Personvernerklæring

Denne personvernerklæringen beskriver hvordan Nokian Tyres i forbindelse med virksomheten behandler personopplysninger for forbrukere og bedriftskontaker ("kunde"). Ivaretakelse av kundens personvern er viktig for oss. Nokian Tyres er forpliktet til å behandle personopplysninger med åpenhet og i samsvar med gjeldende lov om databeskyttelse.  

BEHANDLINGSANSVAR OG KONTAKTINFORMASJON  

Nokian Tyres plc er ansvarlig for våre kunders personopplysninger. Spørsmål som angår våre kunders personvern kan rettes til oss:  

Nokian Tyres plc 
Privacy 
Pirkkalaistie 7 
37100 Nokia, FINLAND 
[email protected] 

FORMÅL MED BEHANDLING, KATEGORIER AV PERSONOPPLYSNINGER, OG JURIDISK GRUNNLAG 

KUNDE – BEDRIFTSKUNDE-KONTAKT  

Personopplysninger innhentes først og fremst i situasjoner der bedriftskunder har kjøpt produkter eller tjenester fra Nokian Tyres, eller når en bedriftskontakt har registrert seg til våre digitale tjenester. Personopplysninger behandles for følgende formål:  

• For å kunne levere produkter og tjenester til våre bedriftskunder.   

Personopplysninger behandlet for dette formålet inkluderer kontaktinformasjon, faktureringsinformasjon og annen informasjon som kunden eller ansatte av en kunde har gitt oss under levering av våre produkter.  

• For å opprettholde forretningsforhold med våre bedriftskunder i forbindelse med kundeservice og kommunikasjon, og administrasjon av kundemøter og ledelse.  

Personopplysninger behandlet for dette formålet inkluderer informasjon knyttet til kundeservice, som for eksempel kontaktinformasjon, informasjon sendt via undersøkelser og tilbakemeldingsskjemaer, informasjon om deltagelse i arrangementer og kampanjer, nyhetsbrevabonnementer eller annen informasjon som er gitt til oss i forbindelse med kundeserviceforespørsler. Det gjøres opptak av telefonsamtaler til kundeservice for å sikre god kvalitet.  

• For å utvikle våre produkter og tjenester på bakgrunn av kundeundersøkelser, tilbakemeldinger og nettsideanalyser.  

Personopplysninger behandlet for dette formålet inkluderer kontaktinformasjon, identifikatorer for terminalutstyr, identifikatorer på nett , data relatert til våre kunders nettaktivitet og preferanser, og data som kan utledes. Vanligvis blir personopplysningene aggregert, eller på andre måter anonymisert, for å beregne statistikk og rapporter for forretnings- og produktutvikling. Mer informasjon om vår praksis når det gjelder informasjonskapsler er tilgjengelig her.  

• For å selge og markedsføre våre produkter og tjenester ,som for eksempel på nett og pr. post. 

Personopplysninger behandlet for dette formålet inkluderer kontaktinformasjon, atferds-data, identifikatorer for terminalutstyr, identifikatorer på nett og innkjøpsinformasjon. Innsamlede personopplysninger behandles videre for å skape målgrupper og tilby målrettet innhold. Målrettet innhold er alltid basert på segmenter eller målgrupper, og ikke på kundenes individuelle oppførsel.  

• For å kunne levere Nokian Tyres Dealer Services til våre bedriftskunder. 

Personopplysninger behandlet for dette formålet inkluderer kontaktinformasjon, identifikatorer for terminalutstyr, identifikatorer på nett, og informasjon relatert til identitetsbehandling, for eksempel autorisasjonsinformasjon.  

• For å organisere og administrere kundehendelser som Nokian Tyres-messer og produktlanseringer.  

Personopplysninger som behandles for dette formålet inneholder kontaktinformasjon og reise- og innkvarteringsinformasjon.  

• For å oppfylle lovbestemte forpliktelser og andre offisielle regler og forskrifter 

Personopplysninger behandlet for dette formålet inneholder all relevant, lovbestemt informasjon.  

Rettslig grunnlag for behandling av bedriftskunders personopplysninger er alltid ett av følgende:  

• Samtykke 

Når det gjelder abonnement på nyhetsbrev behandler vi kun personopplysninger dersom en kunde har gitt samtykke til det. Kunder kan trekke sitt samtykke til direkte elektronisk markedsføring ved å bruke "avslutt abonnement"-lenken nederst i den mottatte e-postmeldingen.  

• Kontrakt 

Vi behandler bedriftskundens personopplysninger på kontraktbasis når vi leverer vår Marketing Toolbox-tjeneste.  

• Juridisk forpliktelse 

Når det gjelder å oppfylle våre lovbestemte forpliktelser.  

• Legitim interesse 

Vi behandler personopplysninger basert på vår legitime interesse i forbindelse med utvikling, salg, markedsføring, levering og forsyning av våre produkter og tjenester. I tillegg til å opprettholde forretningsforbindelser med våre kunder, og til å arrangere og administrere kundearrangementer. 

For å sikre at det eksisterer et betydelig og relevant forhold mellom Nokian Tyres og en kunde, og for å understreke at vår legitime interesse ikke forårsaker et vesentlig brudd på kundenes personvern, eller har noen annen uheldig innvirkning på interesser og rettigheter, har vi vurdert behandlingen med balansetester. For mer informasjon om balansetester, kontakt oss på [email protected].  

FORMÅL MED BEHANDLING, TYPE PERSONOPPLYSNINGER OG JURIDISK GRUNNLAG 

FORBRUKERKUNDE  

Personopplysninger innhentes først og fremst under registrering til våre tjenester, ved bestilling av publikasjoner som nyhetsbrev, eller i forbindelse med våre undersøkelser og konkurranser. I tillegg kan personopplysninger også innhentes og utledes fra bruk av tjenesten eller når du sender inn et garantikrav eller en retur. Vi behandler personopplysninger til følgende formål:  

• For å levere nyhetsbrev og andre publikasjoner til mottakere som har abonnert på disse. 

Personopplysninger behandlet for dette formålet inkluderer for eksempel kontaktinformasjon, identifikatorer for terminalutstyr og atferds-informasjon.   

• For å kunne tilby kundeservice til våre bedriftskunder. 

Personopplysninger behandlet for dette formålet inkluderer informasjon knyttet til kundeservice, for eksempel kontaktinformasjon eller informasjon sendt via tilbakemeldingsskjemaer, eller annen informasjon gitt oss i forbindelse med kundeserviceforespørsler. Det gjøres opptak av telefonsamtaler til kundeservice for å sikre god kvalitet.  

• For å markedsføre og annonsere våre produkter og tjenester, som for eksempel på nett og pr. post.   

Personopplysninger behandlet for dette formålet inkluderer kontaktinformasjon, identifikatorer for terminalutstyr, identifikatorer på nett, adferds-data , data relatert til våre kunders nettaktivitet og preferanser, og data som kan utledes. Innsamlede personopplysninger behandles videre for å skape målgrupper og tilby målrettet innhold. Målrettet innhold er alltid basert på segmenter eller målgrupper, og ikke på forbrukerkundenes individuelle oppførsel. Mer informasjon om vår praksis når det gjelder informasjonskapsler er tilgjengelig her.  

• For å kunne tilby tjenester som Nokian Tyres Hakka-garanti

Personopplysninger behandlet for dette formålet inkluderer kontaktinformasjon, informasjon om kjøretøy og dekk, og kjøpsinformasjon.  

• For å arrangere konkurranser og trekninger blant våre forbrukerkunder. 

Personopplysninger behandlet for dette formålet inkluderer kontaktinformasjon og eventuell konkurransespesifikk informasjon.  

• For å utvikle våre produkter og tjenester basert på tilbakemeldinger fra kunder, produktanmeldelser, og aktivitet på nettet. 

Personopplysninger behandlet for dette formålet inkluderer kontaktinformasjon, identifikatorer for terminalutstyr, identifikatorer på nett, atferds-data, tilbakemeldinger fra kunder, og produktanmeldelser. Mer informasjon om vår praksis når det gjelder informasjonskapsler er tilgjengelig her.  

• For å oppfylle lovbestemte forpliktelser og andre offisielle regler og forskrifter 

personopplysninger behandlet for dette formålet inneholder all relevant informasjon i henhold til gitt, lovbestemt krav.  

Rettslig grunnlag for behandling av våre forbrukerkunders personopplysninger er alltid ett av følgende:  

• Samtykke 

Når det gjelder abonnement på nyhetsbrev behandler vi kun personopplysninger dersom en kunde har gitt samtykke til det. Kunder kan trekke sitt samtykke til direkte elektronisk markedsføring ved å bruke "avslutt abonnement"-lenken nederst i den mottatte e-postmeldingen.  

• Kontrakt 

Rettslig grunnlag for behandling er gjeldende når vi behandler personopplysninger med det formål å arrangere konkurranser eller trekninger, eller med hensyn til produktgarantier der behandlingen er nødvendig for kontraktsforhold og håndheving av kontrakten.   

• Juridisk forpliktelse 

Når det gjelder å oppfylle våre lovbestemte forpliktelser.  

• Legitim interesse 

Vi behandler personopplysninger basert på vår legitime interesse i forbindelse med utvikling av produkter og tjenester, for å tilby kundeservice og for å markedsføre og annonsere våre produkter og tjenester.  

For å sikre at vår legitime interesse ikke forårsaker noen vesentlig inntrenging i kundens personvern, eller får noen annen uheldig innvirkning på interesser og rettigheter, har vi vurdert behandlingen med balansetester. For mer informasjon om balansetester, kontakt oss på [email protected].  

UTLEVERING OG OVERFØRSLER AV PERSONOPPLYSNINGER  

Overførsler av personopplysninger  

Nokian Tyres er et globalt selskap, og vi bruker underleverandører og tjenesteleverandører for effektiv drift av vår virksomhet. Vi bruker for eksempel underleverandører til å gjennomføre kampanjer og direkte markedsføring, eller tjenesteleverandører for betaling og fakturering. Videre kan våre forhandlere behandle personopplysninger på våre vegne når du sender inn et garantikrav eller returnerer dekk til oss gjennom dem.

Behandlingen av personopplysninger i forhold til våre underleverandører er alltid bestilt av Nokian Tyres. De andre partene vil kun behandle personopplysninger på våre vegne. Slike behandlinger er alltid beskyttet med kontraktmessige avtaler for å sikre at våre tjenesteleverandører og partnere behandler våre kunders personopplysninger med god databehandling og i samsvar med gjeldende lover.  

I de tilfellene hvor våre underleverandør eller tjenesteleverandører ligger utenfor EU eller EØS, sikrer vi adekvat beskyttelsesnivå for våre kunders personopplysninger. Dette gjøres ved å bruke standard kontrakt-klausuler godkjent av EU-kommisjonen eller en annen gyldig mekanisme i henhold til gjeldende lovgivning.  

Utlevering av personopplysninger  

Vi utleverer kun personopplysninger som er strengt nødvendige for å overholde lovbestemte krav. Om vi for eksempel gir hjelp til undersøkelser etter ulykker, må vi utlevere relevant informasjon for å bistå undersøkende myndigheter. 

Vi kan komme til å utlevere personopplysninger til andre selskaper innen Nokian Tyres-gruppen. Dette skjer vanligvis med tanke på kundeservice, kundeforvaltning og markedsføring. 

I samsvar med gjeldende lover må vi ved salg, fusjon eller annen omgjøring av vår virksomhet eller eiendeler, utlevere personlige opplysninger til kjøper ,eller potensiell kjøper eller selger. I slike tilfeller behandler vi personopplysninger basert på vår legitime interesse for å sikre vår kontinuitet. Dersom en kunde protesterer mot slik behandling, vil kjøperen av vår virksomhet ikke lenger kunne tilby sine tjenester til kunden.  

SIKRING AV PERSONOPPLYSNINGER:  

Vi bruker tekniske og organisatoriske tiltak for å beskytte personopplysninger mot tap, misbruk eller annen lignende, ulovlig tilgang. Slike metoder inkluderer bruk av brannmurer, krypteringsteknologi og sikre server-fasiliteter. Tilgang til personopplysninger er begrenset til "må-vite"-årsaker, og kontrollert av systemrettigheter, samt gjennom tildeling og kontroll av tilgangsrettigheter.  

I samsvar med gjeldende lovgivning vil vi ved brudd på personvernet varsle lokale tilsynsmyndigheter og alle som får satt sine personopplysninger i fare.  

RETTIGHETER FOR DEN REGISTRERTE  

Som ansvarlig selskap ønsker vi åpenhet og innsynsmuligheter når det gjelder behandling av våre kunders personopplysninger. Dette betyr at vi gir våre kunder mulighet til å kontrollere behandlingen av deres personopplysninger.  

Tilgangsrettigheter Kunder har rett til informasjon om at vi behandler deres personopplysninger, hvilke personopplysninger vi behandler, og en kopi av de personopplysningene det dreier seg om.  

Rett til å korrigere Dersom personopplysninger fra våre kunder er unøyaktige eller ufullstendige, har kundene rett til å be om utbedring eller fullføring av deres opplysninger.  

Rett til å begrense behandlingen. Kunder har rett til å be om begrensning ved å bestride nøyaktigheten av deres personopplysninger. I en slik situasjon er behandlingstiltakene begrenset i tidsrommet for verifisering av nøyaktigheten av personopplysningene.  

Rett til innsigelser. Kunder har rett til å komme med innsigelser mot behandling av deres personopplysninger. Våre kunder har rett til å når som helst motsette seg behandlingen av deres personopplysninger gjeldende direkte markedsføring.  

Rett til å glemmes. Kunder har rett til å be om at deres personopplysninger slettes. I noen tilfeller kan det likevel være en overordnet hensikt i å behandle og beholde personopplysninger, for eksempel for å oppfylle juridiske forpliktelser eller ved garantibehov. 

Rett til dataportabilitet Kunder har rett til å be om sine personopplysninger i maskinlesbart format i situasjoner der vi behandler personopplysninger basert på kontrakt eller samtykke. Dette gjelder kun personopplysninger kundene selv har gitt oss.  

Rett til å trekke et samtykke. Kunder har rett til trekke sitt samtykke når som helst. Kunder kan trekke sitt samtykke til direkte elektronisk markedsføring ved å bruke "avslutt abonnement"-lenken nederst i den mottatte e-postmeldingen. 

Hvis kundene vurderer at vår behandling av personopplysninger krenker deres rettigheter, kan de kontakte tilsynsmyndighetene og sende inn en klage.  

Eventuelle spørsmål om ovennevnte rettigheter kan sendes via e-post til [email protected].  

OPPBEVARINGSPERIODE  

Personopplysninger beholdes så lenge det er nødvendig for det formål de ble samlet inn for, eller til vi mottar en forespørsel om sletting. Dette med mindre vi har en lovpålagt forpliktelse til å beholde dem over en lengre periode. Oppbevaringsperioden for personopplysninger bestemmes av følgende kriterier:  

• Hvis en kunde har en Dealer Service-konto hos oss, beholder vi personopplysninger så lenge kontoen er aktiv, eller så lenge som nødvendig for å levere tjenester til kunden.  
• For garantier og andre produktrelaterte programmer må vi beholde personopplysninger til gyldigheten av garantien eller programmet i hvert enkelt tilfelle utløper, og i alle tilfeller inntil eventuelle krav mot Nokian Tyres er utløpt. 
• Med henblikk på arrangerte konkurranser eller trekninger, vil personopplysninger beholdes til konkurransen er avsluttet, og alle påfølgende tiltak er utført. Mer informasjon om oppbevaringsperioder er alltid gitt i konkurransevilkårene. 
• Når en kunde har abonnert på mottak av elektronisk direkte-markedsføring, behandler vi personopplysninger for disse formålene så lenge abonnementet fortsatt gjelder. Dersom en kunde trekker tilbake sitt samtykke, vil vi avbryte behandlingen av personopplysninger og slette dem dersom det ikke er noe annet gyldig formål for fortsatt behandling. 

Spørsmål angående oppbevaringsperioder kan sendes via e-post til [email protected]. 

REVISJONER TIL DENNE PERSONVERNERKLÆRINGEN  

Vi utvikler kontinuerlig våre tjenester, og denne personvernerklæringen kan bli revidert. Revisjonen kan også være basert på endringer i lovgivningen. Vi anbefaler våre kunderå lese gjennom denne personvernerklæringen regelmessig for å holde seg oppdatert på mulige endringer. 

This Privacy Statement describes how Nokian Tyres processes personal data in the context of the whistleblowing process. Because personal data from various data subjects can be processed during the whistleblowing process, data subjects usually involve the person making a report (“the whistleblower”) and the person mentioned in a report (“the alleged wrongdoer”). Depending on the case under investigation, personal data of the investigator and witnesses can also be processed.

Protection of data subjects’ privacy is important to us. Nokian Tyres is committed to processing personal data transparently and in com­pliance with applicable da­ta pro­tec­tion laws.

Controller and Contact Information

Nokian Tyres plc is the controller of the personal data processed in the whistleblowing process. Any questions regarding our privacy practices can be directed to us:

Nokian Tyres plc 
Privacy 
Pirkkalaistie 7 
37100, Nokia, FINLAND 
[email protected]

Purposes of Processing & Legal Basis

Nokian Tyres whistleblowing process’s aim is to ensure the quality of Nokian Tyres governance system and to maintain trust towards Nokian Tyres group.  In addition, its objective is to encourage employees and other stakeholders to report any findings or suspicions of non-compliance with laws, Nokian Tyres’ business principles or other guidelines.

In connection to Nokian Tyres’ whistleblowing process, personal data is processed for the purposes of:

• preventing, identifying and   investigating   suspected   criminal   activity, internal   violations   and   other malpractices;
• preventing, identifying and investigating suspected activity, which is unethical or against Nokian Tyres’ Code of Conduct.

In the context of the whistleblowing process and an internal investigation, we will process your personal data based on the following legal grounds: 

• Legal basis for processing is our legitimate interest to monitor compliance with applicable laws and Nokian Tyres’ Code of Conduct and other guidelines. In this respect, we will always determine case by case whether our interests are not overridden by the interests, fundamental rights and freedoms of the data subjects involved. Also, the processing is necessary to comply with a legal obligation, given the fact that whistleblowing systems may be mandatory in some countries where Nokian Tyres operates.
• To the extent that the processing relates to special categories of personal data, the legal basis for such processing is that it is necessary for the purposes of carrying out the obligations and exercising the specific rights of Nokian Tyres in the field of employment and social security and social protection law, or that the processing is necessary for the establishment, exercise or defense of legal claims.

Sources & Categories of Personal Data

All whistleblowing investigations related to information received from the official whistleblowing channels are conducted or headed by Nokian Tyres’ internal audit unit. Initially personal data is primarily obtained through the official whistleblowing channels (via a specific whistleblowing e-mail address or via regular mailing address). Depending on the case under investigation, personal data is also obtained through the investigative measures.

In most cases the personal data processed in connection to the whistleblowing process includes: 

• Data received via whistleblowing notification such as name and contact details of the whistleblower (unless notification is made anonymously) and the alleged wrongdoer, and a description of the suspected misconduct. Due to the nature of the whistleblowing channel and varying case contexts, the received data can vary significantly on each case. Depending on the received notification, processed personal data can also include special categories of personal data.
• Data obtained through investigative measures such as employment information, physical safety related information (e.g. CCTV, access control information), information related to system administration and network security, records of working hours, witness testimonies and case relevant information from public registers or other public or internal information or information from internal systems used in conjunction with other information.

Personal Data Transfers and Disclosures 

Personal data transfers

As a global company, Nokian Tyres may use subcontractors and service providers to process whistleblowing investigations. The processing of personal data in relation to our subcontractors is always commissioned by Nokian Tyres and the other parties will act only on our behalf as personal data processors. Such processing is always protected with contractual arrangements to ensure that our service providers and partners process personal data in accordance with the laws and good data processing practices to maintain high integrity of the investigation.

In a case our subcontractor or service providers is located outside the European Union (EU) or the European Economic Area (EEA) we ensure the adequate level of protection whistleblowing investigation related personal data with appropriate safeguards by using standard contractual model clauses approved by the European Commission or another valid mechanism provided under applicable legislation.

Personal Data Disclosures

We only disclose personal data that is strictly necessary for complying with the statutory requirement. If the investigated whistleblowing case involves illegal or criminal activities, the case may be reported to the appropriate authorities in accordance with applicable laws. Third parties to whom data can be disclosed based on a specific case context and local legislation include for example the law enforcement authorities, the tax administration, customs and in certain cases the insurance company or other case owners of the matter.

In a case we sell, merge or otherwise re-arrange our business operations or assets, we need to disclose personal data to purchaser or prospective seller or buyer of such business or assets in compliance with applicable laws. In such a case we process personal data based on our legitimate interest to ensure our business continuity.

Security of Personal Data

We use technical and organisational measures to ensure the security of personal data from loss, misuse or other similar unlawful access. Such methods include the use of firewalls, encryption technologies and safe server premises. Access to personal data is limited on “need-to-know” basis and controlled by system access rights, as well as through granting and controlling access rights.

In the event of a personal data breach, we will notify local supervisory authorities and everyone whose personal data may have been endangered in accordance with applicable legislation.

Data Subject Rights

As a responsible company we want to be open and transparent on the processing of personal data. This means we give our data subjects the opportunity to control the processing of personal data. However, because of the nature of the processing in whistleblowing investigations, we have the right to derogate from exercising the data subjects’ rights in certain situations based on legal grounds.

Right of Access. Data subjects have the right to receive a confirmation whether we are processing their personal data, what personal data we process about them and to receive a copy of their personal data. Because of the sensitive nature of the data processing in whistleblowing process, it is necessary to balance all interests involved in a right of access request. Therefore, all information about personal data processing in the context of whistleblowing purposes upon a right of access request cannot in all cases be submitted to the data subject, because that could adversely affect the rights or freedoms of others.

Right to Rectification. In case personal data of our data subjects regarding the whistleblowing process is inaccurate or incomplete, data subjects have the right to request rectification or completion of their data.

Right to Restrict Processing. Data subjects have the right to request restriction by contesting the accuracy or lawfulness of their personal data. In such a situation, the processing activities are restricted for the period of time taken to verify the accuracy of personal data. The right to restriction of processing is assessed on a case-by-case basis. In cases which are likely to have legal effects on the data subject, the data may still be processed, subject to the establishment, exercise or defense of legal cases or for the protection of the rights of another natural or legal person or, despite the request for restriction of the data subject.

Right to Object. Data subjects have the right to object to the processing of their personal data, when the processing is based on our legitimate interest. We may restrict the data subjects’ right to object the personal data processing for the establishment, exercise or defense of legal claims.

Right to be Forgotten. Data subjects have the right to request their personal data to be erased. In some cases, there may still be an overriding purpose for processing and retaining personal data e.g. in order to fulfil legal obligations or for the establishment, exercise or defense of legal claims.

If data subjects consider that the processing of personal data infringes their rights, they may contact the supervisory authority and lodge a complaint about our processing of personal data.

Any questions or requests regarding above mentioned rights can be sent via email to [email protected].

Retention Periods

Personal data is retained as long as is necessary for the purpose they were collected for, or until we receive a request for erasure – unless we have a legal obligation or legitimate interest to retain it for a longer period.

The personal data will be processed and retained as long as necessary to process and investigate the whistleblowing notification, or, if applicable, as long as necessary to initiate sanctions or to meet any legal or financial requirement. In any case, if judicial or disciplinary proceedings are initiated, the personal data provided will be kept until those proceedings are definitively closed. Nokian Tyres retains all received whistleblowing notifications and their related material, which have been seen as significant for the investigation or conclusion of investigation, including any possible summaries or document listings, for ten years from the date on which the case has been resolved or deemed not to require further investigative measures, based on legal obligations.

Any questions regarding retention periods of our data subjects’ personal data can be sent via email to [email protected].

Revisions to this Privacy Statement

We are continuously developing our operations and this privacy statement is subject to changes. Changes may also be based on changes in legislation. We recommend our data subjects to visit this privacy statement in regular basis in order to keep track of possible changes.

This Privacy Statement describes how Nokian Tyres process the personal data of website and social media acccount visitors. Protection of privacy of the website and social media acccount visitors‘is important to us. Nokian Tyres is committed to processing personal data transparently and in compliance with applicable data protection laws.

We are continuously developing our websites and services, and this privacy statement is subject to changes. Changes may also be based on changes in legislation. We recommend you to visit this privacy statement in regular basis in order to keep track of possible changes.

 

Contents of this statement:

A. Information on data protection when using our website
B. Information on data protection for our social media accounts

 

A. Information on data protection when using our website 

I. Controller and contact information
Nokian Tyres plc is the controller of the personal data of our website visitors. Any questions relating to the data protection of our website visitors can be directed to us:

Nokian Tyres plc
Privacy
Pirkkalaistie 7
37100, Nokia, FINLAND

[email protected]

II. Data processing during informational visits to our website

As soon as you visit our website, information from your computer system and browser is automatically transmitted to us:

- Information about the browser type, language and its version
- Your operating system
- IP address
- Date and time of the request, including pages accessed
- Access status or http status code and amount of data transferred
- Website from which you access our website
 
This data is automatically stored in the log files. It is not merged with other personal data.

The purpose of collecting and storing this data is to make the website available to our visitors and to ensure the functionality and security of our IT systems.

To provide this website, we use the web hosting service of Google's Finnish data center Hamina in Finland. Cloudflare CDN is also used. In connection with the hosting, the personal data is processed by the web host on our behalf, which is generated when the website is used. We have concluded a data processing agreement with our web hosts.

The legal basis for the temporary storage of the data in the log files  is legitimate interest. The website cannot be accessed and made available without the collection of the aforementioned data, so that there is a legitimate interest in technically enabling the use of the website. 
The data is deleted as soon as it is no longer required for the purposes for which it was collected. If data is used to provide the website, it will be deleted when our website is closed. The data stored in log files is deleted after 7 days at the latest.

 
III. Cookies

Cookies are used on our website. Detailed information about what cookies are and which cookies we use and for what purpose can be found in our cookie policy.

IV. Inquiries and feedback and contact by e-mail

Under the website heading "Enquiries and feedback", we provide a contact form that you can use to contact us on various topics. It is also possible to contact us via the e-mail addresses included on the website. We collect the following data to process your request:

- Subject
- Feedback or content of the request*
- Your name*
- E-mail*
- Telephone number
 
The fields marked with * are mandatory to process your request.

We store the personal data you provide to process your request or to contact you. This is also our legitimate interest in processing this data. Your personal data will not be passed on to third parties.

The legal basis for the collection of the data listed for the form or contact by e-mail is legitimate interest. If the request via form or e-mail is aimed at concluding a contract, the contract is also the legal basis.

We only store the data collected using the inquiry and feedback form or email for as long as is necessary to process the inquiry. The data will then be deleted immediately, unless there is a legal obligation to retain it or a legal right to retain it. In this case, the data will only be processed for as long as necessary and as data-efficiently as possible.

 

V. Registration of the tire warranty

We offer a special tire warranty for buyers of certain tires for a certain period of time. One of the conditions of the warranty is registration. Further information can be found here. You can register after purchase (tire warranty registration) or in some countries also before purchase (warranty pre-registration) on our website.  

The following data is collected for registration:

- First name*, last name*
- E-mail*
- Telephone number
- Country*, postcode*
- License plate number*
- Tire model*, tire size*, inch*
- Newsletter subscription

Fields marked with * are mandatory. The following data is also stored at the time of registration:

- IP address of the registrant
- Date and time of registration

We collect the aforementioned data in order to conclude and process the warranty contract. The data will not be passed on.

The legal basis for processing the personal data provided in the form, the IP address and the date and time is the entering into and performance of the warranty contract. The processing of your personal data in connection with the newsletter registration is based on consent.

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is the case if the data is no longer required for the performance of the contract. Even after conclusion of the contract, it may be necessary to store the personal data of the contractual partner to comply with contractual or legal obligations. The data is regularly deleted three years after the end of the calendar year in which the guarantee expires. Registered buyers can object to processing under the guarantee at any time. It is then no longer possible to grant a guarantee.

 

VI. YouTube videos

Some of our pages include content from YouTube, which can be viewed directly on our site by clicking on a link or by clicking on the video. These videos are intended to make our website more attractive for our users and improve our content. YouTube is a service of YouTube, LLC, a subsidiary of Google Inc, USA.

The extended data protection mode for embedding YouTube videos has been activated on this website so that no information about visitors to our website is transmitted or stored if they do not watch the video. No cookies are set on your device when you watch the video either.

When a YouTube video is viewed, information about your use of this website is transmitted to a YouTube server as part of the YouTube service and shared with the Google advertising network Doubleclick. The following data may be transmitted in this way (regardless of whether YouTube provides a user account through which you are logged in):

- Browser type/version
- Operating system used
- Host name of the accessing computer (IP address)
- Time of the server request
- Frequency of page views
- Video viewed
 
The transmission to YouTube and Doubleclick takes place on servers of Google LLC. in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Due to the certification of Google LLC within the EU-US Data Privacy Framework, the data transmission is permitted.

If you are logged in to YouTube, your data will be assigned directly to your account. If you do not wish your data to be associated with your YouTube profile, you must log out before clicking on the video. YouTube stores your data (even for users who are not logged in) as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

The legal basis for data processing is consent. By clicking on the video, you consent to the transfer of data to Google.

Further information on the purpose and scope of data collection and its processing can be found in Google's privacy policy (YouTube, as part of Google, does not have its own). There you will also find further information on your rights in this regard and setting options to protect your privacy.

- Google terms of use: https://policies.google.com/terms 
- Google privacy policy ("Google Privacy Policy"): https://policies.google.com/privacy
- YouTube terms of use: https://www.youtube.com/t/terms

VII. Dealer Locator 
On our website, we also offer the option of searching for the right retailer to buy our products. You can search for the right retailer either via the location on a Google Maps map or via an address, city or zip code.

We obtain a list of available retailers who sell the selected product from the Hatch service, which is part of PriceSpider: https://www.pricespider.com/privacy-policy-2021/.

We rely on the most data-saving integration of Google Maps, which is only available after activation, excludes storage and personalization and prevents the collection of user data. However, it cannot be ruled out that personal data will still be transferred to Google in the USA when the map is used. Further information on data processing by Google: https://policies.google.com/privacy.

We process personal data such as address, city, zip code or location exclusively for the provision of the dealer search. This data is not stored.

VIII. Statistical Data on purchases from retailers

To optimize the processes on our website, we collect statistical data in connection with purchases on our retailers' websites that you have accessed via our website.

If you have selected a suitable product and searched for a suitable seller via the retailer search, you can continue shopping on our retailer's website (e.g. Vianor) with one click. By redirecting you, the retailer can see that you have reached their site via our retailer search. If you complete the purchase, this information becomes part of the retailer's order database. Our dealers return the number of successful sales that came in via our dealer search to us in the form of statistical data. Identifying data is not passed on. Information on data processing by the retailer can be found in the respective privacy policy.

The legal basis for the processing of statistical data is our prevailing legitimate interest in the traceability of the sales process.

You have the right to object to the processing. However, a successful objection to us requires you to provide us with your personal data, as we do not have the statistical data in a manner that is identifiable to us. Please note that you also have the right to object to the retailer with whom you have concluded a purchase contract for one of our products.

The statistical data is initially stored in pseudonymized form. When the retention periods at our dealers expire, the data is automatically anonymized.

IX. Google reCAPTCHA

We also use reCAPTCHA data matching from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google") on our website to protect us from bots and other spam techniques when submitting forms, in particular the contact form and the tire guarantee. This also constitutes our legitimate interest in the processing of this data . The service also includes sending the IP address and any other data required by Google for the reCAPTCHA service to Google; the transmission of personal data to Google servers in the USA cannot be ruled out. Due to the certification of Google LLC within the EU-US Data Privacy Framework, the transfer of data to the USA is permitted. The legal basis for the CAPTCHA query is our overriding legitimate interests. 

The cookie set by reCAPTCHA is deleted at the end of the session. How long the data transmitted to Google in the USA is stored is unclear. Google does not make any statements on this. Further information on Google reCAPTCHA and Google's privacy policy can be found at: https://policies.google.com/privacy.

 
X. Google Ads 
We use the Google Ads service to serve ads to you about our products and services and those of our partners. When visitors come to our website through a Google ad, Google Ads tells us how they came to our website. We can only review this information in an aggregated form.

Any further processing of the data by Google, such as processing of users' data on Google.com for personalized advertisement, is the sole responsibility of Google. Further information on Googles processing can be found at: https://policies.google.com/privacy.

If we wish to carry out further performance measurement of our advertising campaign, we process our visitors' data using Google Analytics, which is explained in the following section.

 

XI. Google Analytics

In addition to our explanations in our cookie policy, the following applies regarding Google Analytics:

We use Google Analytics to analyze and subsequently optimize the use of our website. Google Analytics is provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), a subsidiary of Google LLC. Google processes the data on our website usage on our behalf and is contractually obliged to guarantee the confidentiality and security of the data. We have accordingly concluded an order processing agreement with Google.

During your visit to the website, the following data is transmitted to Google if you have consented to this:

- Pages accessed
- Achievement of "website goals" (e.g. use of the contact form or registration for the newsletter)
- Actions on the website
- Approximate location (country and city)
- Abbreviated IP address
- Technical information: Browser, internet provider, end device, screen resolution
- Source of origin of the visit
- Randomly generated user ID
 
According to the provider, IP anonymization takes place by default, so that the IP address of Google users within member states of the European Union or in other signatory states to the Agreement on the European Economic Area is shortened beforehand. It is therefore no longer possible to associate the data with the accessing user.

The aforementioned data is transferred to Google servers in the USA. Due to the certification of Google LLC within the EU-US Data Privacy Framework, the transfer of data to the USA is permitted. 

Analysis cookies are used for the purpose of improving the quality of our website and its content. Through the analysis cookies, we learn how the website is used and can thus constantly optimize our offer. Accordingly, Google compiles reports on website activity for us.

The legal basis for the processing of personal data using cookies for analysis purposes is your consent. 

In addition, on the basis of our legitimate interests, we merge your data collected based on your consent on this page using Google Analytics with other data collected by Google Analytics on the websites of our corporate group (in particular Vianor). Our legitimate interest lies in optimizing our web offerings for the sale of our products, including via our subsidiaries. To this end, we would like to merge and evaluate the data collected by Google Analytics based on your consent on the basis of our legitimate interests.

The cookies containing the random ID are stored in your web browser for a period of two years. The recorded data enables the evaluation of pseudonymous user profiles, which are automatically deleted after 14 months.

You can object to the storage or setting of a cookie at any time by deleting the cookie and rejecting it the next time cookies are requested.

 

XII. React & Share Plugin

To improve the reach of our articles and our brand, we use the ReactandShare service from "React & Share Oy". Personal data is only sent to Facebook, Twitter, WhatsApp, LinkedIn, Pinterest, Google+, Telegram or your email program when you click on a share button. No personal data is sent to the aforementioned providers before this. React & Share also allows the user to give immediate feedback to specific articles and news. Therefore, fonts and the plugins of React & Share are loaded which leads to the transmission of the visitor's IP-address. The interaction with the React & Share Plugin can be evaluated and leads to statistical data. The service provider acts on our behalf and is bound by our instructions. Accordingly, we have concluded a data processing agreement with "React & Share Oy".

The legal basis for processing is legitimate interest. We do not store any personal data. We can only view statistical evaluations of whether and which articles and posts you have given feedback to and shared with which social media network.

 

XIII. Rights of the data subjects

As a responsible company we want to be open and transparent on the processing of our website visitor's personal data. This means we give our website visitors the opportunity to control the processing of personal data.

Right of Access. You have the right to receive a confirmation whether we are processing your personal data, what personal data we process about you and to receive a copy of your personal data. 
Right to Rectification. In case your personal data is inaccurate or incomplete, you have the right to request rectification or completion of their data.

Right to Restrict Processing. You have the right to request restriction by contesting the accuracy of your personal data. In such a situation, the processing activities are restricted for the period of time taken to verify the accuracy of personal data. 
Right to Object. You have the right to object to the processing of your personal data. You have the right to object the processing of your personal data for the purposes of direct marketing at any time.

Right to be Forgotten. You have the right to request your personal data to be erased. In some cases, there may still be an overriding purpose for processing and retaining personal data e.g. to fulfil legal obligations or for the warranty needs.

Right to Data Portability. You have the right to request your personal data in machine-readable format in situations where we process personal data based on contract or consent. This only applies to personal data you have provided us with.

Right to Withdraw a Consent. You have the right to withdraw your consent at any time. You can withdraw your consent for direct electronic marketing purposes by using "unsubscribe link" at the end of the received email message. 
 
If you consider that the processing of personal data infringes your rights, you may contact the supervisory authority and lodge a complaint about our processing of personal data.

Any questions or requests regarding above mentioned rights can be sent via email to [email protected].

 

B. Information on data protection for our social media accounts

We operate social media presences to provide additional information and a further opportunity for direct interaction with business partners, customers and interested parties.

These include Facebook, Instagram, LinkedIn, Twitter/X and YouTube.

We use the technical platforms and services of the respective providers for these information services. We are not the original provider of these platforms. The aforementioned providers - with the exception of the provider of Facebook, with whom we are jointly responsible for data processing as part of the web analysis tool Page Insights - process your personal data on their own responsibility.

We would like to point out that the use of our social media accounts and their functions is your own responsibility, especially when interacting by commenting, sharing and liking. The providers of these platforms use cookies that are stored on your device even if you do not have your own user account with the respective provider or are not logged into the respective profiles while visiting our site. These cookies enable the providers to create user profiles based on your preferences and interests and to display customized advertising (within and outside the respective social media platform). The cookies remain on your device until you delete them. For details on the collection and storage of your personal data as well as the type, scope and purpose of its use by the respective platform operator, please refer to the data protection declarations of the respective social media platform.

- Facebook: https://www.facebook.com/privacy/policy/ 
- Instagram: https://help.instagram.com/519522125107875 
- LinkedIn: https://www.linkedin.com/legal/privacy-policy 
- Twitter/X: https://twitter.com/en/privacy 
- YouTube: https://policies.google.com/privacy?hl=en 

We are not familiar with and have no influence on the way in which the respective platform operators use your data from your visit to our profile pages and interaction with our posts for their own purposes, how long this data is stored and to what extent data is passed on to third parties and transferred to countries outside the European Union. For the transfer of data from the European Union to the USA under the EU-US. Data Privacy Framework (successor to the former EU-US Privacy Shield), the European Commission issued an adequacy decision on July 10, 2023. The platform operators are certified under this EU-US. Data Privacy Framework.

As the operator of the social media profile pages, we can only view the information stored in your public profile, and only if you have such a profile and are logged into it while interacting with our respective social media profile page.

In addition, the provider of Facebook, Meta Platforms, provides us with anonymous usage statistics (Page Insights), which we can use to improve the user experience when visiting our profile page on this platform. Even though we are jointly responsible with Meta Platform for data processing as part of the web analysis tool Page Insights, we do not have access to the usage data that Meta Platforms collects to compile these statistics. Meta Platforms has undertaken to us to assume primary responsibility under the GDPR for the processing of this data, to fulfill all obligations under the GDPR regarding this data and to provide you, as the data subject, with the essentials of this obligation. Further information on the content of our joint controllership agreement with Meta Platforms Ireland Ltd can be found at https://www.facebook.com/legal/terms/page_controller_addendum.

We use the opportunity to present our company on the social media platforms to provide information about our company, share our job vacancies and activities and get in touch with users. These purposes also constitute our legitimate interest in data processing (the legal basis for data processing).

If you wish to contact us, we will only process the personal data that you provide to us yourself (e.g. name, e-mail address). This data is used exclusively for the purpose of responding to your request. The legal basis is therefore consent and contract . This data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. All public posts by you on one of our social media accounts remain in the timeline indefinitely, unless we delete them due to an update of the underlying topic, a legal violation or violation of our guidelines or you delete the post yourself.

You can object to the processing of your personal data on the social media platforms by us at any time. To do so, send us an informal email to [email protected]. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the establishment, exercise, or defense of legal claims.

To exercise your rights as a data subject, you can contact us or the respective provider of the social media platform. If one party is not responsible for responding or must receive the information from the other party, we or the provider will then forward your request to the respective partner. Please contact the operator of the social media platform directly for questions about profiling and the processing of your data when using the website. If you have any questions about the processing of your interaction with us on our site, please write to the contact details we have provided above.

Nokian Tyres plc (“Nokian Tyres” or “we”) is the controller for the personal data concerning our corporate business contacts for procurement purposes, namely the representatives or contact persons of our suppliers.

This Privacy Statement describes how Nokian Tyres in the context of its business process the personal data of our supplier´s or potential supplier´s representatives (“data subjects”). Protection of data subject´s privacy is important to us. Nokian Tyres is committed to processing personal data transparently and in com­pliance with applicable da­ta pro­tec­tion laws.

Please note that this Privacy Statement may be updated from time to time to reflect changes in our operations and/or applicable legislation. We encourage you to regularly review this Privacy Statement for possible updates.

 

Controller and Contact Information

Nokian Tyres plc is the controller of the data subject’s personal data. Any questions regarding the data subject’s privacy can be directed to us:

Nokian Tyres plc

Privacy

Pirkkalaistie 7

37100, Nokia, FINLAND

[email protected]

 

Purposes of Processing, Categories of Personal Data & Legal Basis

Personal data is primarily obtained in situations where a supplier offers or delivers products or services to us. Personal data is processed for the following purposes:

 

• To manage supplier relationship and to procure products and services from suppliers (sourcing process).

Personal data processed for this purpose includes contact information, data subject’s title and the name of the company the data subject is representing. 

The legal basis for processing is legitimate interest. 

 

• To issue purchase orders

Personal data processed for this purpose includes contact information and the name of the company the data subject is representing.

The legal basis for processing is legitimate interest.

 

• To provide supplier self-registration form on our webpages.

Personal data processed for this purpose includes contact information, title, the name of the company the data subject is representing and log data.

The legal basis for processing is legitimate interest.

 

• To manage our supplier portal.

Personal data processed for this purpose includes contact information, title, the name of the company the data subject is representing, log data and credentials.

The legal basis for processing is legitimate interest.

 

• To manage our contracts.

Personal data processed for this purpose includes name, title, contact information and signature.

The legal basis for processing is legitimate interest.

 

• To execute due diligence (Know-Your -Customer) process for compliance purposes

Personal data processed for this purpose includes name, title, date of birth, photo and name of the company the data subject is representing and other information that is reasonably required to complete the due diligence (KYC) checks.

The legal basis for processing is legitimate interest.

 

• To manage accounts payable.

Personal data processed for this purpose includes name, contact details and title. 

The legal basis for processing is legitimate interest.

 

• To issue questionnaires to suppliers.

Personal data processed for this purpose includes contact information, title, the name of the company the data subject is representing and log data.

The legal basis for processing is legitimate interest.

 

• To provide training to suppliers.

Personal data processed for this purpose includes name, contact details and the name of the company the data subject is representing. 

The legal basis for processing is legitimate interest.

 

• To comply with applicable tax legislation and legislation on contractor’s liabilities

Personal data processed for this purpose includes name, contact details and the name of the company the data subject is representing.  Also tax ID is processed if the supplier is a natural person.

The legal basis for processing is legal obligation.

 

• To carry out inbound logistics activities.

Personal data processed for this purpose includes name, contact details and the name of the company the data subject is representing.

The legal basis for processing is legitimate interest.

To ensure that a significant and pertinent relationship exists between Nokian Tyres and a data subject, and to demonstrate that our legitimate interest does not cause any significant intrusion of data subject’s privacy, or any other undue impact on interests and rights, we assess the processing with balancing tests. More information on the balancing test can be requested by contacting [email protected].

 

Personal Data Transfers and Disclosures

Personal Data Transfers

As a global company, Nokian Tyres uses subcontractors and service providers to operate our business efficiently. For example, we use subcontractors to run the cloud-based ERP.

The processing of personal data in relation to our subcontractors is always commissioned by Nokian Tyres and the other parties will act only on our behalf as personal data processors. Such processing is always protected with contractual arrangements to ensure that our service providers and partners process data subject’s personal data in accordance with the laws and good data processing practices.

In a case our subcontractor or service providers is located outside the European Union (EU) or the European Economic Area (EEA) we ensure the adequate level of protection of data subject’s personal data with appropriate safeguards by using standard contractual model clauses approved by the European Commission or another valid mechanism provided under applicable legislation.

 

Personal Data Disclosures

We only disclose personal data that is strictly necessary for complying with a statutory requirement. For example, we may be required to provide information to tax authorities.

We might disclose personal data to other companies within Nokian Tyres group. This usually happens for the purposes of managing supplier relationship and to procure products and services from suppliers.

In a case we sell, merge or otherwise re-arrange our business operations or assets, we need to disclose personal data to purchaser or prospective seller or buyer of such business or assets in compliance with applicable laws. In such a case we process personal data based on our legitimate interest to ensure our business continuity.

 

Security of Personal Data

We use technical and organisational measures to ensure the security of personal data from loss, misuse or other similar unlawful access. Such methods include the use of firewalls, encryption technologies and safe server premises. Access to personal data is limited on “need-to-know” basis and controlled by system access rights, as well as through granting and controlling access rights.

In the event of a personal data breach, we will notify local supervisory authorities and everyone whose personal data may have been endangered in accordance with applicable legislation.

 

Data Subject Rights

As a responsible company we want to be open and transparent on the processing of our data subject’s personal data. This means we give data subject’s the opportunity to control the processing of personal data.

Right of Access. Data Subjects have the right to receive a confirmation whether we are processing their personal data, what personal data we process about them and to receive a copy of their personal data.

Right to Rectification. In case personal data of a data subject is inaccurate or incomplete, data subjects have the right to request rectification or completion of their data.

Right to Restrict Processing. Data Subjects have the right to request restriction by contesting the accuracy of their personal data. In such a situation, the processing activities are restricted for the period of time taken to verify the accuracy of personal data.

Right to Object. Data Subjects have the right to object to the processing of their personal data.

Right to be Forgotten. Data Subjects have the right to request their personal data to be erased. In some cases, there may still be an overriding purpose for processing and retaining personal data e.g. in order to fulfil legal obligations.

Right to Data Portability. Data Subjects have the right to request their personal data in machine-readable format in situations where we process personal data based on contract or consent. This only applies to personal data that data subjects have provided us with. Currently, we do not process personal data of data subjects on the basis of a contract or a consent.

Right to Withdraw a Consent. Data Subjects have the right to withdraw their consent at any time. Currently, we do not process personal data of the data subjects based on a consent.

If data subjects consider that the processing of personal data  infringes their rights, data subjects may contact the supervisory authority and lodge a complaint about our processing of personal data.

Any questions or requests regarding above mentioned rights can be sent via email to [email protected].

 

Retention Periods

Personal data is retained as long as is necessary for the purpose they were collected for, or until we receive a request for erasure – unless we have a legal obligation to retain it for a longer period.

Any questions regarding retention periods of personal data can be sent via email to [email protected]