Privacy Statement / The Verla Mill Museum

9.2.2023

Please read carefully this Privacy Statement for UPM-Kymmene Corporation’s (“UPM”) Verla website (“Privacy Statement”) applicable to this site and web services provided on the site before accessing and using these web services (“Services”). This Privacy Statement describes what types of personal data UPM may collect about visitors of its website and users of its Services, how it may be used and processed and how it is protected. As used in this Privacy Statement “personal data” means any information that is capable of identifying you as an individual either submitted by you when using the Services and/or obtained through alternative channels.

We may occasionally update this Privacy Statement to reflect changes in our Services and/or applicable legislation (any changes will be posted here).

This website and the Services may from time to time contain links to other websites which are beyond UPM’s control and are not covered by this Privacy Statement. This Privacy Statement only covers data processing carried out by UPM and not by any third parties operating any site or service incorporating or linking to our services. If you access other websites using the links provided, the operators of these sites may collect information from you which will be used in accordance with their privacy statement, which may differ from UPM’s.

UPM is committed to protecting and respecting your privacy. When processing any personal information provided by you through website, UPM will always comply with the applicable data protection legislation. UPM has endeavored to take appropriate action to protect personal information provided by you in order to prevent their unauthorized access and incorrect use.

Information we collect and using your personal data

We collect your personal data when you visit our website, register or subscribe for our Services, place an order, subscribe to our newsletters or other material or interact with us in any other way. UPM may also receive information about you from third parties with whom we have a business relationship.

The information we collect and process about you may include your name, address, phone number, email address, company name, business ID, invoicing address and any other information you may give us. We may also collect information about your use of our Services to enhance user experience and analyze the use of our site by using cookies and other technical data when you visit our site, such as IP address, browser type, the type of computer or other device, the time and date of user visits, time spent on website, site you come from to our website or other similar technical information. You may accept or decline cookies via cookie policy settings. You may also decline cookies by using your browser settings. If you choose to reject cookies, some parts of the site may not function properly.

For more information about cookies, please see https://privacy.upm.com/ .

Information we collect about you is to be used only for the above described purposes and for:

providing Services and fulfilling your requests;
to develop and improve Services;
to contact you in order to request feedback on our Services;
to contact you with information about new products and/or services of UPM and send you related electronic direct marketing communications, unless you have indicated that you do not wish to be contacted.

Data disclosures and transfers

We use third party service providers to enable us to provide the Services and administer related activities on our behalf. Such third parties are only allowed to process your personal data to the extent necessary for them to provide the service we have requested from them. UPM will ensure that your personal data is appropriately protected when shared within UPM and with external parties. When outsourcing services to any third parties, we ensure through contractual measures that personal data is processed appropriately and in compliance with all applicable laws. UPM will not disclose your personal information in any other circumstances, unless we have your consent or if disclosure is required by law.

In order to provide you Services (e.g. if we use third parties to provide Services) UPM may transfer your personal data also to countries located outside the European Economic Area (EEA). In transferring personal information outside the EEA, appropriate technical and organisational measures, such as EU Model Clauses, are taken to secure your personal data. The recipients of such information will be required to protect confidentiality and security of the personal data and may not use it for the benefit of their own business.

Protection and storage of personal data

UPM has taken appropriate technical and organizational measures to restrict access to your personal information and protect it against loss, accidental destruction, misuse and unlawful alteration. Only selected employees and third party contractors have access to personal data files. Access to personal information is restricted on a need-to-know basis to individuals who need to access the data for the purposes defined above.

UPM will store personal information as long as required for the purposes outlined above or as required to meet legal and/or regulatory requirements.

Access to your personal data and your other rights

You have right to access the personal data held by UPM about you (and request a copy of such personal data) by contacting us at the email address or address indicated below. You have, where necessary, the right to have the data amended, rectified, or erased, if it is incorrect, inaccurate, imprecise or outdated, or obsolete as regards the purpose of its processing. You may be requested to verify your identity, specify your request, and may be asked for more information about your request.

If your request for rectification of your personal data is refused, you will be given a written certificate to this effect (also stating the reasons for the refusal). In this case or if in your opinion your personal data has not been processed in compliance with applicable data protection laws, you may bring the matter to the attention of the relevant data protection authority.

When you register for the Services you are given the choice whether or not you wish to receive communications from UPM. You have the right to opt-out of receiving any electronic direct marketing communications from us by clicking the “unsubscribe” link provided in all marketing communications we send you, and choosing not to receive marketing communications from us in the future.

You may also request to restrict and object to the processing of your personal data, if it could compromise your rights to privacy. You have the right to restrict processing when you contest the accuracy of the data for the period its accuracy is verified, when the processing is unlawful, or when you have objected to the processing based on legitimate interests, until an overriding legitimate interest for processing is verified. In cases where processing of your personal data is based on consent, you have the right to withdraw your consent at any time.

How to contact us

If you have any questions about this Privacy Statement, processing of your personal data by UPM or you wish to access personal data we hold about you, you may contact:

UPM-Kymmene Corporation / Privacy
Alvar Aallon katu 1, P.O. Box 380
FI-00101 Helsinki, Finland
privacy@upm.com