DESCRIPTION OF THE REGISTER 1. Controller Metsa Wood UK Ltd (”Metsä Wood”), a member of Metsä Group Old Golf Course, Fishtoft Road, Boston, Lincs, PE21 0BJ 2. Contact person Frank Werling Mayne House, Fenton Way, Southfields Business Park, Basildon, Essex SS15 6RZ UK Tel: +44 1268 364513 Email finnframe.app@metsagroup.com 3. Name of the register 4. The purpose for processing data User data collected through Metsä Wood Finnframe mobile phone application (“Finnframe Application”) Metsä Wood collects user data for following purposes: 1. to provide the users with the Finnframe Installation Application which is an educational service intended to support tradesmen when installing the Finnframe System. 2. to develop Metsä Wood’s services and marketing (including statistical purposes). 3. inform the users of Finnframe Application of new products, services or promotions Metsä Wood may offer from time to time. Metsä Wood may use the user data to personalize its offering and to provide the users with more relevant services, for example, to make recommendations and to display customized content and advertising in Metsä Wood’s products and services. Processing of personal data may be outsourced to group companies or other third parties. 5. Content of the register Users geo-location: Locations where the Finnframe Installation App has been launched. However, location data will not be used to identify or contact the user personally. 6. Regular sources of information Data is collected from the users themselves. In addition, location data is collected through the use of satellite, mobile, Wi-Fi or other network based positioning methods. Metsä Wood does not use this information to identify the user personally without user’s prior consent. 7. Regular destinations of disclosed data Metsä Wood will not assign or transfer any data to outsiders without permission given by the user except when mandatory law requires such transfer. Data may be assigned and transferred within Metsä Group inside or outside the European Union or the European Economic Area. Transfer outside the European Union or the European Economic Area is always conducted according to the EU Data Protection Directive 95/46/EC 8. The principles on how the register is secured A. Manual register (place of storage and the methods of protection) No manual register. B. Data register/ADP register (principles for the right to use a register, monitoring of the use and actual protection of hardware) Access to data is protected on many levels. The program is available only within Metsä Wood’s own network and only by named persons. Full access rights are granted only to named administrative persons for maintenance work. All users need to identify themselves in order to get into the program and users may view only data relating to their primary duties 9. Right to inspection A person who wishes to inspect the data needs to request it by presenting a document with personal signature or personally at controller’s place of business. Contact finnframe.app@metsagroup.com for further information of the inspection. 10. Right to rectification Metsä Wood shall rectify, erase or complete any information in the register that is incorrect, insufficient, unnecessary or outdated for purposes of processing the personal data. If you find such information please contact finnframe.app@metsagroup.com for further information of the rectification.