Cookie settings
Privacy Description for Wellmedic Oy Ab's Customer Register
Date: 22.8.2020
1. Data Controller
Wellmedic Oy Ab, Business ID 3132484-1, Market Road 2, 65610 Korsholm
2. Contact Person for Register Matters
CEO Marta Backlund, marta.backlund@wellmedic.fi
Phone: +358 44 079 0215
3. Description of the Register
Wellmedic Corporate Customer Register
4. Purpose and Basis for Processing Personal Data
The primary basis for processing personal data is the customer relationship between
Wellmedic and its customer, the customer's consent, the assignment given by the customer, or
other relevant connection.
Personal data may be processed for the following purposes:
- Management, execution, development, and monitoring of the customer relationship, customer service,
communication and marketing. - Conducting analysis, reporting, and categorization of customer relationships as well as
other purposes aimed at the development of the customer relationship and business
carried out by Wellmedic. - Gathering feedback and processing customer satisfaction.
- Conducting market research and surveys
- Recording phone calls with consent to verify service events,
ensure safety and legal protection, train staff, and ensure service quality. - Profiling purposes are described in more detail in point 10 of this privacy description.
- Processing data may be outsourced to Wellmedic's partners and/or
external service providers in accordance with data protection legislation and within its
limits.
5. Data Content of the Register
Description of information, details about the registered individual that may be saved:
- Name, birth date, address, phone number, customer number, gender, language, email, and
other necessary information needed to maintain a good service level. - Employees, collaborators, workplace information (such as job satisfaction, accidents,
organization size, employees' ages and health status) - Information related to services requested, purchased, or used by the registered customer, notes, level and validity period,
information about communication and marketing in various forms - Content provided by the registered individual, information about care outside Wellmedic,
interests, occupations, or other such information. - Information on any agreements concerning insurance, occupational health services,
sports associations, and similar arrangements. - Services requested and used by the registered including billing information.
- Requests for services, operational units, and type of resource (professional staff).
- Information on prohibitions, restrictions, consents regarding the use of
personal data, and other choices made by the registered. - Data processing information, such as the date the information was saved and
source of information. - Purpose of the register, information collection related to managing the customer relationship.
6. Retention Period for Personal Data
Wellmedic retains data in its customer register until the customer relationship between the registered
and the company has ended. Termination is determined based on key numbers in relation to
the customer's most recent contact. Termination of the customer relationship may also occur sooner at the customer's own
request.
7. Information Sources
Data is primarily obtained from the following sources:
- The registered individual themselves, events related to the registered's customer relationship,
communication, transactions, and service usage. - The entity offering identification, certification, address, updates, credit reporting, or other corresponding services.
The register may also include information provided by Wellmedic's partners, such as insurance companies or sports associations.
8. Regular disclosure and transfer of information
Information is disclosed to Wellmedic’s partners for purposes described in section 4 of the data protection description, in accordance with data protection legislation and within its limits.
Customer data may be transferred outside the European Union or European Economic Area, including to the United States, in accordance with data protection legislation and within its limits.
9. Description of the principles for how the registry is protected
Any manual materials are stored in a locked space accessible only to individuals with special rights. Digital material access is limited to authorized employees or partners with personal usernames and passwords. Permissions have different levels, and users are always assigned limited permissions.
10. Profiling
As part of personal data processing in the customer registry, Wellmedic may use data for profiling purposes. Profiling is conducted by assigning a customer ID to the registered individual, through which data about the registered individual arising from service usage can be combined. After this, a profile created in the described manner can, for example, be compared with profiles of other registered individuals.
The purpose of profiling is to investigate the demand and consumer behavior concerning services offered by Wellmedic.
11. Right to object
A registered individual has the right to, with consideration to their specific situation, oppose profiling and other processing actions directed at the registered individual’s personal data where the basis for processing is the customer relationship between Wellmedic and the registered individual. The registered individual can lodge their objection according to point 13 in this data protection description. In protest, the registered individual should specify the particular situation due to which they oppose the processing. Wellmedic may refuse the objection request on statutory grounds.
The registered individual can provide consent or request a prohibition against channel-specific direct marketing and profiling.
12. Rights of the registered individual concerning personal data processing
12.1 Right to access
Every registered individual has the right to check what data has been saved about them in Wellmedic’s customer registry. A request for access should be made according to point 13 in this data protection description. The right to access may be refused based on the provisions of the law.
Exercising the right to access in digital form is free of charge.
12.2 Right to rectification, erasure, or restricted processing of data
As much as the registered individual or user can act on their own, the individual should immediately rectify, erase, or supplement incorrect, unnecessary, incomplete, or outdated data stored in the registry after they become aware of it or discover it themselves.
If the registered individual cannot rectify incomplete data themselves, a request for rectification should be made according to point 13 in this data protection description.
The registered individual also has the right to request that the Data Controller at Wellmedic restricts the processing of the registered individual's personal data, for example, in a situation where the registered individual is awaiting a response to a request for rectification or erasure of their data.
12.3 Transfer of Personal Data
To the extent that the individual has provided such data to the customer register, which are processed with the individual's consent, the individual has the right to obtain these data generally in a digitally readable format and the right to transfer these data to another data controller.
12.4 Complaints to the Supervisory Authority
The individual has the right to file a complaint with the supervisory authority if the data controller has not complied with data protection regulations in its operations.
12.5 Other Rights
If personal data are processed based on the individual's consent, the individual has the right to withdraw their consent by notifying Wellmedic of this in accordance with point 13 of this data protection description.
13. Contacts
For all questions regarding the processing of personal data and situations related to the individual's exercise of their rights, the individual should contact Wellmedic at any of its places of business or by mail to the address: Wellmedic Oy Ab – Data Protection, Marknadsvägen 2, 65610 Korsholm. If necessary, Wellmedic may ask the individual to specify their request in writing and the individual's identity may be verified if necessary before taking further action.