Privacy Policy

Introduction

Saku Metall Group values the privacy and protection of personal data of its customers, business partners, employees, job applicants and other individuals who interact with us.

This Privacy Policy explains how companies belonging to Saku Metall Group collect, use, store and protect personal data, and outlines your rights in relation to the processing of your personal data.

Saku Metall Group companies include, among others:

AS Saku Metall;
AS Saku Metall Allhanke Tehas;
AS Saku Metall Uksetehas;
3D Print OÜ.

Hereinafter, these companies are collectively referred to as Saku Metall or the Group.

The controller of your personal data is the Saku Metall Group company that determines the purposes and means of the relevant processing. As a general rule, this is the company with which you communicate, to which you submit an enquiry or job application, from which you purchase products or services, or with which you have a contractual relationship.

Certain support functions, such as IT, human resources, finance, marketing and administrative services, may be organised across the Group. In such cases, personal data may, to the extent necessary, also be accessible to other Saku Metall Group companies.

We protect your personal data and privacy in accordance with applicable legislation and implement appropriate organisational, technical and physical security measures to safeguard your information.

This Privacy Policy applies to the personal data of natural persons. If you communicate with us as a representative of a company or other legal entity, we will also process your personal data as a contact person.

What Personal Data Do We Collect and Use?

In the course of its day-to-day activities, Saku Metall may process various types of personal data, including:

the names, job titles and contact details of customers and representatives of business partners;
information relating to enquiries, quotations, orders and contracts;
information submitted through website contact and enquiry forms;
information relating to current and former employees;
information relating to job applicants;
information relating to newsletter subscribers and recipients of marketing communications;
information relating to individuals who interact with us through social media;
technical information relating to the use of our website, such as IP address, browser and device information, and website usage data;
other information that you voluntarily provide to us.

The type and extent of personal data collected depend on the services you use and the way in which you interact with Saku Metall.

Why Do We Process Your Personal Data?

We process personal data only for specified and legitimate purposes and only to the extent necessary to achieve those purposes.

We may process personal data for purposes including:

responding to enquiries and requests for cooperation;
preparing quotations and conducting pre-contractual negotiations;
entering into and performing contracts;
supplying products and providing services;
managing customer and business partner relationships;
carrying out sales, marketing and customer relationship management activities;
developing our products, services and manufacturing processes;
complying with accounting, tax and other legal obligations;
managing outstanding payments and protecting our rights;
managing recruitment and employment relationships;
ensuring the security of our information systems, property and premises;
preventing fraud, unlawful activity and damage;
managing the internal administration and support functions of Saku Metall Group;
sending newsletters and other marketing communications where we have an appropriate legal basis to do so.

Legal Bases for Processing Personal Data

Depending on the circumstances, we process personal data on one or more of the following legal bases.

Performance of a contract or steps taken prior to entering into a contract – for example, responding to requests for quotations, preparing offers, fulfilling orders and providing services.

Compliance with a legal obligation – for example, complying with obligations arising from accounting, tax and employment legislation.

Legitimate interests – for example, managing customer and business partner relationships, ensuring the security of our company and information systems, protecting our rights, developing our business and, in certain cases, carrying out marketing activities. We rely on legitimate interests only where our interests are not overridden by your rights and interests.

Consent – for example, for certain marketing activities or the use of non-essential cookies. Where processing is based on consent, you have the right to withdraw your consent at any time.

Recruitment

If you apply for a position with any Saku Metall Group company, we may process information including:

information contained in your CV and cover letter;
your contact details;
information about your education and professional experience;
additional documents and information requested in the job advertisement;
information relating to references you have provided;
other information that you have provided to us during the recruitment process or that we have another lawful basis to process.

We process only the information necessary to assess your suitability for a particular position or to prepare for entering into an employment relationship.

Special Categories of Personal Data

As a general rule, Saku Metall does not collect special categories of personal data unless such processing is necessary for a specific purpose and we have a valid legal basis for doing so.

Where your explicit consent is required to process special categories of personal data, we will obtain your consent before processing such information.

Where Do We Obtain Personal Data?

As a general rule, we receive personal data directly from you, for example when you:

complete a form on our website;
send us an email;
contact us by telephone;
submit a request for quotation or place an order;
enter into a contract with us;
apply for a job;
communicate with us through social media;
visit our website.

Where necessary, we may also obtain information from publicly available sources and registers or from our business partners, provided that we have a lawful basis for doing so.

Sharing Personal Data and Processing Within the Group

To the extent necessary, we may share personal data with other Saku Metall Group companies and with third parties that provide services to us or where sharing such information is necessary for the operation of our business.

Such third parties may include:

IT and data hosting service providers;
accounting, audit and legal service providers;
logistics and transport partners;
payment and financial service providers;
marketing and communications service providers;
recruitment service providers;
other service providers whose services require limited access to personal data;
public authorities and other parties where disclosure is required by law.

We provide service providers with access only to the personal data necessary for the provision of the relevant service and require them to comply with appropriate confidentiality and data protection requirements.

We may also disclose personal data where:

you have requested us to do so;
you have given your consent;
disclosure is required or permitted by law;
disclosure is necessary to protect our rights or legitimate interests.

Transfers of Personal Data Outside the European Economic Area

If personal data is transferred outside the European Union or the European Economic Area, we ensure that there is an appropriate legal basis for the transfer and that safeguards complying with European Union data protection requirements are in place.

How Long Do We Retain Personal Data?

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or for as long as retention is required to comply with legal obligations or protect our rights.

Retention periods may vary depending on the type of personal data, the purpose of processing and the applicable legal basis.

When determining an appropriate retention period, we take into account, among other things:

the purpose for which the data is processed;
the duration of the contractual or customer relationship;
statutory retention requirements;
applicable limitation periods for bringing or defending legal claims;
the validity of any consent given by the individual.

Once the purpose for retaining personal data no longer applies and there is no other legal basis for retaining it, we delete or anonymise the data.

Profiling and Automated Decision-Making

As a general rule, Saku Metall does not make decisions based solely on automated processing where such decisions would have a legal effect on you or otherwise significantly affect you.

If we introduce such solutions in the future, we will provide appropriate information about their use, the logic involved and their potential consequences.

Your Rights

You have the right to:

receive information about how your personal data is processed;
access the personal data we process about you;
request the correction of inaccurate or incomplete personal data;
request the deletion of your personal data where provided for by law;
request restriction of the processing of your personal data;
object to processing based on legitimate interests;
object to the use of your personal data for direct marketing;
withdraw previously given consent at any time;
request the portability of your personal data where the conditions established by law are met;
lodge a complaint with a supervisory authority.

Where processing is based on consent, withdrawing your consent does not affect the lawfulness of processing carried out before the consent was withdrawn.

To exercise your rights, please contact us at privaatsus@sakumetall.ee.

Use of Cookies

Saku Metall Group websites use cookies and similar technologies to ensure the proper functioning and security of the website, improve the user experience, collect statistical information and, with your consent, for marketing purposes.

Cookies that are strictly necessary for the operation of the website may be used without obtaining separate consent.

Analytics, marketing and other non-essential cookies are used only after you have provided your consent through the website’s cookie settings.

You may change your cookie preferences and withdraw previously given consent at any time.

More detailed information about the cookies we use, including their purposes, duration and any third parties involved, is available in the website’s cookie settings.

Security of Personal Data

Saku Metall implements appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing and against accidental loss, alteration, destruction, damage or disclosure.

Access to personal data is limited to employees and business partners who have a legitimate need for such access based on their duties or the services they provide, and only to the extent necessary for the relevant purpose.

We also require our business partners to comply with appropriate data protection and confidentiality requirements.

In the event of a personal data security incident, we will take the necessary measures to limit its impact, reduce future risks and comply with any notification obligations arising from applicable legislation.

Newsletters and Marketing Communications

Saku Metall may send you newsletters, offers and other marketing communications where we have a valid legal basis for doing so.

Where marketing communications are based on your consent, you may withdraw your consent at any time.

You can unsubscribe from newsletters and marketing communications sent by email by using the unsubscribe link included at the end of the relevant message or by contacting us at privaatsus@sakumetall.ee.

Changes to This Privacy Policy

Saku Metall may amend this Privacy Policy from time to time, for example as a result of developments in our products and services, changes to our data processing activities, the introduction of new technologies or changes in applicable legislation.

The current version of this Privacy Policy will be published on the Saku Metall Group website.

Contact Details and Complaints

If you have any questions about the processing of your personal data or this Privacy Policy, or if you wish to exercise your data protection rights, please contact us:

Saku Metall Group
Põrguvälja 25, Rae Municipality
Harju County 75306, Estonia

+372 611 8400
info@sakumetall.ee

Where necessary, your enquiry will be forwarded to the Saku Metall Group company responsible for the relevant processing of your personal data.

If you are not satisfied with the way Saku Metall processes your personal data or responds to your enquiry, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate or to exercise any other legal remedies available to you.