1 CONTROLLER
Name: HUS Group
Address: HUS Group, Stenbäckinkatu 9, P.O. Box 100, 00029 HUS
Contact information:
Switchboard: +358 (0)9 4711
Registry telefax: 09 471 75500
Registry email keskuskirjaamo@hus.fi
Postal address: HUS Central Registry, P.O. Box 200, 00029 HUS
2 PERSONS RESPONSIBLE FOR THE REGISTER
HUS IT Management, e-services, Head of Division Sirpa, Arvonen sirpa.arvonen@hus.fi
3 CONTACT DETAILS OF THE DATA PROTECTION OFFICER
Postal address: HUS Central Registry, P.O. Box 200, FIN-00029 HUS
Email: eutietosuoja@hus.fi
4 CONTACT DETAILS RELATING TO REGISTRATION
Email: info@terveyskyla.fi
5 NAME OF THE REGISTER
Register of the ‘Give feedback’ and ‘Report a technical issue’ forms in Health Village
6 THE PURPOSE OF PROCESSING OF PERSONAL DATA
Two types of feedback can be given on the individual services of the Health Village service package (the Health Village hubs, the My Path service channel, the Health VillagePRO service, the various separate applications and symptom navigators and barometers):
feedback on content or general feedback → The Give feedback form
technical feedback → The Report a technical issue form
As a rule, feedback is given anonymously, but the person giving the feedback can also leave their contact information if they so wish. The contact information provided is only used for contacting the person giving the feedback if they so desire.
7 LEGAL BASIS FOR PROCESSING PERSONAL DATA
EU’s General Data Protection Regulation, Article 6(1)(a): The data subject has given consent to the processing of his or her personal data for one or more specific purposes.
8 INFORMATION CONTENT OF THE REGISTER
The register contains the person's
first and last name
email address.
In addition to the personal data above, the register contains the information provided by the person on the form in question:
The ‘Give feedback’ form
The service to which the feedback relates
Net Promoter Score
Feedback text
Link to the page to which the feedback applies
The ‘Report a technical issue’ form
The service in which the issue occurred
The device used to access the service at the time the issue occurred
Issue classification
Text describing the issue
Date the issue was detected
Link to the page where the issue was detected
9 REGULAR SOURCES OF DATA
The register is compiled on the basis of the information provided on either the Give feedback or Report a technical issue form. All information provided on the forms is provided by the respondent and will not be combined with information that may be obtained from other registers related to the services.
10 PERSONAL DATA RECIPIENT GROUPS
In the case of content-related or general feedback given on the ‘Give feedback’ form, the information given on the form is directed to the party responsible for the content-related feedback of the selected service – usually the hub's own email inbox. The inboxes are read by persons responsible for the hub in the clinical work units of HUS or another partner organisation (see Health Village's service providers and partners). Feedback related to the whole Health Village service package and the Health VillagePRO service will be directed to the persons responsible for the Health Village in the HUS IT Management e-services.
In the case of technical feedback provided on the ‘Report a technical issue’ form, the information provided on the form is directed to the support request management system used by HUS IT Management e-services and processed therein. The support requests are processed by HUS employees or persons processing Health Village support requests in outsourced technical service provider organisations and, if necessary, by separately appointed representatives of organisations that provide the Health Village services.
11 REGULAR DISCLOSURES OF DATA
Data is only disclosed for the purpose of carrying out the requested contacts by service, see 10 Personal Data Recipient Groups.
12 PERIOD FOR WHICH DATA IS KEPT
The provision of contact information will result in a temporary personal data register in Webropol, which will be emptied automatically once a month. Forwarded (see Personal data recipient groups) feedback on content or general feedback and the information contained therein are deleted once a year. Technical feedback and the data contained in it are, for the time being, archived in the support request management system used by HUS IT Management e-services.
13 RIGHTS OF THE DATA SUBJECT
The data subject has the following rights:
Right of access to one’s own personal data (Article 15)
the data subjects may make a written request for information on their records
Right to rectification (Article 16)
the data subject may make a written request for rectification
Right to erasure (Article 17)
the data subject may request the erasure of unnecessary or inaccurate personal data concerning him/her in the register
Right to restriction of processing (Article 18)
the data subject may submit an informal request, which will always be dealt with on a case-by-case basis
Right to object (Article 21)
the data subject may submit an informal request, which will always be dealt with on a case-by-case basis
Right to data portability (Article 20)
the data subject may submit an informal request, which will always be dealt with on a case-by-case basis
Applications or claims for such rights shall be submitted to HUS Central Registry , P.O. Box 200, 00029 HUS
14 TRANSFER OF DATA OUTSIDE THE EU OR EEA AREA
No transfers.
15 PRINCIPLES UNDERLYING THE PROTECTION OF THE REGISTER
Personal data are processed in a manner that ensures the appropriate security of personal data, including appropriate technical and organisational measures that protect personal data against unauthorised processing.
All persons processing personal data stored in the register are either employees of HUS or other organizations providing Health Village services, or employees of outsourced service providers. All persons processing personal data have signed HUS's confidentiality and information security agreement. The data in the register is only used by persons who need the data to perform their work, and even then the data is only used within the limits of each person's access rights.
16 RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY
Without prejudice to other administrative or judicial remedies, each data subject shall have the right to lodge a complaint with the supervisory authority, in particular in the Member State where he or she has his or her habitual residence or job or where the alleged infringement has occurred, if the data subject considers that the processing of his or her personal data infringes the EU data protection regulation.
Supervisory authority information:
Office of the Data Protection Ombudsman
Street address: Lintulahdenkuja 4, 00530 Helsinki
Postal address: P. O. Box 800, 00531 Helsinki, Finland
Email: tietosuoja(at)om.fi
Switchboard: +358 (0)29 566 6700
Registry: +358 (0)29 566 6768