When you start using the Omapolku® service and use service or care paths that require a client or care relationship, your data will be registered in the client register of the university hospital or wellbeing service county responsible for your care or service .
The data controller is one of the following:
University hospitals
Wellbeing services counties
Visit the website of your wellbeing services county or university hospital for contact details and information about data protection officers and the processing of your data.
Which data do we process?
When you log in, we collect the following information about you: name, social security number, address, telephone number and email address. This information is collected directly from you and the population register maintained by the Digital and Population Data Services Agency.
In addition, we process any data you enter into the service (including data related to your health). The service also creates a log that ensures the security of patients and professionals.
Purpose of processing personal data
A customer using Health Village services with a referral has a care or customer relationship, and the processing is subject to legislation concerning the handling of personal data in health and social care. The purpose of the processing is to enable you to use electronic services to support your care or service. You can obtain more information about how your personal data is processed from the unit where your customer relationship exists. Each unit has its own customer or patient register description and privacy policy to safeguard your data.
Your personal data is processed on the basis of your consent and our legal duty.
Who can access your data and to whom do we disclose your data?
Access to your personal data is restricted based on your consent, so that only the unit involved in your care or service has access to your information. Access to your data therefore always requires a care or customer relationship.
We do not disclose your data outside the EU/EEA.
How long do we store your data?
On Omapolku, the processing of your personal data involves statutory retention obligations. The customer’s data is available for their own viewing for three years, after which the data from completed path is archived, and a summary (or similar) can be found in the customer or patient information system. Your documents are stored in the systems of each respective entity. The most common retention period for patient records is 12 years after death or 120 years from birth. Diaries and other data collection forms are retained for 12 years from their creation or until the data has been transferred to the patient information system. Retention periods for social welfare documents vary depending on the document type and service function.
