Corporate customers
/ Corporate customers
Home
Corporate customers
Current page
corporate customers icon
corporate customers icon

Corporate customers

Last updated: January 2025

1. Legal basis and purpose of processing personal data

SSAB processes personal data of its corporate customers, their representatives, potential customers and other business partners. SSAB processes the personal data of these individuals for various purposes, which are explained below.

 

PROCESSING ACTIVITY LEGAL BASIS DESCRIPTION
Contractual and other interaction with customers and other business partners Legitimate interest │
Contract 		The main purpose of processing personal data is to deliver SSAB's products and services, as well as to source services and material for SSAB’s business needs and provide website and other digital services. This is to process data for fulfilling its contractual obligations and being able to communicate with SSABs customers and other business contacts, including processing needed prior to entering into a contractual relationship with the company or organization the individual is representing, or in some cases also with the individual directly.
Product and services development Legitimate interest SSAB aims to provide high-quality products and services and to give individuals relevant information about those products and services. Therefore, SSAB may use personal data to analyze the market, user groups and use of websites or services for the purpose of developing and improving the quality of the website and SSAB's products and services.
Please see section Web users, Digital channels and cookies for further information related to statistical and other purposes of using cookies and the legal basis thereof. 
 Marketing and communications Legitimate interest Individuals’ personal data is used to manage communication with individuals and for marketing purposes. Processing is done to promote SSAB's latest products and services as well as to personalize the user experience and to evaluate customer satisfaction. 
 Compliance with statutory obligations Legal obligation Personal data processing may be needed in order to be in compliance, with i.a. the following statutory requirements: - reporting and audit
- Market Abuse Regulation
- sanctions and other compliance screening
- whistleblowing procedures
In addition, certain personal data may be stored for dispute resolution purposes to be able to establish and defend legal claims.
pdf 98 Kb
Privacy notice - corporate customers

2. Collection of personal data

Depending on the individuals' interaction, SSAB may collect the following personal data:
Personal Data Examples
Contact details of the individual or the company or organization the individual is representing Name, email address and phone number
Contact details of the individual's employer Company name, business address, business email address and business phone number
Information relating to the business relationship Products and services delivered, the starting and end time of the business relationship, events attended, purchase history, preferences
Billing and credit information Account numbers, payments made and outstanding and bills delivered 
 Customer communications Communications and interaction, feedback, marketing and campaign history information 
Personal Data
Contact details of the individual or the company or organization the individual is representing
Examples
Name, email address and phone number
Personal Data
Contact details of the individual's employer
Examples
Company name, business address, business email address and business phone number
Personal Data
Information relating to the business relationship
Examples
Products and services delivered, the starting and end time of the business relationship, events attended, purchase history, preferences
Personal Data
Billing and credit information
Examples
Account numbers, payments made and outstanding and bills delivered 
Personal Data
 Customer communications
Examples
Communications and interaction, feedback, marketing and campaign history information 

This personal data is mostly collected directly from individuals.

3. Retention of personal data

The personal data will be retained only for as long as necessary to fulfill the purposes defined above. After that, personal data will be removed except when personal data retention is required by law or rights or obligations by either party.
Personal data regarding customers will be retained during the business relationship and after that for as long as necessary or required by law or rights or obligations by either party, for example for billing purposes.
SSAB buildings

Privacy portal

Go back to the Privacy portal containing general privacy information and other specific privacy notices.

Back to Privacy portal