Go to page content

Privacy policy in the Health Village’s My Path service

The My Path service is used in an authenticated environment and it always requires the processing of personal data. This page explains what information is stored about you, in what circumstances, how it is processed and who is the data controller in each case.

The My Path service and paths are used in an authenticated environment and their use always requires the processing of personal data. Data is collected and processed in different ways in different situations. You can find the situations in which data collection is required, the data use cases and the privacy policies here.

NB: The My Path service is one of the three main products of the HealthVillage.fi service package. The other products are the Health Village hubs and the HealthVillagePRO service. For more information on the processing of personal data in the Health Village hubs and the HealthVillagePRO service, see the services’ own privacy policies.

When you start using the My Path service and use service or care paths that require a care or client relationship, your data will be registered in the client register of the university hospital or wellbeing service county responsible for your care or service .

The data controller is one of the following:

University hospitals 

Wellbeing services counties  

Visit the website of your wellbeing services county or university hospital for contact details and information about data protection officers and the processing of your data.

Which data do we process?

When you log in, we collect the following information about you: name, social security number, address, telephone number and email address. This information is collected directly from you and the population register maintained by the Digital and Population Data Services Agency.

In addition, we process any data you enter into the service (including data related to your health). The service also creates a log that ensures the security of patients and professionals.

Purpose of processing personal data

A customer using Health Village services with a referral has a care or customer relationship, and the processing is subject to legislation concerning the handling of personal data in health and social care. The purpose of the processing is to enable you to use electronic services to support your care or transactions. You can obtain more information about how your personal data is processed from the unit where your customer relationship exists. Each unit has its own customer or patient register description and privacy policy to safeguard your data.

Your personal data is processed on the basis of your consent and our legal duty.

Who can access your data and to whom do we disclose your data?

Access to your personal data is restricted based on your consent, so that only the unit involved in your care or transactions has access to your information. Access to your data therefore always requires a care or customer relationship.

We do not disclose your data outside the EU/EEA.

How long do we store your data?

On My Path, the processing of your personal data involves statutory retention obligations. The customer’s data is available for their own viewing for three years, after which the data from completed path paths is archived, and a summary (or similar) can be found in the customer or patient information system. Your documents are stored in the systems of each respective entity. The most common retention period for patient records is 12 years after death or 120 years from birth. Diaries and other data collection forms are retained for 12 years from their creation or until the data has been transferred to the patient information system. Retention periods for social welfare documents vary depending on the document type and service function.

If you provide feedback using either the Give feedback or Report a technical issue forms and leave your contact information (optional), the Health Village’s privacy policy for personal data provided on the forms will apply.

Updated 25.11.2025