This privacy statement describes how Valio Ltd (hereinafter “Valio”) processes personal data concerning persons visiting Valio’s production plants and locations (including representatives of contractors working for Valio). Valio can update this privacy statement from time to time, for example due to changes in legislation.
Valio Ltd (Business ID: 0116297-6) Meijeritie 6 FI-00370 Helsinki
If you wish to exercise your rights under this privacy statement or if you have questions about the processing of your personal data, please contact Valio by email at privacy.office@valio.fi or by calling +358 10 381 2185.
The processing of visitors’ and contractors’ personal data is necessary for access to Valio’s production sites and facilities. We process all visitors’ personal data for the following purposes:
In addition, we process personal data concerning contractors’ representatives for the following purposes:
The processing of personal data is based on (a) Valio’s legitimate interests in line with the person’s visitor or contractor relationship with Valio and the purposes mentioned above (e.g. ensuring safety at Valio’s production plants) or (b) meeting Valio’s statutory obligations (e.g. fulfilling the requirement in the construction industry to disclose information to the Tax Administration and ensuring compliance with the Food Act).
With regard to visitors, we process the following personal data:
With regard to contractors’ representatives, we also process the following personal data:
When a contractor’s representative accesses a Valio production plant for the first time, they are often initially registered as a visitor. This means that the personal data listed above concerning visitors may also be collected about them. Such personal data collected about a contractor’s representative is subject to the same processing practices as personal data concerning visitors.
With regard to visitors and contractors’ representatives, personal data contained in camera surveillance recordings in Valio’s locations will also be processed. The processing practices and storage periods concerning personal data collected through camera surveillance are described in a separate privacy statement.
We primarily collect personal data directly from visitors and contractors’ representatives before and during the visit or project. We also collect personal data from the company or employer represented by the person if this is practical and necessary in the situation in question.
In addition, we collect personal data through camera surveillance and access control systems. There are camera surveillance signs in production facilities and areas where the cameras are located.
Personal data is only processed by Valio employees who need such data to perform their duties. Personal data can also be processed by subcontractors working for us and on our behalf (e.g. suppliers of camera surveillance and access control systems and the security company operating in the production plant in question).
We do not regularly transfer personal data to other data controllers. On a case-by-case basis, we may disclose personal data to the authorities if there are legal grounds for doing so.
Valio does not transfer personal data concerning visitors or contractors’ representatives outside the EU or the EEA.
We store visitors’ personal data for six (6) months after the visit, after which the data is deleted or erased securely.
We store personal data concerning contractors’ representatives for a year after the end of the contract. After the storage period, personal data will be erased securely or anonymised to ensure that the contractor’s representative can no longer be identified from the data.
We will store personal data longer to the extent that this is required by mandatory legislation, a legal requirement concerning Valio or a statute of limitations or complaint period based on the law or an agreement. In such a case, we will only store the data required by the legislation or the data required to process a legal claim and will erase any other data.
We ensure the information security of personal data through appropriate administrative and technological safeguards. We have restricted the processing of personal data to those persons whose duties include the processing of such data. The systems containing personal data can only be accessed using personal user identifiers and passwords issued separately.
As data subjects, in accordance with the applicable data protection legislation, visitors and contractors’ representatives have the right to:
You must submit a request to exercise your rights in accordance with section 2 of this privacy statement.
If you object to the processing of your personal data, you must specify in your request the purpose or purposes of processing that you oppose. In your request, you must also specify the grounds on which you object to the processing of your personal data.
Valio may ask you to verify your identity or further specify your request before implementing your request. Valio may refuse to implement your request on grounds set out in data protection legislation, in which case we will inform you of such grounds.
As a data subject, you have the right to file a complaint with the appropriate supervisory authorities if you believe that Valio has not processed your personal data in accordance with the applicable data protection legislation. You can file a complaint with the supervisory authorities in the EU member state where your permanent place of residence or employment is located or where the alleged personal data breach has occurred. In Finland, such complaints are filed with the Office of the Data Protection Ombudsman in accordance with the guidelines provided by the office.