Privacy Policy
The purpose of this privacy statement
Exel Composites is committed to protecting your privacy and personal data. Exel Composites processes your personal data in accordance with the EU Directive 95/46/EC (General Data Protection Regulation, GDPR), the Finnish Personal Data Act (523/1999) and other applicable personal data legislation.
This general privacy statement (“Privacy Statement”) provides you with general information on the processing of your personal data by Exel Composites and its employees, partners, subsidiaries and affiliates. Please read this Privacy Statement carefully. We may do updates to this privacy statement from time to time associated with development of our business operations or changes in applicable laws. The updated privacy statement can be found from our website, so we ask you to visit this page from time to time.
In the following, we provide information about what personal data we collect, the purposes for which we use such data and what rights you have relating to your personal data.
Data controller and contact information
Exel Composites Plc
Mäkituvantie 5
FI-01510 Vantaa
FINLAND
Email:
personaldatainquiry@investors-fi.exelcomposites.com
Sources of personal data
We collect personal data about you mainly from yourself when you contact us, use our services or enter into a business relationship with us. In addition, we may collect personal data about you from public sources, such as corporate websites, among other. We may also collect personal data about you, for example, from events. We also collect personal data about our website visitors with Google Analytics or other similar analytic tools.
Cookies
Cookies are text files placed on your computer to collect standard internet log information and visitor behavior information. This information is used to track visitor use of the website and to compile statistical reports on website on website activity. You have the option to disable cookies if you choose.
In principle, you can also access all the information on our web pages if you have disabled cookies. In case you do not accept cookies, this can lead to a limitation of functionality.
Purpose and basis for processing personal data
We collect, store and process your personal data only for predefined purposes. The main purposes for processing personal data are:
• fulfilling our contractual obligations;
• fulfilling legal obligations and responding to legal claims;
• stakeholder communications and responding to contact requests and inquiries;
• development of our business; and
• targeting our services to you.
We make sure that we always have a legal basis to process your personal data. We may process your data on several different basis. Firstly, we may process your data to fulfill and execute a contract and to meet legal obligations. Secondly, we may process your data also to further our legitimate interests, which are the offering of our services and operating and developing our business. Some personal data we may process based on your consent, for example, through registrations, subscriptions and contact inquires.
User tracking
We use Leadoo’s tracking service to follow what users are doing on the site and combine this behavioral data with other data we can gather from e.g. chat interactions. Leadoo uses etag tracking in order to hook together the same users behavior over several sessions. Please check out Leadoo Marketing Technologies Ltd’s Privacy Policy (https://leadoo.com/privacy-policy/) for more information on what is tracked and what your rights are. Leadoo works as the Processor and we work as the Controller for the data in terms of GDPR. You can stop the tracking by emptying your browser’s cache after the visit. For more on how Leadoo works as a GDPR compliant processor, see https://leadoo.com/privacy-policy-processor/
Information content of register
Typically we collect and process personal data such as name, email and other contact information. Depending on the purpose, we may also request for other personal data that is necessary to provide a service or product. In these cases we always provide a specific privacy statement, which specifies the personal data that is collected for that purpose.
Register security
Your data is stored on our own servers or on servers provided by our service providers, which are secured according to general industry standards and practices. We consider and keep your personal data confidential and do not disclose them to anyone else than those who need it for their work or confidentially to our customers based on contracts we have made with them. Personal data has been protected in accordance to the GDPR directive and applicable personal data legislation.
Retention period of personal data
We will not store your personal data for longer period than is necessary for its purpose or required by contract or law. The storage times for personal data may vary based on its purpose and the situation. Data files that are no longer necessary are deleted or made anonymous.
Your rights
You may at any time contact Exel Composites to check that the personal data related to you is accurate. Exel Composites will at the data subjects’ confirmed request rectify or erase any incomplete, inaccurate or outdated personal data. Such requests can be sent via email to personaldatainquiry@investors-fi.exelcomposites.com or in writing us to Exel Composites Plc, Mäkituvantie 5, FI-01510 Vantaa, FINLAND, with the reference “Personal data inquiry”.
As processing of your personal data is necessary for us to be able to provide you with our services and products, please note that revoking your consent to store and process your personal data may lead to a situation where we cannot provide you with some or all of our services and products.
Transfer of personal data
Primarily your personal data is processed by people within our own organization. Some of the personal data may be accessible and processed by Exel Composites’ subsidiaries, subcontractors and other service providers. In these situations, we make sure with contracts and otherwise that the confidentiality of your personal data is secured and data is otherwise processed lawfully. We may also disclose information to fulfill our other contractual or legal obligations or when a legal authority requires a disclosure. We may also disclose your personal data if we are a party of a business sale, such as a merger or an acquisition.
In situations where personal data is transferred to any third parties or outside of EU/EEA countries, or if due to technical and practical requirements data is processed outside the EU/EEA countries, Exel Composites ensures that sufficient level of data protection and confidentiality requirements are maintained through appropriate safety measures.