Data Privacy Statement

1. Data controller and contact person

Data controller: Ain1 Oy (Business Identity Code 2780838-4) (“Data controller”)
Address: c/o Jaakonkatu 2, 01620 Vantaa Finland
Telephone: +358 50585 3884
E-mail: [email protected]
Contact person: Matti Vartiainen

2. Name of the register

Ain1 Measurement Data Register (”Personal data register”).
In Finnish: Ain1 Oy:n mittaustietorekisteri (”Henkilötietorekisteri”).

3. Processing of personal information: purpose and legal basis

Data collected in the Personal data register includes names, social security number, height, weight, and sex of the registered people, as well as the information necessary for providing Ain1 services, and the measurement data obtained from Ain1 services. Collecting the social security number is a prerequisite to identifying the registered person and to associating the measurement data with this person in the Personal data register.

The primary purpose of the Personal data register is to provide the Ain1 service, including inter alia the measurement of a person’s body balance abilities.

Personal data is also processed to plan Data controller’s own operations, as well as for statistical purposes, to develop services and devices, to carry out operations that the Data controller is entitled to, and to fulfil Data controller’s obligations.

The legal basis for the data processing is the EU General Data Protection Regulation point (a) of Article 6(1) and point (a) of Article 9(2): the data subject has given consent to the processing of his or her personal data for one or more specific purposes.

As the delivery of the Ain1 service is based on the identification of a person and on the basic information about the person, providing personal information and accepting the processing of this data is a prerequisite for the usage of the Ain1 service.

4. Personal data recipients or recipient groups

Ain1 Oy processes the data in the Personal data register as a data controller. Furthermore, the data may be transferred to entities that provide services related to the measurement results for the registered people. These entities are data controllers separate from Ain1 Oy when it comes to data they have received.

Ain1 may use subcontractors that process the data in the Personal data register for the provision of the Ain1 service. Ain1 Oy uses reputable hosting and other technical facility service providers for storing and processing data.

5. Transferring personal data to third countries

The data is not normally transferred outside the European Union or the European Economic Area. The possible transfers will be conducted according to valid data protection legislation.

6. Retention time of personal data

Personal data shall be retained for as long as necessary to fulfil the purposes for which the data was collected. Normally this means that the personal data shall be retained for twelve (12) months from the time of the latest measurement performed concerning the registered, or from the time that the registered last viewed his/her data in the Ain1 service.

7. Rights of the registered person

The registered have the right to get a verification of whether their personal data is being processed, and the right to access their personal data retained in the Personal data register.

The registered have the right to request the Data controller for rectification of inaccurate and incorrect personal data. Considering the purposes for which the data was processed, the registered is entitled to have the incomplete personal data amended.

The registered have the right under certain circumstances, e.g. when withdrawing their consent, to request the Data controller for erasure of their personal data from the Personal data register. The registered have, in certain circumstances, the right to request the Data controller to limit the processing of their personal data, or to object processing of that data.

The registered have the right to receive their personal data and to transmit that data to another controller.

The registered have the right to have the personal data transmitted directly from one controller to another, where technically feasible.

The registered should address requests and inquiries concerning the exercise of the above-mentioned rights to the contact person mentioned in this Data Privacy Statement, by e-mail ([email protected]) or by mail (Ain1 Oy, c/o Spaces, Mannerheiminaukio 1 A, 00100 Helsinki, Finland).

8. Right to withdraw the consent

The registered have the right to withdraw their consent at any time. The consent can be withdrawn by sending an e-mail ([email protected]) or mail (Ain1 Oy, c/o Spaces, Mannerheiminaukio 1 A, 00100 Helsinki, Finland).

9. Right to complain to supervisory authority

The registered have the right to lodge a complaint to the data protection authority if they suspect that processing of their personal data is in violation of data protection regulations.

10. Modifications to this Data Privacy Statement

Data controller reserves the right to modify this Data Privacy Statement according to changes in authority guidelines or legislation, and to develop services.

This Data Privacy Statement was last updated 16.4.2020.