Privacy policy

PRIVACY STATEMENT FOR UPM BIOMEDICALS WEBSTORE 

3.12.2021

This Privacy Statement governs the manner in which UPM-Kymmene Corporation and its Group companies (“UPM”) collect and process personal information of users of its biomedicals webstore (“Webstore”). By accessing Webstore, you agree to be bound by these terms and conditions. This Privacy Statement may be updated by UPM from time to time (any changes will be posted here). 

This Privacy Statement only covers data processing carried out by UPM and not by any third parties operating any site or service incorporating or linking to our services. 

UPM is committed to protecting and respecting your privacy. When processing any personal information provided by you through Webstore, UPM will always comply with and abide by the applicable personal data and data protection legislation and use it in accordance with applicable privacy laws and for the purposes set out in this Privacy Statement. UPM has endeavoured to take appropriate action to protect personal information provided by you in order to prevent their unauthorized access and incorrect use.

Information we collect and how we use your personal data

UPM needs to collect and use certain types of contact data, including personal data, of its customers and other individuals UPM deals with to carry out its business operations. 

We collect personal information about you when you visit our site, register or subscribe for our products, place an order, subscribe to our newsletters or interact with us in any other way. By visiting, registering, subscribing or using our Webstore, you agree to the use of your personal data in line with this Privacy Statement. UPM may also receive information about you from third parties with whom we have a business relationship.

The information we collect and process about you may include your name, title, organization, email address, phone numbers, address, payment card type, shipping and invoicing address, order history and any other information you may give us. In addition, we collect details of any transactions or payments made through Webstore. We may also collect information about your use of our Webstore to enhance user experience and analyse the use of our site by using cookies and other technical data when you visit our site, such as IP address, browser type, the type of computer or other device, the time and date of user visits, time spent on website, site you come from to our website or other similar technical information. 

For more information about cookies, please see privacy.upm.com 

Information we collect about you is to be used only for the above described purposes and for: 

  • to fulfil orders made through Webstore; 
  • to identify registered users of Webstore; 
  • to develop and improve Webstore; 
  • to contact you in order to request feedback on our products; 
  • to contact you with information about new products of UPM Biochemicals and other UPM businesses and send you related electronic direct marketing communications, unless you have indicated that you do not wish to be contacted;
  • to comply with our legal obligations;
  • reviewing of sanctions lists and other official lists.


Sharing data with external parties

We may use third party service providers to enable us to provide the Webstore or administer related activities on our behalf, such as logistics, accounting and payment services providers. We may share your information with these third parties only for the limited purposes outlined above. UPM will not disclose your personal information in any other circumstances, unless we have your consent or if disclosure is required by law. 

Protection and storage of personal data 

UPM has taken appropriate technical and organisational measures to restrict access to the personal data it holds and to protect it against loss, accidental destruction, misuse, and unlawful alteration. Access to personal data is restricted on a need-to-know basis to individuals (UPM’s employees and service providers) who need to access the data for the purposes it was collected for.

UPM will store personal information as long as required for the limited purposes outlined in Section “Information we collect and how we use your personal data” above or as required to meet legal and/or regulatory requirements.

Sharing data and international transfer

UPM uses personal data in its customer and vendor relationship management databases only for its internal purposes. We may share your personal data with UPM affiliates regardless of their location for the limited purposes outlined in Section “Information we collect and how we use your personal data” above and only to the extent needed for the purpose.

We may use third-party service providers in customer and vendor database management. Such third parties are only allowed to process your personal data to the extent necessary for them to provide the service we have requested from them. UPM will ensure that your personal data is appropriately protected when shared within UPM and with external parties. When outsourcing services to any third parties, we ensure through contractual and other measures that personal data is processed appropriately and in compliance with all applicable laws. We will not disclose your personal data in any other circumstances, unless we have your consent or if disclosure is required by law.

UPM may transfer your personal data also to countries located outside the European Economic Area (EEA). In transferring personal information outside the EEA, appropriate technical and organisational measures, such as EU Model Clauses, are taken to secure your personal data. The recipients of such personal data will be required to protect its confidentiality and security and may not use it for the benefit of their own business.

Your rights

You have the right to access the personal data held by UPM about you and request a copy of such personal data by contacting us at the email address or address indicated in Section “How to contact us” below. You have, when necessary, the right to have the data amended, rectified, or erased, if it is incorrect, inaccurate, imprecise, or outdated, or obsolete as regards the purpose of its processing. You may be requested to verify your identity, specify your request, and may be asked for more information about your request.

If your request related to processing of your personal data is refused or if in your opinion your personal data has not been processed in compliance with applicable data protection laws, you may bring the matter to the attention of the relevant data protection authority.

You may also request to restrict and object to the processing of your personal data, if it could compromise your rights to privacy. You have the right to restrict processing when you contest the accuracy of the data for the period its accuracy is being verified, when the processing is unlawful, or when you have objected to the processing based on legitimate interests, until an overriding legitimate interest for processing is verified. When processing of your personal data is based on consent, you have the right to withdraw your consent at any time.

You have the right to opt out of receiving any electronic direct marketing communications from us by clicking the “unsubscribe” link provided in all marketing communications we send you, and choosing not to receive marketing communications from us in the future.

To exercise your rights or to obtain more information, please contact: 

UPM Biomedicals / UPM-Kymmene Oy

Alvar Aallon katu 1, P.O. Box 380 

FI-00101 Helsinki, Finland Tel. +358 204 15 111 

privacy[at]upm.com