Manual
Privacy Statement - Tata Steel Europe Ltd
Privacy Statement - Tata Steel Europe Ltd

Introduction

The Tata Steel Europe Ltd Group of companies ("Tata Steel", "we", "our" or "us") hold and process data on various individuals, including our customers, prospective customers, people who have contacted us with queries or complaints, website visitors and those receiving our emails ("you" or "your"). We take your data protection rights and our legal obligations seriously. Your Personal Information will be treated in a secure and confidential manner and only as set out below.

The following Fair Processing Notice describes the categories of Personal Information we may process, how your Personal Information may be processed and how your privacy is safeguarded in the course of our relationship with you. It is intended to comply with our obligations to provide you with information about Tata Steel's processing of your Personal Information under privacy laws. It does not form part of your contract with us.

Tata Steel Europe Limited ("TSE") will be the "controller" of your Personal Information. This means that TSE is responsible for deciding how your Personal Information is used, and for ensuring (in conjunction with other parties involved in the processing of your Personal Information, as explained in this Fair Processing Notice) that your Personal Information is handled in compliance with applicable data protection law.

If you have any questions regarding the processing of your Personal Information or if you believe your privacy rights have been violated, please see the "How to Contact Us" section below to find out how to get in touch.
 

Personal Information we collect

We process various categories of Personal Information, including the following:

1. Contact Information that you provide to us at events or exhibitions, for the purpose of making an enquiry or registering with us to access a download (including Name, Company, Job Title, Email, Address, Telephone & Mobile number);

2. Contact Information and any other information that you choose to provide to us when submitting a query or complaint, for example, if you report an environmental concern;

3. Information relating to any transactions carried out between you and us (whether on or in relation to our websites or otherwise), including information relating to any purchases you make of our goods or services;

4. Information about your computer and about your visits to and use of our websites (including your IP address, geographical location, browser type, referral source, length of visit, entry & exit points and number of page views); and

5. Contact Information that you provide to us for the purpose of subscribing to our website services, email notifications and/or newsletters (including opens, clicks, preference information, email and other contact information).

Certain additional information may be collected where this is necessary and permitted by local applicable laws.

Sensitive Personal Information

Tata Steel does not currently process any Special Category Personal Information.

To the extent permitted by applicable laws Tata Steel may collect and process a limited amount of information regarding criminal offences and proceedings (including information relating to allegations and suspicions of criminal offences).


How does Tata Steel collect this data?

Tata Steel collects and records your Personal Information from a variety of sources, but mainly directly from you, i.e. information you specifically provide to us, for example when you buy a product from us, subscribe to an email newsletter, or give us your business card at an event or exhibition.

Some personal data may also be collected automatically from monitoring your visits to our websites or your interaction with our emails (in each case with your consent where required by applicable law), for example, information about your browser and location, the length of time you spent on the site, and referral source, or whether you open our emails and if so whether you follow any links contained therein.

In these situations, data may be collected by Tata Steel or by a third party acting on our behalf (for example, Google Analytics, Google ReCaptcha). For more information about this type of automated data collection, please see our Cookie Policy. Where we ask you to provide Personal Information to us on a mandatory basis, we will inform you of this at the time of collection and in the event that particular information is required by the contract or statute this will be indicated. We will also explain the consequences of any failure to provide any mandatory information: for example, failure to provide us with your contact details will mean that we cannot contact you, and failure to provide us with your payment details will mean that we cannot complete a transaction.

Apart from Personal Information relating to yourself, you may also provide Tata Steel with Personal Information of third parties, such as alternate contact points within your organisation. Before you provide such third party Personal Information to Tata Steel you must first inform these third parties of any such data which you intend to provide to Tata Steel and of the processing to be carried out by Tata Steel, as detailed in this Fair Processing Notice.
 

What is the purpose and lawful basis for which data is processed?

Your Personal Information is collected and processed for various business purposes, in accordance with applicable laws. Data may occasionally be used for purposes not obvious to you where the circumstances warrant such use (e.g. in investigations).   

Where applicable data protection laws require us to process your Personal Information on the basis of a specific lawful justification, we generally process your Personal Information under one of the following bases:

  • the processing is necessary for the legitimate interests pursued by Tata Steel (being those purposes described in the section below), except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of Personal Information;
  • the processing is necessary for compliance with a legal obligation to which Tata Steel is subject; or
  • the processing is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into such a contract.

We may also rely on other bases (for example, where the processing is necessary in the performance of a task carried out in the public interest, or where the processing is necessary in order to protect your vital interests or those of another person, or where you have given your consent) on an exceptional basis, where none of the above are applicable.

We have identified the following purposes for processing Personal Information. These purposes each relate to a lawful basis for processing, as required under applicable law.  These purposes include:
 

No.

Purpose for processing

Lawful basis

a)       

To provide products or services which you have requested

Where there is a contract in place between you (as an individual) and Tata Steel, this processing is necessary to perform the contract between you and Tata Steel.

Where there is no contract in place, or where there is a contract but this is between Tata Steel and your employer (for example), this processing is necessary for the legitimate interests pursued by Tata Steel.

Tata Steel considers that it has a legitimate interest in providing our customers with products and services which they have requested, as this is central to our business.

b)       

To conduct business with you (including obtaining and disclosing credit and billing information)

Where there is a contract in place between you (as an individual) and Tata Steel, this processing is necessary to perform the contract between you and Tata Steel.

Where there is no contract in place, or where there is a contract but this is between Tata Steel and your employer (for example), this processing is necessary for the legitimate interests pursued by Tata Steel.

Tata Steel considers that it has a legitimate interest in conducting business with its customers, as this is central to our business: sales are what drives our revenues, helping us to preserve our business operations and grow our business.

c)        

To correspond with you regarding orders, process a credit card order, or deliver a product

Where there is a contract in place between you (as an individual) and Tata Steel, this processing is necessary to perform the contract between you and Tata Steel.

Where there is no contract in place, or where there is a contract but this is between Tata Steel and your employer (for example), this processing is necessary for the legitimate interests pursued by Tata Steel.

Tata Steel considers that it has a legitimate interest in conducting business with its customers, as this is central to our business: sales are what drives our revenues, helping us to preserve our business operations and grow our business

d)       

To perform credit fraud screening services for transactions between you and us and/or others

This processing is necessary for the legitimate interests pursued by Tata Steel.

Tata Steel considers that it has a legitimate interest in ensuring that it does not permit fraudulent transactions, to protect ourselves, our customers and third parties.

e)       

To provide you with information relating to our products and services which you have requested us to send to you, and to provide you with information on products and services which we think may be of interest to you or your organisation

This processing is necessary for the legitimate interests pursued by Tata Steel.

Tata Steel considers that it has a legitimate interest in ensuring that our customers are kept up to date with information about our products and services, as this helps us to preserve our business operations and grow our business.

However, where we are required by law to obtain your consent before sending you such information, we will rely upon such consent as our basis for processing.

In any case, if you tell us that you do not wish to receive such communications from us, we will respect your wishes.

f)        

For market research purposes, to allow us to better understand our customers' needs and to provide you with better products and services

This processing is necessary for the legitimate interests pursued by Tata Steel.

Tata Steel considers that it has a legitimate interest in ensuring that all of our customers receive the best possible experience, helping us to preserve our business operations and grow our business. Understanding our customers' needs is a vital part of ensuring a great customer experience.

g)       

To provide Customer Services, including responding to any queries we have received from you

This processing is necessary for the legitimate interests pursued by Tata Steel.

Tata Steel considers that it has a legitimate interest in ensuring that all of our customers receive the best possible experience, helping us to preserve our business operations and grow our business. Understanding our customers' needs is a vital part of ensuring a great customer experience.

h)       

To help us make our website easier to use, and to make the content more useful to you

This processing is necessary for the legitimate interests pursued by Tata Steel.

Tata Steel considers that it has a legitimate interest in continually improving our services in order to preserve our business operations and grow our business, and ensuring that you are provided with information of relevance to you. 

i)         

To improve your browsing experience by remembering your preferences and otherwise personalising our websites

This processing is necessary for the legitimate interests pursued by Tata Steel.

Tata Steel considers that it has a legitimate interest in ensuring that all   visitors receive the best possible experience, helping us to preserve our business operations and grow our business. Personalising our  visitors’ experience helps us with this goal.

However, where this activity is carried out using cookies which are not strictly necessary (see our cookie policy for further information) we will, where required by law, obtain your consent to such processing. Where such consent has been obtained, we will rely on this as our basis for processing. 

j)         

To provide you with information about technical issues, or to notify you in the event of an incident such as a data breach

This processing is necessary for the legitimate interests pursued by Tata Steel.

Tata Steel considers that it has a legitimate interest in updating its customers on any incidents that may affect them, in order to maintain a good relationship with our customers.

Tata Steel may also in certain situations have a legal obligation to provide you with such information.

k)       

Other purposes permitted by applicable laws, including legitimate interests pursued by Tata Steel where these are not overridden by the interests or fundamental rights and freedoms of staff

 

 

Processing data relating to criminal convictions and offences

Personal Information relating to criminal convictions and offences will only be processed where authorised by applicable laws.

For example, we may, to the extent permitted by applicable law, carry out fraud checks on your transactions with us, and information about an allegation of a criminal offence or conviction arising during your relationship with Tata Steel may be processed where required or authorised by applicable law, such as where we have a legal or regulatory requirement to report an offence.

 

Retention of Personal Information

Tata Steel endeavours to ensure that Personal Information is kept as current as possible and that irrelevant or excessive data is deleted or made anonymous as soon as reasonably practicable. However, some Personal Information may be retained for varying time periods in order to comply with legal and regulatory obligations and for other legitimate business reasons.

We will generally retain your Personal Information only so long as it is required for purposes for which it was collected. This will usually be the period of your relationship with us plus the length of any applicable statutory limitation period following the end of such relationship, although some data may need to be kept for longer. For example, we may keep some specific types of data such as transactional records and product guarantees for different periods of time, as required by applicable law.

We maintain a records retention policy which we apply to records in our care. Where your Personal Information is no longer required we will ensure it is either securely deleted or stored in a way which means it will no longer be used by the business.

 

Access to data

We will never sell or rent information about you, and we will ensure that our employees, suppliers and subcontractors will only be able to access information about you if and when it is part of their job, and only for the purposes set out in this privacy policy.

Within Tata Steel, your Personal Information can be accessed by or may be disclosed internally on a need-to-know basis to:

  • local, regional and executive management responsible for managing or making decisions in connection with your relationship with Tata Steel (including, without limitation, staff from Legal and IT);
  • system administrators; and
  • where necessary for the performance of specific tasks, by staff in Tata Steel teams such as Finance, Marketing and IT, for example, marketing insight may be used to provide a more personalised customer experience.

Your Personal Information may also be accessed by third parties with whom we work together with their associated companies and sub-contractors for providing us with services, such as hosting, supporting and maintaining the framework of our information systems.  Personal Information may also be shared with certain interconnecting systems such as website content management systems. Data contained in such systems may be accessible by providers of those systems, their associated companies and sub-contractors.

Further examples of third parties with whom your data will be shared include tax authorities, regulatory authorities, Tata Steel's insurers, IT administrators, lawyers, auditors, investors, consultants and other professional advisors, and service providers such as our email service providers and web analytics companies. Tata Steel expects such third parties to process any data disclosed to them in accordance with applicable law, including with respect to data confidentiality and security.

Where these third parties act as a "data processor" (for example, our email service provider ) they carry out their tasks on our behalf and upon our instructions for the above mentioned purposes. In this case your Personal Information will only be disclosed to these parties to the extent necessary to provide the required services. 

In addition, we may share Personal Information about you:

  • to the extent that we are required to do so by law;
  • in connection with any legal proceedings or prospective legal proceedings, including in order to establish, exercise or defend our legal rights; and
  • to the purchaser (or prospective purchaser) and relevant professional advisers of any business or asset which we are (or are contemplating) selling.
 

Security of data

Tata Steel is committed to protecting the security of the Personal Information you share with us. In support of this commitment, we have implemented appropriate technical, physical and organisational measures to ensure a level of security appropriate to the risk. For example, amongst other measures, we maintain a security policy and store all of your Personal Information on our secure servers.

However, please do remember that information transmission over the internet is inherently insecure, and we cannot guarantee the security of information sent over the internet.
 

Transfer of Personal Information

To provide you with the best services possible, we work with companies around the world. This means that, from time to time your Personal Information will be transferred to associated companies of Tata Steel to process for the purposes described in this Fair Processing Notice, and may also be transferred to third parties, as set out above.

These associated companies and third parties may be located within the European Union and elsewhere in the world, including India, USA, Canada, the Middle East, China, South Africa, Mexico, Hong Kong, Japan, Singapore, Thailand, Turkey, UAE and Brazil, and other countries with more lenient data protection laws than those of the European Union.  As there are a large number of such companies, we cannot list them all here, but whether they are based inside or outside of the European Union, we will only work with companies who we trust to keep your information safe.

Where required by applicable data protection laws, Tata Steel will ensure that appropriate or suitable safeguards are in place to protect your Personal Information and that transfer of your Personal Information is in compliance with applicable data protection laws. You can obtain a copy of the relevant data safeguard where this is documented by contacting us (please see the "How to Contact Us" section below) although some details may be redacted for confidentiality reasons.
 

Third Party Websites

We sometimes provide links to external websites: these sites may be industry related or may be sites which we believe the user may find helpful. Although we choose these links very carefully, they are selected for the user’s convenience only and do not constitute endorsement or approval by Tata Steel, or any other company in the Tata Steel Group of companies, of the content, privacy policies or practices of that site nor any products or services which may be offered through those sites.
 

Your rights

Right to access, correct and delete your Personal Information

Tata Steel aims to ensure that all Personal Information it holds is correct. If the Personal Information which we hold about you needs to be corrected or updated, please let us know. For details on how to contact us, please see the "How to Contact Us" section below.

You have the right to request access to any of your Personal Information that Tata Steel may hold, and to request correction of any inaccurate data relating to you. You furthermore have the right to request deletion of any irrelevant data we hold about you.

From 25 May 2018, you also have the following additional rights:

  • Data portability - where we are relying upon your consent or the fact that the processing is necessary for the performance of a contract to which you are party as the legal basis for processing, and that Personal Information is processed by automatic means, you have the right to receive all such Personal Information which you have provided to Tata Steel in a structured, commonly used and machine-readable format, and also to require us to transmit it to another controller where this is technically feasible.
  • Right to restriction of processing - you have the right to restrict our processing of your Personal Information where:
    • you contest the accuracy of the Personal Information until we have taken sufficient steps to correct or verify its accuracy;
    • where the processing is unlawful but you do not want us to erase the data;
    • where we no longer need the Personal Information for the purposes of the processing, but you require them for the establishment, exercise or defence of legal claims; or
    • where you have objected to processing justified on legitimate interest grounds (see below) pending verification as to whether Tata Steel has compelling legitimate grounds to continue processing.

Where Personal Information is subjected to such restrictions we will only process it with your consent or for the establishment, exercise or defence of legal claims.

  • Right to withdraw consent - where we are relying on your consent to process data, you have the right to withdraw such consent at any time. You can do this by either contacting us (see the "How to Contact Us" sectio below), or in some cases by using a specific withdrawal mechanism, such as deleting cookies (please see our Cookie Policy for further information). 
  • Right to object to processing justified on legitimate interest grounds - where we are relying upon legitimate interest to process data, then you have the right to object to that processing. If you object, we must stop that processing unless we can either demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms or where we need to process the data for the establishment, exercise or defence of legal claims. Where we rely upon legitimate interest as a basis for processing we believe that we can demonstrate such compelling legitimate grounds, but we will consider each case on an individual basis.

You also have the right to lodge a complaint with a supervisory authority, in particular in your country of residence, if you consider that the processing of your Personal Information infringes applicable law.

For further information regarding your rights, or to exercise any of your rights, please contact us using the details at the "How to Contact Us" section below.

 

Additional Fair Processing Notices

We may undertake certain processing of Personal Information which is subject to additional Fair Processing Notices and we shall bring these to your attention where they engage.
 

Notice of changes

Tata Steel may change or update this Fair Processing Notice at any time: we will post the new version on our website.  Please check this page to ensure that you are up to date with any changes.

Should we make any material changes to this Fair Processing Notice, you will be informed of these changes or made aware that we have updated the Fair Processing Notice so that you always know which information we process and how we use this information.

This Fair Processing Notice was last updated and reviewed on 23 May 2018.
 

How to Contact Us

If you have any questions or complaints about this privacy policy or our treatment of your Personal Information, or would like to exercise any of your rights, please contact us.

You can get in touch with us by post, email, telephone, or by completing our online contact form.
 

Write to us

Head of Data Privacy

Tata Steel Europe Limited
18 Grosvenor Place 
London, SW1X 7HS
United Kingdom

 

Email us

dataprivacy@tatasteeleurope.com (Please include "Data Privacy" in the subject line)

 

Phone us

+44 (0) 20 7717 4444


Contact form

Complete our online contact form here

Remember that you can unsubscribe from our marketing emails at any time by using the 'unsubscribe' link at the bottom of each email from us. However, if you believe you have received an unwanted, unsolicited email sent from TSE or which claims to be sent from us, please forward a copy of that email with your comments to feedback@tatasteeleurope.com.

 

External
Cookies
Manual
Privacy Statement - Tata Steel Netherlands
Privacy Statement - Tata Steel Netherlands

TATA STEEL NETHERLANDS – PRIVACY STATEMENT

 

Introduction

This privacy statement is intended to explain in a simple and clear way which personal data we collect from you and how we process it. In this privacy statement, "Tata Steel Netherlands", "we", "us" or "our" means British Steel Nederland International B.V., Tata Steel Nederland B.V. and all its affiliated subsidiaries.

We retain and process data of various individuals, including our customers, potential customers, individuals who have contacted us with a query or complaint, visitors to our website, individuals who receive our emails and visitors to our premises ("you" or "your"). We take your right to privacy and our statutory obligations in this regard seriously. Your personal data will be kept secure and confidential and will only be processed as set out in this privacy statement.

This privacy statement describes the categories of personal data we process, how your personal data will be processed and how your privacy will be safeguarded during our relationship with you. This statement is only intended to inform you about how Tata Steel Netherlands processes your personal data and does not form part of any agreement with us.

The Tata Steel Netherlands company responsible for processing your personal data is the Tata Steel Netherlands company with whom you have entered into a contract, with whom you are in contact or who you visit, from whom you receive a newsletter or who is responsible for the website you visit. If you have a question about which Tata Steel Netherlands company is responsible for processing your personal data, please send an email to: dataprivacytsn@tatasteeleurope.com.

 

What personal data does Tata Steel collect?

With a view to providing our products and services, we process various categories of personal data, including:

  1. Contact details. Your name, address, email address and other contact details that you provide to us, for example at events, at trade fairs, when you download or otherwise wish to receive marketing and other information from us (including newsletters) or when you lodge a complaint with us or ask us a question, for example in relation to the environment;
  2. Data about your profession and position (including the industry in which you operate);
  3. Data about your transactions with us (through our websites or otherwise), including data about products or services you purchase from us;
  4. Data about your business or personal interests, as well as questions and complaints and other topics you share with us;
  5. Financial data provided to us (on request or voluntarily) that can be linked to you as a customer, employee or individual, such as bank details or billing information;
  6. Data about your use of our products and services. We collect data relating to your use of our products and services, such as the purchases you make (either online or as part of the sales process), purchase details (type of purchase, method of payment, etc.);
  7. Video footage and visit data. When you enter our premises, we record your visit and use surveillance cameras (CCTV). Video footage may also be taken of you during events and exhibitions we attend and where we make video recordings;
  8. Automatically collected data. While visiting our websites, we automatically collect data through your browser or your device by using cookies and other technologies to track visitors on the website and to collect information about your use of our website. Read our cookie policy if you would like to know more about this;
  9. Other personal data. This includes any personal data that you provide to us in the course of your (contractual) relationship with us, which is both given up voluntarily and on request (including data on satisfaction surveys), as well as personal data that we process in the context of any claims and demands.

If necessary and to the extent permitted by law, we may collect additional data. 

Special categories of personal data

We only process special categories of personal data in very exceptional cases, such as unsolicited information you give us about your health.

To the extent permitted by law, we process a limited amount of data relating to criminal offences and proceedings, information on accusations and suspicions of criminal offences, or fraudulent and unlawful acts that we identify (e.g. on our premises or when making a purchase).

 

How do we collect this data?

We collect and process personal data originating from various sources, but mainly directly from you. This is data that you specifically provide to us, for example when you purchase a product from us, subscribe or unsubscribe to a newsletter by email or provide us with your contact details during an event or trade fair, or, for example, when you contact us by email with questions.

We will inform you when providing your personal data is mandatory and when we need specific data from you in connection with an agreement, the conclusion of an agreement or otherwise. We will also inform you of the consequences of not providing the required data: for example, failure to provide contact details means that we cannot contact you (e.g. to answer your questions) and without your payment details we cannot conduct transactions with you. 

In addition to personal data about yourself, you may also provide us with personal data about others, for example alternative contacts within your organisation. Before you provide such personal data to us, you must inform those individuals of the data you intend to provide to us and of the processing of that data by us, as explained in this privacy statement.

 

What is the purpose and legal basis of data processing?

Your personal data are collected and processed in accordance with applicable laws, such as privacy laws, for various business purposes.

We process your personal data only in accordance with one of the following codified justifications.

  1. The processing is necessary for the performance of an agreement to which you are a party or to take steps at your request to enter into such an agreement. Based on this basis, we process personal data for the following purposes:

 

  • Purchase of products/services. When you purchase products or services from us, we process your personal data (such as contact details, details of products and services purchased and financial data) in order to financially or otherwise process your order and deliver the products and perform services, to check creditworthiness, to report the status of your order and to contact you about the transaction.

 

  • Answering questions, etc. We may process your personal data to answer your questions and fulfil your requests, when you contact us or otherwise (for example, when you send us questions, suggestions, compliments or complaints, to provide customer support, or when you request other information about our products and services). In doing so, we may process your name, title (business or private), contact details (including your email address, telephone number, name of your company) and any other information you provide to us.

 

  1. The processing is necessary for the protection of our legitimate interests, unless your interests or fundamental rights and freedoms for which personal data must be protected outweigh our interests. On this basis, we process personal data for the following purposes:

 

  • Marketing/surveys. If you are an existing customer, and have not objected to this, we process personal data to approach you for marketing purposes and to keep you informed about our products, services, events, trade shows, etc. We may also ask you to participate in customer satisfaction surveys.

 

  • Improving products, services and customer relationship. We may use your personal data to analyse and improve the quality of our products and services, as well as to assist and better understand you as a customer (customer relationship optimisation). We assess what may be of interest to you, measure and rate the effectiveness of ads we show to you and others, which enables us to place and send relevant advertisements. In addition, based on your historical use of our products and services, we send you targeted offers, advertisements or other marketing materials tailored to your personal preferences and experiences.

 

  • Security. We process personal data using cameras on our premises (CCTV), as well as by monitoring transaction data, all to protect our rights, privacy, security or property, and/or those of you or others (including our employees).

 

  • Business operations. We may process personal data to conduct business transactions, such as a merger, sale, reorganisation or transfer of any of the Tata Steel Netherlands companies (or assets thereof), as well as acquisitions, bankruptcies or similar events.

 

  • Establishing, exercising or substantiating a legal claim. We process your data if you submit a claim to us. It may also be the case that we want to file a claim with you. In that case too, we process your data. We do not keep this data longer than necessary (until the claim is settled).
  • Other purposes. We may process personal data for other legitimate, business purposes permitted in accordance with applicable law.

 

  1. Processing takes place on the basis of your consent. On this basis, we process personal data for the following purpose:
  • We may use your personal data to send you marketing communications (such as newsletters, offers, news about products and services) by email or other electronic means, by telephone or by post (such as leaflets). We do so when you have given us your consent to do so. You can withdraw your consent at any time (see below "Your rights").

 

  1. The processing is necessary to comply with a legal obligation. On this basis, we process personal data for the following purposes:
  • Personal data may be used by us to comply with legal obligations, such as keeping accurate business records, complying with lawful requests from government bodies and public authorities, as well as complying with applicable laws, regulations and other legal obligations.

 

  1. The protection is necessary to protect the vital interests of you or other natural persons. On this basis, we process personal data for the following purposes:
  • We process your data if it is essential for your life or health or that of another person, for example for urgent medical reasons. We will only process your data for the vital interests of another natural person if we cannot base it on any of the other stated purposes.

 

Retention of personal data

We aim to update personal data as much as possible and delete or anonymise unnecessary data as soon as reasonably possible. However, some personal data may be retained to comply with statutory requirements or for other business interests.

We will not retain your personal data for longer than necessary for the purposes for which it was collected. This will usually be for the duration of your relationship with us, plus the length of a statutory defined period after the end of that relationship. However, some data may need to be retained longer. For example, we retain certain specific data, such as transaction data and product warranties, for different periods as prescribed by applicable law.

We apply a data retention policy. If your personal data is no longer needed, we will ensure that it is securely deleted or anonymised.

 

Access to data

We will ensure that our employees, suppliers and subcontractors only have access to your data when it is part of their duties, and then only for the purposes described in this privacy statement.

Within Tata Steel Netherlands, your personal data, as described in this privacy statement, will be shared between the responsible Tata Steel Netherlands companies for internal administrative purposes, management purposes, analytical purposes and other business-related purposes.

Your personal data are also accessible by third parties with whom we work, as well as their affiliated companies and subcontractors. They provide us with services such as hosting, support and maintenance of overarching information systems. Personal data is also exchanged with certain interconnected systems, such as content management systems for websites. Data contained in such systems may be accessible by the providers of those systems, their affiliated companies and subcontractors.

Other examples of third parties with whom your data is shared include Tata Steel Netherlands' insurers, IT administrators, lawyers, accountants, investors, consultants and other professional advisers, and service providers such as our email service providers and web analytics companies. Tata Steel Netherlands expects such third parties to process any data provided to them in accordance with applicable privacy law, including the security and confidentiality prescribed therein, and other contractual arrangements agreed with us.

Where a third party acts as a "data processor" (e.g., our email service provider), it will perform tasks on our behalf and in accordance with our instructions in relation to the purposes set out in this privacy statement. Your personal data will be shared with these parties only to the extent necessary for the relevant service and will not be used by these parties for their own purposes. 

In addition, your personal data may be shared with third parties:

  • to the extent required by law (e.g. to the Tax and Customs Administration or regulators);
  • in connection with possible or already ongoing legal proceedings, in order to establish, exercise or substantiate our statutory rights;
  • in connection with the possible or actual sale of companies or assets. In that case, your data will be shared with the potential or actual buyer and relevant professional advisers; or
  • with your explicit consent.

 

Data protection

Tata Steel Netherlands is responsible for the security of the personal data you provide to us. We have taken technical, physical and organisational measures to ensure an appropriate level of security.

However, sending information via the Internet inevitably entails security risks. Therefore, we cannot guarantee its security in this respect.

 

Transfer of personal data

If the Tata Steel Netherlands company responsible for processing your personal data is based within the European Union, in most cases your personal data will be processed within the European Union. Keep in mind, however, that Tata Steel Netherlands also has companies and uses external service providers based outside the European Union. As a result, it may be necessary for us to process your personal data outside the European Union. In such cases, we will put in place adequate safeguards (and, where necessary, additional measures) to ensure that your personal data is afforded a level of protection equivalent to that guaranteed within the European Union, such as entering into European Commission-approved standard contractual clauses with the recipients of your data.

Where the Tata Steel Netherlands company responsible for processing your personal data is located outside the European Union, in all cases of international transfer of personal data, we will put in place adequate safeguards to comply with applicable laws of transfer and to ensure the security of your personal data.

Where documented, you may request the measures taken by us to protect your personal data and to ensure the correct transfer of your personal data by sending an email to dataprivacytsn@tatasteeleurope.com. However, certain details may have been omitted for confidentiality reasons.

 

Third-party websites

Occasionally, we post links to external websites that are relevant to our industry or that we believe are useful to the user. Although we select these links very carefully, they are provided solely for the convenience of the user, and we, or any other Tata Steel Netherlands Group company, do not guarantee the content and privacy policies of the relevant site, nor the products or services offered to that effect.

 

Your rights

Right to access, correct and delete your personal data

Tata Steel Netherlands aims to ensure that all personal data processed by us is correct. We therefore ask you to inform us if your personal data needs to be amended through your usual point of contact within Tata Steel Netherlands or via the contact details at the bottom of this privacy statement.

You have the right to access all personal data that Tata Steel Netherlands retains from you and you can request us to make a correction if your data is not correct or not correct any longer. In addition, you have the right to request us to delete unnecessary data that we retain from you.

In addition, you have the following rights:

  • Rights to data portability – if we use your consent or the fact that processing is necessary for the performance of an agreement as the legal basis for processing and if the personal data is processed by automated means, you have the right to request all the personal data you have provided to Tata Steel Netherlands in a structured, common and machine-readable form and also to request us to transfer this data to another data controller if this is technically possible.
  • Right to restrict processing – you have the right to restrict the processing of your personal data if:
    • you contest the accuracy of the personal data for a period that allows us to verify the accuracy of the data;
    • if the processing is unlawful, but you do not want us to delete the data;
    • if we no longer need the personal data, but you need them for the establishment, exercise or defence of legal claims; or
    • you have objected to processing based on the protection of our legitimate interests (see below) pending the answer to whether your objection is well-founded.

If personal data is subject to such restrictions, we will only process it with your consent, for the establishment, exercise or substantiation of a legal claim or to protect the rights of another (legal) person.

  • Right to withdraw your consent - if we use your consent as the legal basis for processing your data, you have the right to withdraw that consent at any time. You can do so by contacting us at the email address below, or in some cases by using a specific withdrawal mechanism, such as for deletion of cookies (see our cookie policy for more information). 
  • Right to object to processing based on legitimate interests – if we use the pursuit of our legitimate interests as the legal basis for processing your data, you have the right to object to such processing. If you object, we must stop such processing unless we invoke compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, or if we need to process the data for the establishment, exercise or vindication of legal claims. If we use a legitimate interest as a ground for processing, we are satisfied that we can demonstrate such compelling justification for processing, but we will assess each case individually.

You also have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not carried out in accordance with applicable privacy laws.

For more information regarding your rights, or if you wish to exercise them, contact us by sending an email to dataprivacytsn@tatasteeleurope.com.

 

Other privacy statements

We may process data to which a different privacy statement applies. In that case, we will inform you accordingly.

 

Changes

We may change or update this privacy statement at any time. In that case, we will place the new version on our website. You are therefore advised to consult this page regularly so you are always aware of the most recent changes.

This privacy statement was last updated and checked on 12 May 2023.

 

Contacting us

If you have any questions or complaints about this privacy statement or the way we handle your personal data, if you want to exercise your rights or if you request an overview of which Tata Steel Netherlands company is responsible for processing your personal data, please contact us. You can do so by post and email.

Post

You can write to:

Legal Compliance Department

Tata Steel Netherlands

Wenckebachstraat 1

1951 JZ Velsen-Noord

Email:

dataprivacytsn@tatasteeleurope.com