Privacy Notice

1. Data controller

Contact Point for Cross-Border Healthcare, Social Insurance Institution of Finland (Kela)
Address: Nordenskiöldinkatu 12, 00250 Helsinki, Finland
Postal Address: PO Box 450, 00056 Kela, Finland
Email: yhteyspiste@kela.fi

2. Contact person for matters related to the register

Marika Lahtivirta
yhteyspiste@kela.fi

3. Name of the register

Privacy Notice for contact and feedback forms at EU-healthcare.fi

4. Purpose and legal basis for processing personal data

The personal data collected via the forms is used solely to respond to the messages submitted through the forms. The collection of data is based on the user’s consent. The register is compiled exclusively from the information provided by users of the EU-healthcare.fi website in the respective forms. The Contact Point for Cross-Border Healthcare determines the personal data collected from respondents for each form.

The Contact Point for Cross-Border Healthcare may also design forms in such a way that no personal data is collected from respondents.

5. Content of the register

The personal data stored may include

• name, and
• email address.

No other personal data is collected or stored.

6. Regular sources of data

Data is obtained solely from the data subject. No data is obtained from other sources.

7. Regular disclosure of data

Personal data will not be disclosed outside the Contact Point for Cross-Border Healthcare.

8. Transfer of data outside the EU or EEA

Data will not be transferred outside the EU or EEA.

9. Retention period for personal data

Personal data is retained for a maximum of six (6) months to enable responses to questions or feedback submitted through the form.

10. Principles for register security

The Contact Point for Cross-Border Healthcare ensures that data protection and information security are implemented in all operations. All employees of the Contact Point for Cross-Border Healthcare who process personal data are bound by a confidentiality agreement. Only authorised personnel who require access to personal data for their duties may use the register in accordance with their access rights.

11. Right of access

Under Article 15 of the General Data Protection Regulation (EU 2016/679, ‘GDPR’), data subjects have the right to access their personal data. This means that individuals may review their data held in the register.

If data subjects wish to review the data concerning themselves, they should request information from the Contact Point for Cross-Border Healthcare.

Requests can be submitted to the Contact Point for Cross-Border Healthcare at yhteyspiste@kela.fi.

12. Right to rectify incorrect data

Under GDPR Article 16, data subjects have the right to request rectification of incorrect personal data in the register.

If data subjects wish to rectify the data concerning themselves, they should request it from the Contact Point for Cross-Border Healthcare.

The request must specify

• the incorrect data,
• the grounds for its inaccuracy, and
• the required corrections.

Requests can be submitted to the Contact Point for Cross-Border Healthcare at yhteyspiste@kela.fi.

13. Right to erasure

Under GDPR Article 17, data subjects have the right to request the erasure of their personal data from the register.

If data subjects wish their data to be erased from the register, they should request it from the Contact Point for Cross-Border Healthcare. Requests can be submitted to the Contact Point for Cross-Border Healthcare at yhteyspiste@kela.fi.

14. Right to lodge a complaint with a supervisory authority

Under GDPR Article 77, data subjects have the right to lodge a complaint with the data protection authority if they believe that the Contact Point for Cross-Border Healthcare has violated the GDPR in processing personal data.

15. Amendments

The Contact Point for Cross-Border Healthcare may amend this privacy notice from time to time without prior notice.

Privacy notice last updated: 27 January 2025