Privacy Policy

Privacy notice of the contract partner and stakeholder group register of Skanska Oy and its subsidiaries.


Contract Partner and Stakeholder register of Skanska Oy and its subsidiary companies (”Skanska”).


Skanska Oy and each subsidiary company as for its own Contract Partners and their Stakeholders (”Stakeholders”).

Postal address: PL 114, 00101 HELSINKI
Visiting address: Nauvontie 18, 00280 HELSINKI
Email address: Contact

Contact person of the register 

Sanna Pimiä

PL 114, 00101 HELSINKI
Nauvontie 18, 00280 HELSINKI

Description of the processing activities   

Data in the Register is collected to enable cooperation with various Stakeholders and to comply with contractual obligations. 

Purpose and legal basis of the processing

The Controller uses the data of the Contract Register to enable Skanska and its Stakeholders (customers, suppliers (goods / services), subcontractors and their employees, consultants, etc.) to: 

  • Comply with contractual obligations
  • Pursue legitimate interest
  • Manage statutory obligations

Certain processing activities are performed on the basis of the data subject's consent.

Legitimate interest              

The processing of data in the Register is based on Skanska's legitimate interest to maintain a cooperative relationship with its Stakeholders regarding the following processing operations:

  • Processing of the personal data of Stakeholders' contact persons / representatives / employees
  • Maintaining and improving Stakeholder co-operation
  • Statistics, analytics and market / brand surveys 
  • Satisfaction surveys


The Processing of data in the Register is based on a separate consent for the following Processing Activities:

  • Drug tests
  • Alcohol breath tests 

The data subject has a right to withdraw his or her consent by contacting Skanska / the contact person of the Register.

Sources of personal data   

The data is collected mainly from Stakeholders' representatives and, in some cases, also from the employees themselves.

The data concerning qualification and orientation is received from Suomen Tilaajavastuu Oy and/or other similar service providers.

The personal data of Stakeholders' employees and data regarding bans on engaging in commercial activities, authoritations to sign and positions of authority regarding parties is received from the Trade Register and Asiakastieto Oy, and other similar sources.

Groups of data subjects 

  • Customers, i.e. buyers/ B2B customers of Skanska (current and former contact persons / representatives of companies or other organizations)
  • Subcontractors, i.e. suppliers of goods and services and other subcontractors (current and former contact persons / representatives of companies)
  • Employees of subcontractors (current and former) including consultants
  • Representatives of State and municipalsities, authorities, business partners, representatives of media, parties engaged in political activities, representatives of educational institutions, organizations, research institutes

Groups of personal data    

Skanska will store data concerning its Stakeholders in the Register as follows:

The following data, inter alia, may be stored regarding the contact persons/representatives of the Stakeholders:

  • First and last name, and the company
  • Postal address of the company
  • Position (title) in the company
  • Connections to other companies
  • Email address
  • Telephone number

The following data, inter alia, may be stored regarding employees of the Stakeholders:

  • First and last name, and the company
  • Postal address of the company
  • Date of birth
  • Address
  • Email address
  • Telephone number
  • Username and password data for Skanska's project workspace
  • Employment history with Skanska
  • National tax number
  • Data regarding orientation and qualifications

If the nationality of an employee working on a construction site is other than Finland, additionally the following data, inter alia, may be stored:

  • Nationality
  • Home State
  • Passport information
  • Legal basis of the right to work
  • Certificate of an expatriate / assigned worker
  • Name, telephone number and address in Finland of the representative of a foreign company

Recipients or recipient groups of personal data

Transfers and disclosures of data are subject to laws, regulations and official instructions. The data is transferred and disclosed to third parties and authorities to comply with statutory rights and obligations. The data is also transferred to third parties when necessary to carry out business activities.

The data is disclosed to a customer or a construction developer.

Transfers, disclosures and processing are covered by appropriate contracts.

The data will not be transferred or disclosed for the purposes of direct marketing or researches for genealogy purposes or to public registers.

International transfers and disclosures of personal data                    

The controller will disclose data of the Contract Partners within the Skanska Group and outside the EU and EEA on the basis of Skanska Group's intra-group data transfer agreement, which includes the standard contractual clauses approved by the European Commission.

Otherwise data will not be disclosed outside the EU and EEA unless the fixed establishment of the customer or construction developeris outside the EU or EEA territory.

The data in the Register may be disclosed to the authorities in accordance with the applicable law.

Data subject's rights

The data subject registered in Skanska's Contract Partner Register has the following rights to:

  • Know that his or her data is collected and processed and the purposes of the processing
  • Know what data has been collected about him or her and the period for which the data is stored
  • Have possible inaccurate data corrected
  • Have his or her data deleted, i.e. the right to be forgotten if there are no longer legal grounds for processing the personal data
  • Restrict the processing of his or her personal data for specific purposes
  • Transmit the data from one register to another, where applicable
  • Receive information about a personal data breach directed towards the controller, if this poses a high risk to his or her rights and freedoms
  • Claim compensation for damages caused to him or her by the personal data breach
  • Lodge a complaint with a supervisory authority regarding the processing of his or her personal data

The data subject may use any of these rights by contacting Skanska / the contact person of the Register.

Data security

The Register is maintained in electronic form. The manual material is stored in a locked and access controlled space.

The data stored in electronic form is protected by firewalls, usernames, passwords and other technical security measures.

The rights to access the data are predefined and limited. The destruction of data is executed appropriately and with due care.

Data retention                     

Skanska retains Personal Data in accordance with the law.

The data will be stored only for as long as necessary or defined by the explicit and legitimate purposes of the processing, described in this Privacy Notice. The data concerning the Stakeholders' representatives will be stored mainly for as long as cooperation between Skanska and the Stakeholder exists.

Data concerning individual employees is stored mainly for 6 years after the completion of the construction site. Individual data may be stored for longer periods, if necessary to comply with Skanska's contractual or statutory obligations.

Päivitetty: 1.7.2019