Privacy policy
Privacy policy principles of Better Burger Society Oy
Customers and potential customers of Better Burger Society
We value your privacy
Better Burger Society processes personal data relating to its customers, potential customers, employees and job applicants in accordance with this privacy policy and applicable laws. Please read this policy carefully. We may update it to reflect changes in our operations or applicable laws.
Data controller
Better Burger Society Oy is the data controller responsible for processing personal data under this privacy policy. In this policy, Better Burger Society Oy is also referred to as Better Burger Society, we or us.
Better Burger Society Oy
Business ID: 33719505
Hatanpään valtatie 1 B
33100 Tampere
www.betterburgersociety.com
Email: jeff.fackett@bbs.com
Tel: +46 70-354 85 86
Our Data Protection Officer is Jeff Jackett. You can contact him at jeff.fackett@bbs.com or +46 70-354 85 86.
Purposes and legal bases for processing personal data
We collect, store and process personal data relating to customers and employees only for defined purposes. We ensure that there is at least one legal basis for processing the data. Our main purposes and the applicable legal bases are set out below.
Marketing and customer communications
We may carry out digital marketing, create personalised marketing content and advertise on social media to existing and potential customers. These activities require us to collect and process personal data. Marketing may also involve automated decisions and profiles created for social media campaigns, search engine marketing and website content. The main legal basis for this processing is our legitimate interest.
However, you have the right to object to direct marketing at any time. Some direct marketing, such as newsletters, may be based on your consent.
Legal obligations
We may process personal data to meet legal obligations, including those arising from bookkeeping requirements, the Employment Contracts Act and tax laws.
Human resources management
We collect and use employee personal data mainly to manage human resources, pay salaries, fulfil rights and obligations arising from employment contracts, and meet employment-related legal requirements. The legal basis may be the performance of an employment contract, consent or compliance with legal obligations relating to employment.
Recruitment and job applications
During recruitment, we process personal data mainly to prepare and enter into employment contracts and on the basis of applicants’ consent.
Personal data we collect and its sources
We collect, store and use personal data mainly relating to our employees and job applicants.
Customers and potential customers
We use Google Analytics to collect data about the use of our website.
Employees
We receive employee personal data primarily from the employee and, with their consent, from other sources. We may also process data generated during the employment relationship. Typically, we collect and process:
- Information required for tax withholding
- Social security identification numbers
- Salary information
- Working time records
- Contact details
- Information relating to sick leave
- Employment contracts
Job applicants
We receive applicants’ personal data primarily from the applicants themselves and, with their consent, from other sources, such as LinkedIn and references. Typically, we collect and process:
- Names and basic contact details
- Education, experience, skills and employment history
- Applications and CVs
- References, with consent
- LinkedIn profiles, with consent
Processing and sharing personal data
People within our organisation may access personal data when they need it to perform their work.
We may outsource some personal data processing, including the cloud services used to store data. Most of the data we hold is stored electronically only. We use service providers particularly for marketing automation, customer relationship management, accounting and bookkeeping, website hosting and analytics, email marketing, and project management.
When we use a service provider, we ensure that we have a written agreement containing the minimum required data processing provisions. We also ensure that personal data remains confidential and is processed and transferred lawfully.
We may share personal data with third parties to fulfil contractual obligations, meet legal obligations or comply with requests from authorities. We may also share personal data in connection with a business sale or restructuring.
Transfers of personal data outside the EU
We primarily process personal data within the EU. However, because data is mainly stored and processed electronically through cloud services, some service providers, including Google, may be located outside the EU.
When personal data is transferred outside the EU, we ensure that one of the following conditions is met:
- The recipient is in a country that the European Commission has determined provides adequate safeguards.
- The recipient is a US-based company certified under Privacy Shield.
- The transfer uses model clauses published by the European Commission.
Retention of personal data
We retain personal data only for as long as necessary for its purpose or as required by a contract or law. Retention periods vary according to the purpose, legal basis and circumstances of processing. They may also be determined by legislation, including accounting and tax laws and the Employment Contracts Act. Where consent is the sole basis for processing, the data may be deleted after consent is withdrawn.
We may also delete data at your request if we have no overriding legal basis for continuing to process it. We may update data periodically and remove outdated or inaccurate information.
Storage and security of personal data
We store personal data primarily in electronic form and protect it in accordance with general industry standards and practices. We treat personal data as confidential and use only storage and processing providers with a good reputation for data security.
Access is protected through individual logins, passwords and access rights. We do not sell or rent personal data for marketing purposes. Our premises are also kept safe and secure.
Requirements to provide personal data
In many situations, you are not required to provide us with personal data. This applies particularly to job applicants. For employment purposes, however, we need to process at least the minimum personal data required to fulfil employment contracts and meet legal obligations.
Cookies on our website
We use cookies to provide the best possible experience for visitors to our website. Cookies are small text files stored on your computer that hold information specific to you and a website.
Cookies tell us how people use our website. We may use them to develop our website and services, analyse website use, and target and optimise our marketing.
You can disable cookies in your browser settings. Most browsers accept cookies automatically. If you disable them, some services on our website may not function correctly.
Your personal data rights
Withdraw consent
Where processing is based on your consent, you may withdraw that consent at any time by notifying us using the contact details above.
Access your data
You have the right to receive confirmation of whether we process your personal data and to find out what data we hold about you. You also have the right to receive additional information about our processing activities as specified by law.
Correct inaccurate data
You may ask us to correct inaccurate or outdated personal data we hold about you.
Stop direct marketing
You may ask us to stop processing your personal data for direct marketing by contacting us using the details above.
Object to processing
Where processing is based on the public interest or our legitimate interest, you may object to it unless there are overriding grounds for processing or it is necessary to handle legal claims. Please note that an objection may mean we can no longer provide services to you.
Restrict processing
In certain circumstances, you may require us to restrict the processing of your personal data.
Transfer your data
Where processing is based on your consent or the performance of a contract, you may require us to transfer the data you have provided to us to another service provider in a commonly used electronic format.
Exercising your rights
You can exercise your rights by contacting us using the details above. We will need to verify your identity. If you believe that your personal data is being processed unlawfully, you may also make a complaint to the supervisory authority.
Updates to this privacy policy
We may update this policy as our operations change or develop, or to reflect changes in the law. Updates take effect when the revised policy is published. Please revisit this page periodically to read the current version.
Privacy contacts
Better Burger Society Oy
Business ID: 33719505
Hatanpään Valtatie 1 B
33100 Tampere
www.betterburgersociety.com
Email: jeff.fackett@bbs.com
Tel: +46 70-354 85 86
Our Data Protection Officer is Jeff Jackett. You can contact him at jeff.fackett@bbs.com or +46 70-354 85 86.