About KONE
Safety
Sustainability
Innovation
Careers
Privacy Statement
Date of publication: August 3, 2026
1. Purpose of this Privacy Statement
KONE Corporation and its employees, partners, subsidiaries and affiliates (“KONE” or “we”) are committed to protecting your privacy and personal data. KONE processes your personal data in accordance with applicable data protection principles legislation.
The purpose of this privacy statement ("Privacy Statement”) is to provide you comprehensive information about processing of your personal data as a representative, contact person or other stakeholder of our customer, supplier or subcontractor, or as an end-user of our webpage or other internet services, including the following information:
- what personal data we process on you
- for what purposes and on what legal grounds we process your personal data
- from where we collect your personal data
- how long we store your personal data
- with whom we may share your personal data
- where we may transfer your personal data and under what safeguards
- what rights and options you have regarding the processing of your personal data
This privacy statement is divided into sections that provide specific information to you as an individual depending on your relationship with KONE as well as general information applicable to all groups of individuals:
- Purpose of this Privacy Statement
- Data Controller and Contact Information
- General Information
- Customer Data, Website Data, Supplier Data
- Purposes of Processing
- Recipients of your Personal data and International Transfers
- Your Rights
- Limitations on the use and disclosure of your personal data for Data Subjects in Mexico
- Updates to this Privacy Statement
- Data Security
- Consent
This Privacy Statement may be supplemented by product, solution or service specific privacy statements and additional local documentation. Moreover, the rights you have as a data subject may also vary due to applicable privacy laws.
2. Data controller and Contact information
The local KONE group company with whom you are or have been in contact is the data controller of your personal data.
Many of the tools and processes used in KONE are global and made available to local KONE entities in a centralized manner by KONE Corporation. In these global tools and processes, personal data is controlled jointly by the local KONE group company and KONE Corporation.
In all data protection related matters, including if you need to access this privacy statement in a different form due to a disability, the following contact information applies:
KONE Corporation
Address: KONE Building, Keilasatama 3, P.O. Box 7, 02150 Espoo, Finland
Telephone: +358 204 751
Contact person: Global Legal, Data Protection Counsel, personaldatarequest@kone.com
All requests that relate to use of data subject’s rights can be send to KONE by using the contact form available on the kone.com webpage at https://www.kone.com/en/contact.aspx (select option “Personal Data Enquiry”).
If you are located in Mexico, for more information and ARCO Rights Requests please follow the process detailed in Section 6 below.
3. General Information
This section provides you with general information on the processing of your personal data by KONE related to this website and the other internet services of KONE (the “Site”).
Please read this Privacy Statement carefully if you plan to browse or otherwise use the Site. If you do not agree with this Privacy Statement, you must leave the Site. Provision of personal data is voluntary on the Site but if you choose not to disclose your personal data, we will not necessarily be able to provide you with our products, solutions, or services.
You may not provide us with or permit us to collect any personal data relating to another person, unless you have the authority to share that data with us and to permit us to use the data as described in this Privacy Statement.
Artificial Intelligence Features. Certain functionality on the Site may use artificial intelligence, including interactive chat features or tools that respond to inquiries about the Site, KONE, or KONE’s products, solutions, and services. Information you submit through these features may be processed to provide a response or otherwise interact with you. Generally, sensitive personal data or confidential information should not be submitted through these features. If these are required for a particular service, however, KONE will specify the information required and the purpose(s) for its collection.
3.1 Collected Personal Data
Generally, you can visit the Site without entering any personal data. However, some areas of the Site may require us to collect your personal data.
On certain parts of the Site, you may be asked to provide personal data and/or sign up for or access a service. Once you register on the Site or have otherwise been assigned a specific identification code to access your accounts, we may request that you provide certain information.
3.4 Cookies (KONE US and Canada websites)
KONE may place information, commonly known as “cookies,” on your computer or mobile device. Cookies refer to technologies that collect and store information in your browser.
Cookies are used for improving the functioning of the Site, to track and analyze the use of the Site, support your use of the Site, enabling targeted advertising and similar purposes. We have categorized the purpose of the cookies we use on our Sites to the following categories:
- Necessary cookies that are necessary for the website to function as intended.
- Analytics cookies that allow us to count visits and traffic sources to measure and improve performance of our sites.
- Targeting cookies that are set by our marketing partners to show you relevant advertisements.
Cookies that are ”necessary” are always active and we do not request your consent on placing such cookies. In other cases, we request your consent to place the cookie when you visit our Site.
We use cookies that are stored for certain limited time period (typically no longer than 364 days) and session cookies, which are stored only for the duration of your browsing session.
You may find more information on necessary, analytics and targeting cookies in the cookie banner on our Site. You may disable cookies or manage your cookies preferences on your web browser settings or on our Site’s ”manage cookie preferences” functionality. Kindly note that disabling cookies may impact your experience of the Site and prevent you from using certain services on the Site.
4. Customer Data, Website Data, Supplier and Third Party Data
Like many other companies, to conduct its business and provide its products and services, KONE collects personal data of our customers’, potential customers’ and other companies’ representatives with whom we have a business relationship or want to develop one. We also collect data from end users of our website and internet services as well as from the suppliers and subcontractors that we work with.
If you provide KONE with a third-party’s personal data (for example, personal and/or professional references) to fulfill the purposes outlined in this Privacy Statement, you must advise said third parties that their personal data will be processed by KONE and make them aware of the content of this Privacy Statement. By virtue of your provision of said information, you also confirm that you have the data subjects’ consent to transfer their information to KONE and that said personal data is correct and complete.
KONE may also collect personal data of KONE’s customers’ customers or end-users who contact KONE relating to elevators, escalators or other equipment. KONE may collect personal data related to external stakeholders KONE, e.g., media representatives, shareholders.
4.1 Collected Personal Data
Following information is collected and processed by KONE:
Sensitive Log-in Information Disclosure. In addition to the categories of sensitive personal data listed elsewhere in this Privacy Statement, we collect the following categories of sensitive personal data (as defined under relevant laws): A consumer’s account log-in in combination with any required security or access code, password, or credentials allowing access to an account. We collect this data to process transactions, comply with laws, manage our business, or provide services. Note that we do not use such data for any purposes that are not identified within Cal. Civ. Code § 1798.121. We do not “sell” or “share” sensitive personal data for cross-context behavioral advertising.
4.2 Source(s) of Personal Data and Retention Period
The personal data has been received from you as a site visitor, a customer, supplier, or obtained in connection with the use of KONE’s products and services, directly from you in connection with your use of the Site, or in connection with your business relationship with us. Personal data may also originate from KONE’s representatives based on their business interactions with you. In certain cases KONE may collect personal data from public registers and other reliable external sources.
The personal data will be stored as long as needed for (i.) the purpose it was collected for (e.g., the duration of the ongoing contract or business relationship); (ii.) for compliance with applicable legal obligation or statutory retention period (e.g. under commercial, accounting and tax laws); (iii.) statute of limitation for claims; and/or (iv.) other justified reason that requires us to keep the data. After your personal data is not needed, the personal data will be effectively deleted or made anonymous. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the data. We also weigh the potential risk of harm from unauthorized use, access to, or disclosure of the data, the purposes for which we obtained the data and whether we can meet those purposes through other means, as well as applicable legal requirements.
5. Purposes of the Processing
In addition to the purposes and uses described elsewhere in this privacy statement, the purposes for which KONE processes personal data are, for example:
- Ensure an efficient and secure use of the Site;
- Enable functioning of the Customer Portal;
- Develop the Site for a better quality and broader scope of services;
- Provide customized services and content (including marketing) recognizing your specific needs and interests;
- Improve our services to you;
- Contact you;
- Conduct research and collect statistics (e.g. what sections of our Site the users visit and how much time they spend on the Site);
- Resolve claims or manage incidents;
- Conduct analytics;
- Find and prevent malicious, deceptive, fraudulent, or illegal activity;
- Find, remediate, and prevent security incidents;
- Enforce our policies and agreements;
- Debug, find, and fix errors that impair our website and services, including the Customer Portal;
- Comply with legal or regulatory obligations;
- Establish or exercise our rights;
- Defend against legal claims;
- Fulfill contractual obligations towards KONE’s business stakeholders;
- Manage our relationships; and
- For other reasons with your consent.
6. Recipients of Your Personal Data and International Transfers
We may share your personal data with the following parties to the extent needed in connection with the above-described purposes and to the extent necessary and allowed under applicable laws:
- Companies within the KONE group
- Official or Governmental Authorities in connection with legal proceedings or in order to comply with our legal obligations.
- Our subcontractors and third-party service providers that process personal data on our behalf based on our assignment and subject to our instructions. KONE ensures that such service providers are bound by a written data processing agreement that sufficiently addresses data protection and confidentiality requirements.
- Other entities in connection with mergers and acquisitions
- To other third-parties based on your consent, which we may have received in connection with a particular service, for example.
The table below indicates the categories of personal data we collect and transfer in a variety of contexts. Because our services are not intended for children, we have no actual knowledge that we share for targeted advertising any personal data of individuals who are under 16 years of age.
Category of Personal Data | Category of Recipients | |
Disclosures for a | Sharing for Targeted Advertising (KONE.com Mexico website only) | |
Identifiers – this may include | · Affiliates or subsidiaries. · Data analytics providers. · Internet service providers. · Joint marketing partners. · Other Service Providers. · Payment processors and financial institutions. · Professional services organizations, this may include auditors and law firms. | · Advertising networks.
|
Financial Information – this | · Affiliates or subsidiaries. · Other Service Providers. · Payment processors and financial institutions. · Professional services organizations, this may include auditors and law firms. | Not Shared. |
Commercial information – | · Affiliates or subsidiaries. · Joint marketing partners. · Other Service Providers. · Payment processors and financial institutions. · Professional services organizations, this may include auditors and law firms. | · Advertising networks.
|
Internet or other electronic | · Affiliates or subsidiaries. · Data analytics providers. · Internet service providers. · Joint marketing partners. · Operating systems and platforms. · Other Service Providers. · Professional services organizations, this may include auditors and law firms. | · Advertising networks.
|
Professional or employment- | · Affiliates or subsidiaries. · Other Service Providers. · Professional services organizations, this may include auditors and law firms. | Not Shared. |
Non-public education | · Affiliates or subsidiaries. · Other Service Providers. · Professional services organizations, this may include auditors and law firms. | Not Shared. |
Inferences drawn from | · Affiliates or subsidiaries. · Joint marketing partners. · Other Service Providers. | · Advertising networks.
|
Additional categories of | · Affiliates or subsidiaries. · Other Service Providers. · Professional services organizations, this may include auditors and law firms. | Not Shared. |
Due to technical and practical requirements, personal data may be processed inside or outside of Canada, Quebec, Mexico, and the EU/EEA. When KONE transfers personal data or EEA residents outside of the EU/EEA, KONE ensures that there is a legal basis for such transfers either by means of agreements
(EU Commission’s standard contractual clauses available here) or otherwise (e.g., by an adequacy decision by the European Commission). In addition, we ensure by contract that our subcontractors, third-party service providers transfer your personal data outside the EU/EEA only on KONE’s permission and only when sufficient legal grounds exist.
7. Your Rights
As a data subject you have certain rights with regards to your personal data:
- Right to access: You may request confirmation whether your personal data is processed by KONE and if so, get a copy of the personal data processed about you.
- Right to rectify: You may request us to rectify any incomplete, inaccurate or outdated personal data.
- Right to deletion: You are entitled to ask us to erase personal data related to you in certain circumstances. If required by law, we will grant such a request, but note that in many cases, we must keep your personal data to comply with legal obligations, resolve disputes, enforce agreements, or for other business purposes.
- Right to withdraw consent: If the personal data processing is based on your consent, you are entitled to withdraw your consent at any time.
- Right to object: If processing is based on KONE’s legitimate interest, you may object to such processing based on a specific individual circumstance. To exercise this right, you must identify such circumstance in the request relating to objection. You are always entitled to object to processing of your personal data for direct marketing purposes.
- Right to restrict processing: Under certain circumstances, you have a right to require KONE to restrict the processing of your personal data.
- List of Third-Party Recipients. In some areas, you may have the right to obtain a list of specific third parties to which we have disclosed personal data.
- Opt-out of Website Targeted Advertising. You may opt-out of online targeted advertising (e.g., cookies) by clicking the Manage Cookie Preferences link in the website footer. Note that if you change browsers or devices, or if you clear your browser’s cache, you may need to click the link again to apply your preference.
- Right to data portability: if we are processing your personal data based on your consent or performance of a contract, you may request to receive your personal data in a structured, commonly used and machine-readable format, and you have the right to request transfer of the personal data to another controller.
- California Shine the Light. If you would like more information on the categories of personal data (if any) we share with third parties or affiliates for those parties to use for direct marketing, submit a written request using the information provided in Section 2 above.
If you wish to exercise your rights described above or you have any concerns, remarks or questions regarding KONE’s data processing activities, you may at any time contact KONE through contact information provided under Section 2 above or using the contact form available on the kone.com webpage at https://www.kone.com/en/contact.aspx (select option “Personal Data Enquiry”). We will not discriminate against individuals based on their exercise of a privacy right.
We will require you to prove your identity when making most types of requests. We may verify your identity by phone or email. Depending on your request, we will ask for information such as your name, contact information, and details about our relationship with us. If you disagree with our denial of a request, you may appeal our decision by contacting us with the subject line “Appeal.”
In some circumstances, you may designate an authorized agent to exercise rights on your behalf. If you are an authorized agent, you must provide sufficient proof that you are authorized to act on another’s behalf as well as verify your identity and verify the identity of the person on whose behalf you are submitting the request.
Please note that KONE may refuse a request or obtain a reasonable fee for fulfilling a request if the request is manifestly unfounded or excessive or KONE has another legitimate ground for refusing the request. Such legitimate grounds could e.g. prevent KONE from deleting personal data that needs to be retained due to local legal requirements or to maintain an audit trail until the end of local claim period. KONE may also need to retain the data to be able to fulfil contractual obligations.
Please also note, that if KONE blocks or deletes your personal data as requested, KONE may not be able to perform the services you would like to use or have previously ordered or requested or provide you the content you would like to download or receive.
You have always right to lodge a complaint with the local supervisory authority regarding processing of your personal data. You can find information on competent supervisory authorities in the EU countries as well as their contact information here.
For data subjects based in Mexico, if you wish to exercise your Rights to Access, Rectify, Cancel or Object (“ARCO Rights”), please send a request to us at the following e-mail address: personaldatarequest@kone.com, with e-mail subject line “Exercise of ARCO Rights / Mexico” or submit your request at the following address: KONE México, Avenida Coyoacán 1622 Edificio 1 PB, Col. Del Valle, Alcaldía Benito Juárez, Ciudad de México, México, C.P. 03100, together with the following information and documents:
- Your full name and address or other means of communicating our response to your request.
- Copy of your official ID and/or of your legal representative. Such documents should be scanned and attached to the corresponding email communication. For legal representative, please also attach a copy of his/her power-of-attorney.
- Clear and precise description of the personal data about which the ARCO Rights are to be exercised, as well as the right and/or rights you wish to exercise. This description could be included in the email cover letter or in a document attached thereto. Such document or documents must be scanned, signed, and initialized in each of its pages.
- State your agreement to receiving our response through an email communication, including the corresponding email address, or the physical address to hear and receive the response from KONE, and when applicable, for any future communications and/or notifications, or the statement that our response and/or future notifications or responses shall be sent by email, indicating the corresponding email address.
- If applicable, please provide any other information you consider important so that we can fulfill your request or locate your Personal Data.
KONE will issue a response within twenty (20) business days after we receive your request. Once you receive our response, you will have fifteen (15) business days to respond to our communication. In case you do not reply to our response within the mentioned period, we will understand in good faith that you agree with it. If, for any reason, your request is incomplete, or contains errors that prevent us from responding, we will ask you to correct it within ten (10) business days after we inform you of the situation. Additionally, please be informed that the deadlines may be extended once for an equal period, provided that the circumstances of the request warrant such an extension.
Please note that KONE, as data-controller, may refuse the exercise of your ARCO Rights in the cases permitted by applicable law, and shall inform you about such decision. The refusal may be partial, in which case KONE will carry out the access, rectification, cancellation or objection in the corresponding part.
Should you wish to revoke your consent for the use of your personal data, please also follow the process described above.
8. Limitations on the use and disclosure of your personal data for Data Subjects in Mexico
When you provide your information, or subsequently, you can limit the use or disclosure of your personal data. You may request KONE to restrict the use of your personal data. In addition, you can indicate whether or not you authorize KONE to share your personal data with other KONE entities or other third parties. To exercise this right, you must follow the procedure and instructions applicable to exercising your ARCO Rights.
KONE has implemented means and procedures to ensure that your opt-out instructions are followed to prevent disclosure of personal data. If you request registration on these exclusion lists, we will provide you with the corresponding proof of registration.
9. Updates to this Privacy Statement
KONE seeks to develop the Site, its business as well as its data protection related processes and tools continuously and reserves the right to amend this Privacy Statement. To the extent required by applicable privacy laws, KONE may contact you also through other interfaces or by using the collected contact information to provide information about updates that have material effects to you as a data subject. If changes are material, the privacy statement that was in place when you submitted personal data to us will generally govern that data unless you consent to the new privacy statement. Our privacy statement shows “effective” and “last updated” dates at the top of the privacy statement. The effective date is the date the current version took effect. The last updated date is the date the current version was last substantively changed.
10. Data Security
We maintain internal governance policies designed to protect your information. These governance policies include, but are not limited to, Written Information Security Plans, Incident Response Plans, Data Subject Request Protocols, and Record Retention and Destruction Policies. No method of internet transmission or electronic storage is fully secure. While we use reasonable efforts to protect personal data, we cannot guarantee its security. If we are required to inform you about a security incident, we will do so electronically, in writing, or by phone, as the law permits.
11. Consent
By using our website and providing us with your personal data, you acknowledge and accept this Privacy Statement. This consent gives us the right to process your personal data in the manner indicated in this Privacy Statement and in conformity with applicable law.