Privacy statement
Registrar
Kuntokeskus Energy Oy (1949231-6)
Torikatu 31, 80100 Joensuu
010 420 6650
metropol@kuntokeskusenergy.com
Contact person for matters concerning the register
Aleksi Inkinen
Data Protection Officer
Torikatu 31, 80100 Joensuu
010 420 6650
aleksi.inkinen@kuntokeskusenergy.com
Name of the register
Register of clients
Purpose of personal data processing
The purpose of Kuntokeskus Energy Oy's client register is to manage treatment periods and customer agreements for physiotherapy, massage, workplace wellness and gym customers. The register is also used for the development and invoicing of services. In addition, the client register is used for information and news purposes as well as for direct marketing. In the case of surveillance camera recordings, the maintenance of the register is based on the security of staff and customers. The data subject has the right to prohibit direct marketing directed at them.
Information content of the register
Personal identification data:
- - name
- - personal identity number
- - address
- - phone number
- - email
Other information:
- - information about the services purchased by the client
- - employer
- - billing information
- - health information of physiotherapy, personal training, workplace wellness and massage clients
Regular data sources
The customer (registered) themselves and the registered employer (in the services of a registered employer).
Regular transfers of data and transfers outside the EU or the EEA
Personal data will only be disclosed to persons who have entered into a full-time professional contract with Kuntokeskus Energy Oy to the extent that the disclosure is necessary for the management of the customer relationship. The information is not disclosed, for example, to professionals who have entered into a professional agreement with Kuntokeskus Energy Oy for individual personal trainer or physiotherapy sessions. Personal data will not be disclosed to a third party, for example for marketing purposes, and the data will not be transferred outside the EU or the EEA.
Principles of register protection
Paper documents are stored in the supervised and locked premises of Kuntokeskus Energy Oy's branches. Locked premises can only be accessed by the personnel of Kuntokeskus Energy Oy and persons who have entered into a full-time professional contract. Computer equipment is stored in locked rooms. Computer equipment is behind an external firewall. The software used to manage patient and client registers is encrypted with user IDs, and within the organization, the access rights to the software are limited by user groups. The stored data is confidential.
Right of inspection
As a general rule, every data subject has the right to inspect the data stored in the client register. The request must be made in writing to the Data Protection Officer.
Right to request correction of information
Every registrant has the right to request correction of incorrect information in the client register. The request must be made in writing to the Data Protection Officer.
