1 Controller

Massage therapist who served you

The massage therapists operating at UniSport are self-employed, and each professional is the controller of the data recorded on the massage of their own customers.

When you visit UniSport as a customer, your data is also stored in UniSport's customer data. In this respect, UniSport acts as the controller, and the processing of data is described in the customer data privacy policy statement.

2 Contact details in matters concerning the register

UniSport customer service 
P.O. Box 53 (Fabianinkatu 28) 
FI-00014 University of Helsinki 
Tel. +358 2941 22151, unisport.asiakaspalvelu@helsinki.fi

Contact the University of Helsinki Data Protection Officer by e-mail: tietosuoja@helsinki.fi

3 Purpose of processing of personal data and legal basis

Data is collected and processed for the following purposes: • implementation of healthcare services (massage) and documentation of care records •  mapping the client's health status that may affect the massage and planning the client's care, •  collecting reporting data required by legislation • processing requests for clarification and possible hazardous situations

The processing of personal data is necessary for the implementation of the agreement between UniSport and the customer, for the safe provision of the service and for compliance with legal obligations. Legislation refers to national legislation on healthcare professionals. Processing of health-related information is necessary for the performance of health care and treatment, and health care professionals must record the information necessary for providing the service in accordance with patient legislation. Health-related information is confidential and can only be accessed by massage therapists who serve you.

4 What personal data do we process?

We process the following personal data in massage activities: - basic information: name, date of birth, personal identity code, contact details - other background information: profession, hobbies, possible problems / symptoms, illnesses, medication - Contraindications: health impediments or other factors to be taken into account in the implementation of massages - Visit records: visits and possible additional observations for the following massage 5 Regular information sources

The information is obtained from the customer and is not collected from other sources.

5 Regular disclosures of data

Access to the data is restricted to healthcare professionals carrying out massages, and the data is not disclosed to third parties, with the exception of any statutory requests for information or clarification related to inspections by supervisory authorities.

The recording system used by the massage therapists (Times) is connected to Kanta, which means that the entries made by them are transferred to Kanta. Read more about the Kanta service here: https://www.kanta.fi/en/data-protection Avautuu uudella välilehdellä

6 How long will we process your personal data?

The statutory retention period of data is 120 years from the customer's birth. After joining Kanta, the data is saved in the Kanta service.

7 Transmission of data outside the EU or EEA

Data is not disclosed outside the EU or EEA.

8 What rights do you have?

To access your rights, you can contact the contact address listed in section 2.

Right to access data

You have the right to be informed of what personal data we process and how they are processed. You can also request a copy of the personal data being processed.

Right to the rectification of data

If your personal data is inaccurate or incorrect, you have the right to request their rectification or supplementation. Incorrect information can be reported to any UniSport massage therapist who will rectify such information. Current information and news on the patient are always discussed with the massage therapists before the start of the massage.

Right to delete data

You have the right to demand the deletion of your unnecessary personal data. The data will be deleted in the following cases: • personal data is no longer needed for the purposes for which they were collected, • you object to the processing (the description of the right to object is below) and there is no justified reason for the processing or • unlawful processing of personal data.

Right to the restriction of processing

You have the right to request that the processing of your personal data be restricted. This means that we will store your data, but we will not process it in any other way. You have this right in the following cases: • you dispute the accuracy of your personal data, in which case the processing is restricted during a period within which we can verify that they are correct • the processing is illegal and you are opposed to the deletion of personal data and require that their use be restricted instead • we no longer need such personal data for the purposes of processing, but you need it to establish, present or defend a legal claim

Right of appeal

If you have any questions regarding the processing of your personal data, you can always contact the contact address or the university's Data Protection Officer mentioned in section 2. However, you also have the right to lodge a complaint with the Office of the Data Protection Ombudsman (tietosuoja.fi) if you consider that the processing of your personal data has violated valid data protection legislation.

Changes to the privacy statement

We may make changes to this privacy statement. You can always find the latest version of the privacy statement on our website.