Privacy notice

Last updated: 28 October 2026 

About this notice 

This notice describes how BeeHealthy Oy and BeeHealthy Deutschland GmbH (together “BeeHealthy”, “we”) collect, use, disclose and protect personal data when you browse our website www.beehealthy.com (the “Website”), get in touch with us or ask for information about our offering, explore or evaluate our software service (the “Service”), or otherwise deal with us in a business context, for example as a representative of a customer, partner or supplier. Section 2 explains which company is the controller in each case. We process personal data in compliance with the EU General Data Protection Regulation (“GDPR”) and other applicable national data protection legislation. 

This notice does not apply to: 

1. personal data processed in the Service, including the end-user account and usage data of the customer’s end-users and client data. In that processing the customer is the controller and BeeHealthy acts as its processor under a data processing agreement. End-users and other individuals using the Service should contact the relevant customer and consult its privacy notice; and 
2. personal data of our own employees and job applicants, which is covered by separate notices. 

Controller and contact details 

BeeHealthy Oy, business ID 3142662-9, Arkadiankatu 6, 00100 Helsinki, Finland; and BeeHealthy Deutschland GmbH, registered with the commercial register of the Local Court (Amtsgericht) of Frankfurt am Main under HRB 122083, Bockenheimer Landstraße 51–53, 60325 Frankfurt am Main, Germany. 

BeeHealthy Oy is the controller for the processing described in this notice, including the Website, customer relationship management and marketing, also where you deal with BeeHealthy Deutschland GmbH. In these activities BeeHealthy Deutschland GmbH acts on behalf of BeeHealthy Oy and in accordance with its instructions. BeeHealthy Deutschland GmbH is the controller for the conclusion and performance of its own customer agreements, invoicing and its statutory obligations in Germany. 

Our parent company Mehiläinen Oy (business ID 1927556-5) determines the common cookie consent and analytics framework used on the Website. BeeHealthy Oy and Mehiläinen Oy are therefore joint controllers for the collection of data through these cookies and similar technologies on the Website. Mehiläinen Oy is responsible for the consent management, the analytics tools within this framework and the Cookie Policy, and BeeHealthy Oy for this notice. BeeHealthy Oy is the sole controller for its own marketing and customer relationship tools, such as HubSpot and LinkedIn. You may exercise your rights regarding this processing against either company by contacting us as set out below. 

Privacy enquiries for both companies, including enquiries to our data protection officer: compliance@beehealthy.com. 

Whose data we process, what data and where it comes from 

We mostly receive personal data directly from you, for example when you browse the Website, fill in a contact form, email or call us, or meet us at a meeting, demo, trade fair or other event. Some data comes from the organization you represent or from the other sources described below. What data we hold about you depends on how you deal with us. 

Website visitors: information on the device you use (such as browser and operating system), the pages you view and the time spent on them, and where you arrived at the Website from (such as an advertisement or another website), as well as other data collected through cookies and similar technologies as described in our Cookie Policy (https://beehealthy.com/cookie-settings/). Your IP address is processed to deliver the Website to you and is removed before analytics data is forwarded to the analytics tool. If you have consented to customer analytics cookies and fill in a form on the Website, our marketing automation tool may link your earlier and later visits to the contact details you provide. 

Customer, prospect and partner contacts: identification and contact details such as your name, title, organization, email address and telephone number; what you tell us in contact forms, emails, calls and meetings; information on your participation in demos, webinars and events; and your marketing choices, including any consents and opt-outs. 

Data from other sources: we may supplement the above with publicly available professional information, for example from company websites, LinkedIn and business directories, with information we receive through recommendations and referrals from customers and partners, and with information from analytics and advertising service providers as described in our Cookie Policy. 

Providing personal data is voluntary. If you do not provide it, we may not be able to respond to your request or enter into or perform an agreement with you or your organization. 

Purposes and legal bases

Operating and securing the Website – legitimate interest in a functioning and secure website. Non-essential cookies, such as analytics and marketing cookies, and linking website visits to contact details – consent, which you can withdraw at any time (see section 10). Where we use marketing platforms such as Meta and LinkedIn, we and the platform concerned may be joint controllers for the collection of data through the platform’s cookies and pixels on the Website and its transfer to the platform; the platform is solely responsible for its own subsequent processing, as described in its own privacy policy. 

Handling enquiries, demos and sales, and managing customer relationships – legitimate interest in developing and maintaining business relationships with the organizations our contacts represent; where you are a contracting party yourself, performance of a contract. 

Concluding and performing customer and supplier agreements, invoicing and contract administration – performance of a contract, or legitimate interest where you act on behalf of an organization. 

Direct marketing – legitimate interest for business-to-business marketing, or consent where required by applicable law, such as for email marketing to recipients in Germany. 

Compliance with statutory obligations such as accounting and tax requirements – legal obligation. 

Establishing, exercising or defending legal claims – legitimate interest. 

Recipients 

We do not sell personal data. We disclose personal data only where necessary for the purposes above: 

1. between BeeHealthy Oy and BeeHealthy Deutschland GmbH: BeeHealthy Deutschland GmbH processes data on behalf of BeeHealthy Oy in sales and customer relationships, and receives the data needed for its own customer agreements and invoicing; 

2. to our parent company Mehiläinen Oy, as joint controller for cookie-based data collection on the Website (see section 2); 

3. to service providers acting as our processors, such as hosting, analytics, CRM and marketing automation, email and customer support providers, bound by data processing agreements; 

4. to professional advisers, such as auditors, lawyers and insurers; 

5. to authorities, where required by law; and 

6. to potential buyers, investors or successors in connection with a corporate transaction, subject to confidentiality obligations. 

Transfers outside the EU/EEA 

We primarily process personal data within the EU/EEA. If a service provider processes data outside the EU/EEA, we rely on a European Commission adequacy decision (including the EU–U.S. Data Privacy Framework, where applicable) or the Commission’s standard contractual clauses, together with supplementary measures where needed. You can request further information on the safeguards used by contacting us. 

Retention 

We keep personal data only as long as needed for the purpose for which it was collected: 

1. customer and contract data for the duration of the customer relationship and thereafter as required by accounting legislation (generally up to 10 years from the end of the financial year for accounting records); 

2. prospect and marketing data until you object or the data is no longer needed for the purpose for which it was collected; we regularly review and delete outdated data; 

3. website and log data for as long as needed to operate, secure and develop the Website; and 

4. data needed to handle a legal claim until the claim has been resolved. 

After this we delete or anonymize the data. 

Security 

We protect personal data with appropriate technical and organizational measures, including access control, encryption and restricting access to personnel who need the data for their work. If a personal data breach is likely to pose a risk to you, we will act as required by data protection legislation. 

Your rights 

Under the GDPR you have the right to access your data, have it rectified or erased, restrict its processing, object to processing based on legitimate interest (including at any time to direct marketing), receive your data in a portable format where processing is based on consent or contract, and withdraw your consent at any time without affecting earlier processing. 

Send requests to the contact details in section 2. We may ask you to verify your identity. We will respond within one month, or inform you if the period must be extended under the GDPR. Requests are free of charge unless they are manifestly unfounded or excessive. 

We do not make decisions about you based solely on automated processing that would have legal or similarly significant effects on you. 

If you are not satisfied with how we have handled your request or how we process your personal data, you have the right to lodge a complaint with a supervisory authority. In Finland, this is the Office of the Data Protection Ombudsman (www.tietosuoja.fi). You may also lodge a complaint with the supervisory authority in the EU/EEA country where you live or work or where the alleged infringement took place. A list of EU/EEA supervisory authorities is available at https://edpb.europa.eu/about-edpb/board/members_en. 

Cookies 

Our Website uses cookies and similar technologies. Strictly necessary cookies are used without consent; all other cookies are used only with your consent, which you can change at any time through the cookie settings on the Website. Our Cookie Policy (https://beehealthy.com/cookie-settings/) describes the cookies and tools we use, their purposes and the third parties involved. 

Changes 

We may update this notice. The current version is always available on the Website, and the date at the top shows when it was last updated. We will inform you of material changes in an appropriate manner.