Corporate customers

Last updated: January 2025

1. Legal basis and purpose of processing personal data

SSAB processes personal data of its corporate customers, their representatives, potential customers and other business partners. SSAB processes the personal data of these individuals for various purposes, which are explained below.

Loading component...

PROCESSING ACTIVITY	LEGAL BASIS	DESCRIPTION
Contractual and other interaction with customers and other business partners	Legitimate interest │ Contract	The main purpose of processing personal data is to deliver SSAB's products and services, as well as to source services and material for SSAB’s business needs and provide website and other digital services. This is to process data for fulfilling its contractual obligations and being able to communicate with SSABs customers and other business contacts, including processing needed prior to entering into a contractual relationship with the company or organization the individual is representing, or in some cases also with the individual directly.
Product and services development	Legitimate interest	SSAB aims to provide high-quality products and services and to give individuals relevant information about those products and services. Therefore, SSAB may use personal data to analyze the market, user groups and use of websites or services for the purpose of developing and improving the quality of the website and SSAB's products and services. Please see section Web users, Digital channels and cookies for further information related to statistical and other purposes of using cookies and the legal basis thereof.
Marketing and communications	Legitimate interest	Individuals’ personal data is used to manage communication with individuals and for marketing purposes. Processing is done to promote SSAB's latest products and services as well as to personalize the user experience and to evaluate customer satisfaction.
Compliance with statutory obligations	Legal obligation	Personal data processing may be needed in order to be in compliance, with i.a. the following statutory requirements: - reporting and audit - Market Abuse Regulation - sanctions and other compliance screening - whistleblowing procedures In addition, certain personal data may be stored for dispute resolution purposes to be able to establish and defend legal claims.

PROCESSING ACTIVITY

Contractual and other interaction with customers and other business partners

LEGAL BASIS

Legitimate interest │
Contract

DESCRIPTION

The main purpose of processing personal data is to deliver SSAB's products and services, as well as to source services and material for SSAB’s business needs and provide website and other digital services. This is to process data for fulfilling its contractual obligations and being able to communicate with SSABs customers and other business contacts, including processing needed prior to entering into a contractual relationship with the company or organization the individual is representing, or in some cases also with the individual directly.

PROCESSING ACTIVITY

Product and services development

LEGAL BASIS

Legitimate interest

DESCRIPTION

SSAB aims to provide high-quality products and services and to give individuals relevant information about those products and services. Therefore, SSAB may use personal data to analyze the market, user groups and use of websites or services for the purpose of developing and improving the quality of the website and SSAB's products and services.
Please see section Web users, Digital channels and cookies for further information related to statistical and other purposes of using cookies and the legal basis thereof.

PROCESSING ACTIVITY

Marketing and communications

LEGAL BASIS

Legitimate interest

DESCRIPTION

Individuals’ personal data is used to manage communication with individuals and for marketing purposes. Processing is done to promote SSAB's latest products and services as well as to personalize the user experience and to evaluate customer satisfaction.

PROCESSING ACTIVITY

Compliance with statutory obligations

LEGAL BASIS

Legal obligation

DESCRIPTION

Personal data processing may be needed in order to be in compliance, with i.a. the following statutory requirements: - reporting and audit
- Market Abuse Regulation
- sanctions and other compliance screening
- whistleblowing procedures
In addition, certain personal data may be stored for dispute resolution purposes to be able to establish and defend legal claims.

Loading component...

pdf181 Kb

Privacy notice - corporate customers

Loading component...

2. Collection of personal data

Depending on the individuals' interaction, SSAB may collect the following personal data:

Personal Data	Examples
Contact details of the individual or the company or organization the individual is representing	Name, email address and phone number
Contact details of the individual's employer	Company name, business address, business email address and business phone number
Information relating to the business relationship	Products and services delivered, the starting and end time of the business relationship, events attended, purchase history, preferences
Billing and credit information	Account numbers, payments made and outstanding and bills delivered
Customer communications	Communications and interaction, feedback, marketing and campaign history information

Personal Data

Contact details of the individual or the company or organization the individual is representing

Examples

Name, email address and phone number

Personal Data

Contact details of the individual's employer

Examples

Company name, business address, business email address and business phone number

Personal Data

Information relating to the business relationship

Examples

Products and services delivered, the starting and end time of the business relationship, events attended, purchase history, preferences

Personal Data

Billing and credit information

Examples

Account numbers, payments made and outstanding and bills delivered

Personal Data

Customer communications

Examples

Communications and interaction, feedback, marketing and campaign history information

Loading component...

This personal data is mostly collected directly from individuals.

3. Retention of personal data

The personal data will be retained only for as long as necessary to fulfill the purposes defined above. After that, personal data will be removed except when personal data retention is required by law or rights or obligations by either party.
Personal data regarding customers will be retained during the business relationship and after that for as long as necessary or required by law or rights or obligations by either party, for example for billing purposes.

Loading component...

Privacy portal

Go back to the Privacy portal containing general privacy information and other specific privacy notices.

Back to Privacy portal

Loading component...

PROCESSING ACTIVITY	LEGAL BASIS	DESCRIPTION
Contractual and other interaction with customers and other business partners	Legitimate interest │ Contract	The main purpose of processing personal data is to deliver SSAB's products and services, as well as to source services and material for SSAB’s business needs and provide website and other digital services. This is to process data for fulfilling its contractual obligations and being able to communicate with SSABs customers and other business contacts, including processing needed prior to entering into a contractual relationship with the company or organization the individual is representing, or in some cases also with the individual directly.
Product and services development	Legitimate interest	SSAB aims to provide high-quality products and services and to give individuals relevant information about those products and services. Therefore, SSAB may use personal data to analyze the market, user groups and use of websites or services for the purpose of developing and improving the quality of the website and SSAB's products and services. Please see section Web users, Digital channels and cookies for further information related to statistical and other purposes of using cookies and the legal basis thereof.
Marketing and communications	Legitimate interest	Individuals’ personal data is used to manage communication with individuals and for marketing purposes. Processing is done to promote SSAB's latest products and services as well as to personalize the user experience and to evaluate customer satisfaction.
Compliance with statutory obligations	Legal obligation	Personal data processing may be needed in order to be in compliance, with i.a. the following statutory requirements: - reporting and audit - Market Abuse Regulation - sanctions and other compliance screening - whistleblowing procedures In addition, certain personal data may be stored for dispute resolution purposes to be able to establish and defend legal claims.

PROCESSING ACTIVITY

Contractual and other interaction with customers and other business partners

LEGAL BASIS

Legitimate interest │
Contract

DESCRIPTION

PROCESSING ACTIVITY

Product and services development

LEGAL BASIS

Legitimate interest

DESCRIPTION

PROCESSING ACTIVITY

Marketing and communications

LEGAL BASIS

Legitimate interest

DESCRIPTION

PROCESSING ACTIVITY

Compliance with statutory obligations

LEGAL BASIS

Legal obligation

DESCRIPTION