Data Controller and Contact Information
In respect of each data subject’s personal data, the data controller is regarded to be the Outokumpu group company which has a contractual or other business relationship with the data subject or with the organization the data subject is representing. The data controller may, thus, be either Outokumpu Corporation (business ID: 0215254-2, postal address PL 245, 00181 Helsinki, Finland) or any of its subsidiaries or other affiliates. Furthermore, for certain central systems Outokumpu Corporation and its subsidiaries may act together as joint data controllers. Joint data controllers are present in a situation where more than one actor is involved in the processing and determination of the purposes and means of a processing operation. For avoidance of doubt, in this Privacy Notice "we" or "Outokumpu" shall refer to any Outokumpu group company acting as a data controller in each individual case.
Where you have questions regarding this Privacy Notice or you wish to exercise your rights, please contact the Outokumpu group company which has a contractual relationship or other co-operation relationship with you or the organization you are representing. Contact details for all Outokumpu group companies can be found here. You can also send questions to dataprotection@outokumpu.com. In Germany, we have appointed Data Protection Officer who you can reach by sending an email to datenschutz@outokumpu.com.
Personal Data Processed by Outokumpu
This Privacy Notice applies to handling of personal data in our business relationships with customers, suppliers, website visitors and other business contacts as further described in this Privacy Notice. For information on how Outokumpu uses cookies and to adjust your cookie preferences, please see our cookie declaration.
Customers
Purposes and legal basis of data processing
Outokumpu processes personal data related to the individuals representing or otherwise connected to our customers and potential customers (hereinafter referred collectively as "customers"). In the table below you can find the purposes for processing, the legal bases, and the categories of personal data Outokumpu processes.
| Purpose for processing | Legal basis | Categories of personal data (please see the definitions below) |
| To manage and develop the customer relationship, including Outokumpu’s Know Your Business Partner process To improve Outokumpu's business, services, and products To manage marketing related activities |
Legitimate interest Legal obligation |
|
| To manage sales and delivery of services and products | Legitimate interest |
|
| To fulfil statutory obligations and other mandatory legal requirements such as accounting | Legal obligation |
|
Categories of recipients of your personal data
Your data is treated as confidential, and only those whose job is to access and process your personal data can access and process it. Their access is restricted to data they need to see and handle for the performance of their duties. Your personal data can be disclosed within Outokumpu group companies globally.
Some of the data may also be disclosed to authorities and other instances, where required to do so by applicable laws and regulations or where there is a legitimate business reason to do so. Outokumpu may also disclose your personal data to external service providers who process the personal data on our behalf and in accordance with our instructions. If Outokumpu is involved in a corporate transaction personal data may be disclosed to third parties in relation to such transaction in accordance with the applicable data protection laws and regulations.
Data storage times
Outokumpu is committed to processing personal data in line with all applicable laws and regulations. Personal data related to the customers is processed for the duration of the customer relationship and for a reasonable time after. We retain certain personal data after the termination of the customer relationship based on statutory requirements for the period required by accounting or other applicable mandatory laws and regulations, or as long as we have a legitimate basis for retaining the data. For more information regarding the retention times, please contact Outokumpu.
Suppliers
Purposes and legal basis of data processing
| Purpose for processing | Legal basis | Categories of personal data (please see the definitions below) |
| To manage and develop the supplier relationship, including Outokumpu’s Know Your Business Partner process To improve Outokumpu's business, services, and products |
Legitimate interest Legal obligation |
|
| To manage purchases, contracts, delivery, invoicing and other transactions | Legitimate interest | |
| To fulfil statutory obligations and other mandatory legal requirements such as accounting | Legal obligation |
Categories of recipients of your personal data
Your data is treated as confidential, and only those whose job is to access and process your personal data can access and process it. Their access is restricted to data they need to see and handle for the performance of their duties. Your personal data can be disclosed within Outokumpu group companies globally. Some of the data may also be disclosed to authorities and other instances, where required to do so by applicable laws and regulations or where there is a legitimate business reason to do so.
Outokumpu may also disclose your personal data to the external service providers who process the personal data on our behalf and in accordance with our instructions. If Outokumpu is involved in a corporate transaction personal data may be disclosed to third parties in relation to such transaction in accordance with the applicable data protection laws and regulations.
Data storage times
Outokumpu is committed to processing personal data in line with all applicable laws and regulations. Personal data related to the suppliers is processed for the duration of the supplier relationship and for a reasonable time after. We retain certain personal data after the termination of the supplier relationship based on statutory requirements for the period required by accounting or other applicable mandatory laws and regulations, or as long as we have a legitimate basis for retaining the data. For more information regarding the retention times, please contact Outokumpu.
Website visitors and other business contacts
Purposes and legal basis of data processing
Outokumpu collects and processes personal data of the website visitors and other business contacts that we have obtained through events, newsletter and other subscriptions, visits to our websites as well as through social media channels.
Outokumpu uses cookies, tags and other similar technologies to track browsing activity within the site and to identify companies that are interested in our products and services. Such technologies can also be used for targeted advertising purposes. Please see cookie declaration for more information.
In the table below you can find the purposes for processing, the legal bases, and the categories of personal data Outokumpu processes.
| Purpose for processing | Legal basis | Categories of personal data (please see the definitions below) |
| To improve the website performance, functionalities, and user experience and to analyse the website traffic | Consent of the data subject when placing other than strictly necessary cookies Legitimate interest when retrieving the data through the cookies and further processing it |
|
| Targeting and remarketing of digital advertisements within platforms (e.g. Google, LinkedIn and other social media) | Consent of the data subject |
|
| To communicate with stakeholders (e.g. sending newsletters and information on events or announcements), respond to requests and provide customer service | Legitimate interest when providing customer service and direct marketing Consent prior to sending electronic direct marketing where applicable |
|
Categories of recipients of your personal data
Your data is treated as confidential, and only those whose job is to access and process your personal data can access and process it. Their access is restricted to data they need to see and handle for the performance of their duties. Your personal data can be disclosed within Outokumpu group companies globally.
Some of the data may also be disclosed to authorities and other instances, where required to do so by applicable laws and regulations or where there is a legitimate business reason to do so. Outokumpu may share information with our service providers when they perform services on our behalf, such as when supporting our events and online marketing campaigns or to maintain and support our IT systems. The scope of the data disclosed to the service providers is limited to what each party needs to fulfil their duties. The external service providers process the data on our behalf and in accordance with our instructions. Regarding the recipients of the personal data collected by cookies, please see our cookie declaration. If Outokumpu is involved in a corporate transaction personal data may be disclosed to third parties in relation to such transaction in accordance with the applicable data protection laws and regulations.
Data storage times
Outokumpu is committed to processing personal data in line with all applicable laws and regulations. Personal data related to subscribers is retained as long as the subscription is valid. For more information regarding other retention times, please contact Outokumpu.
Categories of personal data
Personal data means all information that relates to you and can be traced back to you. The following personal data about you is processed for purposes described above:
| Categories of personal data | Specific description of the personal data |
| Contact information and other identification information related to the individual |
Personal data is usually collected from the data subject directly. Additionally, personal data is collected from the legal entities the data subject represents and the websites of these entities as well as from other sources on the basis of which the data subject can be identified. This may include information, such as:
|
| Information concerning customer communications |
Personal data is usually collected from the data subject directly and generated during the customer relationship. This may include information, such as:
|
| Information concerning supplier communications |
Personal data is collected from the data subject directly and generated during the supplier relationship. This may include information, such as:
|
| Information concerning marketing |
Personal data is collected from the data subject directly through events, newsletter sign-up and other forms. This may include information such as:
|
| Information collected by cookies and similar technologies |
Data is collected by cookies and similar technologies that are placed on Outokumpu's website. This may include information, such as:
|
International transfers of personal data
Your personal data can be transferred outside the European Union/European Economic Area to other Outokumpu group companies globally, to the service providers, who process the data on our behalf and in accordance with our instructions and to the authorities and other instances, where required to do so by applicable laws and regulations or where there is a legitimate business reason to do so. For more information regarding sharing of personal data and the international data transfers, please contact Outokumpu.
Security of your personal data
Your personal data will be secured by taking security measures that are commensurate with the sensitivity of the personal data processed. To this end, Outokumpu maintains adequate physical, technical, and administrative security measures with a view to protecting personal data against theft; accidental loss; unauthorized alteration; unauthorized or accidental access, processing, erasure, use, disclosure or copying; and/or accidental or unlawful destruction. This includes measures such as IT system monitoring, access control and designated personnel responsible for the development, implementation and maintenance of information security.
Your rights
As a data subject, you have rights with respect to your personal data:
-
Right to access your data: You are entitled to access your personal data we hold about you by contacting Outokumpu.
-
Right to rectification your data: If there are changes to your personal data, or you notice that the data stored about you is no longer valid, you have the right to ask Outokumpu to rectify or complete the data.
-
Right to have your data erased: You are entitled to have your personal data erased under specific circumstances, such as where you have withdrawn your consent, where you object to processing based on legitimate interests and we have no overriding legitimate grounds or where personal data is unlawfully processed.
-
Right to object: In certain situations, you have the right to object to processing of your personal data, upon which the processing shall cease. You have the right on grounds relating to the particular situation, to object to the processing if the processing is based on a legitimate interest.
-
Right to restrict processing: You have in some situations the right to limit the processing of your data to some purposes. This means that the data controller must refrain from using the data during the period for which the right applies. This right may be used e.g., if the data subject contests the lawfulness of the processing or the accuracy of the data, and the data controller is in a process of verifying the accuracy of the data.
-
Right to withdraw consent: You have always right to withdraw your consent at any time to the processing of personal data.
-
Right to lodge a complaint with the supervisory authority: If you feel that your personal data has not been processed lawfully, you can lodge a complaint with the local data protection authority
For more information and to exercise your rights, please contact us by using our contact details above. Please allow up to 30 days for a response.
Additionally, you have a right to unsubscribe from our direct marketing messages and to request that we stop processing your personal data for direct marketing purposes. For these purposes and any marketing related requests please contact us at webmarketing@outokumpu.com.
Outokumpu may update this Privacy Notice from time to time. Any changes will be posted on this page with an updated revision date. Last update made on March 14, 2025