Privacy Statement

Wise and Shy Big Bear Oy is committed to protecting and respecting your privacy. This privacy notice explains when and why we collect personal information, how we use it, the conditions under which we may disclose it to others, and how we keep it secure. This Privacy Policy applies to the use of our services as well as our sales, marketing, and customer contract fulfillment activities.

Definitions 

  • "Client" or "you" refers to any private or corporate user or data subject who buys, registers for use, or uses our services and may have submitted personally identifiable information to us.

  • "Personal data" refers to any information concerning private individuals that can identify them.

  • "Services" refers to any products manufactured or distributed by Wise and Shy Big Bear Oy, including energy drinks, merchandise, software, web solutions, tools, and related support services.

  • "Website" refers to www.nobrainwaste.com or any other website hosted or controlled by Wise and Shy Big Bear Oy.

  • "Data Controller" is the entity that determines the purposes and means of processing personal data.

  • "Data Processor" is an entity that processes personal data on behalf of the Data Controller.

  • "Third Party" refers to any entity or person other than you or Wise and Shy Big Bear Oy.

  • "Sensitive personal data" poses specific risks to an individual and includes information about racial or ethnic origin, political opinions, religious beliefs, health, etc.

Contact Information and Our Role as Data Controller

For the purposes of the General Data Protection Regulation (GDPR), Wise and Shy Big Bear Oy acts as the Data Controller. This means we are the company that determines the purpose and means of processing your personal data, and we are legally responsible for its protection.

Our contact details are:

  • Company Name: Wise and Shy Big Bear Oy

  • Address: PL 10, 00100 Helsinki, Finland

  • Contact for Privacy Matters: privacy@wsbb.fi

If you have any questions about this notice or wish to exercise your data subject rights, please contact us using the details above.

Our Use of Data Processors and International Transfers

We use a limited number of trusted third-party service providers (known under GDPR as Data Processors) to help us deliver and run our services, including hosting our website and managing form submissions.

We share data with third-party Data Processors for operational purposes, including our website platform provider, Squarespace Ireland Limited, and for data, analytics and advertising services with Google Ireland Limited.

Some of these partners, may be located in countries outside the European Economic Area (EEA), such as the United States. When we transfer your personal data outside the EEA, we ensure a high level of protection using one of the following mechanisms, as required by Chapter V of the GDPR:

  • EU-U.S. Data Privacy Framework (DPF): Where we transfer personal data to a U.S. service provider, we rely on the EU-U.S. Data Privacy Framework (DPF). We ensure that the specific U.S. processor is self-certified under the DPF and is listed on the official DPF List, which the European Commission has recognised as providing an adequate level of protection for transferred personal data.

  • Standard Contractual Clauses (SCCs): For any other transfers outside the EEA or to a non-certified U.S. entity, we implement the European Commission's Standard Contractual Clauses (SCCs), coupled with supplementary technical and organisational security measures.

Data Protection Officer

We have appointed a Data Protection Officer (DPO). If you have any questions regarding the processing of your personal data or would like to contact our DPO, please feel free to email us at info@wsbb.fi.

Collection of Personal Data

We collect personal data about you when: 

  • You interact with us in various ways (in person, by mail, phone, email, social media, or through our websites).

  • We obtain data from online forms on our website, with your consent.

  • We obtain data from legitimate third-party sources, with your consent.

  • We identify a legitimate interest that does not override your privacy rights.

Cookies

Use of Personal Data

We process personal data for various purposes, including: 

  • Providing and enhancing communication and services.

  • Direct sales, marketing, and customer service.

  • Personalizing your experience and servicing your product requests.

  • Sending marketing communications with your consent.

  • Following up on customer support inquiries.

  • Conducting surveys regarding our services.

Data Types Collected

We may collect the following types of personal data: 

  • Contact information (email, name, phone), company details, communication logs, and feedback.

  • Data related to your interactions with our services.

  • Job application information when you apply for a position with us.

Security of Your Information

We use industry-standard measures to protect your personal data from unauthorized access or disclosure. Your personal information is accessible only to authorized personnel who are required to keep it confidential.

Legal Basis for Data Collection

We collect data based on: 

  • Your consent (via consent forms).

  • Contractual obligations (for service delivery).

  • Legitimate interests (ensuring that your privacy interests do not override these).

Retention of Personal Data

We retain personal data only as long as necessary to fulfill the purposes for which it was collected and to comply with legal obligations. Once no longer needed, personal data will be securely deleted.

Your Rights

Under GDPR, you have several rights regarding your personal data, including: 

  • The right of access to your data.

  • The right to rectification of incorrect data.

  • The right to erasure ("right to be forgotten").

  • The right to restrict processing.

  • The right to object to processing.

  • The right to data portability.

Data Sharing

We do not sell or rent your personal data to third parties without your consent, except as required by law or to our service providers under contractual obligations.

Questions or Complaints

For inquiries regarding this privacy policy, please contact privacy@wsbb.fi. If you're dissatisfied with our response, you have the right to contact your national supervisory authority.

Changes to This Policy

We may amend this Privacy Policy at any time, with the updated version available on our websites. Significant changes will be communicated to you in advance.

Version 1.1; December 2025;