1.Controller and Contact Details
Berner Ltd (hereinafter Berner)
Business ID: 0107011-5
Hitsaajankatu 24, FI-00810 Helsinki, Finland
Tel. exchange: +358 20 791 00
Email: tietosuoja@berner.fi
2. Name of the Register
Berner Ltd’s Stakeholder Register
3. Purpose of Processing Personal Data
Personal data are processed for:
- Maintenance, management, and development of stakeholder relationships
- Business development and reporting
4. Legal Basis for Processing
Processing is based primarily on the contract or pre-contractual measures between Berner and the data subject, or on Berner’s legitimate interest relating to stakeholder relationships. Processing may also be based on the data subject’s explicit consent.
5. Data Content
Depending on the stakeholder relationship, the register may include:
- First and last name
- Stakeholder type or category
- Organisation represented by the data subject, Business ID, position, or title
- Postal address
- Telephone number
- Email address
- Possible education and qualification information
- IP address identifying the device used to log in
- Behavioural data collected via cookies (if consent has been given for analytics tracking)
The register may also contain the following special category or sensitive personal data:
- Allergy or dietary information related to events (voluntary to provide)
- Health information provided by the data subject for a specific purpose or necessary for maintaining the stakeholder relationship
6. Recipients and Recipient Groups
Personal data may be disclosed to:
- Companies within the Berner Group involved in joint marketing and promotional activities
- Third-party service providers that offer CRM, communication, analytics, marketing, or customer service-related services
- Berner’s principals (e.g., product manufacturers) or resellers where necessary for managing stakeholder relationships, product or service delivery, customer support, or other justified business purposes (e.g., product complaints, technical support, product traceability, or recalls)
- Authorities, when required by law or regulation
All transfers and processing comply with applicable data protection legislation, and Berner ensures secure and confidential handling through contractual arrangements.
No personal data are transferred outside the European Economic Area (EEA).
7. Retention Periods
Personal data are retained as long as necessary to fulfil the purposes described in this notice, depending on processing purposes and legal obligations.
After a stakeholder relationship ends, personal data are deleted no later than 12 months afterwards.
8. Sources of Data
Personal data are collected from the data subject, stakeholder organisations, commercial registers, and public sources.
9. Rights of the Data Subject
Data subjects have the right to:
- Obtain confirmation as to whether their data are processed and access such data
- Request rectification or erasure of their data
- Object to direct marketing
- Request restriction of processing or otherwise object to it
- Data portability, where processing is based on consent and carried out automatically
- Withdraw consent at any time
- Lodge a complaint with the supervisory authority (in Finland: the Office of the Data Protection Ombudsman)
Requests can be submitted via Berner’s Personal Data Form:
https://www.berner.fi/en/contacts/contact-us/?form=personal-data
10. Principles of Data Protection
Data are stored in information systems protected by technical and organisational measures such as firewalls and passwords. Access to personal data is restricted to authorised individuals only.
Confidentiality and data processing agreements are in place with all external service providers.
11. Cookies and Tracking Technologies
Berner may use cookies to improve services, functionality, personalisation, and analytics in cooperation with partners. Cookie use is based on the user’s consent, which can be managed and withdrawn at any time in the cookie management tool. More information: Cookie policy – Berner Oy
Muokattu: 4.7.2025