China Privacy Statement

The integrity of your personal data is vital for Sandvik AB and its group of global subsidiaries (hereinafter referred to as “Sandvik,” as applicable), and therefore, we welcome the extra transparency and protection of your personal data that the Personal Information Protection Law (PIPL) requires.

Whether you are a valued Customer, Supplier, Commercial or Administrative Intermediary, a Digital Registrant, a Physical Registrant, a Digital Visitor or a Facility Visitor, it’s important to us that you feel safe about how we treat your personal data.

Accordingly, we outline what types of personal data we collect from you, why, and what happens to your data while in our care. We also explain your rights under the PIPL and give you contact details in case you have any questions or requests about your data.

Regarding retention periods, we store personal data only as long as necessary to fulfill the purposes outlined in this China Privacy Statement unless a longer storage period is required for legitimate reasons or as required by law.

Definitions

“Personal data” means any electronic or otherwise recorded information related to identified or identifiable natural persons, excluding anonymized data.

Some personal data (e.g., bank account details, ID information and location) may be regarded as sensitive personal data under Chinese laws. We only collect and use your sensitive personal data for the purposes described in this China Privacy Statement, such as for purposes of facilitating payments. We will adopt strict security measures when processing your sensitive personal data.

We consider you:

• a Customer if you or the company you work for has purchased our products or services;
• a Supplier if you work for one of our many supplier companies from whom we purchase goods and services;
• a Commercial or Administrative Intermediary if you work for one of our many distributors or other intermediaries such as our agents and customs brokers;
• a Digital Registrant if you, for example, use our websites or platforms (such as WeChat Official Account) or platforms operated by our partners to:
  • request information about our products or services
  • register for newsletters or Sandvik sponsored events (such as live streaming events and seminars)
  • apply to any Sandvik subscriptions or community forums
  • respond to survey or marketing communication
• a Physical Registrant if you register with us in person at any of our events;
• a Digital Visitor if you navigate our websites without registering as described under Digital Registrant;
• a Facility Visitor if you visit any of our offices or facilities in China

Please be aware that you may appear in multiple categories as described above, depending on your relationship and activities with Sandvik. For example, you may be considered a Customer, a Digital Registrant, and a Facility Visitor if you filled in one of our web forms and visited a Sandvik office or facility, and then purchased our products.

What types of personal data do we use and why?

• Customers

  Categories of data	Purposes
  Contact data (such as name, address, country and region, email address, fax, phone number, and social media information (e.g., profile information))	Effective and efficient communication: respond to your questions, send information about Sandvik products and services of interest to you; lead generation; fulfill our obligation to keep you informed about safety matters; communicate technical changes
  Organizational data (such as which company and department you work in, title, and company website)	Efficient marketing: understand what products and services information you would be interested in receiving
  Financial data (such as credit or payment information, bank account details)	Financial control: To assess credit and payment history, facilitate payments; to fulfill anti-money laundering obligations; and to manage rebates and refunds
  Contract data (such as sales/purchase orders, shipment address or return to address), billing information, and other information collected from our customer and supplier contracts	Facilitation of order management, shipment and warranty; administration of service level agreements
  Learning/training records (such as training attendance, completion of learning activities, competence data, qualifications)	Administer the customer/supplier/partner relationship and to communicate and develop new training opportunities you may be interested in
  Individual preferences (such as information about Sandvik products and services that you are interested in)	Provide effective communication. To offer you a pleasant experience in interacting with us
  Service and warranty data (such as Repair and service history and claims)	For contract warranty fulfillment and for product development improvements and for fulfilling our/your maintenance obligations
  Health and safety data (such as incidences occurring during visits to our test and manufacturing facilities, and any injuries that may occur from use of our equipment)	Fulfill legal obligations to record incidents and claims management. Improve safety in hazardous environments and to facilitate access for individuals with physical restrictions
  Travel data (such as visa and passport information, travel costs, itinerary)	Arrangement of travel to Sandvik sites and events, including the arrangement of Visas and making other travel arrangements

• Suppliers

  Categories of data	Purposes
  Contact data (such as name, address, email address, phone number, and social media information (e.g., profile information))	Effective and efficient communication: respond to your questions, send information about Sandvik products and services of interest to you; lead generation; fulfill our obligation to keep you informed about safety matters; communicate technical changes
  Organizational data (such as which company and department you work in)	Efficient marketing: understand what products and services information you would be interested in receiving
  Financial data (such as credit or payment information, bank account details)	Financial control: To assess credit and payment history, facilitate payments; to fulfill anti-money laundering obligations; and to manage rebates and refunds
  Contract data (such as sales/purchase orders, shipment address or return to address), billing information, and other information collected from our customer and supplier contracts	Facilitation of order management, shipment and warranty; administration of service level agreements
  Learning/training records (such as training attendance, completion of learning activities, competence data, qualifications)	Administer the customer/supplier/partner relationship and to communicate and develop new training opportunities you may be interested in
  Individual preferences (such as information about Sandvik products and services that you are interested in)	Provide effective communication. To offer you a pleasant experience in interacting with us
  Service and warranty data (such as Repair and service history and claims)	For contract warranty fulfillment and for product development improvements and for fulfilling our/your maintenance obligations
  Health and safety data (such as incidences occurring during visits to our test and manufacturing facilities, and any injuries that may occur from use of our equipment)	Fulfill legal obligations to record incidents and claims management. Improve safety in hazardous environments and to facilitate access for individuals with physical restrictions
  Travel data (such as visa and passport information, travel costs, itinerary)	Arrangement of travel to Sandvik sites and events, including the arrangement of Visas and making other travel arrangements

• Commercial or administrative intermediaries

  Categories of data	Purposes
  Contact data (such as name, address, email address, phone number, and social media information (e.g., profile information))	Effective and efficient communication: respond to your questions, send information about Sandvik products and services of interest to you; lead generation; fulfill our obligation to keep you informed about safety matters; communicate technical changes
  Organizational data (such as which company and department you work in)	Efficient marketing: understand what products and services information you would be interested in receiving
  Financial data (such as credit or payment information, bank account details)	Financial control: To assess credit and payment history, facilitate payments; to fulfill anti-money laundering obligations; and to manage rebates and refunds
  Contract data (such as sales/purchase orders, shipment address or return to address), billing information, and other information collected from our customer and supplier contracts	Facilitation of order management, shipment and warranty; administration of service level agreements
  Learning/training records (such as training attendance, completion of learning activities, competence data, qualifications)	Administer the customer/supplier/partner relationship and to communicate and develop new training opportunities you may be interested in
  Individual preferences (such as information about Sandvik products and services that you are interested in)	Provide effective communication. To offer you a pleasant experience in interacting with us
  Service and warranty data (such as Repair and service history and claims)	For contract warranty fulfillment and for product development improvements and for fulfilling our/your maintenance obligations
  Health and safety data (such as incidences occurring during visits to our test and manufacturing facilities, and any injuries that may occur from use of our equipment)	Fulfill legal obligations to record incidents and claims management. Improve safety in hazardous environments and to facilitate access for individuals with physical restrictions
  Travel data (such as visa and passport information, travel costs, itinerary)	Arrangement of travel to Sandvik sites and events, including the arrangement of Visas and making other travel arrangements

• Digital registrants

  Categories of data	Purposes
  Contact data (such as name, address, email address, phone number, and social media information (e.g., profile information))	Effective and efficient communication: respond to your questions, send information about Sandvik products and services of interest to you; lead generation; fulfill our obligation to keep you informed about safety matters; communicate technical changes
  Organizational data (such as which company and department you work in)	Efficient marketing: understand what products and services information you would be interested in receiving
  Individual preferences (such as information about Sandvik products and services that you are interested in)	Provide effective communication. To offer you a pleasant experience in interacting with us
  Information about the event you have attended	Follow-up with you about more information regarding the product or service you showed interest in and to send you information about related products and services
  Information about where you were on the Internet when you gave us your contact information and the material you downloaded from our website. Information about the Sandvik community blog or chat forums you participated in.	Follow-up with you about information regarding the product or service you showed interest in and to send you related product information
  Information about Sandvik newsletters or other Sandvik content related material you have subscribed to	Follow-up with you about more information regarding the product or service you showed interest in and to send you related product information
  Navigational data (such as IP address, cookies, session identifiers, browser type, web pages viewed and links clicked).	Operate and improve your overall web-browsing experience. Personalize your browsing experience and allow us to deliver the type of content and product and service offerings of most interest to you. Allow us to better service you in responding to your customer service requests. Efficiently process your transactions. Administer a promotion, survey or other website feature

• Physical registrants

  Categories of data	Purposes
  Contact data (such as name, address, email address, phone number, and social media information (e.g., profile information))	Effective and efficient communication: respond to your questions, send information about Sandvik products and services of interest to you; lead generation; fulfill our obligation to keep you informed about safety matters; communicate technical changes
  Video, photo, time and location of recording, vehicle license plate number	Limited cameral surveillance. Cameras are stationed at certain office and industrial areas for the following purposes: Open and close gates safely to prevent damage to vehicles and people Control so no unauthorized persons gain access to the office and industrial area when opening gates. Monitor exposed areas where there is a risk that unauthorized persons gain access to the office and industrial area unnoticed To prevent and reveal property damages and related crimes Investigate incidents and accidents.
  Organizational data (such as which company and department you work in)	Efficient marketing: understand what products and services information you would be interested in receiving
  Individual preferences (such as information about Sandvik products and services that you are interested in	Provide effective communication. To offer you a pleasant experience in dealing with us
  Information about the event you attended	Follow-up with you about more information regarding the product or service you showed interest in and to send you information about related products and services

• Digital visitors

  Categories of data	Purposes
  Information about the event you attended	Follow-up with you about more information regarding the product or service you showed interest in and to send you information about related products and services
  Navigational data (such as IP address, cookies, session identifiers, browser type, web pages viewed and links clicked).	Operate and improve your overall web-browsing experience. Personalize your browsing experience and allow us to deliver the type of content and product and service offerings of most interest to you. Allow us to better service you in responding to your customer service requests. Efficiently process your transactions. Administer a promotion, survey or other website feature

• Facility visitors

  Categories of data	Purposes
  Contact data (such as name, address, email address, phone number, and social media information (e.g., profile information))	Effective and efficient communication: respond to your questions, send information about Sandvik products and services of interest to you; lead generation; fulfill our obligation to keep you informed about safety matters; communicate technical changes
  Organizational data (such as which company and department you work in)	Efficient marketing: understand what products and services information you would be interested in receiving
  Video, photo, time and location of recording, vehicle license plate number	Limited cameral surveillance. Cameras are stationed at certain office and industrial areas for the following purposes: Open and close gates safely to prevent damage to vehicles and people Control so no unauthorized persons gain access to the office and industrial area when opening gates Monitor exposed areas where there is a risk that unauthorized persons gain access to the office and industrial area unnoticed To prevent and reveal property damages and related crimes Investigate incidents and accidents

In some circumstances, you may choose to provide us with personal information about others. By providing us with personal information about others, you certify that you have authorization from relevant individuals to provide such information to Sandvik for the purposes outlined in this China Privacy Statement.

Cookies and other similar technologies

If you navigate our websites, you will find specific and applicable Cookie Information for each specific website. This Sandvik China Privacy Statement applies solely to the personal data of individuals in China collected by Sandvik.

Data sharing

For the purposes outlined in this China Privacy Statement, we may share your personal data wilt the following entities.

Members of the Sandvik group

We may share personal data with other Sandvik group companies, where such disclosure is necessary to provide you with our services or to manage our business. For instance, Sandvik may share data about a Digital Visitor, Facility Visitor, Customer, Registrant, or Supplier with another Sandvik company if necessary to respond to you. We may share your personal data about Digital Visitors, Facility Visitors, Customers and Digital or Physical Registrants within the Sandvik group so they can market and sell relevant Sandvik products and services to you, and so that we may jointly host product demonstrations and other events for you. You may view a list of all the Sandvik entities.

Parties outside of Sandvik

Sandvik does not sell, trade, or otherwise transfer your personal data to outside parties except as provided below.

To provide you with the high quality, useful products, and services you have come to expect from Sandvik， and for other purposes described in this China Privacy Statement, we may share your personal data with the following entities:

• Service providers. We may share your personal data to our website hosting partners and other parties who assist us in operating our websites, conducting our business, or servicing you, so long as those parties agree to keep your personal data confidential.
• Business partners. We may share data about Digital Visitors, Facility Visitors, Customers and Digital or Physical Registrants with Sandvik business partners like authorized resellers or distributors so they can market and sell relevant Sandvik products and services to you, and so that we may jointly host product demonstrations and other events for you. We may share certain data about Customers with third parties when we are in a bidding process held by such parties.
• Government authorities. We may share your personal data with the appropriate authorities or other relevant third parties, to comply with all applicable laws, regulations and rules, and requests of law enforcement, regulatory and other governmental agencies.

If it is necessary for Sandvik to transfer personal data in case of a merger, division, dissolution, declaration of bankruptcy, or other reasons, we will notify you of the name and contact information of the recipient. The recipient shall comply with this China Privacy Statement when processing personal data.

Cross-border transfer

We may transfer your data outside China to our global entities or other third parties outside China. You agree that we can transfer your personal data overseas in accordance with the purposes as specified in this China Privacy Statement. If applicable Chinese laws require us to provide you with further notice and obtain your separate consent for the cross-border transfer, we will further provide such notice and obtain your separate consent. We will use a lawful cross-border transfer mechanism to transfer your personal data overseas and adopt necessary measures to ensure the overseas recipients can provide the same level of protection as required under applicable Chinese laws.

Blogs, chat rooms and the like

Sandvik may provide blogs, chat rooms or bulletin boards on our websites and platforms (such as our WeChat Official Account). Any personal information you choose to submit publicly in such forum may be read, collected, or used by others who visit these forums. These non-Sandvik third parties may in their own discretion send you unsolicited messages. We are not responsible for these third parties’ handling of your personal data.

We post a list of customers’ references and testimonials about our products and services only upon the consent of each customer.

Your rights

You have certain rights under applicable Chinese law with respect to your personal data that Sandvik collects and processes, including the right to:

1. know what data Sandvik holds about you;
2. restrict, under certain circumstances, our processing of your data;
3. have access to your data and receive a copy;
4. have it corrected if inaccurate or out of date.

Additionally, you may object, based on your personal circumstances, to our processing of your data or object to our decisions about you based on profiling or automated decisions using your personal data. To the extent that your request is permitted under applicable Chinese law, in some cases, you may require us to erase your data, and in other cases you may require us to have your data transferred to another company. If we collect personal data based on your consent, you have the right to withdraw your consent at any time. To exercise any of these rights, please contact us at sandvikchinaprivacy@sandvik.com

You have the right to lodge a complaint with the government authority charged with protecting your personal data rights.

Data collected from other sources

There may be times when Sandvik collects data about you from another source than yourself. This could happen, for example, when our Business Partners or Suppliers provide us with information about you. We also collect personal data from public sources such as social media. We will provide more information about the third-party sources in the specific cases where this happens.

Third party services

In an attempt to provide you with increased value, we may include third party links on our websites or platforms (such as our WeChat Official Account). These linked sites or platforms (such as social media platforms and applications) have separate and independent privacy policies. Sandvik is not responsible for the practices of these third-party websites or platforms and so your use of those websites or platforms will be in accordance with their privacy policies.

Security incident notification

In case a security incident occurs, we will take remediation actions immediately and notify relevant government authorities and affected individuals, when required by applicable Chinese laws.

Contact us

Please contact us at sandvikchinaprivacy@sandvik.com if you have any questions or comments about our privacy practices or this China Privacy Statement.