This notice provides you with information on how the Mondi Group, in particular the entity of the Mondi Group you are in contact with, („we“) will process your personal data.
We will process your personal data (as set out in point 2 below) for the following purposes:
We collect this data either directly from you, from our distribution partners, or your employer.
The provision of personal data is voluntary. However, if you do not provide your personal data, we may not be able to perform relevant business processes, including sales and distribution processes.
We process your personal data either (i) on the basis of our prevailing legitimate interest (according to Article 6(1)(f) GDPR), which lies in achieving the purposes as set out in point 1 above; or (ii) on the basis of the necessity for the performance of a contractual obligation or in order to take steps at your request prior to entering into a contract (Article 6(1)(b) GDPR) or (iii) on the basis of the necessity for compliance with legal obligations to which we are subject (Article 6(1)(c) GDPR).
We process the following persona data:
Accounting and payment information
Information on goods and/or services offered by supplier
For the purposes set out above, we will transfer some of your personal data to the following recipients:
Some of the recipients referred to above are located or process personal data outside of your country. The level of data protection in another country may not be equivalent to the one in your country. Therefore, we take measures to guarantee that all recipients provide an adequate level of data protection. We do this for example by entering into appropriate data transfer agreements based on Standard Contractual Clauses (2010/87/EC and/or 2004/915/EC). Such agreements are accessible upon request from [email protected]
Your personal data will only be kept for as long as we reasonably consider necessary for achieving the purposes set out in point 1 above and as is permissible under applicable laws. We will in any case retain your personal data for as long as there are statutory retention obligations or potential legal claims are not yet time-barred.
Under applicable law, you have, among others, the rights (under the conditions set out in applicable law): (i) to check whether and what kind of personal data we hold about you and to request copies of such data, (ii) to request correction, supplementation or deletion of your personal data that is inaccurate or processed in non-compliance with applicable requirements, and (iii) to request us to restrict the processing of your personal data, (iv) in certain circumstances, to object for legitimate reasons to the processing of your personal data, (v) to request data portability, (vi) to know the identities of third parties to which your personal data are transferred and (vii) to lodge a complaint with the competent authority.
Last updated on 27 November 2018.