When you register for the My Path service and use the self-care programs open to everyone, your data will be registered in the client register of the Helsinki University Hospital (HUS). HUS is the controller of client data.
Which data do we process?
When you log in, we collect the following information about you: name, social security number, address, telephone number and email address. This information is collected directly from you and the population register maintained by the Digital and Population Data Services Agency.
In addition, we process any data you enter into the service (including data related to your health). The service also creates a log that ensures the security of patients and professionals.
Purpose of processing personal data
We process your personal data to create you a personal profile for the services. The data you provide when using self-care programs varies depending on the purpose of the programs in question. For example, the self-care program for weight management collects data on your eating habits and body measurements. Entering information into these programs is completely voluntary.
We also process your personal data to detect potential information security incidents, for example, by collecting data from data communication systems and data processing systems.
We process personal data on the basis of your consent, an agreement, and existing legislation.
Who can access your data and to whom do we disclose your data?
We do not disclose your data to third parties without your separate consent or request. However, we have service providers maintaining our systems. These operators have a restricted access to your personal data due to the nature of their duties.
We do not disclose your data outside the EU/EEA.
How long do we store your data?
We store your client information for five years as of the latest login.
