Customer register

 

1. Controller and Contact Details

Berner Ltd (hereinafter Berner)
Business ID: 0107011-5
Hitsaajankatu 24, FI-00810 Helsinki, Finland
Tel. exchange: +358 20 791 00
Email: tietosuoja@berner.fi

2. Name of the Register

Berner Ltd’s Customer Register

3. Purpose of Processing Personal Data

Personal data may be processed for the following purposes:

  • Customer service, management, and development of customer relationships
  • Processing of orders and delivery of products
  • Product manufacturing and development
  • Ensuring product safety and quality
  • Customer communications, including service notifications, newsletters, and marketing communications
  • Monitoring and analysing purchasing behaviour and customer segmentation
  • Business development and reporting

4. Legal Basis for Processing

Processing is primarily based on the contract between the customer and Berner Ltd or on measures preceding the conclusion of such a contract. Business development, segmentation, and marketing communications are based on Berner’s legitimate interest. Processing may also rely on the data subject’s explicit consent.

Berner may process personal data based on legitimate interest for purposes such as targeted marketing, personalised communications through analytics or profiling, maintaining and developing customer relationships, and business planning and reporting. Profiling is not based on automated decision-making and does not have significant effects on the rights or freedoms of the data subject. Profiling may be used, for example, to form customer segments or target messages based on participation history, communication data, or purchasing behaviour.

Special category data (e.g., dietary requirements or health information) are processed only with the data subject’s explicit consent and only to the extent required for the stated purpose.

5. Data Content

Depending on the customer relationship and the product purchased, the register may include:

  • First and last name
  • Company name, Business ID, and position or title (for corporate customers)
  • Postal address
  • Telephone number
  • Email address
  • Information related to the customer relationship and marketing activities (e.g., order history, event participation, clicked links)
  • Payment information (e.g., payment method and related identifiers)
  • IP address identifying the user’s device
  • Behavioural data collected via cookies (if the user has consented to website analytics tracking)

The register may also include the following special category or sensitive personal data:

  • Personal identity code or date of birth, when necessary for unambiguous identification or to fulfil legal obligations
  • Allergy or dietary information related to events (voluntary to provide)
  • Health information provided by the data subject or necessary for maintaining the customer relationship
  • Personal characteristics related to the use of cosmetic, hygiene, or medical devices, such as skin or hair type, diagnosis, or visual acuity

6. Recipients and Recipient Groups

Personal data may be disclosed to:

  • Companies within the Berner Group involved in joint marketing and sales promotion activities
  • Third-party service providers offering CRM, communications, analytics, marketing, or customer service solutions (e.g., email platforms, event organisers, analytics services, CRM vendors)
  • Berner’s principals (e.g., product manufacturers) or resellers when necessary to manage the customer relationship, deliver products, or provide support (e.g., complaints, technical assistance, product traceability, or recalls)
  • Authorities, when required by law or regulation

Data transfers are always carried out in compliance with applicable data protection legislation, and Berner ensures secure and confidential processing through appropriate contractual arrangements.
No personal data are transferred outside the European Economic Area (EEA).

7. Retention Periods

Personal data are retained as long as necessary to fulfil the purposes described in this notice, considering the customer relationship, legal obligations, and potential warranty or product safety responsibilities.

8. Sources of Data

Personal data are primarily collected from the data subject during different stages of the customer relationship (e.g., purchase, quotation, order, or contract). Data may also be collected during customer service interactions, via online forms, or from public sources.

9. Rights of the Data Subject

Data subjects have the right to:

  • Obtain confirmation as to whether their personal data are processed and access such data
  • Request rectification or erasure of their data
  • Object to direct marketing
  • Request restriction of processing or otherwise object to it
  • Data portability, where processing is based on consent and carried out automatically
  • Withdraw consent at any time
  • Lodge a complaint with the supervisory authority (in Finland: the Office of the Data Protection Ombudsman)

Requests can be submitted via Berner’s Personal Data Form:
https://www.berner.fi/en/contacts/contact-us/?form=personal-data

10. Principles of Data Protection

Data are stored in information systems protected by technical and organisational measures such as firewalls and passwords. Only authorised personnel have access to personal data. Appropriate confidentiality and data processing agreements are concluded with external service providers.

11. Cookies and Tracking Technologies

Berner may use cookies to improve its services, functionality, personalisation, and analytics in cooperation with partners. The use of cookies is based on the user’s consent, which can be managed and withdrawn at any time in the cookie management tool. More information: Cookie policy – Berner Oy

Muokattu: 4.7.2025