UPM-Kymmene Corporation and its affiliates (“UPM”) is committed to respecting and protecting your privacy. This Privacy Statement describes what types of personal data UPM may collect about you when you visit our website or use our services accessed through the website (“Services”), how it may be used and processed, and how it is protected. As used in this Privacy Statement “personal data” means any information that is capable of identifying you as an individual either submitted by you when using our Services and/or obtained through alternative channels.
We may update this Privacy Statement from time to time to reflect changes in our Services, operations and/or applicable law. Any changes will be posted here.
While this Privacy Statement is intended to describe the broadest range of our personal data processing activities globally, those processing activities may be more limited in some jurisdictions due to local legal requirements.
UPM’s website and Services may contain links to other websites, which are beyond UPM’s control and are not covered by this Privacy Statement. This Privacy Statement only covers data processing carried out by UPM, not by any third parties operating any site or service incorporating or linking to our Services. If you access other websites using the links provided, the operators of these sites may collect information from you which will be used in accordance with their privacy statements, which may differ from UPM’s.
When processing your personal data, UPM will comply with applicable data protection laws. UPM has endeavored to take appropriate action to protect your personal data to prevent unauthorized access to it and its incorrect use.
We may collect your personal data when you visit our website, register or subscribe to our Services, place an order for products by using Services, subscribe to our newsletters or other material, or interact with us in any other way. UPM notifies you of the possible consequences of not providing your personal data and whether providing such data is mandatory or voluntary.
When you visit our site or use our Services, we may also collect information about your use of our Services to enhance user experience and improve Services, and analyse the use of our site by using cookies and other technical data. Services may use technology, such as Google Analytics, which reveals certain technical information, such as your computer’s operating system, network location, browser type and address of a referring web site including a company name. This information alone does not allow identification of a specific user of our Services and collect personal user data, unless you yourself have provided them nor does it contain any other information on the basis of which you may be identified. If you do not wish to receive cookies or do not want to be notified when they are placed, you may set your web browser to do so, if your browser permits it. If you choose to reject cookies, some parts of the site may not function properly. We also use third-party tools on our website which may place cookies on your computer and use tracking technologies to personalise your experience.
If you provide your personal data (name, title, organisation, email address, address, phone number, company name, enquiry details, etc.) to UPM, the information may be processed by UPM for the purposes of providing you with Services and fulfilling your requests. You may need to register and provide some additional information in order to access some Services.
You may be contacted by UPM or its representative for additional information, to be able to answer your questions or fulfil your requests, for marketing our goods or services to you, for opinion surveys, product surveys or technical administration and development of this site, or for similar purposes.
Overall, collected personal data is processed for our legitimate business purposes of:
- providing products and services to you and fulfilling your requests;
- customer and vendor relationship management and communication;
- product development;
- optimising the website user experience;
- marketing our products or services;
- conducting customer and product surveys;
- organising events and exhibitions;
- contacting you to provide you with information about our new products and services and send you related electronic direct marketing communications, unless you have indicated that you do not wish to be contacted; or
- to comply with laws or enable us to fulfil our legal obligations.
UPM has taken appropriate technical and organisational measures to restrict access to the personal data it holds and to protect it against loss, accidental destruction, misuse, and unlawful alteration. Access to personal data is restricted on a need-to-know basis to individuals (UPM’s employees and service providers) who need to access the data for the purposes it was collected for.
UPM will store personal information as long as required for the purposes it was collected for or as required to meet legal and/or regulatory requirements.
UPM may share your personal data with UPM affiliates regardless of their location for the limited purposes outlined in Section “Information we collect and how we use your personal data” above and only to the extent needed for the purpose.
We use third-party service providers to enable us to provide our Services. Such third parties are only allowed to process your personal data to the extent necessary for them to provide the service we have requested from them. UPM will ensure that your personal data is appropriately protected when shared within UPM and with external parties. When outsourcing services to any third parties, we ensure through contractual measures that personal data is processed appropriately and in compliance with all applicable laws. We will not disclose your personal data in any other circumstances, unless we have your consent or if disclosure is required by law.
In order to provide you Services (e.g. if we use third parties to provide Services) UPM may transfer your personal data also to countries located outside the European Economic Area (EEA). In transferring personal information outside the EEA, appropriate technical and organisational measures, such as EU Model Clauses, are taken to secure your personal data. The recipients of such information will be required to protect confidentiality and security of the personal data and may not use it for the benefit of their own business.
You have the right to access the personal data held by UPM about you and request a copy of such personal data by contacting us at the email address or address indicated in Section “How to contact us” below. You have, when necessary, the right to have the data amended, rectified, or erased, if it is incorrect, inaccurate, imprecise, or outdated, or obsolete as regards the purpose of its processing. You may be requested to verify your identity, specify your request, and may be asked for more information about your request.
If your request related to processing of your personal data is refused or if in your opinion your personal data has not been processed in compliance with applicable data protection laws, you may bring the matter to the attention of the relevant data protection authority.
You may also request to restrict and object to the processing of your personal data, if it could compromise your rights to privacy. You have the right to restrict processing when you contest the accuracy of the data for the period its accuracy is being verified, when the processing is unlawful, or when you have objected to the processing based on legitimate interests, until an overriding legitimate interest for processing is verified. When processing of your personal data is based on consent, you have the right to withdraw your consent at any time.
You have the right to opt out of receiving any electronic direct marketing communications from us by clicking the “unsubscribe” link provided in all marketing communications we send you, and choosing not to receive marketing communications from us in the future.
If you have any questions about this Privacy Statement, processing of your personal data by UPM or you wish to access personal data we hold about you, you may contact:
UPM-Kymmene Corporation / Privacy
Alvar Aallon katu 1, P.O. Box 380
FI-00101 Helsinki, Finland
You may also contact the UPM affiliate in your country or region, or the local data protection officer of the company (if applicable).
For contact information of UPM affiliates please visit: www.upm.com/Contact-Us/Pages/default.aspx
Privacy Statement - Recruitment
UPM-Kymmene Corporation, including its affiliates (“UPM”) is committed to respecting and protecting your privacy. This UPM Recruitment Privacy Statement (“Privacy Statement”) describes what types of personal data we may collect about you and how we process and protect personal data collected about you during our recruitment activities. As used in this Privacy Statement, “personal data” means any information that is capable of identifying you as an individual, either submitted as part of your online application and/or through alternative channels.
By submitting your application to UPM, you provide us with your personal data and explicitly state that you are interested in employment at UPM. You may also apply by using your LinkedIn profile. Please provide only private addresses for contacting you by email and mail.
While this Privacy Statement is intended to describe the broadest range of our recruitment related personal data processing activities globally, those processing activities may be more limited in some jurisdictions due to local legal requirements.
When processing your personal data, UPM will comply with applicable data protection laws. UPM has endeavoured to take appropriate action to protect your personal data to prevent unauthorised access to it and its incorrect use.
UPM collects your personal data during the recruitment process mainly directly from you. UPM notifies you of the possible consequences of not providing your personal data and whether providing such data is mandatory or voluntary. We may also collect information about you from other available sources to the extent relevant and permitted by applicable law, such as your referees, UPM employees with whom you have interviewed, and employment background check providers.
The categories of personal data UPM may collect about you are (local restrictions may apply):
- Applicant data: name, contact information (home address, telephone number, email address), date and place of birth, gender, employment and educational history, training, licenses and certificates, competences and qualifications, national identification information
- Recruitment information: CVs and applications, references, background check information
- Communication: telephone recordings, video recordings, voice mails, emails
Only information that is necessary for making recruitment decisions is collected.
UPM processes your personal data only for its legitimate business purposes, including:
- identifying and evaluating candidates for potential employment;
- keeping the records in relation to recruiting and hiring;
- conducting background checks as permitted by applicable law.
We may also wish to retain your personal data to consider you for future employment opportunities. In such case, we will seek your consent. We always request your consent for performing any background checks.
UPM may share your personal data with the recruitment manager and other UPM employees involved in the recruitment process regardless of their location. Your personal data may also be shared with external consultants and third-party service providers to enable them to provide HR-related services to UPM, the authorities with your consent to conduct background checks, and when UPM is under legal obligation to disclose such information.
Your personal data may be accessed by our recruiters and interviewers working in the country where the open position is based, but also by recruiters and interviewers working in different countries within the UPM global organisation. Personal data collected by UPM may be transferred internationally to other UPM entities worldwide only when it is necessary for the recruitment in question.
UPM may share your personal data only for the limited purposes outlined in section “Using your personal data (purposes and legal basis for processing)” above and only to the extent needed for the purpose. UPM will ensure that your personal data is appropriately protected when shared with third parties.
UPM may also transfer your personal data to countries outside the European Economic Area (EEA), e.g. if we use third parties to provide HR-related services. When outsourcing services to any third-party service providers and transferring personal data outside the EEA within UPM, we ensure through contractual and other measures, such as EU Model Clauses, that appropriate technical and organisational measures are taken to secure your personal data.
UPM has taken appropriate technical and organisational measures to restrict access to your personal data and to protect it against loss, accidental destruction, misuse, and unlawful alteration. UPM has screening and selection procedures in place for third-party service providers to guarantee secure processing of personal data. After submitting your application, only recruitment-related personnel will have access to your personal data. Access to personal data is restricted on a need-to-know basis to individuals who need to access the data for the purposes defined in section “Using your information (purposes and legal basis for processing)” above.
If you accept an offer of employment with us, any relevant personal data collected during the recruitment process will become part of your employee records and will be retained in accordance with country-specific requirements.
If you are not offered employment with us, we may with your consent retain your personal data to consider you for future employment opportunities.
UPM will store personal data as long as required for the purpose it was collected for or as required to meet legal and/or regulatory requirements.
If you have any questions about this Privacy Statement, processing of your personal data by UPM, or you wish to make a data request, you may contact:
UPM-Kymmene Corporation / Privacy
Alvar Aallon katu 1, P.O. Box 380
FI-00101 Helsinki, Finland
You may also contact the company where you sent your application at or the local data protection officer of the company (if applicable).