Privacy Statement - Website and Marketing
Last updated on 22/5/2024
Kalmar Corporation (“We” or “Kalmar”), recognizes the importance of protecting individuals’ privacy and personal data and processing it in accordance with the applicable privacy laws. It is the purpose of this Privacy Statement (“Statement”) to communicate the ways we process personal data when you visit our websites, receive newsletters or marketing material from us or participate in events, online forums or social networks hosted by us.
We comply with the European Union (EU) General Data Protection Regulation 2016/679 (GDPR) as well as with any other applicable data protection legislation. Should any applicable mandatory laws or regulations be in conflict with this Statement, we will respect such laws and regulations over any conflicting parts in this Statement. If you have any questions or inquiries concerning this Statement and/or the collection and processing of your personal data, please contact us at privacy@kalmarglobal.com.
Contact information of the data controller
Data controller, and therefore the legal entity responsible for collection and use of personal data under this privacy policy is Kalmar Corporation. The contact information of the data controller are the following:
Kalmar Oyj
Business ID: 3424222-7
Address: Itämerenkatu 25, 00180 Helsinki, Finland
Please contact us at privacy@kalmarglobal.com if you have any questions in regards to the protection of your personal data or if you wish to exercise your legal rights.
In regards to detailed data processing activities, individual Kalmar affiliate companies may also operate as data controllers, either independently or jointly with Kalmar Corporation. The contact information of the individual Kalmar affiliate companies are available at https://www.kalmarglobal.com/contacts/Locations/.
Purposes of processing personal data
We collect the personal data for the following purposes:
- Newsletter and stock exchange release subscriptions
- To operate and improve our websites
- To tailor the content of our website to provide you with a more personalised experience and to information about Kalmar products and services that might be of interest to you
- To manage and respond to requests you submit through our website
- To market, generate leads and host corporate events, online forums and social networks
- Direct marketing
Categories of personal data
In addition to the information you may choose to disclose to us, we may collect your name, email address, phone number, employment details such as company, title, role and position, your IP address, and details on how you interact with us and similar information. If you visit our website, we may also collect information about you through your use of our website, including information gathered through analytics tools and cookies. For more information, please see our Cookie Policy.
The sources from which we gather your personal data
Marketing, events, online forums and social networks, newsletters and stock exchange release subscriptions. We collect the personal data either directly from you, through your employer company or the company to which you are otherwise related to, or through publicly available resources such as social media channels.
Website. During your visit on our websites we collect data explicitly from you or generate that data through your use of our websites. To make sure that our website is functioning effectively, we or our service providers may use cookies and web beacons which may collect personal data. Additional information on how we use cookies and other tracking technologies and how you can manage your settings can be found in our Cookie Policy.
Legal basis of processing personal data
We collect and process your personal data on the basis of the following legal bases:
1. On the basis of a legal obligation to which Kalmar is subject;
Processing of personal data may take place to fulfil our obligations under applicable legislation, other regulations or authority decisions. Examples of legal obligations include: bookkeeping regulations, and reporting to tax authorities and supervisory authorities.
2. On the basis of the consent of a data subject;
We may collect and process your personal data on the basis of your consent. Examples of such situations include processing of special categories of personal data and sending direct marketing to your personal email address. Information about the purpose, processing activity, categories of personal data and your right to withdraw your consent will be provided when you are asked to give us your consent. Please note that in case you have provided your consent to the processing of your personal data, you can always withdraw the consent at any given time. With regard to cookies, you may at any time withdraw your consent on cookie settings.
3. On the basis of the legitimate interests of Kalmar.
We also collect and process your personal data when necessary to advance our legitimate interests provided that those legitimate interests are not overridden by your interests or fundamental rights and freedoms. The legitimate interests pursued by Kalmar include the following purposes:
- Provision of effective delivery of our services to you;
- Coordination of stock exchange release subscriptions and newsletter subscriptions;
- Coordination of marketing activities towards registered persons in our Client Relationship Management system, including sending and tracking invitations for events, social networks, and online forums;
- Provision and administration of our website;
- Compliance with internal policies and documentation requirements and establishment, exercise and defence of legal claims.
These purposes are necessary for the operation of our business in an efficient manner and therefore require the collection and processing of your personal data. We note that the rights of individuals may sometimes override the legitimate interests of a data controller. However, we have made sure that a fair balance is made between the rights of data subjects and the legitimate interests of individuals. To receive more information on the legitimate interests assessment, please contact us at privacy@kalmarglobal.com.
Disclosures of personal data
We share your data on a regular basis only with service providers and business partners that operate and process personal data as data processors on our behalf. These data processors may include IT, technology and tools providers hosting and maintaining our data as well as possible market research partners. Your personal data may be also shared with public authorities and our professional service advisors, such as auditor and legal advisors.
We are committed to applying adequate measures to make sure your personal data is secured reasonably and effectively in all instances, including granting access to personal data only to persons who have a reasonable requirement to access the data to be able to perform tasks they are required to do.
Third country transfers
We may transfer your personal data outside the EU and/or the European Economic Area. In order to ensure adequate protection of any such transferred data, the following conditions apply:
- The EU Commission has decided that there is an adequate level of protection in the country in question; or
- other appropriate safeguards have been taken, for example the use of the Standard Contractual Clauses approved by the EU Commission or the data processor has valid Binding Corporate Rules (BCR) in place; or
- there are exceptions in special situations, such as to fulfil a contract with you or your consent to the specific transfer.
In any case, we will always ensure that your personal data is adequately protected as required by applicable laws and regulations. To receive more information on the applicable legal transfer mechanism, please contact us at privacy@kalmarglobal.com.
Retention period
We retain the personal data for only as long as that data is necessary for the purposes we have collected it, or if we are required to retain that data for longer periods in order to comply with applicable laws. Please note that the data retention obligations will differ within Kalmar due to differences in local laws. The retention period applied to the personal data in a specific case will depend on the purpose of processing. As an example, information stored for bookkeeping purposes is stored due to a legal requirement for up to ten years.
We will delete or upon notice correct any incorrect or inaccurate data. We are committed to applying our internal data retention policies, as they are in force from time to time.
Please note that in relation to our newsletter and marketing material, you may ask that we delete personal data that we hold about you at any time by clicking on the unsubscribe link in the communication or e-mailing at privacy@kalmarglobal.com.
The retention of cookies are described in the Cookie Policy.
Our information security practices
Personal data may be stored either in hardcopy or electronic form. We recognise our obligation to safeguard the sensitive nature of all personal data. We are, therefore, committed to applying protective measures to secure against the unauthorized access, modification, collection, copying, use, and disclosure of any personal data. These measures include: (i) limiting the access and uses of information to those Kalmar personnel, contractors and suppliers and persons who, for in order to be able to perform their relevant tasks need to have, on a fair and lawful basis, access to personal data; (ii) use of physical and electronic access codes and passwords to control and restrict access; (iii) training and raising awareness on relevant employees and other personnel about data protection and privacy; (iv) applying updates and at-minimum-industry standard technical security measures.
Rights of the data subjects
As a data subject you have the right to ask us to tell you what data we at any given time store about it. Subject to local applicable laws you also have the right to:
- Request to access your personal data we are keeping about you
- Request correction of incorrect or incomplete data
- Request us to erase your personal data if you deem that it should be erased, subject to applicable laws and our retention criteria
- Request us to restrict the use of your data or object to our processing of your personal data;
- Object to us in processing your personal data;
- Request us to move your personal data over to you or to another data controller in accordance with the applicable law;
- If we have requested and you have given us your consent to process your personal data, you may have the right to withdraw that consent in accordance with applicable laws; and
- Lodge a complaint with a relevant data protection authority if you deem that we have processed your personal data in violation of the applicable data protection laws.
We will review such requests and execute them to the fullest extent possible in accordance with applicable laws. If you want to review or verify personal data about you, or to have it corrected or request its erasure, or to restrict or object to the processing of your personal data, or to request a copy of such data, you may exercise your rights by contacting us at privacy@kalmarglobal.com.
You will not have to pay a fee to access your personal data or to exercise any of your other rights. However, we may charge a reasonable fee if your request is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.
We may need to request specific information from you to help us confirm your identity and ensure your right to access the data or to exercise any of your other rights. This is another appropriate security measure to ensure that personal data is not disclosed to any person who has no right to receive it.
Changes to this Statement
We reserve the right to update this Statement at any time and encourage you to review this Statement from time to time for any amendments.