Two types of cookie
There are two types of cookie: permanent and temporary. The latter are also called session cookies. Permanent cookies are stored as a file on your computer or mobile device until they are deleted – by you or by the server that sent them. Temporary cookies are stored for a short time to facilitate your visit to the website, and disappear when you close the browser.
Here is a list of major cookies that we use
Google Analytics (Find out more here)
Cookie Expiry time Description
_ga 2 years Used to identify visitors.
_gid 24 hours Used to identify visitors.
_gat 1 minute Used to throttle page calls.
pll_language 1 year Used to control the language.
If you do not want to store cookies
If you previously consented to us using cookies for your visit but then change your mind and do not want to allow cookies, you can set your browser to display a warning every time a website wants to place a cookie on your device. You can also choose to block the storage of cookies altogether. You can find out how to do this from the Help function in your browser. In your settings, you can block all cookies, but you can also opt to accept only first-party cookies or to delete all cookies when you close your browser. Remember that some essential cookies will be needed if you want to go on using our website and our services.
When we use the terms “SMA Mineral Group”, “we”, “our” or “us” in this policy, we are referring to the companies that form part of our corporate group at any given time, as described on our website and/or listed in this document.
When we use the term “user”, we are referring to any person who uses our services and/or visitors to our website or social media channels or people who receive our newsletters.
Under applicable data protection legislation, personal data can only be collected for “specified, explicit and legitimate purposes”. The data collected may not be further processed in a manner that is incompatible with these purposes. In addition, the party that collects the data must have legal grounds for processing it, known as a legal basis. Our processing of your personal data is based on one or more of the following legal bases:
• processing is necessary for the performance of our contract with you (“contract”);
• processing is necessary for our compliance with a legal obligation (“legal obligation”);
• processing is necessary for our legitimate interests, except where such interests are overridden by your interests in the protection of your personal data (“legitimate interests”); or
• in some specific cases, after you have given consent to such processing (“consent”).
In the vast majority of cases, the legal basis is a contract, legal obligation or legitimate interests. Sometimes, however, our processing requires your consent. Where this is the case, we will obtain your consent for the processing in question before we begin processing.
You can always contact us with any questions about issues of privacy or data protection by emailing firstname.lastname@example.org
Below, we provide a description of the “legitimate purposes” for which we collect your personal data, as well as the legal bases on which we do this.
The contents of the policy are as follows:
1. Your rights
2. What are the situations where we need to process your personal data?
4. Social media
5. Job vacancies
6. How do we obtain information about you?
7. Who may we share your data with?
8. Where we will process your personal data
9. Contact us
Under applicable data protection legislation, you have the right to information about when and how we process your personal data. You also have the right to have access to your personal data or to have it transmitted, rectified or erased. You can read more about your rights below:
1. Right to information
2. Accurate data
3. Right to erasure (“right to be forgotten”)
4. Right to restriction of processing
5. Data portability
6. Right to object
Right to information
You have the right to receive information free of charge about the personal data we process about you (called a register extract). Such a request for an extract must be made in writing and signed by you. Please note that we only provide such information if we can be sure that it belongs to you. We are also unable to disclose information that infringes the rights of another party. Please send all requests of this kind to the address below. Mark the envelope “Dataskydd”.
SMA Mineral AB, Box 329, SE-682 27 FILIPSTAD
To ensure that the register extract is not sent to the wrong person, we will send it to your registered address in the Swedish population register.
We always try to ensure that your personal data is accurate and up to date. If we discover inaccurate or incomplete data, we will try to rectify or remove it.
If data is rectified at your request, we must inform those with which we have shared your data about such rectification. This does not apply, however, where it proves impossible or excessively burdensome for us to do so. Your right to information means that you have the right to know who we have shared your data with.
The right to be forgotten
We store your personal data for as long as you are our customer or for as long as you subscribe to our newsletters. Once the customer relationship has ended, we will erase your personal data within 12 months, except where we are required by law to store it for a longer period (under the Swedish Bookkeeping Act for example).
As our customer, you have the right to contact us at any time and ask for your personal data to be erased. We have an obligation to erase your data in the following circumstances:
• If the data is no longer necessary in relation to the purposes for which it was collected
• If processing is based on your consent and you withdraw your consent
• If processing is for the purposes of direct marketing and you object to the data being processed
• If the individual objects to the processing of personal data that takes place on the legal basis of legitimate interests and there are no legitimate reasons that override your interests
• If the personal data has been unlawfully processed
• If erasure is required for compliance with a legal obligation
• If data is erased at your request, we must inform those with which we have shared your data about such erasure. This does not apply, however, where it proves impossible or excessively burdensome for us to do so. You also have the right to request information about who we have shared your data with.
Restriction of access
In some cases, you may have the right to require the processing of your personal data to be restricted. Restriction means that the data is marked in our systems so that in the future it can only be processed for certain specified purposes.
The right to restriction applies in situations such as where you believe the data to be inaccurate and have requested rectification. In such cases, you may also request that the processing of your data be restricted while the accuracy of the data is investigated.
You must be informed when the restriction is lifted.
The party that has provided their personal data has the right, in certain cases, to obtain and use their personal data elsewhere (data portability). The party that has received the personal data has an obligation to facilitate such transmission of personal data. It is a prerequisite for data portability that the recipient processes the personal data on the basis of consent from you or for the performance of a contract with you and it applies only to personal data that you have provided.
Right to object
The data subject has the right, in certain cases, to object to the processing of his or her personal data by the controller.
The right to object applies when personal data is processed on the basis of legitimate interests.
If the data subject objects to such processing, the controller may only continue to process the data where it is able to demonstrate compelling legitimate grounds for the processing of the data which override the interests, rights and freedoms of the individual or where the processing takes place for the establishment, exercise or defence of legal claims.
The individual always has the right to object to his or her personal data being used for the purposes of direct marketing. Such objection may be made at any time. If an objection is made to processing for direct marketing purposes, the personal data may no longer be processed for such purposes.
If you believe that we are processing your personal data in contravention of applicable data protection regulations, please notify us as soon as possible. You can also submit your complaint directly to the Swedish Data Protection Authority.
A person who has suffered damage because his or her personal data has been processed in contravention of the General Data Protection Regulation may be entitled to compensation from the controller or controllers involved in the processing.
The individual may claim compensation from the controller or processor or initiate compensation proceedings in the courts.
What are the situations where we need to process your personal data?
We may process your personal data in relation to the following:
• Provision of our products and services
• Visits to our websites
• Contact via social media
• Job vacancies
Provision of our products or services
To enable us to provide our products and services to you, we need to process your personal data in a number of situations, specifically if you:
• are a customer of one of our companies
• represent a customer of one of our companies, e.g. you are the contact person for the company
We may need to contact you in order to comply with the requirements of applicable product liability law. The legal basis for this processing is therefore a legal obligation. We may process your personal data for as long as we have a liability under applicable product liability law.
Information about our customers and their contact persons is processed in our CRM system, M3, which constitutes a third party in relation to the data subject.
If you or the company you represent has purchased products or services from us, in many cases we need to process your personal data; specifically to:
• identify you as a customer,
• fulfil our contract with you for the delivery of products and services,
• handle complaints and claims,
• otherwise assert our rights and fulfil our obligations under our contract with you.
The data we may process is your contact details (name, address, email address and telephone number) and, if the customer is a sole trader, your personal identity number.
The processing described above is necessary in order for us to be able to provide the product or service you have purchased. The legal basis for this processing is therefore performance of our contract with you.
We will process your personal data for as long as you are a customer and for 12 months thereafter.
Representative of a customer
If you are an employee of a company that is our customer or otherwise represent such a company, in many cases we need to process your personal data; specifically to:
• identify you as the customer’s contact person,
• fulfil our contract with the company for the delivery of products and services,
• handle any complaints and claims,
• otherwise assert our rights and fulfil our obligations under our contract with you.
The data we may process is your contact details (name, address, email address and telephone number).
The processing described above is necessary in order for us to be able to provide the product or service your employer or equivalent has purchased. We have not entered into a contract with you, however, in your capacity as a representative of our customer. The legal basis for the processing of your personal data is therefore legitimate interests.
We will process your personal data for as long as your employer or equivalent is a customer and for 12 months thereafter.
Shown interest in our products or services
To enable us to offer our products and services to you, we need to process your personal data in a number of situations; specifically if you:
• have requested a quote for our products
• have provided us with your information at an event we have organised or attended
The data we may process is that which you provide to us when making contact; this is usually your contact details (name, address, email address and telephone number).
For the purposes of marketing our products and services, we consider that our interests in processing your personal data override your interests in not being included in our processing. The legal basis for processing is therefore legitimate interests.
If you have requested/received a quote, we will store your data for six months from the date of your enquiry. If you have provided us with your data by submitting an enquiry via our website or at an event, we will store your data for 3 months from the date you provided it to us.
We process various kinds of personal data in order to market our products and services directly to you. For these purposes, we may communicate with you by letter, telephone and email, for example.
To enable you to unsubscribe from a specific e-mail newsletter or similar mailing, each mailing will contain instructions about how you can opt out of future communications.
Our legitimate interests for such processing are to market our existing or new products or services. We may therefore use your contact details (name, address, telephone number and email address) and property references.
We will process your personal data for the purposes above for as long as you or your employer are a customer and for 12 months thereafter.
Visits to our websites
When someone visits our website, www.smamineral.se, we use third-party services to collect information and details about visitor behaviour patterns, specifically Google Analytics and Adobe Typekit.
We do this so we can identify the number of visitors to the different parts of our website. This information is processed without identifying any individual. We do not attempt to discover the identity of those visiting our website, nor do we allow the third-party service to do so. We will notify you in advance if we wish to collect data through our website that enables you to be personally identified. Where this is the case, we will tell you when we will collect your personal data and explain what we intend to do with it.
We collect statistics on the opening of emails, which helps us to monitor and improve our newsletter. The data we may process here is your email address.
If you are a customer or its representative, the legal basis for our mailings may be legitimate interests. You may also have given your consent to receive newsletters at an event or through other contact with us. Whatever the legal basis on which our processing takes place, you have the right to opt out of further mailings at any time simply by notifying us of this.
Your email address will be processed for the purpose above until you opt out of future mailings.
If you send us a message via social media, such as Facebook or LinkedIn, this message will be stored for 3 months. The message will not be shared with any other companies or organisations.
The information you provide to us in connection with any job application will be used solely to:
• evaluate your application
• contact you
• comply with legal requirements.
We will not share any of the information that you provide during the recruitment process with any third party for marketing purposes. Nor will we store any of your data outside the European Economic Area (EEA).
The information you provide will be stored securely by us and/or our processors.
What information do we request and why?
We only collect the information we need for our stated purposes and we will not store it for any longer than necessary.
The information we request is subsequently used to assess your suitability for the job. You do not need to provide the information we request, but it may affect your application if you do not do so.
If you apply for a job, your information may be collected by a recruitment consultant on our behalf.
We will ask you to share your personal data with us, including your name and contact details. We will also ask about your previous experience, education and training that are relevant to the job for which you have applied.
If we do not offer you a job at the end of the recruitment process, we may ask if you would like us to store your information for any potential future recruitments for 12 months from the end of the recruitment process. If you agree, in other words give your consent, we may contact you should other suitable positions arise.
Engagement of recruitment consultant
If we engage a recruitment consultant, we will transfer your personal data to them. In all such cases, the recruitment consultant constitutes a third party in relation to you. We enter into contracts with every such recruitment consultant engaged in order to ensure that they comply with our requirements. These contracts mean they cannot do anything with your personal data that is in contravention of our instructions. Nor will they share your personal data with any organisation apart from us. They also have an obligation to store your personal data securely and for no longer than as specified by us.
If you have any questions about the use of your personal data by a recruitment consultant, you can contact us at email@example.com for information about which suppliers have processed your personal data.
For how long is the data stored?
If we do not offer you a job at the end of the recruitment process, the information you have provided up to that point will be stored for 12 months from the end of the recruitment process in order to enable us to demonstrate our compliance with our legal obligations.
How do we obtain information about you?
Information that you provide to us
We collect personal data from you in many different ways. This may take the form, for example, of you providing your details when placing an order or requesting a quote. We may collect the following personal data from you:
• contact details (name, address, email address and telephone number)
• personal identity number
• details about your previous orders
Information we collect about you
When you purchase our products or visit our website, we may collect the following information about you automatically:
• contact details (name, address, email address and telephone number)
• purchase history
• information about how you interact with us (how you use our website, including page response time, download errors, how you arrived at and left the website).
• information about your computer or mobile device (including your IP address, language settings, browser settings, time zone, operating system, platform and screen resolution).
We do not normally collect information relating to sensitive personal data (data concerning racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and personal data concerning a person’s health or sex life). We may, however, collect information about food allergies in connection with certain events at which we provide food and/or drink. This information is stored only until the event has ended.
Personal identity numbers do not constitute sensitive personal data under applicable legislation, but to the extent that we store personal identity numbers, we treat them as particularly sensitive data.
Who may we share your data with?
In order to safeguard your rights when we share your data with our service providers or other business partners, all data sharing takes place in accordance with written agreements governing the rights and obligations of the recipient in relation to the processing of your personal data.
We will never sell your personal data to third parties without your consent. Nor will we share your personal data with third parties to enable them to use it for their marketing purposes without first obtaining your consent. As with unwanted mailings from us, you have a legal right to opt out of future mailings for marketing purposes from a third party which we have provided with your personal data with your consent. You must contact this third party directly, however, in order to object to the continued processing of your personal data for this purpose.
We may share your personal data with the following parties:
• Companies within the SMA Mineral Group
• Our suppliers
Companies in the Group
We may share your personal data with companies within the SMA Mineral Group. Such data sharing takes place because the companies perform different tasks, such as sales and production, but as the customer you only interact with one of the companies.
We may share your personal data with our suppliers, which constitute third parties in relation to you. To enable them to provide the services we purchase or to develop our products and services, our suppliers need to process your personal data in a number of situations.
Our contracts with our suppliers contain clear rules on how they are permitted to process your personal data that we share with them. The SMA Mineral companies and our suppliers are nevertheless separate legal entities. We cannot normally be held liable, therefore, for their failure to comply with applicable legislation. If you have any questions about the use of your personal data by a supplier, you can contact us at firstname.lastname@example.org for information about which suppliers have processed your personal data.
Where we will process your personal data
We will process your personal data primarily in Sweden, Finland, Estonia, Bulgaria and Norway. It is possible that it may be transferred to another EU country.
Each company is the respective controller for the processing of your personal data as described above and complies with its country’s data protection legislation. The companies within the SMA Group are as follows:
Company Organisation number Registered office
SMA Mineral AB 556206-3874 Filipstad, Sweden
SMA Mineral Persberg AB 556364-2338 Filipstad, Sweden
SMA Mineral Logistik & Entreprenad AB 556164-8857 Filipstad, Sweden
SMA Svenska Mineral AB 556305-1241 Filipstad, Sweden
SMA Mineral AS 977048931 Oslo, Norway
SMA Mineral AS 10328701 Tallinn, Estonia
SMA Eesti AS 10569570 Tallinn, Estonia
SMA Mineral Oy 1572824-8 Helsinki, Finland
SMA Karbonater AB 556284-3432 Filipstad, Sweden
Juvéls Åkeri AB 556193-2012 Filipstad, Sweden
Svensk Oljeåtervinning AB 556349-1355 Västerås, Sweden
SMA Nordland AS 984534701 Skjerstad, Norway
SMA Mineral Holding AB 556672-8191 Filipstad, Sweden
SMA Mineral BV 33293316 Amsterdam, The Netherlands
SMA Mineral Mark AB 556256-4509 Filipstad, Sweden
SMA Mineral EOOD 121393885 Sofia, Bulgaria
SMA Mineral Bourgas Var OOD 000065763 Bourgas, Bulgaria
Tradex AD 126064744 Dimitrovgrad, Bulgaria
You can always send any questions you may have about our processing of your personal data to email@example.com.