Privacy Policy

This Privacy Policy establishes a commitment by each of the companies listed, henceforth referred to as “Sonae Arauco”, with its stakeholders (e.g. clients, employees, suppliers) as regarding the protection of the personal data it is responsible for, with the aim of strengthening and consolidating a trustworthy and close relationship, through clear and transparent communication about the use of these data, the rights of the respective owners and how they can exercise such rights.

Companies covered by the Privacy Policy:

• Sonae Arauco, S.A.
• Sonae Arauco (UK) Limited
• Sonae Arauco Deutschland GmbH
• Sonae Arauco España-Soluciones de Madera, S.L.
• Sonae Arauco France, SAS
• Sonae Arauco Netherlands B.V.
• Sonae Arauco Portugal, S.A.
• Sonae Arauco Suisse SA
• Ecociclo – Energia e Ambiente, S.A.
• Euroresinas – Indústrias Químicas, S.A.
• GHP Glunz Holzwerkstoffproduktions- GmbH
• ImPaper Europe GmbH
• Sonae Arauco Beeskow GmbH
• Tool Transport Organisation und optimierte Logistik GmbH
• Imoplamac - Gestão de Imóveis, SA
• Aserraderos de Cuéllar, S.A.
• Racionalización y Manufacturas Forestales, S.A.
• Tecnologías del Medio Ambiente, S.A.
• Tecmasa Reciclados de Andalucía, S.L.

Sonae Arauco strictly complies with the principles described in this policy, Regulation (UE) 2016/679 (General Data Protection Regulation) and the applicable data protection legislation in all activities that involve the processing of personal data under its responsibility.

The Privacy Policy is included in the personal data protection’s framework of Sonae Arauco, which outlines the rules and procedures for the management of the safety and privacy of the personal data.

Sonae Arauco processes the personal data through the use of multiple operational and technical means to support its business activities.

The Privacy Policy, as a communication tool, has the following goals:

• Strengthen and consolidate a trustworthy and close relationship between Sonae Arauco and all its stakeholders;
• Show transparency regarding the purposes and processing activities of personal data performed by Sonae Arauco, as well as the retention period of the personal data involved;
• Inform the owners of the personal data about their rights regarding the protection of these data and how to exercise such rights;
• Inform the owners of the personal data who to contact at Sonae Arauco, in order to exercise their rights or clarify how their personal data is processed.

The Privacy Policy applies exclusively to the personal data processed by Sonae Arauco, within the defined purposes. For the purposes of this policy, personal data is defined as any information relative to an individual who is identified or identifiable (owner of the data). The owner of the data is deemed identifiable if he/she can be identified directly or indirectly, namely through an identification number or through specific characteristics of his/her physical, physiological, genetic, mental, economic, cultural or social identity.

The Privacy Policy should be reviewed annually, when circumstances change and whenever legislative changes occur, to ensure it is updated and suitable to the applicable laws and regulations. The proposals to revise the policy and supervision of its application and compliance are under the responsibility of the Sonae Arauco governing body.

This policy should be known by all the Sonae Arauco’s employees and should be disclosed to its stakeholders, in any situation involving the processing of their personal data, through the appropriate channels, namely the Sonae Arauco’s website.

Sonae Arauco carries out its business based on trust and transparency. This commitment is reflected in the daily relationship with our clients, employees and suppliers and other stakeholders. The privacy and safety of the data entrusted to us is a priority for us.

We undertake to collect, store, process, transmit or eliminate personal data with transparency and use only data which are essential to maintain the commercial relationship. We shall inform you how we use your personal data and for what purposes, ensuring that we collect, share and store your personal data in accordance with the best practices as regards the safety and protection of the personal data.

When your personal data are collected, stored, processed, transmitted or eliminated by other entities, we demand the same level of privacy and safety.

We want you to feel confident that your personal data are safe with us, as we are constantly committed to protect your privacy and we take our responsibility to protect your personal data extremely seriously.

Whenever you have any doubt about how we use your personal data, we are available to help through the following e-mail address: dataprotection@sonaearauco.com.

The above-mentioned company, to which you provided your personal data, is responsible for processing your personal data under the terms of the General Data Protection Regulations and the complementary legislation concerning protection of personal data in countries where it operates.

In this Privacy Policy, the term “Personal Data” means all the information related to you and which allows us to identify you directly or indirectly. Your personal data may include, for example, your name and contact details (physical and/or electronic).

We may also receive your personal data from other companies, namely when they collect, process or store these data in fulfilment of a service provision contract.

We use your personal data only when strictly necessary for our commercial relationship.

We retain your personal data only for the time needed to fulfil the aims defined in our commercial relationship and to comply with law.

Once the maximum retain period is reached, your personal data will be anonymised or securely destroyed/deleted.

In some cases we may disclose your personal data to other entities, as part of the services such entities provide. In these cases, we demand that appropriate security measures are in place to protect your personal data.

Your personal data can be shared within Sonae Arauco Group companies and, eventually, within Sonae Industria Group companies, which will inform the data subject whenever this occurs.

When required by law, we may have to disclose your personal data to the authorities or third parties.

In the case of transfer of or access to your personal data by the Sonae Arauco Group, suppliers or service providers based outside the European Union, we guarantee that your personal data will be processed in accordance with the appropriate security and protection measures, compatible with the ones we implement.

In certain circumstances, you are entitled to access or request:

1. Additional information about how we use your personal data;
2. Your personal data;
3. That we transmit the personal data you supplied to us to another entity;
4. An update of your personal data;
5. Deletion of your personal data;
6. The non-processing of your personal data;
7. Restricting how we use your personal data as we correct or clarify possible doubts about its content or about how we use the data;
8. The provision of a channel to dispute automated decisions made based on your personal data profiling.

You are also entitled to withdraw or change, at any time, the permission you gave us to use your personal data.

An exception to exercising these rights occurs when your personal data are used to safeguard the public interest, namely in cases of detection and prevention of crimes, or when they are subject to professional confidentiality.

Sonae Arauco uses websites cookies to improve the navigation experience of our site users, leading to quicker and more efficient responses and ending the need to repeatedly input the same information.

Cookies not only help websites to recognise the users’ devices the next time they visit the site, but they are also essential for their functioning. The cookies used by Sonae Arauco, in all its websites, do not collect personal information that allows the identification of the user. They only store general information, namely how and/or where users accessed the site and how they use the websites. The cookies retain only information related to the User's preferences.

We have a range of information security measures, in line with the best national and international practices, to protect your personal data, including technological checks, administrative, technical and physical measures and procedures that guarantee the protection of your personal data, preventing them from improper use, and non-authorised access and disclosure, loss and improper or inadvertent alteration, or their non-authorised destruction. With regard to information security, we make the same commitment to continuous improvement as we do in our day-to-day business.

Among others measures, we highlight the following:

1. Access to your personal data is restricted to those who need them for the specific purposes outlined above;
2. Storage and transfer of personal data using safe means only;
3. Protection of the information systems using devices that prevent non-authorised access to your personal data;
4. Implementation of mechanisms that ensure the complete safety and quality of your personal data;
5. Permanent monitoring of the information systems, to prevent, detect and avoid the improper use of your personal data;
6. Redundancy in the storage equipment, processing and communication of personal data, to avoid unavailability.

When required by law, we may have to disclose your personal data to the authorities or third parties, and in these cases our control over how your personal data is protected is limited.

This Privacy Policy may be updated whenever necessary, being the information released through the appropriate channels, namely the Sonae Arauco’s website.