PRIVACY POLICY

Last Updated: 20 February 2025

Your privacy is important to CME. We developed this Privacy Policy to provide you with information on how we process your personal data when you create an account on the CME CONNECT Portal or a Custom Portal, interact with our customer support specialists, make a purchase, visit https://cmemining.com/, https://cme.se/, https://connect.cme.se/ or other websites on which this Privacy Policy is posted, or use CME apps that include a link to this Privacy Policy. By providing us with your personal data, you agree to be bound by the terms and conditions of this Privacy Policy. “Personal data” is information relating to an identified or identifiable natural person.

KEY TERMS

“We,” “us,” or “our” refers to C.M.E. Blasting & Mining Equipment Ltd. and Construction-Mining-Equipment AB.

“Personal data” is any information relating to an identified or identifiable natural person. 

“Processing” refers to any operation performed on personal data, including, but not limited to, collection, use, or storage.

TABLE OF CONTENTS

1. Categories of Personal Data Processed by CME

2. Categories of Recipients of Personal Data

3. Transfers of Personal Data

4. Cookies and Similar Technologies

5. Application Analytics

6. Children

7. Privacy Policy Updates

8. Security of Personal Data

9. Retention of Personal Data

10. Automated Decision-Making, Including Profiling

11. Your Rights

1. Categories of Personal Data Processed by CME

Personal data that is processed when you create an account

When you create an account to access the CME CONNECT Portal or a Custom Portal or otherwise with CME (collectively and individually referred to as “CME account”), we ask you to provide your email address, name, and password. You can choose to provide only your first name or a nickname instead of your full name if you wish.

PURPOSES AND LEGAL GROUNDS

  a) CME processes your email address and password because you use your email address and password to sign in to your account. The legal ground for processing your email address and password for this purpose is CME’s legitimate interest in confirmation of your identity and your contact details and protecting the security of your account.

  b) CME also processes your email address for the purpose of sending you important information about your CME grinding systems, services, apps, or account, such as important safety information or material changes to this Privacy Policy. The name you provide is associated with your account profile and is displayed when you submit comments or other material on a CME website or app or engage with other CME users. The legal ground for processing your email address and name for these purposes is CME’s legitimate interest in providing you important safety or other information about your CME grinding systems, services, apps, or account or material changes to this Privacy Policy and in providing you an opportunity to engage with other CME users.

  c) If you provide your opt-in consent to receiving marketing information from CME, CME will also process your email address for the purpose of sending you marketing information about CME grinding systems, products, services, and apps, as well as newsletters. The legal ground for processing your email address for this purpose is your consent. You may withdraw your consent at any time by changing your preferences in your CME account or through the unsubscribe link at the bottom of our marketing emails. The marketing emails you receive from CME are based on the preferences you provide in your CME account, the locale indicated by your CME Machine’s Internet Protocol (IP) address, the types of CME grinding systems you have added to your CME account, and any subscriptions included in your CME account. The legal ground for processing this data for this purpose is CME’s legitimate interest in reducing the number of marketing emails sent to each particular customer by selecting which customers receive a particular marketing email rather than sending every marketing email to every customer who has consented to receiving marketing emails.

  d) CME also processes your email address to associate it with your CME account when you interact with our technical support representatives. The legal ground for this processing is our legitimate interest in providing quality technical support.

  e) CME also processes your email address to notify customers when they have violated our terms. The legal ground for this processing is our legitimate interest in ensuring a quality experience for all customers and ensuring adherence to our terms.

  f) CME also processes your personal data for administration purposes and handling legal claims. It is CME’s legitimate interest to be able to defend ourselves against or insert any legal requirements and claims.

  g) CME also processes your personal data in order to comply with statutory and other regulatory requirements and that apply to CME.

Personal data that is processed when you sync your CME device

When you sync your CME grinding system through CME Connect Portal or Custom Portal, we log data about the transmission, such as the IP address used when syncing, the time and date, crash/diagnostic logs, geographic location of the grinding machine, information about your grinding system, information about the network used to sync (e.g., Wi-Fi or cellular), and grinding system operating info.

PURPOSE AND LEGAL GROUND

We process this information to prevent unauthorized access to your account, help identify and resolve errors or syncing issues. The legal ground for processing this information for this purpose is CME’s legitimate interest in resolving errors or syncing issues and providing quality product support.

Personal data that is processed when you communicate with CME

When you interact with our technical support representatives by email or telephone, online, or in person, we collect personal data, such as your name, mailing address, phone number, email address, and contact preferences, and information about the CME grinding systems that you or your employer own, such as their serial numbers and dates of purchase, and software updates that have been purchased. We also may create event logs that are useful in diagnosing product or app performance-related issues and capture information relating to the support or service issue. To improve customer service, subject to applicable laws, we may also record and review conversations with technical support representatives and analyze any feedback provided to us through voluntary customer surveys. With your consent, our technical support representatives may sign in to your CME account, if appropriate, to help troubleshoot and resolve your issue.

PURPOSES AND LEGAL GROUNDS

We use this information to provide you with technical and product support, to monitor the quality and types of technical and product support we provide to our customers, and to facilitate repairs, returns, or exchanges. The legal ground for processing this information for these purposes is CME’s legitimate interest in providing quality product support. The legal ground for signing in to your CME account, if appropriate, to help troubleshoot and resolve your issue is your consent, which you may withdraw. This data is also used to help improve our products.

Personal data that is processed when you purchase a grinding system, grinding cups or replacement parts from CME

When you purchase a grinding system, grinding cups or replacement parts from CME, we may collect your name, address, telephone number, other contact information, or purchase details, such as invoice number or products purchased. In some countries, third-party providers may be used to generate the reporting required for the appropriate tax regulatory agency.

PURPOSES AND LEGAL GROUNDS

We process this information to generate an invoice in our systems for tax reporting purposes or upon your request. The legal ground for processing your information for generation of an invoice for tax reporting purposes is fulfillment of a legal obligation. The legal ground for processing your information for generation of an invoice at your request is performance of a contract.

2. Categories of Recipients of Personal Data

SERVICE PROVIDERS

CME uses cloud services from third parties to assist in sending emails. Those services track the activities associated with these emails, such as whether they were opened, whether links in the emails were clicked on, and whether purchases were made following clicks on those links. CME uses this data to analyze the level of engagement with its emails. CME also uses third-party service providers to help us better understand usage of CME Connect and CME websites and apps and for related purposes.

CME uses third-party service providers to ship purchased products to customers. 

OTHER DISCLOSURES

We may disclose personal data about you to others: (a) if we have your valid consent to do so; (b) to comply with legal obligations, such as a valid subpoena, court or judicial order, or other valid legal process; (c) to enforce any of our terms and conditions or policies; or (d) as necessary to pursue available legal remedies or defend legal claims.

We may also transfer your personal data to an affiliate, a subsidiary, or a third party in the event of any reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of CME’s business, assets, or stock, including, without limitation, in connection with any bankruptcy or similar proceeding, provided that any such entity that we transfer personal data to will not be permitted to process your personal data other than as described in this Privacy Policy without providing you notice and, if required by applicable laws, obtaining your consent.

In the event that we intend to sell or transfer ownership or control of any or all of CME’s business, assets, or stock to a third party, we reserve the right to disclosure your personal data to a potential buyer both before and after the purchase. In the event that the sale does not go through, we will require the potential purchaser to not use or disclose your personal data in any manner whatsoever and to completely erase same.

3. Transfers of Personal Data

CME is a global business. To offer our products, apps, and services, we may need to transfer your personal data to CME affiliated companies in other countries in accordance with the laws of the jurisdiction in which you reside and your personal data may be available to government authorities under lawful orders and laws applicable in these countries. CME group of companies currently includes C.M.E. Blasting & Mining Equipment Ltd., a Canadian companyand Construction-Mining-Equipment AB, a company in Sweden.

When you create a CME account, add personal data in your account profile, or upload data to your CME account, your personal data will be collected and stored on servers in Sweden. 

Personal data regarding individuals who reside in a country in the European Economic Area ("EEA"), United Kingdom ("U.K."), or Switzerland is controlled by Construction-Mining-Equipment AB’s service provider in Sweden and processed on its behalf by other CME companies to provide support, infrastructure, security, and other key functions. 

All CME companies are required to follow the privacy practices set forth in this Privacy Policy.

4. Cookies and Similar Technologies

A cookie is a small piece of text sent to your browser by a website you visit. It helps the site remember information about your visit, which can make it easier to visit the site again and make the site more useful to you. CME may use Cookies used for security authenticate users, prevent fraud, and protect users as they interact with a service.

Cookies used for functionality allow users to interact with a service or site to access features that are fundamental to that service. Things considered fundamental to the service include preferences like the user’s choice of language, product optimizations that help maintain and improve a service, and maintaining information relating to a user’s session.

Some cookies are used to authenticate users, helping ensure that only the actual owner of an account can access that account. For example, cookies called ‘SID’ and ‘HSID’ contain digitally signed and encrypted records of a user’s CME Connect Account ID and most recent sign-in time. The combination of these cookies allows us to block many types of attack, such as attempts to steal the content of forms submitted in CME services.

Some cookies are used to prevent spam, fraud, and abuse. For example, the ‘pm_sess’ and ‘YSC’ cookies ensure that requests within a browsing session are made by the user and not by other sites. Both cookies prevent malicious sites acting without a user’s knowledge and as if they were that user.

Cookies used for analytics help collect data that allows services to understand how users interact with a particular service. These insights allow services both to improve content and to build better features that improve the user’s experience.

Some cookies help sites understand how their visitors engage with their properties. For example, Google Analytics, helps site and app owners understand how people engage with a service, uses a set of cookies to access anonymised and/or pseudo anonymised data to report site usage statistics without personally identifying individual visitors. 

Please see our cookie policy, located here https://connect.cme.se/agreements/cookie-policy. 

5. Application Analytics

We collect data from users about their usage of CME Connect Portal and Custom Portal. The types of analytical information that are collected include the date and time the user accesses our servers, the location of the grinding system, language setting, what information and files have been downloaded, user behavior (e.g., features used, frequency of use), grinding machine state information, grinding machine model, hardware and operating system information, and information relating to how CME Connect functions. CME uses this data to improve the quality and functionality of CME Connect; to develop and market products and features that best serve you and other users; and to help identify and fix CME Connect stability issues and other usability problems as quickly as possible.

The legal ground for processing this analytical information is our legitimate interest in understanding how our customers interact with our products and apps so we can enhance the user experience and functionality of our products and apps.

Here are examples of third-party providers we currently use: Google Analytics.

6. Children

We request individuals under the age of 18 not provide personal data to CME. If we learn that we have collected personal data from a child under the age of 18 we will take steps to delete the information as soon as possible.

7. Privacy Policy Updates

We may update this Privacy Policy from time to time without notice at any time as we add new products, services, and apps, as we improve our current offerings, and as technologies and laws change. You can determine when this Privacy Policy was last revised by referring to the “Last Updated” legend at the top of this page. Any changes will become effective upon our posting of the revised Privacy Policy.

We will provide notice to you if these changes are material and, where required by applicable law, we will obtain your consent. This notice will be provided by email or by posting notice of the changes on the CME websites and apps that link to this Privacy Policy.

8. Security of Personal Data

The security of your personal data is important to us but remember that no method of transmission over the Internet, or method of electronic storage, is 100% secure. We will use reasonable security measures to protect your personal data against unauthorized access.

9. Retention of Personal Data

We will retain your personal data as long as your CME account is considered to be active. Personal data is only retained for as long as is necessary for the purposes for which it was collected. 

When an active account is terminated or expires, Personal Data collected through the CME Sites will be deleted in accordance with the requirements of applicable law.

Personal Data obtained from CME Site visitors will be maintained as long as it is necessary to provide requested communications and information-based services or until a Visitor exercises its right to opt-out of requested communications or information-based services. Anonymized and Pseudo-anonymized data will be retained as long as CME determines such data is commercially necessary for its legitimate business interests. 

Data retention policies will be regularly reviewed and updated to ensure compliance with data protection laws.

In addition, you may request access to or rectification, portability, or erasure of your personal data, or to delete your CME account, by contacting: 

CME Manufacturing and Logistics AB
by Email:

By Post: Teknikvägen 11 444 95, Ödsmål, Sweden

10. Automated Decision-Making, Including Profiling

CME does not make any decisions based on algorithms or other automated processing that significantly affect you.

11. Your Rights

If you reside in the EEA, U.K., or Switzerland, you have the right, subject to the conditions set out in the General Data Protection Regulation ("GDPR") or other applicable law, to the following:

If you wish to exercise any of these rights, please contact Construction-Mining-Equipment AB at Barnebergsgatan 9, 442 40 Kungälv, Sweden or by email at .

For more information about these rights, please visit the European Commission’s “My Rights” page relating to GDPR, which can be displayed in a number of languages. If you reside outside of the EEA, U.K., and Switzerland, you may have similar rights under your local laws.

If you do not reside in the EEA, U.K., Switzerland, but you believe you have a right to exercise these or any other rights under your local laws, please contact C.M.E. Blasting & Mining Equipment Ltd. at 333 Wyecroft Road, Unit 9, Oakville, Ontario Canada L6K 2H2 or via the contacts page at https://www.cme.se/contact.

If you choose to contact us directly by [website/email/phone/in writing], you will need to provide us with:

We are not obligated to make a data access or data portability disclosure if we cannot verify that the person making the request is the person about whom we collected information or is someone authorized to act on such person's behalf.

Any personal information we collect from you to verify your identity in connection with you request will be used solely for the purposes of verification.

NOTICE FOR CALIFORNIA RESIDENTS OF PRIVACY PRACTICES AND RIGHTS

If you are a California resident, California law may provide you with additional rights regarding your personal data. To learn more about your California privacy rights, please see your rights under the California Consumer Privacy Act of 2018 ("the CCPA").

In addition to the rights of deletion and correction explained above, under California law, you have the following rights:

Please note that you may only make a CCPA/CPRA-related data access or data portability disclosure request twice within a 12-month period.

To exercise your rights, please contact C.M.E. Blasting & Mining Equipment Ltd. at 333 Wyecroft Road, Unit 9, Oakville, Ontario Canada L6K 2H2 or Canadian toll free 1800-263-1755 or USA toll free is 1-800-387-4015 or via the contacts page at https://www.cme.se/contact

NOTICE FOR CHINA RESIDENTS OF PRIVACY PRACTICES AND RIGHTS

If you are a China resident, Chinese law may provide you with additional rights regarding your personal data. To learn more about your China privacy rights, please see your rights under the China’s Personal Information Protection Law ("PIPL"),

All trademarks are the property of their respective owners.

 

Copyright © 2025 CME Group of Companies namely C.M.E. Blasting & Mining Equipment Ltd. and its affiliate Construction-Mining-Equipment AB (collectively " CME") – All rights reserved. 

February 20, 2025