Privacy Policy
TATA STEEL IJMUIDEN B.V. - PRIVACY POLICY
Privacy Policy
Introduction
Tata Steel IJmuiden B.V. and its affiliated companies ("Tata Steel", "we", "our" or "us") store and process data of various individuals, including our customers, potential customers, individuals who have contacted us with a question or complaint, visitors to our website and individuals who receive our emails ("you" or "your"). We take your right to privacy and our legal obligations regarding it seriously. Your personal data will be kept secure and confidential and will only be processed as set forth in this privacy statement. This privacy statement describes the categories of personal data we process, how your personal data is processed and how your privacy is safeguarded during our relationship with you. This statement is only intended to inform you about how Tata Steel processes your personal data and does not form part of any agreement with us.
Tata Steel IJmuiden B.V. ("TSIJ") is the "data controller" of your personal data. This means that TSIJ is responsible for determining the purpose for which your personal data is used and for processing (together with other parties involved in the processing of your personal data, as described in this Privacy Statement) your personal data in accordance with applicable privacy law. If you have any questions about the processing of your personal data, or if you believe that your rights have been violated, please contact us via "Contact Us".
What personal data does Tata Steel collect?
We process several categories of personal data, including: Contact details you provide to us at events or trade shows to ask a question or to receive or download marketing information (including your name, company, position, email address, address, phone number and mobile number); Contact details or other information you provide to us when making a complaint or asking a question, for example related to the environment; Information about our transactions (through our websites or otherwise), including information about goods or services you purchase from us; Information about your computer and your visit to and use of our websites (including your IP address, geographic location, browser type, referring source, length of your visit, point of entry and exit, and number of pages viewed); and Contact information you provide to us to sign up for our website services, email notifications and/or newsletters (including what you open, what you click on, preference information, email and other contact information). If necessary and to the extent permitted by law, we may collect additional data.
Special categories of personal data We do not currently process any special categories of personal data. To the extent permitted by law, we collect and process a limited amount of data on criminal offenses and proceedings (including information on charges and suspicion of criminal offenses).
How do we collect this data?
We collect and process personal data from a variety of sources, but primarily directly from you. This is data that you specifically provide to us, for example when you purchase a product from us, subscribe or unsubscribe to a newsletter by email, or hand us your ticket at an event or trade show. Some personal data is collected automatically, for example by monitoring your visits to our website or interaction with our emails (always with your consent where required by law), such as data about your browser and location, the amount of time you spend on the site, the referring source, whether you read our emails and, if so, whether you click on links therein. In such situations, data may be collected by Tata Steel or by a third party doing so on our behalf (for example, Google Analytics). For more information on this type of automated data collection, please see our cookie policy.
We inform you when providing your personal data is mandatory and when we need specific data from you in connection with (the conclusion of) a contract or otherwise. We also inform you of the consequences of not providing the required data: for example, failure to provide contact information means that we cannot contact you and without your payment information we cannot conduct transactions with you. In addition to personal information about yourself, you may also provide us with personal information about others, such as alternative contacts within your organization. Before you provide such personal data to us, you should inform those individuals of the data you intend to provide to us and of the processing of that data by us, as explained in this privacy statement.
What is the purpose and legal basis of data processing?
Your personal data are collected and processed in accordance with applicable (privacy) laws for various business purposes. When circumstances warrant, it may occasionally occur that your data is used for purposes that are not apparent to you, for example in a criminal investigation. We usually process your personal data on one of the following legal justifications: the processing is necessary to pursue our legitimate interests (see the purposes described in more detail below), except where your interests or fundamental rights and freedoms for which personal data must be protected outweigh our interests; the processing is necessary to comply with a legal obligation; or the processing is necessary for the performance of a contract to which you are a party or to take steps, at your request, to enter into such a contract.
Occasionally, we may process your personal data on other grounds, for example when the processing is necessary to carry out a task of public interest, or when the processing is necessary to protect your vital interests or those of someone else, or in cases where you have given your consent.
Processing of data related to criminal convictions and offenses Personal data relating to criminal convictions and criminal offenses are processed only to the extent permitted or required under applicable law. For example, we may carry out fraud checks on your transactions with us. Data relating to an allegation of a criminal offense or conviction during your relationship with Tata Steel will, where appropriate, only be processed by us to the extent required or permitted under applicable law. For example, if we are required by law or regulation to report an offense.
Access to data
We will never sell your data to third parties, and will ensure that our employees, suppliers and subcontractors only have access to your data when it is part of their duties, and then only for the purposes described in this privacy notice. Within Tata Steel, your personal data can only be accessed by, and may only be shared when necessary with: local and regional managers and executives who are responsible for decision-making relating to your relationship with Tata Steel (including, but not limited to, lawyers and IT staff); system administrators; and employees charged with performing specific tasks. For example, marketing insights may be used by Finance, Marketing and IT employees to provide better or more personalized service to customers.
Your personal data can also be accessed by third parties with whom we work, as well as their affiliates and subcontractors. They provide us with services such as, for example, hosting, support and maintenance of overarching information systems. Personal data is also exchanged with certain interconnected systems, such as content management systems for websites. Data contained in such systems may be accessible by the providers of those systems, their affiliates and subcontractors. Other examples of third parties with whom your data is shared include the Inland Revenue, regulatory authorities, insurers, IT administrators, lawyers, accountants, investors, consultants and other professional advisors to Tata Steel, and service providers such as our email service providers and web analytics companies. Tata Steel expects such third parties to process all data provided to them in accordance with applicable privacy law, including the security and confidentiality prescribed therein.
If a third party acts as a "data processor" (for example, our email service provider), it will perform tasks on our behalf and according to our instructions in connection with the purposes described in this privacy statement. Your personal data will be shared with these parties only to the extent necessary to provide the relevant service. In addition, your personal data may be shared with third parties: to the extent required by law; in connection with possible or ongoing legal proceedings, in order to establish, exercise or substantiate our legal rights; and in connection with the (possible) sale of companies or assets. In this case, your data will be shared with the (potential) buyer and relevant professional advisors.
Data Security
Tata Steel is responsible for the security of the personal data you provide to us. We have taken technical, physical and organizational measures to ensure an appropriate level of security. For example, we have a security policy and all your personal data is stored on our secure servers. However, sending information over the Internet inevitably involves security risks. Accordingly, we cannot guarantee security in this regard.
Transfer of personal data
To provide you with the best possible service, we work with companies around the world. This means that from time to time your personal data is transferred to affiliates of Tata Steel or to third parties as mentioned above. They will process your data in accordance with the purposes and legal grounds described in this privacy notice. These affiliates and third parties may be located within the European Union, but also outside it and in countries with less stringent privacy laws. The parties with whom we share your data include those located in India, the U.S., Canada, the Middle East, China, South Africa, Mexico, Hong Kong, Japan, Singapore, Thailand, Turkey, UAE and Brazil. Given the large number of parties, it is not possible to list them all here, but we only work with companies that we are confident will treat your data securely and correctly, whether they are based inside or outside the EU.
Within the Tata Steel Europe LimitedGroup, an agreement (Intra Group Transfer Agreement) is used in accordance with current European data protection regulations. This agreement governs the exchange and transfer of data in connection with reporting purposes and/or other business or operational purposes within the group. Tata Steel IJmuiden B.V. is a party to this agreement. To the extent documented, you may request the measures taken by us to protect your personal data and to ensure the proper transfer of your personal data (see "Contact Us"). For reasons of confidentiality, however, certain details may have been omitted.
Third party websites
Sometimes we post links to external websites that are relevant to our industry or that we believe will be useful to the user. Although we select these links very carefully, they are provided solely for the convenience of the user, and we, or any other Tata Steel Group company, do not guarantee the content and (privacy) policies of the relevant site , nor the products or services offered thereon.
Representation in the United Kingdom Tata Steel Ijmuiden
B.V. has appointed Tata Steel Europe Limited, located at 30 Millbank, London SW1P 4WY,United Kingdom, as its formal representative in the United Kingdom.
Your rights
Right to access, correct and delete your personal data.
Tata Steel is committed to ensuring that all personal data held by us is accurate. We therefore request that you inform us if your personal data needs to be amended. Please see "Contact Us" for our contact details. You have the right to access all personal data that Tata Steel holds about you and you may request that we make a correction if your data is not correct (any longer). In addition, you have the right to request us to delete unnecessary data we hold about you.
In addition, you have the following rights:
Right to data portability - if we use your consent or the fact that processing is necessary for the performance of a contract as the legal basis for processing and if the personal data is processed by automated means, you have the right to request all personal data you have provided to Tata Steel in a structured, common and machine-readable form and also to request us to transfer that data to another data controller if this is technically possible.
Right to restrict processing - you have the right to restrict the processing of your personal data if: - you contest the accuracy of the personal data for a period that allows us to verify the accuracy of the data; - if the processing is unlawful, but you do not want us to delete the data; - if we no longer need the personal data, but you need it for the establishment, exercise or vindication of a legal claim; or - you have objected to processing based on the protection of our legitimate interests (see below) pending the answer to whether your objection is justified.
If personal data is subject to such restrictions, we will only process it with your consent, for the establishment, exercise or substantiation of legal claims or to protect the rights of another (legal) person.
Right to withdraw your consent - if we use your consent as the legal basis for processing your data, you have the right to withdraw that consent at any time. You can do so by contacting us (see "Contact Us"), or in some cases by using a specific withdrawal mechanism, such as for deletion of cookies (see our cookie policy for more information).
Right to object to processing based on legitimate interests - if we use the pursuit of our legitimate interests as the legal basis for processing your data, you have the right to object to such processing. If you object, we must stop such processing unless we cite compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or if we need to process the data for the establishment, exercise or vindication of a legal claim. If we use a legitimate interest as a ground for processing, we are confident that we can demonstrate such compelling justification for processing, but we will assess each case individually.
You also have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not carried out in accordance with applicable privacy laws.
For more information regarding your rights, or if you wish to exercise them, please contact us using the information in "Contact Us". Other privacy notices We may process data to which another privacy statement applies. In that case, we will bring it to your attention.
Notice of changes We may modify or update this privacy statement at any time and will post the new version on our website in that case. Therefore, please check this page regularly so that you are always aware of the most recent changes.
This privacy statement was last updated and verified on March 1, 2021.
Write to us
You may write to:
Legal Affairs Department
Tata Steel IJmuiden B.V.
Wenckebachstraat 1
1951 JZ
Velsen-Noord
E-mail:
dataprivacy@tatasteeleurope.com
Call us
++31 (0)251493484
