Privacy Policy

Sairaala KL Oy's general direct marketing register

Personal Data Act (523/199) Sections 10 and 24.

GDPR (General Data Protection Regulation) The EU's new data protection regulation.

File updated on September 20, 2018

1. Data controller

Sairaala KL Oy

2. Contact person

Elina Salmi

elina.salmi@sairaalakl.fi

Uudenmaankatu 38 E

00120 Helsinki

+358 20 766 9390

3. Name of the register

Sairaala KL Oy's general direct marketing register

4. Purpose of maintaining the register and processing personal data

Personal data is processed for the purpose of sending information, offers, invitations, and reminders about the services provided by Sairaala KL Oy.

5. Data content of the register

• Name
• Email address
• Mailing address
• Phone number
• Age
• Gender
• Language
• Visitation history

6. Profiling

A person can be profiled based on the personal data mentioned in section 5.

7. Basis for processing personal data

The basis for processing personal data is the customer's own consent to direct marketing.

8. Data sources used as the basis for the register

Information provided and entered by the customer in connection with marketing consent, stored in the information system administered by Sairaala KL Oy

9. Processors of personal data

Personal data in the register is only processed by authorized personnel of Sairaala KL Oy or

Employees of Sairaala KL Oy's partner.

10. Disclosure of information

Sairaala KL Oy will never transfer, sell, or exchange personal data to third parties for marketing purposes. Personal data will also not be transferred outside the EU or the European Economic Area.

11. Principles of register protection

Sairaala KL Oy's paper documents are stored in locked premises. The use of locked premises is monitored. Data stored in a separate application or on a network drive is stored in electronic form on Sairaala KL Oy's server. Only designated persons have access to the electronic data using separate user IDs and passwords.

12. Right to change data or withdraw consent from Sairaala KL Oy's general direct marketing register

Those registered in Sairaala KL Oy's general direct marketing register have the right to

• withdraw consent,
• request information about themselves
• request correction of data
• request deletion of data

The request must be submitted in writing to the following address:

Sairaala KL

Elina Salmi

Uudenmaankatu 38 E

00120 Helsinki

Persons registered in Sairaala KL Oy's general direct marketing register have the right to make a complaint to the supervisory authority about Sairaala KL Oy's actions in processing their personal data.

Please note that this removal only applies to the removal of direct marketing permission from Sairaala KL Oy's general direct marketing register. Patient data will be retained by Sairaala

KL Oy's patient data register (Act on the Electronic Processing of Social and Health Care Customer Data 159/2007)

13. Retention periods for personal data in Sairaala KL Oy's general direct marketing register

Sairaala KL Oy will retain the data until the customer requests its deletion.