Privacy Policy
At Algol Chemicals Oy (including its subsidiaries, hereinafter “Algol Chemicals”), we are committed to protecting the privacy of our service users.
We process personal data appropriately and only to the extent necessary for our operations. Our data processing practices are based on the EU General Data Protection Regulation (2016/679) and the Finnish Data Protection Act (1050/2018) and other applicable national legistlation.
Algol Chemicals is part of the Algol Group. While Algol Oy is responsible for data protection administration at the group level, Algol Chemicals Oy and each of its subsidiary act as independent data controllers for their own customer and stakeholder registers.
This page and the privacy notices mentioned herein apply to the processing of personal data carried out by the Algol Chemicals group. We update our privacy notices as necessary and indicate the date of the latest changes within the document. We recommend that you visit our website regularly to stay informed of any updates.
If you have any questions regarding our processing of personal data after reading our privacy notices, please feel free to contact us:
Algol Chemicals Oy
Karapellontie 6
02610 Espoo, Finland
E-mail: gdpr@algol.fi
Contact persons:
Tor Edgren, Group Corporate Responsibility Manager
Charlotta Horsma, Corporate Counsel
Privacy Policies for Algol Chemicals’ Personal Data Registers
- Algol Chemicals Customer and Stakeholder Register
- Algol Chemicals Recruitment Register
Privacy Policy for Algol Chemicals’ Customer and Stakeholder Register
This statement describes how Algol Chemicals processes personal data in connection with website visits, contacts, marketing, and customer and cooperation relationships.
1. Name of the Register
Algol Chemicals’ customer, stakeholder, supplier, and marketing register.
2. Websites and Contacts
When you visit Algol Chemicals’ website, we collect information as follows:
- Browsing the website does not require registration. We only ask for your personal data when you send us inquiries or feedback via the forms on the website.
- In the forms, we ask for your name, company, phone number, and/or email address. The information you send via forms is protected. Data is stored on the server for six months from the receipt of the form. Information provided for managing a customer relationship is stored for the duration of the relationship, for example, in the customer register (CRM).
- Personal data is also collected, for example, in connection with registrations (Webropol forms, Google Forms). Data is processed only for the specific purpose intended.
3. Data Controller and Contact Information
Algol Chemicals Oy and its subsidiaries (hereinafter “Algol Chemicals”). A list of our subsidiaries and their contact details is available on our website.
Algol Chemicals Oy
Karapellontie 6
02610 Espoo, Finland
P.O. Box 13, 02611 Espoo, Finland
Email: gdpr@algol.fi
Contact Persons:
Tor Edgren, Group Corporate Responsibility Manager
Charlotta Horsma, Corporate Counsel
4. Data Content of the Register
The register may contain the following information about the Data Subject:
Name, email, phone number, title, job role or position in the company, company/organization and its contact details, classification data provided by the Data Subject or publicly available, order, billing, and delivery information, details regarding products and services ordered or in the offer phase as well as expressed areas of interest including changes to them, data collected via cookies, data collected by the website and the marketing platform in use, data collected by the newsletter tool, registration and participation data from events and surveys (identified responses including potential dietary information), and other transmitted information, potential opt-outs from direct marketing, data collected from social media channels, information about the device used by the Data Subject (such as device type, browser, IP address, and other device data), and any other information collected with the Data Subject’s consent.
The personal data processed is necessary for its intended purposes.
5. Purpose and Legal Basis for Processing
The Data Controller processes personal data for the following purposes:
- Managing and administering business-related customer and stakeholder relationships and contracts.
- Sharing data within the Algol Chemicals group for internal administrative purposes and to provide localised customer service through our regional subsidiaries.
- Maintaining and developing customer and stakeholder relationships.
- Customer communication and marketing.
- Fulfilling the rights and obligations of the Data Subject and the Data Controller.
- Purposes related to web services and analyzing the use of services and products, providing and developing services, identifying customers and data subjects, and generating statistics.
- Fulfilling the Data Controller’s statutory obligations.
The legal bases for processing personal data under the EU General Data Protection Regulation are:
- Consent of the Data Subject
- Contracts related to the customer relationship
- Legitimate interest of the Data Controller
- Statutory requirements
The analytics of the publishing system we use for customer communication and marketing collect data to develop services. The information collected includes the time messages are opened and link clicks/timestamps.
You can cancel the receipt of marketing messages by notifying the controller or by clicking the unsubscribe link provided in every marketing message, after which your data will be removed from the electronic direct marketing subscriber list.
6. Regular Sources of Information
Personal data is collected from:
- The customer, potential customer, stakeholder representative, or other contacts themselves via telephone, the internet (websites, forms, newsletter subscriptions, event registrations, social media, trade register), email, or other similar means.
- Cookies or other similar technologies.
- Information collected during the contract process.
- Information obtained from customer meetings.
- Other possible situations where the Data Subject discloses data to the Data Controller.
Additionally, the Data Controller uses Google Ads and Analytics services to collect visitor data to analyze and improve the website and target relevant marketing. Data is automatically saved to the register when a user leaves information on the website or uses the newsletter service.
7. Regular Disclosure of Data
As a rule, the Data Controller does not disclose personal data to third parties. Data may be disclosed if required by a competent authority, to fulfill contractual obligations, or to the extent agreed upon with the Data Subject. Data may be disclosed to companies within the Algol Chemicals group for the purposes described in section 5, such as providing customer service.
In some situations, data may be disclosed to subcontractors or partners of the Data Controller if necessary for service production (based on legitimate interest) or due to joint marketing measures (based on consent). These parties process personal data confidentially.
We aim to transfer data anonymously whenever possible. Our partners operate according to legal privacy requirements and the controller’s documented instructions. We are responsible for the processing performed by service providers on our behalf as we are for our own actions.
8. Data Transfer Outside the EU or EEA
Data may be transferred outside the EU or EEA where our subsidiaries or partners are located in third countries (such as India), or where data is stored on a server located outside the
EU or EEA. In such cases, we ensure a lawful basis for the transfer, such as the European Commission’s Standard Contractual Clauses (SCCs), so that your data remains protected in accordance with EU standards.
If data is transferred outside the EU/EEA, it always occurs on a legal basis:
- The European Commission has decided that the recipient country ensures an adequate level of data protection.
- The Data Controller has implemented appropriate safeguards using standard contractual clauses approved by the European Commission (a copy of which is available upon request).
- The Data Subject has given explicit consent for the transfer.
- There is another legal basis for the transfer.
9. Data Retention Period
Personal data is stored only as long as necessary to fulfill the processing purposes defined in this statement. Data may also be stored as long as legislation, such as the Accounting Act, requires. The Data Controller regularly assesses the necessity of data retention according to internal practices.
10. Rights of the Data Subject
The Data Subject has the following rights. Requests to exercise these rights should be sent to the address mentioned in section 3. The Data Controller may ask the requester to prove their identity. The Controller will respond within the timeframe set by the GDPR.
The Data Subject has the right to inspect their stored data at any time and exercise their “right to be forgotten.” Upon request, the Controller will correct, delete, or supplement inaccurate, unnecessary, incomplete, or outdated data. The Controller may also correct, delete, or supplement data on its own initiative.
Other rights include:
- Withdrawal of consent: Right to withdraw consent for data collected based on consent.
- Right to object: Right to object to processing based on public or legitimate interest unless there are compelling legitimate grounds for processing processingwhich override the Data Subject’s rights, or the processing is necessary for the establishment, exercise or defence of legal claims.
- Direct marketing ban: Right to prohibit processing for direct marketing, market research, or opinion polls.
- Right to restrict processing: Right to demand restriction of processing if data is inaccurate, processing is unlawful, or the data is no longer needed.
- Right to data portability: Right to receive the personal data the Data Subject has provided to the Data Controller in a structured, commonly used and machine-readable format and to transmit it to another controller, where processing is based on consent or contract and is carried out by automated means.
- Right to lodge a complaint: Right to bring the matter to the Data Protection Ombudsman. Each newsletter subscriber has the right to inspect the data stored about them in the register or to request its correction. To inspect the data, the user must state their email address in the inspection request.
Requests for inspection or correction must be submitted in writing and signed to: Algol Oy, Inspection Request, Karapellontie 6, 02610 Espoo or via email to gdpr@algol.fi.
Newsletter recipients have the right to opt out of receiving the newsletter from the controller. You can remove your email address from the mailing list by clicking the link at the end of the newsletter or by notifying the controller.
11. Principles of Data Security
Personal data is kept confidential. The Data Controller’s network and hardware are protected by firewalls and other necessary technical measures. Access to data is restricted to employees whose job descriptions require it.
The Data Controller reserves the right to change this privacy statement as needed. This privacy statement was last updated on April 22, 2026.
Cookie Policy
Websites belonging to Algol Group companies use cookies. We collect statistical information about website users primarily to analyze and develop site usage. Cookies may also be used to collect information about the device used, such as IP address and browser, and to target relevant marketing to website visitors (see sections 4 and 6 above). Read more about how cookies work and which cookies we use.