1. Processing of your personal data within the Swiss Steel Group
The controller within the meaning of data protection law is
Swiss Steel Colombia S.A.S.
Carrera 7 No. 71 – 52 Torre A Of. 706
CO-110221 Bogota, Colombia
(hereinafter referred to as “Swiss Steel“).
The controller is part of the Swiss Steel Group.
2. Data Protection Officer
The data protection officer is available to answer all your questions at firstname.lastname@example.org (dpo(at)swisssteelgroup.com).
3. Purpose and legal basis of the processing
We process your personal data only within the legally permitted purposes and in accordance with the legal requirements of the General Data Protection Regulation (EU) 2016/679 ("GDPR") and national data protection laws.
3.1 Website Visitors
The purpose of the processing is the technical provision and optimization of the site, communication of information about our services and products and the protection of your interests. The legal basis for this is either Article 6 (1) (a) GDPR, if you have given your consent, or Article 6 (1) (f) GDPR. In this respect, our legitimate interest lies in the administration and operation of the website, our interest in optimizing the website and in informing you about products and services. This includes in detail:
a) Mailing list for media releases and newsletters
If you register with us for the mailing list for media releases or for the newsletter and give us your consent, we will store and process the contact data you provide there. The use of the media releases or the newsletter is completely voluntary and not a prerequisite for using the website. You can unsubscribe from the media releases or the newsletter at any time with effect for the future and thus revoke your consent. You will find the link to unsubscribe in every e-mail with which we send you your media releases or newsletter.
b) Contact form
We offer a contact form on our website so that you can contact us with questions about Swiss Steel, our website and other inquiries. You can also contact us by e-mail.
When you contact us, the data you provide us with (in particular your e-mail address, your first and last name and the text of your inquiry and any other details you may have provided in the contact form or by e-mail) will be stored by us in order to process your inquiry and answer your questions.
c) Linking from Google Maps, YouTube and LinkedIn
On our websites, we offer you the opportunity to visit Swiss Steel content in social networks (YouTube and LinkedIn) and plan routes via Google Maps. Our website integrates these services only as external links. These companies will therefore only process your data when you click on the integrated graphics. You will then be forwarded to the page of the respective provider. If you do not want the named providers to receive your data, please do not click on the graphics.
3.2 Customers, suppliers and service providers
a) Management of the contractual relationship
The purpose of processing in this context is the management of contact data, communication, customer care and security, and logistics. The legal basis for the processing is Article 6 (1) (b) of the GDPR, insofar as a contractual relationship exists with you. In addition, Article 6 (1) (f) GDPR is the legal basis if and insofar as our legitimate interest is the management of the customer relationship, security and improvement of logistical processes.
We process your personal data in this context for marketing purposes, sending advertising, e-mails, newsletters, technical information or legal updates, as applicable. The legal basis for this is Article 6 (1) (a) GDPR, provided that consent has been expressly obtained. Consent is voluntary and can be revoked at any time with effect for the future.
For existing customers, we may send advertising and information material for similar products or services without consent. However, this will only be done within the framework of the applicable competition law regulations. In this respect, Article 6 (1) (f) of the GDPR is the legal basis and our legitimate interest is marketing and sales. Data subjects may object to this processing of their data at any time. For details of the right of objection, see below.
The purpose of processing your personal data is to evaluate your application for a position at Swiss Steel. Your personal data will only be processed if it is necessary in connection with your application during the application process. The legal basis for this processing is Article 6 (1) (b) GDPR, as the processing of your application constitutes the implementation of a pre-contractual measure.
3.4 As a company we are subject to various legal obligations. Such obligations may arise from provisions of commercial, tax and social law, for example in connection with regulations to prevent the financing of terrorism or the deployment of employees. Insofar as Swiss Steel processes or shares your personal data for this purpose, the legal basis is Article 6 (1) (c) GDPR. This may also result in specific obligations to secure, store, report and collect data, which generally serve control purposes of the respective authorities.
4. Recipient of your personal data
4.1 Swiss Steel will disclose your personal data to third parties only to the extent necessary. Your personal data will not be passed on to third parties for any reason and outside the purposes mentioned above. Swiss Steel may share your personal information with subsidiaries and affiliates in order to provide the services you have requested. These subsidiaries and affiliates process your personal information in accordance with the principles described above.
4.2 Swiss Steel may disclose your personal data to third parties who assist us in administrative, technical, application management or marketing matters.
4.3 We work together with service providers within and/or outside the Swiss Steel or the Swiss Steel Group to perform our tasks. This may be the case, for example, in connection with the operation of the IT infrastructure or in connection with an application. If we involve external service providers this will always be done in accordance with the statutory provisions and in compliance with the applicable data protection regulations.
4.4 Swiss Steel may be required by law or in the course of official or judicial proceedings to disclose your data to public authorities. This may include investigating violations, interacting with governments, protecting the security or integrity of our databases or this website, protecting and defending the rights or property of Swiss Steel, protecting the personal safety of Swiss Steel website users, making arrangements to avoid liability, or protecting your or our legal rights and interests or defending Swiss Steel in the event of a dispute. We reserve the right to contact the relevant authorities if we discover any activity on Swiss Steel websites, which is illegal or violates our guidelines.
5. Transfer to third countries
Even if you are in the European Union, personal data collected during your use of this website may be processed in a third country whose data protection laws have not been qualified as adequate by a decision of the EU Commission. When we transfer personal data to such countries, Swiss Steel will ensure that agreements relating to the processing of your personal data are in place so that your personal data is protected by appropriate safeguards, usually standard EU contractual clauses for data transfers. If you would like further information on how we protect your personal data under these circumstances, please contact our Data Protection Officer using the contact details above.
6. Storage of your personal data
Swiss Steel will process your personal data only for as long as it is necessary to fulfil the above-mentioned purposes and/or if storage is required by law or legally mandated. If you would like further information on our retention periods, please contact our Data Protection Officer using the contact details given above.
7. Profiling or automated decision making
Profiling or automated decision making is not used in any processing of personal data by Swiss Steel.
8. Your Rights
8.1 Swiss Steel tries to make it as easy as possible for you to exercise your rights. You generally have the following rights as set out below in relation to your personal data. Please always state in what form you wish to receive the information. If you do not indicate a wish, Swiss Steel will reply to your request in the same form as the request. You will normally receive a reply within one month. In the case of obviously unfounded or excessive requests, Swiss Steel is entitled to demand an appropriate fee or to reject the request.
Right of access - You have the right to request information about whether Swiss Steel processes personal data relating to you or not. If Swiss Steel processes your personal data, you will receive information about the specific data and other additional information.
Right to rectification - You have the right to ask Swiss Steel to rectify your data if it is incorrect, inaccurate and/or incomplete. The right of rectification includes the right to be completed by additional explanations or communications. If Swiss Steel should have disclosed any data concerned to other recipients, Swiss Steel will inform them of the rectification if this is reasonable and will inform you of these recipients upon request.
Right to erasure - You have the right to request Swiss Steel to delete your personal data if there is no longer any reason to keep it. Please note that Swiss Steel is subject to legal storage obligations. If Swiss Steel should have disclosed any data concerned to other recipients, Swiss Steel will inform them of the deletion if this is reasonable and will inform you of these recipients upon request.
Right to restriction of processing - You have the right to have the processing of your personal data restricted in certain cases for a specific purpose. If Swiss Steel has disclosed any data concerned to other recipients, you will be informed of the restriction if it is reasonable to do so and, upon request, informed of these recipients.
Right to data portability - You may be entitled to request that data concerning you be made available in a standard electronic, machine-readable data format. The right to transfer data includes the right to transfer the data to another responsible party; on request, Swiss Steel will therefore - as far as technically possible - transfer data directly to a responsible party named or to be named by you. The right to transfer data exists only for data provided by you and presupposes that the processing is based on consent or for the performance of a contract and is carried out with the aid of automated procedures.
8.2 You always have the right to lodge a complaint under Article 77 of GDPR with a competent supervisory authority regarding the processing of your personal data by Swiss Steel.