Externals, sub-contractors and suppliers

In some cases, SSAB may need to collect data needed to comply with legal obligations related to foreign and leased labor, sub-contractor labor and prevention of using undeclared workforce. Depending on each country’s legislation, the gathered information may include the following: Tax number, national ID, birth date, nationality, copy of the identity document, A1 certificate and corresponding certificates, information on the right to work and copies of the relevant documents, residence permits, data on salary and working hours, contact data of local representative.

In addition, in some exceptional cases, such as in case of occupational accidents, SSAB might process sensitive data. As a rule, this personal data is collected either directly from the individual, their employer or the contracting party. However, personal data related to an individual's performance and potential disciplinary matters may be collected from other sources, such as from the immediate superior, other employees and witnesses. Furthermore, some compliance-related data may be collected from third parties such as tax authorities or databases concerning fulfilment of legal obligations related to workforce (e.g. in Finland Vastuugroup.fi).

The personal data related to the collaboration relationship will be retained only for as long as necessary to fulfill the purposes defined in above. Most of engagement related data will be retained during the course of the engagement or as required by retention period provided in the applicable law. Some of those laws demand that the data is kept longer, e.g. data relating to the work contract. When the personal data is no longer required by law or rights or obligations by either party, SSAB will remove externals', and sub-contractors’ personal data. Personal data regarding suppliers will be retained during the business relationship and after that for as long as necessary or required by law or rights or obligations by either party, for example for billing purposes.

Exceptionally, SSAB may retain personal data for a longer period if SSAB has a legitimate reason or an obligation to store the recordings for the purposes of a dispute, criminal investigation or other corresponding reason.