Stora Enso Website Privacy Notice

16.09.2022

Stora Enso Oyj and its affiliates (“Stora Enso”) are committed to protecting the privacy of visitors (‘you’) when you visit our website storaenso.com or services available through our website. This Notice provides you information on what personal data Stora Enso collects and how and for what purposes the data may be processed. This Notice applies to all websites and subsites of the Stora Enso unless a specific website states otherwise.

Data Controller

Stora Enso Oyj and its subsidiaries are joint data controllers in respect of the personal data. Stora Enso Oyj jointly processes and shares the data collected via this website with its subsidiaries. You may contact Stora Enso for any questions about the privacy in relation to website and the services provided through the websites as:

Address:
Stora Enso Oyj
Salmisaarenaukio 2
P.O. Box 309
FI-00101 Helsinki
Finland

Email:
data.privacy@storaenso.com

Telephone:
+358 2046 111

We collect and use your personal data in accordance with the following practices and applicable data protection legislation.

Collection of personal data and the purposes and legal basis of their use

When you visit our website

When you visit any of Stora Enso websites, some information is collected and stored by Stora Enso, including:

• IP address of your device,
• Date and time of access and length of the visit,
• Name and URL of the visited page,
• Website from which access is obtained,
• Browser used,
• Language settings applied,
• Where applicable, your device’s operating system and the identity of your access provider.

Data is processed for the following purposes based on Stora Enso’s legitimate interest:

• To ensure and improve the website performance,
• To optimize the website content, layout and functionalities,
• To analyse the system security and stability, as well as
• For additional administrative purposes.

For these purposes, Stora Enso does not seek to identify the person visiting the websites but some of the data that is collected may allow identifying the person in question.

If you choose to contact Stora Enso by submitting any of our forms, we store the contact information you provide and metrics such as technical issues with forms. Additionally, if you consent to the usage of cookies, we will also collect data related to user interactions with Stora Enso website including events, outcomes, goals and page views. All the data we store is then used to optimize the user experience by offering personalized content. More detailed information about cookies and analysis services is available below.

When you contact Stora Enso for information on products, services and any other information of your interest

If you wish for more information on the Stora Enso products, services, documents or some other area of interest we ask you to provide us your personal contact data (usually name, title, organisation, email address, address, phone number, company name) for us to contact you personally. The information shall be processed based on our legitimate interest for the purposes of fulfilling your request and, if you have allowed the cookies, for improving content personalisation. Email communication that you receive from us is tracked to see what contents you find interesting and to monitor possible technical problems with email deliveries.

When you subscribe to our email marketing

When you provide your consent and your personal contact data (typically name, title, organisation, e-mail address, address, phone number, company name), we use this data to send you our email marketing such as newsletters and event invitations. Sending of email marketing is tracked to see what contents you find interesting and to develop the contents based on preferences. You can unsubscribe at any time for certain or all e-marketing and tracking and manage your e-marketing preferences whenever you wish by using the link at the end of each marketing email. Further-more, you can always send an email to data.privacy@storaenso.com and inform us of your consent withdrawal.

When you contact us through the website to place an order for products

If you make an order for our products through any of our online marketplaces, we ask you to provide the necessary information to ensure we are able to deliver the product and close the transaction. You usually have to specify your first and last name, company name and address, VAT number, telephone number and e-mail address and set a password for your account. This user account is not publicly visible. Processing is necessary for the performance of the contract that you have entered into with Stora Enso by registering for a user account on our marketplace.

How does Stora Enso use cookies?

We use cookies on our website. Stora Enso does not use cookies to specifically identify anyone but to separate one user from the other. This allows Stora Enso to, e.g., keep track of a visitor moving around on the websites even if Stora Enso does not know who that user is. Without cookies, Stora Enso would not be able to provide features such as logging-in or remembering language, country or other user preferences based on your usage patterns. Note that disabling cookies for Stora Enso’s websites may mean that some features of the websites will be unable to work.

We also use statistical cookies including website and email communication tracking to record the use of our website and for the purpose of optimizing our offer for you. On top of analytics measures we also use marketing cookies. The purpose of the marketing tools is to increase the marketing relevance and personalisation to users who have already shown interest to our content, services and products. Preference, statistical and marketing cookies are also used in our marketing processes to understand business relevance of the received contacts, so called leads. This is done e.g. by combining cookie data with some other information such as industry databases.

The preference, statistical and marketing cookies are used on the basis of your consent. You may withdraw your consent for Stora Enso to use cookies at any time by managing your preferences via this link. You can also control cookies via your browser settings to disable use of cookies on Stora Enso’s websites. Your web browser may also allow you more fine-grained control of which cookies you want to permit and which you want to block – check your browser’s settings or manual.

For detailed information on the cookies, the purposes for which we use them and to manage your Cookie preferences see our Cookie Notice.

Sharing and disclosing personal data

Stora Enso generally does not share and never sells the information outside the Stora Enso group. The information may, however, be shared within the group. Stora Enso may also disclose personal data to government entities and agencies as required by law.

Stora Enso uses certain third-party service providers to whom Stora Enso may transfer the information for limited technical purposes, or who may have access to it as part of the technical, maintenance, user analysis, statistical and marketing services they provide. Such service providers include IT service providers, marketing service companies, consultants and social media companies. In the event the service provider has access to any personal data, Stora Enso has entered into a written data processing agreement with the service provider ensuring that they treat the data lawfully and in compliance with Stora Enso’s instructions and this Notice.

Some of Stora Enso's group entities and service providers may be located outside the European Union or the European Economic Area. In the event that Stora Enso discloses or transfers personal data outside the EU/EEA, Stora Enso ensures that sufficient level of data protection is maintained with appropriate safeguards, e.g. by signing the EU Commission’s model clauses with the party receiving the data.

Data retention

Stora Enso generally stores the information you provide through your visits for a maximum period of one year from your visit on Stora Enso’s website. In case a security-related incident occurs, this data may be stored until the case is resolved. Stora Enso may also use the information to put together aggregate-level statistics that are not identifiable personal data – such non-identifiable statistics may be kept indefinitely.

Security

Stora Enso has applied appropriate technical and organisation measures to protect the data. During your website visit we use the SSL process (Secure Socket Layer) in connection with a modern encryption level. Access of our employees and service providers to data is granted to persons who need the access in order to fulfil the tasks and duties to their role within and with Stora Enso.

Your rights as a data subject

In addition to other legal rights you may have, you may have the following rights in respect of any personal data we collect about you:

• To ask that Stora Enso provides you a copy of any identifiable personal data processed by Stora Enso.
• To ask that Stora corrects any incorrect or deficient identifiable personal data Stora Enso holds concerning you.
• To ask that Stora Enso erases any such identifiable personal data concerning you that Stora Enso does not have a legal basis to hold.
• To ask that Stora Enso, instead of erasing data in the above situation, restricts further processing of the personal data while still keeping a copy.
• To ask that Stora Enso similarly restricts processing of the personal data while you await Stora Enso’s response to another lawful request by you that Stora Enso stops processing data concerning you.
• To object, on grounds relating to your particular situation, to Stora Enso having a sufficient legitimate interest to collect some specific identifiable personal data concerning you.
• To withdraw your consent given to Stora Enso at any time.

Should you wish to exercise any of these rights, you may contact Stora Enso using the contact details provided above. Stora Enso will respond as soon as it is possible, and in any event within a month of your request. If Stora Enso for some reason disagrees with your request, Stora Enso will state our reasons for doing so.

If you feel that Stora Enso has not processed your personal data in a lawful manner, you have a legal right to send a complaint to the data protection supervisor of the EU country where you live or work. You may also send the complaint to the data protection supervisor of the country where you consider that the illegal conduct took place.