other external stakeholders
other external stakeholders

Other external stakeholders

Last updated: January 2025

1. Legal basis and purpose of processing personal data

SSAB may process personal data of other external stakeholders, such as persons approaching SSAB in order to give feedback or to report an incident related to SSAB’s operations, or who contact SSAB for other reasons. The purposes of processing personal data is explained below.

PROCESSING ACTIVITY LEGAL BASIS DESCRIPTION
Incident and grievance reporting Legitimate interest Individuals’ personal data is used to manage communication with the individual and to follow up and take actions related to reported incidents.

Individuals can choose to submit their feedback with their contact information, so that SSAB can respond to them and follow up and take actions related to the reported matter.

The reports may at times also contain information related to other individuals than the person reporting the incident.
Other feedback and contacts with SSAB Legitimate interest SSAB may process personal data of individuals having provided feedback to SSAB .

1.1 The feedback and communications to SSAB may at times also contain information related to other individuals than the person contacting SSAB.
pdf 103 Kb
Privacy notice - other external stakeholders

2. Collection of personal data

Depending on the individuals' interaction, SSAB may collect the following personal data:

Personal Data Examples
Contact details Name, email address, phone number, address,
Other personal data Other personal data provided as part of the incident reporting, grievance or other feedback
Personal Data
Contact details
Examples
Name, email address, phone number, address,
Personal Data
Other personal data
Examples
Other personal data provided as part of the incident reporting, grievance or other feedback

Generally personal data is collected directly from individuals. However, SSAB may also receive other types of personal data from the reporter in the free text fields or attachments of feedback forms. Data provided by the reporter may include personal data of other individuals.

3. Retention of personal data

Personal data will only be stored for as long as is necessary for the purposes of processing and following up the reported incident or to process the feedback given by the individual, and to take relevant measures in relation to the feedback or the reported matter. Personal data that is not relevant to the reported event or feedback will be deleted as soon as possible.

In some instances, personal data is used to establish, assert or defend a legal claim. In these circumstances, personal data will be stored until the legal proceedings and related actions are completed.

SSAB buildings

Privacy portal

Go back to the Privacy portal containing general privacy information and other specific privacy notices.