Our privacy policy helps you understand what information the companies within the SMA Mineral Group collect, how the companies use it, and what choices this gives you as a user of our website or recipient of our information via newsletters, etc. When we refer to the “SMA Mineral Group,” “we,” “our,” or “us” in this policy, we refer to the companies that are, at any given time, part of our group, described on our website and/or listed in this document.
When we use the term “user,” we mean a person who uses our services and/or visitors to our website, social media channels, or individuals who receive our newsletters.
According to applicable data protection legislation, personal data may only be collected for “specific, explicitly stated, and legitimate purposes.” The party collecting the data may not subsequently process it in a way that is incompatible with these purposes. Furthermore, the party collecting the data must have a legal basis for its processing, known as a legal ground. Our processing of your personal data is based on one or more of the following legal grounds:
In most cases, the legal ground is agreement, legal obligation, or balancing of interests. However, in some cases, our processing requires your consent. In such cases, we will obtain your consent for the relevant processing before it begins.
You can always contact us if you have questions about privacy and data protection by sending an email to us at sma@smamineral.com.
Below, we outline both the “legitimate purposes” for which we collect your personal data and the legal grounds on which we do so.
The policy includes the following content:
You have the right to receive information, free of charge, about which personal data we process about you (a so-called register extract). Requests for such extracts must be made in writing and signed by you. Please note that we only provide information that we can be certain belongs to you. We are also prohibited from disclosing information that infringes on someone else’s rights. Such a request should be sent to the address below. Mark the envelope with “Data Protection.”
SMA Mineral AB, Box 329, 682 27 FILIPSTAD
To ensure the register extract is not sent to the wrong person, we send it to your registered address.
We continuously strive to ensure that your personal data is accurate and up to date. If we discover incorrect or incomplete information, we attempt to correct or delete it.
If information is corrected at your request, we must inform those with whom we have shared your data about the correction. However, this does not apply if it would prove impossible or require disproportionate effort on our part. Your right to information means that you are entitled to know who we have shared your information with.
We retain your personal data as long as you are our customer or as long as you subscribe to our newsletters. When the customer relationship ends, we will delete your personal data within 12 months, except when we are legally required to retain it for a longer period (e.g., under accounting laws).
As a customer, you always have the right to request that we delete your personal data. We are obligated to delete the data in the following cases:
In certain cases, you may have the right to demand that the processing of your personal data is restricted. Restriction means that the data is marked in our systems so that it may only be processed for certain limited purposes in the future.
The right to restriction applies, among other things, when you believe the data is incorrect and have requested rectification. In such cases, you may also request that the processing of the data be restricted while the accuracy of the data is being investigated.
When the restriction is lifted, you will be informed.
Individuals who have provided their personal data have, in certain cases, the right to retrieve and use their personal data elsewhere (data portability). The recipient of the personal data is obligated to facilitate such a transfer of personal data. A condition for data portability is that the recipient processes the personal data based on your consent or to fulfill an agreement with you, and it only applies to personal data you have personally provided.
In certain cases, individuals have the right to object to the data controller’s processing of their personal data.
The right to object applies when personal data is processed based on a balancing of interests.
If the individual objects to such processing, the data controller may only continue to process the data if it can be demonstrated that there are compelling legitimate reasons for the processing that outweigh the individual’s interests, rights, and freedoms, or if the processing is for the establishment, exercise, or defense of legal claims.
The individual always has the right to object to the use of their personal data for direct marketing. Such an objection can be made at any time. If an objection to direct marketing is made, the personal data may no longer be processed for such purposes.
If you believe that we are processing your personal data in violation of applicable data protection regulations, you are encouraged to report this to us as soon as possible. You can also contact the Swedish Data Protection Authority (Datainspektionen) and file a complaint.
An individual who has suffered harm due to their personal data being processed in violation of the General Data Protection Regulation (GDPR) may have the right to compensation from the data controller(s) involved in the processing.
The individual can request compensation from the data controller or data processor or bring a claim for damages in court.
We may need to process your personal data in the following situations:
To provide our products and services to you, we must, in many situations, process your personal data, specifically if you:
To fulfill requirements found in applicable product liability laws, we may be obligated to contact you. The legal basis for this processing is therefore a legal obligation. We may process your personal data for as long as we have obligations under applicable product liability laws.
Information about our customers and their contact persons is processed in our CRM system, M3, which, in relation to the individual, constitutes a third party.
If you or the company you represent has purchased products or services from us, we may, in several cases, need to process your personal data, specifically to:
The data we may process includes contact details (name, address, email address, and phone number) and, if the customer is a sole proprietorship, a personal identification number.
The processing described above is necessary for us to provide the product or service you have purchased. Therefore, the legal basis for the processing is the fulfillment of the agreement with you.
We will process your personal data for as long as you are a customer and for 12 months thereafter.
If you are employed by a company that is our customer or otherwise represent such a company, we may, in several cases, need to process your personal data, specifically to:
The data we may process includes contact details (name, address, email address, and phone number).
The processing described above is necessary for us to provide the product or service purchased by your employer or equivalent entity. However, as a representative of our customer, we have not entered into an agreement with you. Therefore, the legal basis for processing your personal data is a balancing of interests.
We will process your personal data for as long as your employer or equivalent entity is a customer and for 12 months thereafter.
To offer our products and services to you, we may, in many situations, need to process your personal data, specifically if you:
The data we may process includes the information you provide during contact, typically contact details (name, address, email address, and phone number).
To market our products and services, we consider that our interest in processing your personal data outweighs your interest in not being included in such processing. Therefore, the legal basis for the processing is a balancing of interests.
If you have requested or received a quote, we will retain your data for six months from your inquiry. If you have provided your information during website inquiries or at events, we will retain your data for three months from the date you provided it.
We process various types of personal data to market our products and services directly to you. For these purposes, we may communicate with you via letters, phone, or email.
To allow you to unsubscribe from a specific email newsletter or similar communication, instructions will be included in each message on how to decline future communications.
Our legitimate interests for such processing are to market our existing or new products and services. Therefore, we may use your contact details (name, address, phone number, and email address) as well as property identifiers.
We will process your personal data for the above purposes as long as you or your employer are a customer and for 12 months thereafter.
www.smamineral.com
When someone visits our website, www.smamineral.se, we use third-party services to collect information and details about visitor behavior patterns, specifically Google Analytics and Adobe Typekit.
We do this to understand the number of visitors to different parts of the website. This information is processed without identifying anyone. We do not attempt to determine the identity of those visiting our website, nor do we allow the third-party services to do so. If we intend to collect personally identifiable information via our website, we will inform you in advance. In such cases, we will explain when we collect personal data and describe how we intend to use it.
We collect statistics on email opening rates to help monitor and improve our newsletters. The data we may process is your email address.
If you are a customer or its representative, the legal basis for our communications may be a balancing of interests. You may also have provided consent to receive newsletters in connection with an event or other contact with us. Regardless of the legal basis, you have the right to decline further communications at any time by notifying us.
Your email address will be processed for the above purpose until you opt out of future communications.
If you send us a message via social media, such as Facebook or LinkedIn, the message will be stored for 3 months. The message will not be shared with any other companies or organizations.
The information you provide to us in connection with a potential job application will only be used to:
We will not share any of the information you provide during the recruitment process with third parties for marketing purposes. Nor will we store any of your information outside the European Economic Area (EEA).
The information you provide will be securely stored by us and/or our data processors.
We do not collect more information than we need to fulfill our stated purposes and will not retain it longer than necessary.
The information we request is used to assess your suitability for the position. You are not required to provide the requested information, but it may affect your application if you choose not to.
If you apply for a position, your data may be collected by a recruitment consultant on our behalf.
We will ask you to provide personal data, including your name and contact details. We will also request information about your previous experience and education relevant to the position you have applied for.
If the recruitment process ends without an employment offer, we may ask if you would like us to retain your data for potential future recruitment opportunities for 12 months following the conclusion of the recruitment process. If you consent, we may contact you if other suitable positions arise.
If we engage a recruitment consultant, we will transfer your personal data to them. In such cases, the recruitment consultant will act as a third party in relation to you. We enter into agreements with all such consultants to ensure they comply with our requirements. These agreements stipulate that they cannot process your personal data in a way that contradicts our instructions. They are also prohibited from sharing your personal data with any organization other than us. Additionally, they are required to securely store your personal data and not retain it for longer than specified by us.
If you have questions regarding how a recruitment consultant processes your personal data, you can contact us at sma@smamineral.com to obtain information about which providers have processed your personal data.
If the recruitment process does not result in an offer of employment, the information you provided up to that point will be retained for 12 months after the conclusion of the recruitment process to demonstrate compliance with our legal obligations.
We collect personal data from you in several ways. For example, this can happen when you provide your information while placing an order or requesting a quote. We may collect the following personal data from you:
When you purchase our products or visit our website, we may automatically collect information about you:
We do not usually collect information related to sensitive personal data (e.g., racial or ethnic origin, political opinions, religious or philosophical beliefs, union membership, or data related to health or sexual life). However, in certain events where we provide catering, we may collect information about food allergies. This information is stored only until the event is completed.
Although personal identification numbers are not classified as sensitive personal data under applicable legislation, we treat them as particularly protected information when stored by us.
To protect your rights when sharing your information with our service providers or business partners, all sharing occurs under written agreements that regulate the recipient’s rights and obligations regarding the processing of your personal data.
We will never sell your personal data to third parties without your consent. Nor will we share your personal data with third parties for their marketing purposes without your approval. Just as with unwanted communications from us, you have a legal right to object to future marketing communications from third parties to whom we have passed your personal data after obtaining your consent. However, you must contact that third party directly if you wish to object to their continued processing of your personal data for this purpose.
We may share your personal data with the following parties:
We may share your personal data with companies within the SMA Mineral group. Such sharing occurs because the companies have different roles, such as sales and production, while you as a customer only interact with one of the companies.
We may share your personal data with our suppliers, who are third parties in relation to you. To perform the services we procure or to develop our products and services, our suppliers may need to process your personal data in several situations.
The agreements we enter into with our suppliers include clear provisions on how they may process your personal data. However, SMA Mineral companies and the suppliers are separate legal entities. Therefore, we generally cannot be held accountable if they fail to comply with applicable legislation. If you have questions regarding a supplier’s use of your personal data, you can contact us at sma@smamineral.com to obtain information about which suppliers have processed your personal data.
We will primarily process your personal data in Sweden, Finland, Estonia, Bulgaria, and Norway. Transfers to other EU countries may occur.
Each company is responsible for processing your personal data as described above and complies with its country’s data protection legislation. The companies within the SMA group are listed below:
Company Organization Number Location
You can always contact us regarding questions about our processing of your personal data at sma@smamineral.com.
We reserve the right to update this policy as necessary. The privacy policy was last updated on 2025-02-20.
SMA Mineral AB
Box 329
682 27 Filipstad
SWEDEN