Privacy Policy

Scope and purpose

The purpose of this policy is to provide our current, past and future customers (collectively, "customers" or "you") with information about how and why we process your Personal Data, what Personal Data we process, how long they are saved and how to request that your Personal Data be corrected or deleted. This policy may be changed or updated at any time to comply with further requirements under the Data Protection Regulation, and the latest version is always available on our website.

References to the General Data Protection Regulation (GDPR) in the jurisdiction of the United Kingdom instead refer to the UK GDPR. The UK GDPR and the EU GDPR contain the same regulations, but respectively apply to the United Kingdom or Europe.

The controller within the meaning of the data protection laws, particularly the General Data Protection Regulation (GDPR), is:

Komatsu Forest AB

Box 7124
907 04 Umeå, Sweden

Your rights as a data subject

You may exercise your rights at any time using the indicated contact details of our data protection officer:

  • Information about your data stored with us and its processing (Art. 15 GDPR),
  • Rectification of incorrect personal data (Art. 16 GDPR),
  • Deletion of your data stored with us (Art. 17 GDPR),
  • Restriction of data processing, unless we are not permitted to delete your data yet on the basis of legal obligations (Art. 18 GDPR),
  • Objection to the processing of your data with us (Art. 21 GDPR) and
  • Data portability, provided that you consented to the data processing or have concluded a contract with us (Art. 20 GDPR).

If you have granted us a consent, you may withdraw this at any time with effect for the future.

You may contact a supervisory authority with a complaint at any time, e.g. the responsible supervisory authority of the federal state of your place of residence or the authority that is responsible for us, as the controller. You can find a list of the supervisory authorities on respective local website. In Sweden this is Datainspektionen.

Processing in relation to the website

Recording of general information while visiting our website

Nature and purpose of processing:
If you access our website, i.e. if you do not register or otherwise send information, automatic recording of information of a general nature takes place. This information (server logfiles) contains, for example, the type of web browser, the operating system used, the domain name of your internet service provider, your IP address and similar. 

In particular, these are processed for the following purposes:

  • ensuring a problem-free connection structure for the website,
  • ensuring smooth utilisation of our website,
  • evaluation of system security and system stability, as well as
  • optimisation of our website.

We do not use your data to draw conclusions about you as an individual. Information of this type is analysed statistically by us, if necessary, in order to optimise our internet presence and the technology behind it. 

Legal basis and legitimate interest:
Processing is performed according to Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest to improve the stability and functionality of our website.

The recipients of the data, where applicable, are technical service providers, who perform the operation and maintenance of our website as processors.

Duration of storage:
The data will be deleted as soon as these are no longer required for the purpose of collection. This is generally the case for data used to make the website available, if the respective session has ended. 

In the event that data is stored in logfiles, this is the case after 14 days, at the latest. Storage over and above this is possible. In this case, the IP addresses of the users are anonymised, so that it is no longer possible to categorise the accessing client.

Provision prescribed or necessary:
The provision of the aforementioned personal data is neither legally nor contractually prescribed. However, without the IP address, the service and the functionality of our website is not guaranteed. Individual services may also not be available or may be limited. An objection is ruled out for this reason. 

Registration on our website 

You can reach external websites through our dealer login site. We wish to point out that the relevant privacy policies apply to these external sites. Please read their privacy policies for more information on the processing of your personal data on these external sites.

Integration of Iframes

On our website, we also use the integration of Iframes, e.g. Mascus. For interaction with the websites that are integrated into our website via Iframes, the privacy policies and cookie regulations of the respective website operators apply.

Newsletters and marketing information

Nature and purpose of processing:
For the delivery of our newsletter or marketing information, we collect personal data, which are sent to us via an input mask.

We need a valid email address for effective registration. In order to check that a login is actually performed by the owner of an email address, we use the “double-opt-in” procedure. For this, we log the registration for the newsletter and marketing information, the sending of a confirmation email and the receipt of the reply requested with this. In addition to this, we collect your name and your company in order to identify you for the assertion of rights. Additional data is not collected. 

Legal basis:
On the basis of your expressly granted consent (Art. 6 Para. 1 lit. a GDPR), we will send you our newsletter or comparable information by email to your specified email address on a regular basis. 

You may withdraw the consent to store your personal data and its use for sending newsletters and marketing information at any time with effect for the future. The relevant link for this can be found in every newsletter or marketing information. Furthermore, you may also de-register directly on this website at any time or notify your withdrawal to us using the contact option at the end of this privacy policy.

Recipients of the data are processors, where applicable.

Duration of storage:
The data is only processed in this context for as long as the relevant consent exists. Thereafter, it is deleted.

Provision prescribed or necessary:
The provision of your personal data is on a voluntarily, exclusively on the basis of your consent. Without existing consent, we are unfortunately not allowed to send you our newsletter or other marketing information.

Withdrawal of consent:
You may withdraw the consent to store your personal data and its use for sending newsletters and marketing information at any time with effect for the future. The de-registration may take place via the link contained in every email or upon application to the data protection officer or person responsible for data protection indicated below. 

Contact form for the declaration of data subject requests and contact via email and telephone. 

Nature and purpose of processing:
The data entered by you will be stored for the purpose of individual communication. For this, a valid email address and your name and telephone number, where applicable, must be provided. This has the purpose of allocating the request and the subsequent reply. The provision of additional data is optional.

Legal basis:
The processing of the data entered in the contact form for the declaration of data subject requests and for contact via email and telephone takes place on the basis of a legitimate interest (Art. 6 Para. 1 lit. b GDPR).

By providing the contact form for the declaration of data subject requests and excluding the possibility of contact via email or telephone, we intend to make it straightforward for you to make contact. The information that you have provided will be stored for the purpose of processing the request and for possible follow-up questions.

If you make contact with us, in order to request an offer, the processing of the data takes place to perform pre-contractual measures (Art. 6 Para. 1 lit. b GDPR).

Recipients of the data are processors, where applicable.

Duration of storage:
Data is deleted no later than 6 months after processing the request.

Insofar as a contractual relationship is formed, we will be subject to the statutory retention duties according to our legal obligations and will delete your data after these time limits have expired.  

Provision prescribed or necessary:
The provision of your personal data is on a voluntarily basis. However, we can only process your request, if you provide us with your name, your email address or telephone number and the reason for the request.

Use of Google Maps

We use the Google Maps service on this website. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”). In this way, we can display interactive maps to you directly on the website and enable you to conveniently use the map function.
You can find further information about data processing by Google in the Google privacy policy. You can also change your personal privacy settings in the privacy centre.

You can find detailed instructions for the administration of your own data in connection with Google products here.
By visiting the website, Google receives information that you have accessed the relevant sub-site of our website. This occurs irrespective of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged into Google, your data will be allocated directly to your account. 

If you do not want the allocation to your Google profile, you must log out of Google before activation of the button. Google stores your data as usage profiles and uses them for the purpose of advertising, market research and/or needs-based design of its websites. Such an evaluation particularly takes place (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You are entitled to an objection right against the formation of these user profiles, whereby you must contact Google to exercise this. 

Withdrawal of consent:
The provider does not currently offer any possibility for a basic opt-out or blocking of the data transmission. If you intend to prevent your activities on our website from being tracked, please withdraw your consent in the Cookie Consent Tool for the relevant cookie category or all technically unnecessary cookies and data transmissions. However, in this case, you may possibly not be able to use our website at all or only to a limited extent.

SSL encryption

To protect the security of your data during transmission, we use encryption methods (e.g. SSL) via HTTPS in accordance with the current state-of-the-art.

Processing outside of the website


Customer and employee surveys

We process personal data in connection with customer and employee surveys. Our aim in conducting surveys is to gain a better understanding of how our products and services should be designed, to fulfill the requirements of existing and potential customers, and to assess how well our company is functioning so that we can continuously improve our work on the basis of this input. With employee surveys, we intend to create a transparent and successful working environment.

The surveys take place online or in paper form, depending on the structure these are anonymous or with reference to you personally. Therefore, your personal data may occasionally be combined with a survey.

As a rule, the personal data that we process for our surveys is limited to fundamental contact information, such as name, email address, mobile phone number and company name. Furthermore, your responses in the survey are also regarded as personal data if they can be connected to you with your contact details, i.e. if the survey is not anonymous or you have decided to disclose your identity in a free text field.

Legal basis and legitimate interest:
Processing is performed according to Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in the improvement of our products and services.

Recipients of the data are Komatsu Forest AB's headquarters in Umeå, Sweden, in cooperation with the subsidiary, the partner or the affiliated company that provides the data and is the responsible data processor for the contacts and their personal information. Additional recipients are our Microsoft Dynamics 365 CRM system and Netigate as survey system. 

Duration of storage:
Contact lists and responses that contain contact information are deleted within three months after conducting a survey. For our continuously running surveys we will store your personal data for as long as the survey is active. Certain data are part of the customer profile, and those data will be stored for as long as you or your employer or client remains our customer and until five years thereafter. For our non-continuously running surveys your personal data are anonymized at the latest 1 year after the survey’s end.

If you take part in a non-anonymous survey, it is possible that we at Komatsu Forest will combine your responses with other information that we have stored about you in order to obtain a better understanding of your needs and requirements. For this reason, a limited number of questions from our survey can be transferred back into our CRM system. This particularly relates to your response to the question of whether you would recommend Komatsu Forest (the so-called NPS value). This information is deleted on the basis of the deletion periods that apply to you. 

Provision prescribed or necessary:
The provision of the aforementioned personal data is neither legally nor contractually prescribed. In every survey that we send to our customers, we indicate how you can de-register from future surveys. We also clearly indicate that the survey is anonymous and taking part is completely voluntary.

Information about your right of objection pursuant to Art. 21 GDPR

Individual objection right

For reasons arising from your specific situation, you have the right to file an objection at any time against the processing of personal data relating to you, which takes place on the basis of Art. 6 Para. 1 lit. f GDPR (data processing on the basis of a balancing of interests), this also applies to profiling based on this provision within the meaning of Art. 4 No. 4 GDPR.

If you file an objection, we will no longer process your personal data, unless we can prove compelling reasons worthy of protection for the processing, which outweigh your interests, rights and freedoms, or the processing has the purpose of assertion, exercising or defence of legal claims.

Recipient of an objection:


Komatsu Forest AB

Box 7124
907 04 Umeå, Sweden

Change to our privacy policy

We reserve the right to adapt this privacy policy, so that it always complies with the current legal requirements or to implement changes of our services in the privacy policy, e.g. for the introduction of new services. The new privacy policy will then apply to your next visit.

Questions to the data protection officer (DPO) 

If you have questions about data protection, please send us an email or directly contact the person who is responsible for data protection in our organisation:
KWO/Data Protection Officer
Komatsu Forest AB
Box 7124
907 04 Umeå, Sweden

Published April 4th 2018
Updated July 2nd 2018
Updated May 16th 2022
Last updated September 12th 2023