Privacy Policy

Last updated: 24 October 2026

1. Controller

BlueBell Markets Ab Ltd / DrinkData
Business ID: 3543354-3
Piitie 1, 01510 Vantaa, Finland
Email: info@drinkdata.eu

This policy explains how we process personal data in connection with the drinkdata.eu website and our business customer, prospective customer and partner relationships.

JuomaInfo’s platform-specific processing is described separately in the privacy information provided through that service.

2. Personal Data and Sources

We process information necessary for handling enquiries, providing services, managing business relationships and operating our website. This may include:

• Name, job title and company or organisation.
• Email address, telephone number and other contact details you provide.
• Information submitted through forms, emails and meetings.
• Proposals, agreements, correspondence and service-related information.
• Invoicing and payment information.
• Technical information, such as IP addresses, browser details, access times and security logs.
• Communication preferences and consent records, where applicable.

We receive information directly from you, from your organisation and through our business interactions. Professional contact details may also come from company websites, public professional profiles, business registers or a person introducing us.

Please do not submit sensitive personal information or other information unnecessary for your enquiry.

3. Purposes and Legal Bases

Enquiries and business relationships

We process contact details and correspondence to respond to enquiries, prepare proposals and manage customer and partner relationships. The legal basis is our legitimate interest in conducting business and maintaining professional communications.

Contracts and services

Where you personally enter into a contract with us, processing necessary to prepare or perform that contract is based on contractual necessity. Where you represent a company, processing your professional information is generally based on our legitimate interest in managing that business relationship.

Administration and legal obligations

We process relevant information for invoicing, accounting and other statutory duties based on legal obligations. Processing necessary to establish, exercise or defend legal claims is based on our legitimate interest.

Website operation and security

Necessary technical information is processed to operate the website, prevent misuse and investigate faults, based on our legitimate interest in maintaining a secure and functioning service.

Business communications and marketing

We may use relevant professional contact details for business communications where permitted by applicable law, based on our legitimate interest. Where consent is required, we request it separately. You may object to direct marketing at any time.

Optional analytics and tracking

Where analytics, cookies or similar technologies require consent, processing is based on your consent.

Providing information is generally voluntary. However, we need sufficient contact information to respond to an enquiry and relevant contractual information to provide an agreed service.

4. Website Technology and Cookies

The website is built and hosted using Webador. The platform processes technical information needed to deliver and secure the website, including server logs that may contain IP addresses.

Webador also provides website statistics. The information processed depends on the platform’s features and the settings in use.

Strictly necessary cookies may be used without consent. Where other cookies or similar technologies require consent, we request it before use. Consent may be withdrawn through the consent controls provided on the website. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Refusing optional cookies does not prevent you from contacting us.

For information about the platform, see Webador’s privacy statement. You may also contact us with questions about the technology used on our website.

5. Recipients and Service Providers

Personal data is accessible only to people who need it for their work.

Webador provides our website hosting and email services. We may also use professional advisers and service providers for business administration and agreed assignments. Providers processing personal data on our behalf are subject to appropriate contractual obligations.

We may share relevant contact information with a specialist or potential cooperation partner when you request an introduction or where sharing is otherwise necessary and lawfully justified. Contact form submissions are not automatically distributed to our partner network.

Information may be disclosed to authorities where required by law.

We do not sell personal data.

6. Hosting, Email and International Transfers

Webador is provided by JouwWeb B.V. in the Netherlands. It processes personal data on our behalf under its Data Processing Agreement.

According to Webador, its servers are located within the European Union. Some of its service partners may nevertheless process certain data outside the EU.

Transfers outside the European Economic Area must meet applicable data protection requirements. Depending on the transfer, this may involve a European Commission adequacy decision or appropriate safeguards, such as standard contractual clauses and any necessary supplementary measures.

See Webador’s Terms and Data Processing Agreement. You may contact us for further information about relevant recipients, processing locations and safeguards, including how to obtain a copy of applicable safeguards.

7. Retention

We retain personal data only for as long as necessary:

• Enquiries that do not lead to a customer or partner relationship are normally deleted within 12 months after the last substantive contact, unless ongoing discussions or legal claims justify longer retention.
• Customer and partner information is retained during the relationship and afterwards where needed for remaining obligations or legal claims.
• Accounting and invoicing records are retained for applicable statutory periods.
• Technical logs are retained according to the provider’s operational periods. Webador states that its server logs containing visitor IP addresses are automatically deleted after 30 days.
• Statistics and consent records are retained according to their purpose and applicable service settings.
• A minimal record of a marketing objection may be retained to ensure that it is respected.

Information no longer needed is deleted or irreversibly anonymised.

8. Your Rights

Subject to applicable legal conditions, you may:

• Access your personal data and receive a copy.
• Request correction of inaccurate or incomplete information.
• Request erasure or restriction of processing.
• Object to processing based on legitimate interests.
• Object to direct marketing at any time.
• Withdraw consent where processing is based on consent.
• Receive data you provided in a portable format where processing is automated and based on consent or a contract.

Send requests to info@drinkdata.eu. We may request information necessary to verify your identity.

We normally respond within one month. If a lawful extension is necessary, we will explain the reason within that period.

You may lodge a complaint with the Finnish Data Protection Ombudsman or another competent supervisory authority.

9. Security and Automated Decisions

We use appropriate technical and organisational measures to protect personal data, including access restrictions and confidentiality requirements.

We do not use the processing described in this policy to make solely automated decisions producing legal or similarly significant effects on individuals.

10. Changes

We update this policy when our processing changes. The latest version and update date are published on this page. Material changes are communicated separately where required.