Privacy statement for valio’s visitors

This privacy statement describes how Valio Ltd (“Valio”) processes personal data of persons visiting Valio’s premises (such as production facilities and headquarters of Valio). Valio may update this privacy statement as necessary, for example, due to possible amendments in legislation.

1. CONTROLLER

Valio Ltd (Business ID: 0116297-6)

Address: Meijeritie 6, 00370 Helsinki, Finland

2. CONTACT INFORMATION

If you wish to exercise your rights described in this privacy statement or if you have any questions about the processing of your personal data, you may contact Valio 1) by email to privacy.office@valio.fi, 2) by telephone to +358 10 381 2185, or 3) by post to Valio Ltd, Meijeritie 6, 00370 Helsinki, Finland.

3. PURPOSES AND GROUNDS FOR PROCESSING OF VISITORS’ PERSONAL DATA

Valio processes the personal data of the visitors for the following purposes:

  • sending an invite for the visit;
  • receiving the visitors and verifying their identity for the visit;
  • ensuring the smooth running of the visit;
  • preventing the spread of infectious diseases on Valio’s premises;
  • ensuring the safety of Valio’s premises, customers, employees, and other persons visiting the premises, as well as public safety; and
  • protecting Valio’s property and ensuring order at Valio’s premises.

Legal grounds for processing of the personal data are 1) Valio’s legitimate interests based on the aforementioned purposes, 2) visitor’s consent, or 3) execution of an agreement (insofar as the visitor or the undertaking they represent has a contractual relationship with Valio).

4. WHAT TYPES OF PERSONAL DATA ARE WE PROCESSING?

Valio processes the following personal data of the visitors:

  • first name and last name;
  • email address;
  • information on the fulfilment of the requirements of the visit;
  • information about the visit to Valio, including time of the visit;
  • images and recordings of surveillance cameras located at the Valio premises visited; and
  • any other information given by the visitors.

5. SOURCES OF PERSONAL DATA

We collect personal data 1) from the visitors themselves before or during the visit, for example through a visitor management application, and 2) from the visitor's contact person at Valio. At some of Valio’s premises, there is also recording camera surveillance, which collects and stores personal data. Camera surveillance is informed by signs at those Valio locations where the camera surveillance is used. Camera surveillance signs are visible in the rooms and areas where the cameras are located.

6. WHO PROCESSES AND TO WHOM WE DISCLOSE THE PERSONAL DATA?

We process the personal data within the Valio Group. The personal data is processed only by our employees whose duties involve personal data processing. In addition, the personal data is processed by our subcontractors, such as security and lobby service providers and IT service providers. Subcontractors process the personal data on behalf of and for Valio.

We do not regularly disclose the personal data to other controllers. We disclose the personal data to the authorities on a case-by-case basis if there is a legal basis for doing so.

7. TRANSFERS OF PERSONAL DATA OUTSIDE THE EU OR EEA

Valio does not transfer the personal data outside the European Union or European Economic Area.

8. HOW LONG WE RETAIN YOUR PERSONAL DATA?

We retain the personal data of the visitors for approximately six (6) months after their last visit.

We may retain personal data for longer if required by mandatory law or a legal claim against Valio. In this case, we will only retain the personal data required by law or to process the legal claim and delete other personal data.

9. HOW DO WE TAKE CARE OF THE SECURITY AND PROTECTION OF YOUR PERSONAL DATA?

Valio takes care of the data security of personal data with appropriate administrative and technical protection measures. Only such persons to whom processing of personal data is necessary to perform their work tasks may process the personal data. The systems containing personal data can be accessed only with separately granted personal usernames and passwords.

10. RIGHTS OF THE VISITORS UNDER THE DATA PROTECTION LEGISLATION

According to the applicable data protection legislation, you have at any time the right to:

  • have access to your personal data (the right to review);
  • the rectification or completion of your personal data that is inaccurate;
  • object to the processing of your personal data provided that the legal basis for the processing is Valio’s legitimate interests;
  • the erasure of your personal data (the right to be forgotten); and
  • the restriction of processing of your personal data (e.g. for the time during which you await a response for the request to rectify your personal data).

You must present the request regarding your rights described above to the contact person mentioned in Section 2.

If you object to the processing of your personal data, please specify in your request the purpose(s) of the processing to which you object. In addition, please specify the grounds on which you object to the processing of your personal data. Valio may ask you to verify your identity or clarify the request before it is implemented. Valio may refuse to fulfil the request on the grounds of the applicable law, in which case we notify you of such grounds.

11. RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY

You have a right to lodge a complaint with the competent supervisory authority in case you consider that Valio has not processed your personal data in accordance with the applicable data protection legislation. You may lodge the complaint with a supervisory authority of the EU member state where you habitually reside or work, or where the alleged breach of data protection legislation has taken place.