Privacy policy

 

 

This privacy statement describes how Metsä Spring processes personal data of customers of Muoto B2B online store (https://muoto.io/) and other Metsä Spring stakeholders’ representatives. The privacy statement may be changed from time to time. The up-to-date version can always be found on the website.

1. Data Controller

Metsä Spring Oy (hereinafter “Metsä Spring”) registered address of the head office at Revontulenpuisto 2, 02100 Espoo, Finland.

2. Contact Information

Please contact by e-mail:
privacy@metsagroup.com

3. The Purpose and Legal Ground of Processing Personal Data

Metsä Spring processes personal data of Muoto Store’s customers’ and stakeholders’ representatives. Metsä Spring uses the personal data for:

  • registration to Muoto Store
  • taking and handling orders, delivering products and services, processing payments, invoicing, and communicating with customers about orders, products and services
  • know your customer (KYC) process
  • customer and stakeholder management activities
  • supporting business analysis and operations
  • customer surveys and events
  • reporting
  • quality management
  • improving products and services
  • personalizing content and
  • marketing

Our legal ground for collecting and processing personal data is our legitimate interest based on the potential or existing business relationship.

4. Processed Personal Data

We may process the following data:

  • Name
  • Phone number
  • E-mail address
  • Organisation
  • Your role in the organisation
  • The address details of your organisation
  • Other data possibly related to the products (such as answers to
    customer surveys)

Personal data collected in connection with the use of the Muoto Store such as:

  • Service / website usage; statistics on the use preferences
  • Device information
  • Log information
  • IP address
  • Location information (only country level information)
  • Cookies and similar technologies

5. Regular Sources of Data

Personal data is mainly provided by the persons themselves upon the registration and purchase in the Muoto Store, and otherwise during the co-operation with Metsä Spring. Personal data is also collected by Metsä Spring in connection with the use of Metsä Spring’s or its group companies’ websites or online services by the registered person.

6. Regular Destinations of Disclosed Data and Whether the Data Is Transferred to Countries Outside the EU/ EEA

Metsä Spring does not disclose personal data to unauthorized third parties. Metsä Spring may disclose your personal data to the extent necessary to meet any applicable law, regulation, legal process or enforceable governmental request.

Metsä Spring uses external service providers (such as Shopify as the platform of the online store). These service providers (and their possible subcontractors) act as Metsä Spring’s data processors. They process personal data on behalf of Metsä Spring only for the provision of services to Metsä Spring. The service providers have no independent right to use the personal data for any independent purposes.

The personal data is mainly processed within the EU/EEA but it can also be processed outside EU/EEA. Metsä Spring will only transfer your personal data outside the EU/EEA in accordance with one of the legal grounds described below:

  • the recipient country is regarded by the European Commission to provide adequate protection for your personal data;
  • we have put in place appropriate safeguards for the transfer by
    e.g. using the standard contractual clauses for the transfer of personal data to third countries issued by the European Commission; or
  • you have given your consent to the transfer, or there is another legal basis for the transfer under the applicable data protection legislation.

7. Data Security

Personal data is handled with care and in confidence. Personal data is processed only by personnel whose job requires processing of the personal data.

All personal data is protected by regularly reviewed appropriate technical and organisational data security measures against accidental and/or unlawful access, alteration, destruction or other processing including unauthorized disclosure and transfer. Such measures include proper firewall arrangements, appropriate encryption of telecommunication and messages, secure server rooms and up-to-date ICT system access management practices.

8. Your Rights

You have the right to:

  • access, update, remove and correct your personal data;
  • object to the use of your personal data on grounds relating to your particular situation; and
  • demand Metsä Spring to restrict the processing of your
    personal data.

You can exercise any of your rights above by contacting Metsä Spring via our privacy website:
https://www.metsagroup.com/privacy-policy/.

Alternatively you may visit us in person or contact us by post at the address set out
in this section. Metsä Spring may request you to specify your request in writing and authenticate your identity before handling your request.

Requests shall be submitted in writing to:
Metsä Spring Oy
Attn: Legal Services
Revontulenpuisto 2
02100 Espoo
Finland

Request can be submitted in person at:
Revontulenpuisto 2
02100 Espoo

Please note that we may not be able to execute your rights if we have a legal ground for it.

If you are unhappy with the way we process your personal data, you have a right to make a complaint to the competent supervisory authority, who is responsible for monitoring compliance with the applicable data protection legislation. In Finland the competent supervisory authority is the Data Protection Ombudsman (tietosuoja(at)om.fi).

9. Data Retention Policy

Metsä Spring’s customers’ and stakeholders’ personal data is actively maintained throughout the life-cycle of the co-operation in question.

Personal data is retained only as long as necessary and justifiable or as required by applicable legislation, for the exercise of claims or due to litigations or internal investigations.