Register
Skanska Oy's and its subsidiary companies' (”Skanska”) Contract Partner and Stakeholder register.
Controller
Skanska Oy and each subsidiary company as for its own Contract Partners and their Stakeholders (”Stakeholders”).
PL 114, 00101 HELSINKI
Nauvontie 18, 00280 HELSINKI
Contact person of the register
Jere Sundqvist
PL 114, 00101 HELSINKI
Nauvontie 18, 00280 HELSINKI
Description of the processing activities
In this privacy policy we explain, how and to what purposes we process personal data of our contract partners, stakeholders and visitors of www.skanska.fi -internet page.
You can also find information of how to use your rights as a data subject.
Processing personal data refers to all the processing activities carried out by Skanska and/or it´s partners such as collecting, processing and storing.
Data in the register is processed to enable cooperation with various Contract Partners and Stakeholders and to comply with contractual obligations.
We also process personal data for marketing purposes, targeted marketing, collecting feedback and improving Skanska´s business activities..
Based on personal data we collected we create profiles to be able to market and offer improved products and services to our customers’ needs.
Purpose and legal basis of the processing
Skanska uses this register´s data to:
- Comply with contractual obligations between Skanska and its Contract Partners and Stakeholders (customers, suppliers (goods / services), subcontractors and their employees, consultants, etc.) and to maintain and improve business relations between parties
- Pursue Skanska´s legitimate interest
- Manage Skanska´s statutory obligations
- On the basis of data subject's consen
Legitimate interest
The processing of data in the register is based on Skanska's legitimate interest to improve, market and offer its products and services and process personal data of its Contract Partners and Stakeholders regarding the following processing activities to:
- Maintain business relations and related marketing
- Collect feedback
- Improve Skanska business, customer service, sales, marketing and related profiling
- Optimize network visits on skanska.fi and target marketing
Consent
The Processing of data in the Register is based on a separate consent for the following processing activities:
- Drug tests
- Alcohol breath tests
- Review of salary payroll information
- Disclosure of Skanska eLearning course certificate to VastuuGroup Taitorekisteri service
- Photoghraphing of (a) data subject(s) and use of recordings (images, videos, voice recordings) according to a separate model agreement
The data subject has a right to withdraw his or her consent by contacting the contact person of the register or representative of Skanska to whom the consent was given to.
Sources of personal data
The data is collected mainly from Stakeholders' representatives and, where subcontractors are concerned, also from the employees themselves.
The data concerning qualification and orientation of employees is received from VastuGroup Oy services.
The employee basic data is also received from a public tax number register.
Information regarding commercial bans and neglecting commercial activities, authoritations to sign and positions of authority regarding a company is received from the Trade Register, Asiakastieto Oy, VastuuGroup Oy and other similar sources.
We use cookies on our website www.skanska.fi to collect different types of information. Some of this information is considered as personal data. This means, that we collect personal data also on www.skanska.fi through cookies.
More information about our web sites and cookies can be found on https://www.skanska.fi/sivuston-kayttoehdot/
The data collected for marketing or feedback purposes is optional and data subject may only give the data he / she volunteers.
Groups of data subjects
- Customers, i.e. buyers/ B2B customers of Skanska (current and former contact persons and representatives of companies)
- Subcontractors, i.e. suppliers of goods and services and other subcontractors (current and former contact persons / representatives of companies)
- Employees of subcontractors (current and former) including consultants
- Representatives of State and municipalsities, authorities, business partners, representatives of media, parties engaged in political activities, representatives of educational institutions, organizations, research institutes
- Users of skanska.fi -pages
Groups of personal data
Personal data is any information that is related to an identified or identifiable natural person. For example, name, image, social security number, address, appearance, customer number, address and IP address are all personal data.
Skanska stores data concerning the Stakeholders in the Register as follows:
- First and last name, and the company name
- Postal address of the company and the contact person
- Commercial information of the company
- Position (title) in the company
- Connections to other companies
- Email address
- Telephone number
- Images, videos and voice recordings stored according to a separate model agreement
- Cookies and IP-addresses collected during the visit to skanska.fi -site
- Other information provided to Skanska by data subject
The following data is stored concerning employees of the Stakeholders:
- First and last name
- Employer name
- Date of birth
- Tax number
- Nationality and home country
- Email address and phone number
- Job title
- Type of employment
- Access control information
- Data regarding orientation and qualifications
- Username and password for Skanska's project collaboration platform and other services
- Images, videos and voice recordings stored according to a separate model agreement
- Cookies and IP-addresses collected during the visit to skanska.fi -site
- Other information provided to Skanska by data subject
If the nationality of an employee working on a construction site is other than Finland, additionally the following data is stored:
- Passport information
- Legal basis of the right to work
- Certificate of a posted worker
- Name and telephone number of a representing person of the employer in Finland
- Other data that is legally required
We may also combine some of this data to perform processing activities such as targeted marketing.
Recipients or recipient groups of personal data
We may appoint external partners to perform tasks on our behalf, such as providing IT services or helping with marketing, administration of press releases, data analysis or statistics.
The performance of these services may mean that our partners, both within and outside the EU/EEA, are able to gain access to your personal data. Companies that process personal data on our behalf must always sign an agreement with us so that we are able to ensure a high level of protection of your personal data even with our partners.
The data is disclosed to VastuuGroup Oy based on data subjects’ consent.
Skanska may also disclose your personal data to third parties, for example the police or other public authorities, if it concerns criminal investigations or if we are otherwise required to disclose such data by law or public authority decision. Skanska will not disclose your personal data to any extent other than described in this section.
Skanska is not selling to data to any other parties.
International transfers and disclosures of personal data
Special safeguards are taken with regard to partners outside the EU/EEA, such as signing agreements that include the standardized model clauses for data transfers adopted by the EU Commission and which are available on the EU Commission’s website.
The controller transfers data of Contract Partners and Stakeholders within the Skanska Group, also outside the EU and EEA.
The collaboration platform Skanska offers to its partners and stakeholders is accessed by using Microsofts Multi-Factor-Authentication. The parameters related to access is processed in USA.
Also, the data processed within the digitally generated reservations and sales is transferred to USA to generate reservation and sales confirmation e-mails.
The data is transferred outside of EU- / EEA to USA for maintenance and support of Skanska´s Customer Relationship Management system.
Otherwise data will not be transffere or disclosed outside the EU and EEA unless the customer's or construction developer's fixed establishment is outside the EU or EEA territory.
Data subject's rights
According to GDPR legislation, the controller is responsible for processing your personal data. In a case you have questions or want to use any of you rights as a data subject, please reach out to a contact person of the register.
The data subject has the following rights to:
- Know that his or her data is collected and processed and the purposes of the processing
- Know what data has been collected about him or her and the period for which the data is stored
- Have possible inaccurate data corrected
- Have his or her data deleted, i.e. the right to be forgotten if there are no longer legal grounds for processing the personal data
- Restrict the processing of his or her personal data for specific purposes
- Oppose the use of his or her data on digital marketing or processing activities where legitimate interest is used as a legal basis of the processing.
- Transmit the data from one register to another, where applicable
- Receive information about a personal data breach directed towards the controller, if this poses a high risk to his or her rights and freedoms
- Claim compensation for damages caused to him or her by the personal data breach
- Lodge a complaint with a supervisory authority regarding the processing of his or her personal data
Data security
Skanska safeguards your personal data with a high level of security and has to this end taken appropriate technical and organizational security measures to protect your personal data from unauthorised access, amendment, dissemination or destruction
The register is maintained in electronic form. The manual material is stored in a locked and access controlled space.
The data stored in electronic form is protected by firewalls, usernames, passwords and other technical security measures.
The rights to access the data are predefined and limited. The destruction of data is executed appropriately and with due care
Data retention
Skanska retains personal data in accordance with the law.
The data will be stored only for as long as necessary or defined by the explicit and legitimate purposes of the processing, described in this Privacy Policy. The data concerning the Stakeholders' representatives will be stored mainly for as long as cooperation between Skanska and the Stakeholder exists.
Data concerning individual employees is stored mainly for 6 years after the completion of the construction site. Individual data may be stored for longer periods, if necessary, to comply with Skanska's contractual or statutory obligations.
Images, videos and voice recordings are stored for 5 years from the date produced.