Privacy Notice
April 2024
1) What is the purpose and scope of this Privacy Notice?
Doranonwovens is committed to protecting the privacy and security of your personal data. This privacy notice explains how we collect and use personal data about you and, in particular, what rights you have under applicable law under the EU’s General Data Protection Regulation (GDPR).
This Privacy Notice applies to the processing of personal data by any Doranonwovens Group company in the EU in relation to:
Contact persons and representatives of potential, current and former customers, suppliers and other business partners of Suominen
People who visit our websites or submit their contact information (e.g. to subscribe to our publications, leave a question, request information, complete a survey, participate in a competition or attend an event)
Other stakeholders who interact with us, such as potential investors or analysts
This Notice does not apply to processing carried out by a local Doranonwovens entity located entirely outside the EU.
2) Who is the data controller?
The data controller, i.e. the legal entity responsible for the collection and use of personal data within the scope of this Privacy Notice, is Dora nonwovens Corporation, registered info@doranonwovens.com
In limited cases, other companies of the doranonwovens Group may also act as data controllers, independently or together with dora nonwovens Corporation, for their own purposes and in accordance with the principles defined in this Notice.
3) Why do we process your personal data?
The main purposes for which we process your data are related to your professional relationship with us and include:
delivery or purchase of products and services
management of customer, supplier and business partner relationships
marketing and development of our products and services
provision of information requested from you
facilitating communication between you and us, including customer and supplier feedback and satisfaction surveys
improving the customer experience and developing our customer insight
operating and improving our websites
analysis, profiling, reporting and statistics for the purposes described above
4) What is the legal basis for processing your data?
We will only process your personal data where permitted by law. The legal basis for processing your data is:
performance of a contract between us and a customer, supplier or other business partner and the steps taken prior to entering into a contract, such as managing requests for information or offers;
Suominen’s legitimate interest in a business or other relationship, such as relationship management and marketing of our products and services;
your consent; or
compliance with a legal obligation.
5) What types of personal data do we process about you?
For the purposes described above, we may process the following information about you:
Basic information about you, e.g. your name, title, employer or the organization you represent, your sector and contact information such as postal address, telephone number and e-mail address
Information about the business relationship, e.g. your product and application interests and use of Suominen’s products and services
Information about your use of our digital services, e.g. registration data for a digital account such as username and password; information about service usage; information collected using cookies and other online technologies, e.g. the type of web browser you use, the type of device you use, your web browsing history on our websites, your IP address, the links you click in an e-mail or on a website, the materials you download or the websites from which you reached our websites
Information about contacts, meetings and communication, e.g. Feedback and contact requests, digital forms, marketing activities conducted or meetings and events you attend
Profile and analytics data, for example marketing segments and profiles derived from the data described above
6) What are the sources of your personal data?
The personal data we process about you:
is provided to us by you, for example when using our websites, registering as a user of our services, requesting information, filling in a form, purchasing, ordering or offering products and services, attending events or otherwise interacting with us in person, by phone or digitally;
is provided to us by your employer or the organisation you represent in connection with the business or other relationship between us and your employer/organisation;
is collected automatically by electronic means, including cookies, for example when you participate in an online marketing campaign or use our websites or other digital services; or
from other legitimate sources
7) What are cookies?
Cookies are text files that are stored on your device’s hard drive via your browser when you visit a doranonwovens website, and that allow us to recognize your browser for purposes such as saving your preferences and directing relevant content to you. These technologies are used to analyze trends, administer and improve the website, enable features on the website, track users’ movements around the website, and gather demographic information about our users. We use technology created by third parties to enable such technological features. Most browsers currently available offer the option to manage cookies, for example, by completely disabling cookies, accepting them individually, and deleting saved cookies from your hard drive. We would like to remind you that if you completely disable cookies in your browser, you may not be able to use some features of the website.
8) Who has access to your personal data?
We may share your data with service providers and business partners who operate and process personal data on our behalf as data processors. These data processors may include IT and technology providers who host and store our data, as well as potential market research partners or other professional service providers.
Such service providers are only permitted to process your personal data to the extent necessary to provide the service we have requested from them. We require all our service providers to keep the personal data we provide to them confidential and sufficiently secure. They are also required to comply with applicable data protection laws, our privacy and information security policies and relevant service and other agreements.
In limited cases, doranonwovens may also provide your personal data to other third parties if required by law or if we have a legitimate interest in doing so.
In addition, we may disclose and transfer your personal data within the Suominen group of companies to dora nonwovens employees who need access to this information in order to perform their duties.
9) Where is your personal data processed?
Since doranonwovens is a global group of companies with subsidiaries and service providers both within and outside the EU, your personal data may be processed, transferred or made accessible across country borders. If your data is transferred outside the EU, we rely on adequacy decisions, data transfer agreements or other EU-approved mechanisms for such transfers.
We contractually require recipients to use personal data only for the intended purpose of disclosure and to destroy or return it when it is no longer needed.
Transfers of personal data from within the EU to Suominen subsidiaries outside the EU are primarily based on intragroup agreements based on the EU’s standard contractual clauses on the export of personal data to third countries.
10) How long do we keep your personal data?
We will only keep your personal data for as long as necessary to fulfil the purposes for which we collected it or as required by applicable law. To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure of the data, the purposes for which we process the data, the time limits on legal claims and the applicable legal requirements.
11) What are your rights, and how can you exercise your rights?
You have certain rights over your personal data, including the following:
Information and access: You may request to access your personal data, be provided with supplementary information, and be provided with a copy of your personal data.
Rectification: You may request that inaccurate or out-of-date personal data about you be rectified and/or updated.
Erasure: You may have the right to have your personal data erased.
Restriction: You may have the right to restrict the processing of your personal data. This restriction means that your personal data is only stored by us, and not processed further. This restriction on processing is typically only temporary and may be lifted once we have dealt with your complaint.
Objecting to processing: You may have the right to object to specific types of processing. These types are direct marketing, processing for research or statistical purposes, and processing based on legitimate interests. The right to object to processing based on legitimate interests may be subject to demonstration by us of grounds that override your right to object.
Data portability: You may have the right to data portability. Data portability means the right to receive personal data about you in a structured, commonly used and machine-readable form so that it may be transferred by you or by us to another company easily.
Right not to be subject to decisions based solely automated decision making: You may have the right not to be subject to decisions based solely on automated processing (i.e. without human intervention), if those decisions produce legal effects or significantly affect you. Automated processing is processing of your personal data by automated means.
These rights are not absolute: they do not always apply, and there may be restrictions or exemptions. For example, your right to access data about you may be denied in the case of repeated access requests within a short time interval, or where providing such access could compromise the privacy of another person or unreasonably expose sensitive company information.
If you want to review or verify personal data about you, or to have it corrected or request its erasure, or to restrict or object to the processing of your personal data, or to request that we transfer a copy of such data to another party please submit your request via the contact details provided above in the section “Who is the data controller?”.
You will not have to pay a fee to access your personal data or to exercise any of your other rights. However, we may charge a reasonable fee if your request is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.
We may need to request specific information from you to help us confirm your identity and ensure your right to access the data or to exercise any of your other rights. This is another appropriate security measure to ensure that personal data is not disclosed to any person who has no right to receive it.
12) Withdrawal of consent
In cases where your consent is the legal basis for processing your personal data, you have the right to withdraw your consent for that specific processing at any time. To withdraw your consent, please contact us via the contact details provided above in the section “Who is the data controller?”. Once we have received notice that you have withdrawn your consent, we will no longer process your personal data for the purpose or purposes you originally agreed to, unless we have another legal basis for doing so.
13) Complaints
If you are not satisfied with the response you have received or if you feel that we have not dealt correctly with your personal data, you have the right to make a complaint at any time to the relevant data protection regulator, also known as a “supervisory authority.” The relevant supervisory authority is likely to be the supervisory authority of the country where you are located or where the alleged infringement took place.
14) Changes to this Privacy Notice
We reserve the right to update this Privacy Notice at any time. The current version can always be found from our website. We recommend that you revisit this Privacy Notice from time to time to review any possible changes.