SMA Mineral - A world full of lime

Privacy policy

Introduction

Our privacy policy helps you understand what information the companies within the SMA Mineral Group collect, how the companies use it, and what choices this gives you as a user of our website or recipient of our information via newsletters, etc. When we refer to the “SMA Mineral Group,” “we,” “our,” or “us” in this policy, we refer to the companies that are, at any given time, part of our group, described on our website and/or listed in this document.

When we use the term “user,” we mean a person who uses our services and/or visitors to our website, social media channels, or individuals who receive our newsletters.

According to applicable data protection legislation, personal data may only be collected for “specific, explicitly stated, and legitimate purposes.” The party collecting the data may not subsequently process it in a way that is incompatible with these purposes. Furthermore, the party collecting the data must have a legal basis for its processing, known as a legal ground. Our processing of your personal data is based on one or more of the following legal grounds:

  • the processing is necessary for us to fulfill our agreement with you (“agreement”),
  • the processing is necessary for us to fulfill an obligation we have under another law (“legal obligation”),
  • the processing is necessary for our legitimate interests and your interests in protecting your personal data do not outweigh ours (“balancing of interests”), or
  • in certain specific cases, after you have given your consent to the relevant processing (“consent”).

In most cases, the legal ground is agreement, legal obligation, or balancing of interests. However, in some cases, our processing requires your consent. In such cases, we will obtain your consent for the relevant processing before it begins.

You can always contact us if you have questions about privacy and data protection by sending an email to us at sma@smamineral.com.

Below, we outline both the “legitimate purposes” for which we collect your personal data and the legal grounds on which we do so.

The policy includes the following content:

  1. Your rights
  2. In which situations do we need to process your personal data?
  3. Newsletters
  4. Social media
  5. Job vacancies
  6. How do we obtain information about you?
  7. Who may we share your information with?
  8. Where will we process your personal data?
  9. Contact us

Right to Information

You have the right to receive information, free of charge, about which personal data we process about you (a so-called register extract). Requests for such extracts must be made in writing and signed by you. Please note that we only provide information that we can be certain belongs to you. We are also prohibited from disclosing information that infringes on someone else’s rights. Such a request should be sent to the address below. Mark the envelope with “Data Protection.”

SMA Mineral AB, Box 329, 682 27 FILIPSTAD

To ensure the register extract is not sent to the wrong person, we send it to your registered address.

Accurate Information

We continuously strive to ensure that your personal data is accurate and up to date. If we discover incorrect or incomplete information, we attempt to correct or delete it.

If information is corrected at your request, we must inform those with whom we have shared your data about the correction. However, this does not apply if it would prove impossible or require disproportionate effort on our part. Your right to information means that you are entitled to know who we have shared your information with.

The Right to Be Forgotten

We retain your personal data as long as you are our customer or as long as you subscribe to our newsletters. When the customer relationship ends, we will delete your personal data within 12 months, except when we are legally required to retain it for a longer period (e.g., under accounting laws).

As a customer, you always have the right to request that we delete your personal data. We are obligated to delete the data in the following cases:

  • If the data is no longer needed for the purposes for which it was collected
  • If the processing is based on your consent and you withdraw the consent
  • If the processing is for direct marketing purposes and you object to the processing of the data
  • If you object to the processing of personal data based on a balancing of interests and there are no legitimate reasons that outweigh your interest
  • If the personal data has been processed unlawfully
  • If deletion is required to fulfill a legal obligation
  • If data is deleted at your request, we must inform those to whom we have disclosed the data about the deletion. However, this does not apply if it would prove impossible or require disproportionate effort on our part. You also have the right to request information about to whom the data has been disclosed.

Restricted Access

In certain cases, you may have the right to demand that the processing of your personal data is restricted. Restriction means that the data is marked in our systems so that it may only be processed for certain limited purposes in the future.

The right to restriction applies, among other things, when you believe the data is incorrect and have requested rectification. In such cases, you may also request that the processing of the data be restricted while the accuracy of the data is being investigated.

When the restriction is lifted, you will be informed.

Data Portability

Individuals who have provided their personal data have, in certain cases, the right to retrieve and use their personal data elsewhere (data portability). The recipient of the personal data is obligated to facilitate such a transfer of personal data. A condition for data portability is that the recipient processes the personal data based on your consent or to fulfill an agreement with you, and it only applies to personal data you have personally provided.

Right to Object

In certain cases, individuals have the right to object to the data controller’s processing of their personal data.

The right to object applies when personal data is processed based on a balancing of interests.

If the individual objects to such processing, the data controller may only continue to process the data if it can be demonstrated that there are compelling legitimate reasons for the processing that outweigh the individual’s interests, rights, and freedoms, or if the processing is for the establishment, exercise, or defense of legal claims.

The individual always has the right to object to the use of their personal data for direct marketing. Such an objection can be made at any time. If an objection to direct marketing is made, the personal data may no longer be processed for such purposes.

Complaints

If you believe that we are processing your personal data in violation of applicable data protection regulations, you are encouraged to report this to us as soon as possible. You can also contact the Swedish Data Protection Authority (Datainspektionen) and file a complaint.

Damages

An individual who has suffered harm due to their personal data being processed in violation of the General Data Protection Regulation (GDPR) may have the right to compensation from the data controller(s) involved in the processing.

The individual can request compensation from the data controller or data processor or bring a claim for damages in court.

In What Situations Do We Need to Process Your Personal Data?

We may need to process your personal data in the following situations:

  • Provision of our products and services
  • Marketing
  • Visits to our websites
  • Newsletters
  • Contact via social media
  • Job vacancies

Provision of Our Products or Services

To provide our products and services to you, we must, in many situations, process your personal data, specifically if you:

  • are a customer of one of our companies
  • represent a customer of one of our companies, e.g., as their contact person

To fulfill requirements found in applicable product liability laws, we may be obligated to contact you. The legal basis for this processing is therefore a legal obligation. We may process your personal data for as long as we have obligations under applicable product liability laws.

Information about our customers and their contact persons is processed in our CRM system, M3, which, in relation to the individual, constitutes a third party.

Customer

If you or the company you represent has purchased products or services from us, we may, in several cases, need to process your personal data, specifically to:

  • identify you as a customer,
  • fulfill our agreement with you regarding the delivery of products and services,
  • handle complaints and returns, and
  • otherwise safeguard our rights and fulfill our obligations under our agreement with you.

The data we may process includes contact details (name, address, email address, and phone number) and, if the customer is a sole proprietorship, a personal identification number.

The processing described above is necessary for us to provide the product or service you have purchased. Therefore, the legal basis for the processing is the fulfillment of the agreement with you.

We will process your personal data for as long as you are a customer and for 12 months thereafter.

Representative of a Customer

If you are employed by a company that is our customer or otherwise represent such a company, we may, in several cases, need to process your personal data, specifically to:

  • identify you as the customer’s contact person,
  • fulfill our agreement with the company regarding the delivery of products and services,
  • handle any complaints and returns, and
  • otherwise safeguard our rights and fulfill our obligations under our agreement with the company.

The data we may process includes contact details (name, address, email address, and phone number).

The processing described above is necessary for us to provide the product or service purchased by your employer or equivalent entity. However, as a representative of our customer, we have not entered into an agreement with you. Therefore, the legal basis for processing your personal data is a balancing of interests.

We will process your personal data for as long as your employer or equivalent entity is a customer and for 12 months thereafter.

Expressed Interest in Our Products or Services

To offer our products and services to you, we may, in many situations, need to process your personal data, specifically if you:

  • have requested a quote for our products, or
  • have provided your information to us in connection with an event we organized or participated in.

The data we may process includes the information you provide during contact, typically contact details (name, address, email address, and phone number).

To market our products and services, we consider that our interest in processing your personal data outweighs your interest in not being included in such processing. Therefore, the legal basis for the processing is a balancing of interests.

If you have requested or received a quote, we will retain your data for six months from your inquiry. If you have provided your information during website inquiries or at events, we will retain your data for three months from the date you provided it.

Marketing

We process various types of personal data to market our products and services directly to you. For these purposes, we may communicate with you via letters, phone, or email.

To allow you to unsubscribe from a specific email newsletter or similar communication, instructions will be included in each message on how to decline future communications.

Our legitimate interests for such processing are to market our existing or new products and services. Therefore, we may use your contact details (name, address, phone number, and email address) as well as property identifiers.

We will process your personal data for the above purposes as long as you or your employer are a customer and for 12 months thereafter.

Website Visits

www.smamineral.com

When someone visits our website, www.smamineral.se, we use third-party services to collect information and details about visitor behavior patterns, specifically Google Analytics and Adobe Typekit.

We do this to understand the number of visitors to different parts of the website. This information is processed without identifying anyone. We do not attempt to determine the identity of those visiting our website, nor do we allow the third-party services to do so. If we intend to collect personally identifiable information via our website, we will inform you in advance. In such cases, we will explain when we collect personal data and describe how we intend to use it.

Newsletters

We collect statistics on email opening rates to help monitor and improve our newsletters. The data we may process is your email address.

If you are a customer or its representative, the legal basis for our communications may be a balancing of interests. You may also have provided consent to receive newsletters in connection with an event or other contact with us. Regardless of the legal basis, you have the right to decline further communications at any time by notifying us.

Your email address will be processed for the above purpose until you opt out of future communications.

Social Media

If you send us a message via social media, such as Facebook or LinkedIn, the message will be stored for 3 months. The message will not be shared with any other companies or organizations.

Job Vacancies

The information you provide to us in connection with a potential job application will only be used to:

  • evaluate your application,
  • contact you, and
  • comply with legal requirements.

We will not share any of the information you provide during the recruitment process with third parties for marketing purposes. Nor will we store any of your information outside the European Economic Area (EEA).

The information you provide will be securely stored by us and/or our data processors.

What Information Do We Request and Why?

We do not collect more information than we need to fulfill our stated purposes and will not retain it longer than necessary.

The information we request is used to assess your suitability for the position. You are not required to provide the requested information, but it may affect your application if you choose not to.

Application Phase

If you apply for a position, your data may be collected by a recruitment consultant on our behalf.

We will ask you to provide personal data, including your name and contact details. We will also request information about your previous experience and education relevant to the position you have applied for.

If the recruitment process ends without an employment offer, we may ask if you would like us to retain your data for potential future recruitment opportunities for 12 months following the conclusion of the recruitment process. If you consent, we may contact you if other suitable positions arise.

Engagement of Recruitment Consultants

If we engage a recruitment consultant, we will transfer your personal data to them. In such cases, the recruitment consultant will act as a third party in relation to you. We enter into agreements with all such consultants to ensure they comply with our requirements. These agreements stipulate that they cannot process your personal data in a way that contradicts our instructions. They are also prohibited from sharing your personal data with any organization other than us. Additionally, they are required to securely store your personal data and not retain it for longer than specified by us.

If you have questions regarding how a recruitment consultant processes your personal data, you can contact us at sma@smamineral.com to obtain information about which providers have processed your personal data.

How Long Is Information Stored?

If the recruitment process does not result in an offer of employment, the information you provided up to that point will be retained for 12 months after the conclusion of the recruitment process to demonstrate compliance with our legal obligations.

How Do We Collect Information About You?

Information You Provide

We collect personal data from you in several ways. For example, this can happen when you provide your information while placing an order or requesting a quote. We may collect the following personal data from you:

  • Contact details (name, address, email address, and phone number)
  • Personal identification number
  • Details about your previous orders

Information We Collect About You

When you purchase our products or visit our website, we may automatically collect information about you:

  • Contact details (name, address, email address, and phone number)
  • Purchase history
  • Information about your interactions with us (how you use our website, including page response times, download errors, and how you arrived at and left the site)
  • Information about your computer or mobile device (such as IP address, language settings, browser settings, time zone, operating system, platform, and screen resolution)

Sensitive Information

We do not usually collect information related to sensitive personal data (e.g., racial or ethnic origin, political opinions, religious or philosophical beliefs, union membership, or data related to health or sexual life). However, in certain events where we provide catering, we may collect information about food allergies. This information is stored only until the event is completed.

Although personal identification numbers are not classified as sensitive personal data under applicable legislation, we treat them as particularly protected information when stored by us.

Who Might We Share Your Information With?

To protect your rights when sharing your information with our service providers or business partners, all sharing occurs under written agreements that regulate the recipient’s rights and obligations regarding the processing of your personal data.

We will never sell your personal data to third parties without your consent. Nor will we share your personal data with third parties for their marketing purposes without your approval. Just as with unwanted communications from us, you have a legal right to object to future marketing communications from third parties to whom we have passed your personal data after obtaining your consent. However, you must contact that third party directly if you wish to object to their continued processing of your personal data for this purpose.

We may share your personal data with the following parties:

  • Companies within the SMA Mineral group
  • Our suppliers

Companies in the Group

We may share your personal data with companies within the SMA Mineral group. Such sharing occurs because the companies have different roles, such as sales and production, while you as a customer only interact with one of the companies.

Our Suppliers

We may share your personal data with our suppliers, who are third parties in relation to you. To perform the services we procure or to develop our products and services, our suppliers may need to process your personal data in several situations.

The agreements we enter into with our suppliers include clear provisions on how they may process your personal data. However, SMA Mineral companies and the suppliers are separate legal entities. Therefore, we generally cannot be held accountable if they fail to comply with applicable legislation. If you have questions regarding a supplier’s use of your personal data, you can contact us at sma@smamineral.com to obtain information about which suppliers have processed your personal data.

Where We Will Process Your Personal Data

We will primarily process your personal data in Sweden, Finland, Estonia, Bulgaria, and Norway. Transfers to other EU countries may occur.

Contact Us

Each company is responsible for processing your personal data as described above and complies with its country’s data protection legislation. The companies within the SMA group are listed below:

Company    Organization Number    Location

  • SMA Mineral AB     556206-3874     Filipstad, Sweden
  • SMA Mineral Persberg AB     556364-2338     Filipstad, Sweden
  • SMA Mineral Logistik & Entreprenad AB     556164-8857     Filipstad, Sweden
  • SMA Svenska Mineral AB     556305-1241     Filipstad, Sweden
  • SMA Mineral AS     977048931     Oslo, Norway
  • SMA Mineral AS     10328701     Tallinn, Estonia
  • SMA Eesti AS     10569570     Tallinn, Estonia
  • SMA Mineral Oy     1572824-8     Helsinki, Finland
  • SMA Karbonater AB     556284-3432     Filipstad, Sweden
  • Juvéls Åkeri AB     556193-2012     Filipstad, Sweden
  • Svensk Oljeåtervinning AB     556349-1355     Västerås, Sweden
  • SMA Nordland AS     984534701     Skjerstad, Norway
  • SMA Mineral Holding AB     556672-8191     Filipstad, Sweden
  • SMA Mineral BV     33293316     Amsterdam, The Netherlands
  • SMA Mineral Mark AB     556256-4509     Filipstad, Sweden
  • SMA Mineral EOOD     121393885     Sofia, Bulgaria
  • SMA Mineral Bourgas Var OOD     000065763     Bourgas, Bulgaria
  • Tradex AD     126064744     Dimitrovgard, Bulgaria

You can always contact us regarding questions about our processing of your personal data at sma@smamineral.com.

Changes

We reserve the right to update this policy as necessary. The privacy policy was last updated on 2025-02-20.