Privacy Policy

Personal data category	Purposes of processing	Legal basis and consent
Customer contacts	We process your personal data to manage, maintain and administer the customer relationship. We use your data to provide services, communicate with you, handle invoices, collect payments where necessary, and target advertising or direct marketing.	The legal basis may be performance of a contract, taking steps before entering into a contract, legitimate interest, or legal obligation. Consent is not required where another legal basis applies.
Supplier, subcontractor and partner contacts	We use your personal data to manage cooperation with you or your organization. This includes communication, collaboration, coordination, invoice payments, compliance with obligations, supplier evaluation and feedback.	The legal basis may be performance of a contract, taking steps before entering into a contract, legitimate interest, or legal obligation. Consent is not required where another legal basis applies.
Marketing contacts	We use your personal data for direct marketing, sales promotion, market research, marketing communication and similar communications to company contacts. We also use your data to manage marketing permissions and opt-outs, target marketing, make content more relevant, and develop our business. Marketing may include, for example, newsletters, events, webinars and service updates.	The legal basis is legitimate interest or consent, depending on the communication. We ask for consent when required, for example, for newsletter subscriptions. Consent can be withdrawn at any time.
Website visitors	We use your personal data to operate, secure, develop and improve the biosafe.fi website. We may also use website visitor data to understand how visitors use the website, process website forms, and support targeted marketing and advertising where permitted.	Necessary website use may be based on legitimate interest. Non-essential cookies and similar technologies are based on consent where required. Strictly necessary website functions do not need consent.

 

Our legitimate interests include managing business relationships, communicating with business contacts, providing and developing our services, maintaining website security, managing marketing preferences, and carrying out relevant B2B marketing.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

What personal data we may process and its sources

The personal data we process depends on your relationship with Biosafe. Biosafe provides services to business customers, so customer and marketing data usually concerns company representatives and other business contacts.

Personal data category	What data we may process	Regular sources
Customer contacts	Your name, work email address, mobile or other phone number, role or position, organisation name, organisation’s business ID or equivalent, organisation’s address details, purchase history, invoices, project communication and contact form details in HubSpot.	We usually collect your data from you when the customer relationship is established. We may also collect organisation information from national or international company and business information systems.
Supplier, subcontractor or partner contacts	Your name, work email address, mobile or other phone number, postal address, title, profession or position, organisation name, organisation’s business ID or equivalent, organisation’s address details and contact log.	We collect your data from you or from publicly available sources when cooperation is established or evaluated. We may also collect organisation information from the Finnish Patent and Registration Office’s Business Information System or similar sources.
Marketing contacts	Your name, work email address, mobile or other phone number, organisation name, role or profession, language, information you have provided to us, direct marketing permissions and prohibitions, event or webinar information, newsletter information and communication history. We may also use this information to make our B2B marketing and communication more relevant to you.	We may collect your data from you when you use our services, register for electronic services, subscribe to newsletters, attend events, take part in campaigns, studies or surveys, or otherwise communicate with us. We may also collect and update your business contact information from partner registers, trade registers, company and community information systems, company websites, authorities and companies providing personal data services.
Website visitors	Your IP address, visit time, visited pages, approximate location based on your IP address, visitor source, such as search results or paid advertising, device type, browser information, cookie data and behaviour on the website.	We collect website visitor data from your browser, technical data, cookies and similar technologies, unless you have prevented their use.

 

Who may access your personal data

Your personal data may be accessed or processed by Biosafe personnel and management where it is necessary for their work. It may also be processed by trusted service providers that provide marketing, CRM, website, analytics, IT support or financial administration services to Biosafe.

If you are a customer contact or represent a customer organisation, your data may be accessed or processed by Biosafe personnel or subcontractors on a need-to-know basis, Biosafe management, marketing or CRM service providers, and financial administration service providers where needed.

If you are a supplier, subcontractor or partner contact, your data may be accessed or processed by Biosafe personnel, Biosafe management and financial administration service providers where needed for cooperation, payments, accounting or administration.

If you are a marketing contact, your data may be accessed or processed by Biosafe personnel on a need to know basis, Biosafe management and marketing, CRM or website service providers where needed for marketing communication, newsletters, campaigns, events, webinars, analytics or managing marketing preferences.

If you visit our website, your data may be accessed or processed by Biosafe personnel on a need to know basis and website, analytics, CRM or marketing service providers where needed to operate, secure, analyse or improve the website.

We disclose your personal data only where there is a lawful reason to do so, such as providing our services, using trusted service providers, complying with legal requirements, or responding to lawful requests from competent authorities.

Transfers outside the EU or EEA

Most systems used by us are located within the EU or EEA. However, personal data may in some cases be transferred to or accessed from outside the EU or EEA. This may be necessary for Biosafe’s services, rights or obligations required by law or competent authorities, or related to service providers used for purposes such as CRM, marketing, website forms, analytics or communication.

We protect such transfers with appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or other lawful transfer mechanisms under applicable data protection legislation.

How we protect your personal data

We protect your personal data with appropriate technical and organisational measures. These may include access control, user permissions, firewalls, encryption, secure systems and regular review of security measures. Any paper copies are stored in locked areas and can only be accessed by people who need them for their work.

Profiling and automated decision-making

If you are a customer contact, marketing contact or website visitor, we may use your personal data, where applicable, to make our marketing, communication and website content more relevant to you. This may include profiling based on, for example, your role, organisation, interests, website activity or communication preferences.

We do not make decisions about you based solely on automated processing if those decisions would have legal or similarly significant effects on you.

If you are a supplier, subcontractor or partner contact, we do not use your personal data for profiling or automated decision-making.

How long we keep your personal data

We retain your personal data only for as long as it is necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. We regularly review the personal data we hold and delete, anonymise or archive data that is no longer needed.

Customer data is retained for as long as necessary to manage the customer relationship, provide services, handle communication, invoicing, payments, contractual obligations and possible legal claims. After the customer relationship has ended, we retain personal data only for as long as it is needed for legal, contractual or legitimate business purposes.

Supplier, subcontractor and partner data is retained for as long as necessary to manage cooperation, communication, payments, accounting, compliance and related obligations. After the cooperation has ended, we retain personal data only for as long as it is needed for legal, contractual or legitimate business purposes.

Marketing data is retained for as long as necessary for marketing and communication purposes. If you object to direct marketing or withdraw your consent where consent is used, we stop using your data for that purpose. We may retain limited information to record your marketing opt-out and ensure that we respect your choice.

Website visitor data is retained for as long as necessary to operate, secure, analyse and improve the website. The retention period of cookies depends on the type of cookie and your browser settings. Analytics and website data are retained according to the retention periods of the tools used by Biosafe.

Your rights

You may exercise your rights by contacting Biosafe using the contact details provided in this privacy policy.

You have the right to access and review the personal data we process about you. If your data is inaccurate, incomplete or outdated, you may ask us to correct or supplement it.

You have the right to object to the processing of your personal data if you believe that we do not have the right to process it or that it has been processed unlawfully.

You may object at any time to the use of your personal data for direct marketing. You may also ask us to limit the use of your data for marketing communication.

You may ask us to delete your personal data where the legal requirements for deletion are met. We will review your request and either delete the data or explain why we must keep it, for example because of a legitimate reason or legal obligation.

If you disagree with our decision, you may contact the competent data protection authority. You may also ask us to restrict the processing of the data concerned while the matter is being reviewed.

Where processing is based on your consent, such as certain website cookie processing, you may manage or withdraw your consent using the available consent management options. Withdrawal of consent does not affect processing carried out before the withdrawal.

You have the right to lodge a complaint with the competent data protection authority if you believe that we process your personal data in breach of applicable data protection legislation. In Finland, the competent supervisory authority is the Office of the Data Protection Ombudsman.

Cookies

Biosafe’s website uses cookies and similar technologies. Cookies are small text files stored on your device when you visit a website.

We use necessary cookies to make the website work, keep it secure and remember your cookie choices. These cookies are always active and do not require your consent.

The website may also use analytics, advertisement and functionality cookies. These cookies help us understand how you and other visitors use our website, improve the website, measure the effectiveness of our marketing communication and support additional website features, such as embedded forms or chat functions.

Optional cookies are managed through the cookie settings on the website. Where consent is required, these cookies are used based on your consent. You can accept all cookies or manage optional cookie categories in the cookie settings. You can change or withdraw your consent at any time through the cookie settings available on the website.

Cookies and similar technologies may collect information such as your IP address, browser type, device type, visited pages, visit time, visitor source and website behaviour.

You can also manage or delete cookies through your browser settings. Blocking necessary cookies may affect how the website works.

More detailed information about the cookies and similar technologies used on the website is available in the cookie settings.

Changes to this privacy policy

Biosafe may update this Privacy Policy from time to time, for example due to changes in legislation, services, business operations or personal data processing practices.

The latest version is available on Biosafe’s website. We recommend that you review this Privacy Policy regularly. If changes are significant, Biosafe may inform you of them by appropriate means.

Updated on 2 June 2026.