Privacy statement

KONE Corporation and its employees, partners, subsidiaries and affiliates (“KONE”) are committed to protecting your privacy and personal data. KONE processes your personal data in accordance with applicable data privacy laws. If you have issues viewing this page or would like this privacy statement in a different format, please contact us at https://www.kone.com/en/contact.aspx and select the “Personal Data Enquiry” option.

This privacy statement provides you comprehensive information about the personal data processing activities conducted by KONE (herein, the “Privacy Statement”). Moreover, the different rights you have as a data subject may also vary from by jurisdiction depending on the applicable privacy laws.

This privacy statement is divided into different sections that relate to the different logical personal data processing functions in KONE. At the end of this privacy statement, you will receive information of the rights you have as a data subject.

1. KONE Webpages and Internet Services
   
2. KONE’s Customer Relationship Management Databases
   
3. KONE’s Supplier and Subcontractor Data
   
4. Data Subjects’ Rights
   
5. Protection of Data Transmitted over the Internet
   
6. Updates to the Privacy Statement

From data subject’s perspective, the local KONE group company with whom the data subject is or has been in contact with or otherwise has the closest relationship with, is the data controller of the respective data subject’s personal data.

Many of the tools and processes used in KONE are global and made available to local KONE entities in a centralized manner by KONE Corporation.

In all data protection related matters, data subjects, including those located or residing in Quebec, may contact KONE, regardless of the local KONE group company or localized relationship, by using the following contact information:

KONE Building
Keilasatama 3, 02150 Espoo, Finland
Telephone: +358 204 751
Contact person: Global Legal, Data Protection Counsel, personaldatarequest@kone.com

All requests that relate to use of data subject’s rights can be sent to KONE by using the contact form available on the kone.com webpage at http://www.kone.com/en/contact.aspx (select option “Personal Data Enquiry”), regardless of the data subject’s country.

This section provides you with general information on the processing of your personal data by KONE related to this website and the other internet services of KONE (the “Site”). KONE will process your personal data collected through the Site in accordance with this Privacy Statement and applicable laws. Please read this Privacy Statement carefully if you plan to browse or otherwise use the Site.

When visiting the Site, certain technical and other information is automatically sent by your computer to us (i.e. IP address, the type of your browser and the source of your visit). We also collect information about your website usage information by using cookies. Please see the Cookies section of this Privacy Statement for further information.

On certain parts of the Site, you may be asked to provide personal data and/or sign up for the service to access a service that you have requested. Once you register on the Site or have otherwise been assigned a specific identification code to access your accounts, we may request that you provide certain information.

The purpose of KONE’s processing of personal data collected through the Site is to ensure an efficient and secure use of the Site and to;

• develop the Site for a better quality and broader scope of services;
  
• provide customized services and content recognizing your specific needs and interests;
  
• improve our services to you;
  
• contact you;
  
• conduct research and collect statistics (e.g. what sections of our Site the users visit and how much time they spend on the Site).

KONE strives to produce cost efficient services without you having to register separately to each of the different services provided on the Site.

When required by applicable law, KONE will request data subject’s consent for personal data processing relating to the abovementioned purposes. In all other circumstances, KONE’s processing of the personal data in this section is based on our legitimate interests or other similar basis as outlined in applicable data privacy laws.

The personal data is received directly from the data subject or obtained in connection with their use of the Site, including first and third party cookies as described below.

The personal data will be stored as long as needed for the purposes it has been collected for or as defined in our retention schedules. After that, the personal data will be effectively deleted or made anonymous.

From time to time KONE may place information, commonly known as “cookies”, on your computer or mobile device to allow us to identify you, provided that you have consented to the placing of cookies on your computer or device by opting in function. Cookies give KONE information on how and when you have used the Site and help KONE to improve the Site for a better service. Cookies are today commonly used on many web sites. If you do not wish to receive cookies, you may opt-out via our cookie preference center. Kindly note, that disabling cookies may prevent you from using certain services on the Site.

The Site may use Google AdWords Remarketing to display advertisements based on your recent visit on the Site (“Remarketing”). Remarketing at the Site is used for building awareness of KONE solutions and services. The information regarding the visits is collected by placing a third-party cookie on your computer. You may opt-out from Remarketing related to use of the Site through KONE cookie setting tool. You may use more comprehensive opt-out options relating to your use of third party websites through visiting the Network Advertising Initiative website, by modifying the remarketing ad settings on the Google Ad Settings site or by disabling cookies.

Opt-out for Google AdWords Remarketing »

KONE uses website analytics, such as Adobe Analytics and Google Analytics, to gather statistics about the users of the Site with the aim to improve the contents of the Site. Normally this data is anonymous, however, if you have identified yourself when downloading content from the website, logged into KONE online service or entered the website through a link in an e-mail, we may be able to identify the analytics data collected about your use of the Site. You may use the opt-out functions of KONE cookie setting tool to disable KONE from tracking your visits to the Site. You need to repeat this action when you use different computers and/or browsers to visit KONE’s websites. To opt-out from Google Analytics, you may download Google Analytics Opt-out Browser Add-on.

Opt-out for Google analytics »

Kone provides personal data to our affiliates, subsidiaries, and subcontractors that assist KONE in providing services to you, which include technical support, payment processors, or other third parties with your consent. In some circumstances, we may disclose personal data in response to subpoenas, warrants, or other court orders as part of a legal process or as is required to follow applicable laws. KONE may disclose personal data to establish or defend our legal rights, including to take action regarding illegal activities, suspected fraud, or a violation of our policies, including others. Due to the technical and practical requirements some of the personal data may be processed by subcontractors located outside your jurisdiction. However, such subcontractors have agreed to the data processing standards of KONE and KONE has adhered to applicable law regarding cross border transfers of personal data.

KONE may provide aggregate statistics about its customers, sales, traffic patterns, and other related Site information to reputable third parties, but these statistics will include no personal data.

Like many other companies, KONE uses customer relationship management (“CRM”) databases to manage and track our sales and marketing activities. KONE’s CRM databases include personal data of our customers’, potential customers’ and other companies’ representatives with whom KONE has a business relationship or wants to develop one. KONE’s CRM databases may also include personal data of KONE’s customers’ customers or end-users who contact KONE relating to elevators, escalators or other equipment under KONE maintenance as well as personal data related to external stakeholders KONE is interested to contact and provide with general information of KONE and its business (e.g. media representatives, economic influencers).

This section provides more information about KONE’s personal data processing relating to CRM.

Following information is collected and processed in connection with CRM:

• Name
  
• Title
  
• e-mail
  
• mobile phone number
  
• fixed phone
  
• fax number
  
• Address
  
• Language
  
• Possible other information relevant for the business relationship

Such personal information is later in this Section 2 of the privacy statement referred to as “personal data” and the individuals, whose personal data is processed, are referred to as “data subjects”.

The purpose why KONE processes personal data is to facilitate KONE’s business, support sales activities, manage deliveries, maintenance services and invoicing, contacting customers for contract management and marketing purposes and otherwise maintaining the customer relationship. KONE may also use personal data to handle incidents and claims as well as provide assistance as requested by customer.

KONE may contact the data subjects for conducting customer loyalty surveys. In order to improve its services KONE would like to receive the survey responses with the customer contact person’s name. The processing of your name and any other personal data in connection with customer loyalty surveys is based on your consent. All answers and data collected in connection with such surveys will be classified as confidential within KONE and adequate security measures are employed when handling and transferring the data.

Processing of the personal data is necessary for the performance of sales contracts to which the customer company is a party. Further, processing of personal data is necessary for the legitimate interests pursued by KONE relating to its regular business purposes. When required by applicable laws, KONE will request data subject’s consent for personal data processing.

The personal data has been received from the customers or obtained in connection with their use of KONE’s products and services. Personal data may also originate from KONE’s representatives based on their business interactions with the data subjects. In certain cases KONE may collect personal data from public registers and other reliable external sources.

The personal data will be stored as long as needed for the above said purposes. After that, the personal data will be effectively deleted or made anonymous.

Kone provides personal data to our affiliates, subsidiaries, and subcontractors that assist KONE in providing services to you, which include technical support, payment processors, or other third parties with your consent. In some circumstances, we may disclose personal data in response to subpoenas, warrants, or other court orders as part of a legal process or as is required to follow applicable laws. KONE may disclose personal data to establish or defend our legal rights, including to take action regarding illegal activities, suspected fraud, or a violation of our policies, including others. KONE ensures that such third parties are always bound by contracts, which sufficiently address data protection and confidentiality requirements.

Due to technical and practical requirements, the personal data may also be processed outside of your jurisdiction. KONE ensures that there is a legal basis for such transfers and KONE has adhered to applicable law regarding cross border transfers of personal data.

KONE Corporation and its employees, partners, subsidiaries and affiliates (together “KONE”) use solutions and database technology to manage the contact data of KONE’s suppliers’ and subcontractors’ representatives. This privacy statement provides more information about KONE’s personal data processing relating to such sourcing and purchasing activities (“Supplier Databases”).

Following information is collected and processed in connection with Supplier Databases:

• Name
  
• Title
  
• e-mail
  
• phone number
  
• Address
  
• Invoicing Information
  
• Possible other information relevant for the business relationship
  
• Subcontractors’ employees’ name, date of birth, contact information, employment information, qualifications and certifications, other personal information as required by KONE’s customers to ensure proper access control and safety for construction sites

Such personal information is later in this section 3 privacy statement referred to as “personal data” and the individuals, whose personal data is processed, are referred to as “data subjects”.

The purpose why KONE processes personal data is to facilitate KONE’s sourcing, purchasing, invoice handling and contract management activities. KONE may also use the information to resolve claims or manage incidents and perform supplier due diligence.

KONE may use the contact information for more general communications and management of the supply relationship, such as sending relevant information of KONE’s operations and upcoming events.

Further, in order for KONE to fulfill its obligations relating to quality and safety of its operations, KONE needs to be able to reliably identify any external persons working for KONE. To enable the identification of external workforce, KONE needs to store certain personal information about the external workforce in our Supplier Databases. The information of external workforce stored in KONE’s Supplier Databases will only be used for identification and management of the external workforce as needed in connection with their work performed for KONE.

KONE processes personal data because it is necessary for the performance of a sourcing contract and/or because it is necessary for the purposes of the legitimate interests pursued by KONE relating to its regular business activities. KONE may also be obliged by applicable local laws to collect certain information about the supplier and its employees and representatives. Such obligations may relate e.g. to safety requirements, taxation, insurances and contractor’s other statutory obligations and liability when work is contracted out. When required by applicable laws, KONE will request data subject’s consent for personal data processing.

The personal data has been obtained from the suppliers or obtained in connection with their business relationship with KONE. Information about external workforce is generally obtained from the subcontractor companies who are the employers of such individuals. In certain cases KONE may collect personal data from public registers and other reliable external sources.

The personal data will be stored as long as needed for the above said purposes. After that, the personal data will be effectively deleted or made anonymous.

KONE provides personal data to our affiliates, subsidiaries, and subcontractors that assist KONE in providing services to you, which include technical support, payment processors, or other third parties with your consent. In some circumstances, we may disclose personal data in response to subpoenas, warrants, or other court orders as part of a legal process or as is required to follow applicable laws. KONE may disclose personal data to establish or defend our legal rights, including to take action regarding illegal activities, suspected fraud, or a violation of our policies, including others. KONE ensures that such third parties are always bound by contracts, which sufficiently address data protection and confidentiality requirements.

Due to technical and practical requirements, personal data may also be processed outside of your justification. KONE ensures that applicable law is followed for such transfers.

Data subjects may at any time contact KONE and request access to their personal data. KONE will at the data subjects’ request rectify or erase any incomplete, inaccurate or outdated personal data. Data subject requests can be sent to KONE by using the contact form available on the kone.com webpage at http://www.kone.com/en/contact.aspx (select option “Personal Data Enquiry”).

Such rights include right to access, delete, or correct your personal data. If the personal data processing is based on consent, the data subject is entitled to withdraw the consent at any time. If the personal data processing is based on another legal basis, the data subject may object to such processing based on a specific individual circumstance. Data subjects must identify such circumstance in the request relating to objection.

Under certain, limited circumstances data subjects may also request data portability of their personal data. Due to technical limitations, KONE may not be able to convert your personal data into the desired format. In the event the data subjects have concerns or remarks regarding KONE’s processing activities, they also have the right to lodge a complaint with the relevant supervisory authority.

In some situations, KONE may be required to verify your identity prior to adhering to your request, including certifying in writing that you are the person you claim to be. KONE does not discriminate against any data subjects who legally exercise their rights relating to their personal data.

KONE may refuse a request or obtain a reasonable fee for fulfilling a request if the request is manifestly unfounded or excessive or KONE has another legitimate ground for refusing the request. Such legitimate grounds could e.g. prevent KONE from deleting personal data that needs to be retained due to local legal requirements or to maintain an audit trail until the end of local claim period. KONE may also need to retain the data to be able to fulfil contractual obligations.

Please also note, that if KONE blocks or deletes your personal data as requested, KONE may not be able to perform the services you would like to use or have previously ordered or requested or provide you the content you would like to download or receive.

No method of transmission over the internet, or method of electronic storage, is fully secure. Additionally, we maintain internal governance policies designed to protect your information. These governance policies include, but are not limited to, Written Information Security Protocols, Incident Response Plans, Data Subject Request Protocols, and Record Retention and Destruction Policies. While we use reasonable efforts to protect your personal information from unauthorized access, use, or disclosure, we cannot guarantee the security of your personal information. In the event that we are required by law to inform you of a breach to your personal information, we may notify you electronically, in writing, or by telephone, if permitted to do so by law.

Some of our applications permit you to create an account. When you do, you will be prompted to create a password. You are responsible for maintaining the confidentiality of your password, and you are responsible for any access to or use of your account by someone else that has obtained your password, whether or not such access or use has been authorized by you. You should notify us of any unauthorized use of your password or account.

KONE seeks to develop the Site, its business as well as its data protection related processes and tools continuously and reserves the right to amend this Privacy Statement. KONE hopes that you review this Privacy Statement from time to time for any amendments. To the extent required by applicable privacy laws, KONE may contact you also through other interfaces or by using the collected contact information to provide information about updates that have material effects to you as a data subject.