We have updated our Privacy Notice

BDO Oy’s Privacy Notice has been updated, and the changes will come into effect on 30 September 2026. The update concerns the possibility of transferring personal data to countries outside the EU and the EEA (i.e., third countries) in situations where BDO acts as the data controller. 

Previously, our Privacy Notice stated that we do not transfer personal data to third countries. Under the updated Privacy Notice, such transfers may take place where there is an appropriate basis for the transfer under the General Data Protection Regulation, such as an adequacy decision by the Commission, binding corporate rules (BCRs), or standard contractual clauses approved by the Commission. 

Subject to these conditions, the update expands our ability to utilize systems and subcontractors in connection with which the processing of personal data takes place, wholly or partly, outside the EU and the EEA. 

The admissibility of each transfer is assessed on a case-by-case basis, taking into account the requirements of applicable data protection legislation and any contractual limitations or restrictions set out in our agreement with you. 

No action is required from our custormers. For more information, please see our Privacy Notice. 

If you have any questions or wish to exercise your rights as a data subject, please contact us at tietosuoja@bdo.fi.