention time and to set your preferences, please go to our
Purpose
We process the personal data in order to:
- ensure technical functionality;
- establish statistics and evaluate our website;
- understand the visitor's behaviour on our website; and
- improve our website
Legal basis
We base the collection and the further processing of personal data for the purposes described above on the legal basis of consent.
For how long do we store the personal data?
The personal data is stored as long as necessary for the purpose of the processing, for as long as we have your consent. You can always withdraw your consent by changing your settings in the Privacy Preference Center. For duration of cookies please go to our Privacy Preference Center.
4.1.2 When you register a profile on our website or otherwise contact Boliden to subscribe to information from Boliden or order printed information via our website or otherwise
The personal data we process
We process the following personal data: name, address, email address, company (if you choose to enter it), username, password and information about your subscription and order.
Purpose
We process the personal data in order to administer your order and deliver the ordered information.
Legal basis
We base the processing of personal data for the purposes described above on the legal basis legitimate interest. The processing is necessary for our (and your) legitimate interest in receiving the ordered information.
For how long do we store the personal data?
To secure traceability in our communication, we store your personal information for up to 12 months after your subscription period has ended or your order has been delivered.
4.1.3 When you communicate with us e.g. via forms on our website or via e-mail
The personal data we process
When you communicate with us, we process the personal data that you provide us with such as your name, contact information, information concerning your question, feedback or matter.
Purpose
We process the personal data to answer your question and to handle your feedback or matter.
Legal basis
We base the processing of personal data for the purposes described above on the legal basis legitimate interest. The processing is necessary for our (and your) legitimate interest in being able to answer your question and handle your feedback or matter.
For how long do we store the personal data?
For how long we store the personal data depends on your matter and the purpose for which you have contacted us. However, if we have not heard from you within the past year we will delete your personal data, unless we need to keep it for a longer period of time (see section 4.5 below).
4.2 For visitors at our sites
In this section you can find information about how we process your personal data when you visit one of Boliden’s sites.
Further information regarding the personal data processing at the site you visit may also be available at the relevant Boliden site. Please consult with the visitor center at site for more information about the personal data processing at the specific site you are visiting.
The personal data we process
When you visit one of our sites we will process your name, information about the company you represent (if relevant), entry and exit times at the location and in some instances your contact details and photograph. During your visit, entry and exit times and positioning may also be recorded within the area (e.g. if there are different zones).
At some Boliden sites we use camera surveillance at entrances and/or within the area. This means that we may process your photography and/or you may be caught on film. The use of camera surveillance is always marked with informational signs at the respective site.
Purpose
We process the personal data collected within entry/access controls for the following purposes:
- in order to ensure that only persons with a right to be in the area, as well as within different zones within the area, are given access;
- in order to ensure your safety and the safety of others; and
- in order to protect Boliden’s property.
When camera surveillance is used, we use it for the following purposes:
- in order to monitor production;
- in order to ensure safety and prevent accidents; and
- in order to prevent and investigate crime.
Legal basis
We base the processing of personal data for the purposes described above on the following legal bases:
A legal obligation. Processing is necessary to comply with legal obligations concerning the work environment that are designed to ensure that only persons with the necessary qualifications are granted access to certain areas within the workplace; and
A legitimate interest. The processing of personal data that takes place in connection with entry control and camera surveillance is necessary in order to safeguard Boliden’s legitimate interest of knowing who has access to and enters Boliden’s areas, to ensure safety and security, e.g. so that everyone can be evacuated in an emergency, to prevent accidents and to protect Boliden’s property against sabotage and theft, for instance.
For how long do we store the personal data?
Access/entry controls: Please consult with the relevant site for information about how long your personal data collected within entry/access controls is stored.
Camera Surveillance: Information about storage times for recorded video footage is available at the informational signs at the respective site. In some areas camera surveillance is only used for live monitoring.
4.3 For you who are in contact with Boliden in the capacity of your work or assignment with any of our customers, suppliers or business partners.
The personal data we process
We process your name, phone number, mobile number, e-mail address, address, title, role and description of work tasks, as well as other personal data that may need to be processed to achieve the purposes described below, e.g. in documentation related to agreements that Boliden has with your employer or customer, by email contact, or by publication on Boliden's intranet or in other media in order to make the personal data available primarily to Boliden's employees.
Purpose
We process the personal data to:
- fulfill obligations under agreements with your employer or customer;
- administer agreements, negotiations or other forms of cooperation;
- handle customers’, suppliers’ and business partners’ demands; and
- market Boliden’s products.
Legal basis
We base the processing of personal data for the purposes described above on the legal basis legitimate interest.
The processing is necessary for our legitimate interest in being able to fulfill obligations under agreements, administer agreements, negotiations or other forms of cooperation, handle customers’, suppliers’ and business partners’ demands and market Boliden’s products.
For how long do we store the personal data?
We store the personal data for as long as we have an ongoing business relationship, unless we need to store it for a longer period of time (see section 4.5 below).
4.4 For you who are in contact with Boliden in the capacity of representing investors, potential investors, financial institutions, “buy-side” and “sell-side” equity and credit analysts etc. or as a journalist or politician
The personal data we process
We process your name, phone number, mobile number, e-mail address, role and description of work tasks, as well as other personal data that may need to be processed to achieve the purposes described below.
Purpose
We process the personal data to:
- provide the capital market and the general public with information on Boliden;
- send out invitations to Boliden’s Capital Market Day and other events, administer and carry out such events (including visits to Boliden sites); and
- create and uphold relations with decision-makers in local, regional and central governments.
Legal basis
We base the processing of personal data for the purposes described above on the legal basis legitimate interest. The processing is necessary for our legitimate interest to provide information on Boliden, send out invitations to Boliden’s Capital Market Day and other events and to create and uphold relations with decision-makers.
For how long do we store the personal data?
We store the personal data for as long as we have a need to inform and uphold relations with you, unless we need to store it for a longer period of time (see section 4.5 below).
4.5 To fulfill a legal obligation or to exercise, establish or defend our legal rights
In addition to what is described above, there might be other situations, when, we process your personal data to fulfil legal obligations, such as the obligation to maintain accounts, or at the request of an authority. The legal basis for the processing in such case is that the processing is necessary to fulfil a legal obligation. In those cases, we will store the data as long as we are obliged to.
We might also process your personal data to exercise, establish or defend our legal rights. The legal basis for the processing in such case is our legitimate interest to exercise, establish or defend our legal rights. In those cases, we will store the data as long as is necessary to fulfil the purpose of the processing.
-
From which sources do we collect your personal data?
In addition to the personal data you provide to us, we collect personal data from the following sources:
- data which is stored regarding visitors to our website, which the visitor to the website provides via their electronic tools, for example computer or smartphone;
- from customers, suppliers and other business partners;
- from public records, websites and media; and
- from surveillance cameras (at sites where surveillance cameras are used).
-
Parties with whom we may share your personal data
Your personal data may be disclosed to:
- legal entities (companies) within Boliden other than the controller legal entity;
- auditors, advisors, legal representatives and similar agencies;
- so-called processors (external suppliers which process personal data on Boliden’s behalf) e.g. suppliers of IT systems, system management and support, or IT infrastructure providers; and
- other recipients as required by law, other constitution or authority decision.
You can find more information about how we disclose your personal data by contacting the legal entity (company) within Boliden that is the controller for the processing of your personal data (see section 3) or Boliden’s DPO (see section 9).
-
Transfer of personal data to third countries
We may transfer your personal data to a third country, i.e. a country outside of the EU/EEA. This may take place, for example, through the storage of personal data on servers located in a third country, or where we retain an IT supplier to provide support and maintenance of IT systems from a third country. In the event that we would transfer personal data to a third country, we will ensure that adequate safeguards are in place to ensure that your personal data will remain protected in accordance with this information and applicable data protection laws. We will do this through one of the following measures:
(i) by transferring the personal data to a country or organisation that is on the European Commission’s list of countries with an adequate level of protection; or
(ii) by implementing a transfer mechanism such as the controller-to-controller or controller-to-processor standard contractual clauses that have been approved by the European Commission (as applicable from time to time) for the transfer of personal data to third countries. If, for example, the standard contractual clauses are deemed ineffective due to national law of the country of destination, we will take additional technical, organisational, or contractual measures to ensure an adequate level of protection.
You can find out more information about the transfers and the safeguards we implement to protect your personal by contacting the legal entity (company) within Boliden that is the controller for the processing of your personal data (see section 3) or Boliden’s DPO (see section 9).
-
Your rights
You have the right to request access and information about the use of your personal data. You also have the right to request correction of incorrect personal data. Moreover, in certain cases, you also have the right to erasure of personal data, or restriction of the processing, and you are entitled to object to the processing. In addition, in certain cases, you also have the right to receive your personal data in a machine-readable format (only when you have provided us with the personal data and the processing of your personal data is based on consent or on a contract).
If you wish to submit a request to exercise your rights, please contact the legal entity (company) within Boliden that is the controller for the processing of your personal data (see section 3) or Boliden’s DPO (see section 9).
-
Bolidens Data Protection Officer, "DPO"
Boliden has appointed a data protection officer who, on an overall level, shall ensure that we comply with the GDPR. The data protection officer can be reached at [email protected] and by telephone +46 8 610 1551.
-
Complaints
In the event you believe that our processing of your personal data is in violation of the data protection legislation, you are asked to firstly contact the legal entity (company) within Boliden that is the controller for the processing of your personal data (see section 3). You can also contact our DPO (see section 9). In addition, you can also submit a complaint to the supervisory authority:
Sweden: www.imy.se/en/
Finland: www.tietosuoja.fi/en
Norway: www.datatilsynet.no/en/
Ireland: www.dataprotection.ie/
You can find out more about the local data protection authorities under the following link http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm
-
Changes to this information
If we make changes to this information, we will notify you on our website. You can see when this information was last updated by checking the “last updated” date displayed at the top of this page. If we would make any significant changes to how we collect or process your personal data covered by this information we will notify you by using appropriate contact information (depending on which contact information we have collected about you and the purpose of the processing).
-
Contact Information
If you wish to contact the legal entity (company) within Boliden that is the controller for the processing of your personal data (see section 3) – please click on “Contact” at the top of the website to find contact details to the relevant Boliden group company.