Privacy Policy
1 Controller
Nordic Healthcare Group Oy, business ID 2629495-9
Keilaniementie 1, FI-02150 Espoo
2 Contact Person
DPO
3 Data Protection Officer
dataprotection(at)nhg.fi
4 Who’s data is concerned
The register contains information included in NHG’s client register, such as the personal and contact details of representatives of clients, prospective clients, business partners, and other cooperation partners.
5 Purpose of Processing Personal Data
The data are used for sales, client meetings and other management of the client relationship, client communication and the improvement of the user experience in the nhg.fi online service. In addition, the data are used for marketing purposes.
Our grounds for processing in terms of marketing is our legitimate interest and, in terms of the management of the client relationship, the implementation of the agreement between us and the client. We also send electronic direct marketing messages based on consent.
6 The data that we collect
We collect name and business-related phone, e-mail and address information. We process and store information about how and when we’ve been in contact with client contacts.
NHG also processes personal data provided by clients for the purpose of providing services to those clients. Such data may include personal data that falls under the client’s own controllership and that NHG processes on the basis of an agreement in its role as a service provider.
Cookies provide us with measurable data on our visitors, which we utilize e.g. when planning our marketing. This allows us to target our communication efforts as precisely as possible. We do not disclose data to third parties for marketing purposes.
7 Sources of information
The collection of name and other contact information is based on a customer relationship or other connection to Nordic Healthcare Group Oy. We collect data in connection with the registering of meetings or the establishment of a contract. We also track cookies and your visit to the nhg.fi site will leave a trace, the IP address.
8 Regular Disclosures of Data
Data shall not be disclosed to third parties for marketing purposes.
9 Transfer of Data to a Third Country (Outside the EEA) or to an International Organization
Information may also be located outside the EEA due to the maintenance services provided by the cloud service and technology providers we use, or services related to data storage (for example, Microsoft Azure platform). The transfer mechanism for such data is based on the adequacy decision of the EU Commission regarding data protection for companies that are certified under the EU-U.S. Data Privacy Framework. Where such transfers are made to countries that do not benefit from an adequacy decision by the European Commission, NHG relies on the European Commission’s Standard Contractual Clauses (SCCs) and implements supplementary safeguards where required.
10 Principles of Data Security
We respect the confidentiality of your personal data. The data file has been saved in a database secured using firewalls, passwords and other technical safeguards and to which only individuals authorized by Nordic Healthcare Group Oy have access.
We destroy obsolete and unnecessary data appropriately. We store personal data only for as long as is necessary to fulfil the purposes of processing personal data defined in this Privacy Policy. Due to the obligations under the Accounting Act or other applicable law, data may have to be stored longer than the above-mentioned period.
11 AI-based tools
Personal data may be contained within documents uploaded to our AI Tools. None of your personal data is used solely by the AI technology provider to improve their AI products. NHG may use AI-based tools to support the processing of client register data, for example to assist with client relationship management, communication, meeting preparation, analysis of client needs, improvement of services, and internal administrative efficiency. AI tools are used only for purposes compatible with the purposes described in this privacy notice, and personal data is processed in accordance with applicable data protection legislation. NHG does not use client register data for automated decision-making that would produce legal effects concerning individuals or similarly significantly affect them. Where AI-based service providers process personal data on behalf of NHG, they act as processors under appropriate contractual arrangements.
12 Your rights
You may contact NHG and request information about which categories of personal data are being processed, for what purpose, who has (or will) receive which data and if any information has been collected from other sources than yourself (and if so, from where).
If you suspect, or consider, your personal data is being processed unlawfully, or that the personal data being processed is inaccurate, you should contact NHG by sending an e-mail to: dataprotection(at)nhg.fi
You may request that your data is rectified, erased or that processing is restricted (as applicable). You also have the right to file a complaint with the supervisory authority.
In certain situations, you have the right to data portability, meaning that your data is transferred directly (or via yourself) from the employer to another controller in a structured, commonly used and machine-readable format.
You have the right to request an excerpt of the personal data stored about you and to change the data if it is inaccurate and to request its erasure where the processing no longer has a valid legal basis.
Where processing is based on consent, you have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.
Contact information for data protection ombudsman:
Address: Ratapihantie 9, 6. krs, 00520 Helsinki
Mail: PL 800, 00521 Helsinki
Phone: 029 56 66700
Fax: 029 56 66735
tietosuoja(at)om.fi
Job Applicant’s Data Protection: This is how we process personal data during recruitment
1 Controller
Nordic Healthcare Group Oy, business ID 2629495-9
Keilaniementie 1, FI-02150 Espoo
2 Contact Person
Leena Nyström, hr@nhg.fi, +358405001226
3 Data Protection officer
dataprotection@nhg.fi.
4 Purpose of Processing Personal Data
The processing of applicants’ personal data is based on taking steps prior to entering into an employment contract at the request of the data subject. Personal data is processed for the purpose of assessing applicants’ suitability for the position, conducting the recruitment process, and making recruitment decisions.
In certain situations, processing may also be based on compliance with a legal obligation to which the controller is subject, for example where information must be retained to comply with employment, non-discrimination, or other applicable legislation.
Where personal data is retained for consideration in future recruitment processes beyond the original recruitment process, processing is based on the applicant’s consent. The data is collected solely for the purpose of recruiting and conducting an employment contract drafting process. Data processing is based on the data subject’s consent.
5 The data that we collect
Personal data processed in the recruitment register includes the following: name, address, other contact details, date of birth, information contained in the curriculum vitae (CV), salary expectations, information related to interviews and assessments, any other information provided by the applicant, as well as information relating to the processing and status of the application. Information regarding any consent given by the applicant for the retention of personal data for future recruitment opportunities.
6 Sources of information
Personal data is collected directly from you. We may contact the referees, educational institutions, or former employers identified in your application to verify the accuracy of the information you have provided.
7 Processing data and Regular Disclosures of Data
Your personal data is processed as part of a standard recruitment process. The main processing activities include the collection, storage, evaluation, communication with applicants, and deletion of personal data. Such processing is necessary in order to facilitate the recruitment process.
NHG, as the data controller, will not disclose your personal data to unauthorized third parties. We will, however, share your personal data with relevant personal data processors when needed in relation to the purpose for the processing.
We use Jobylon to gather your information via Jobylon recruitment tool.
Your application will be retained for no longer than one year after the position has been filled. The reason for this is that we may need to show that the employment procedure was non-discriminatory. With your consent, your application may be stored for another year for consideration in future recruitment processes.
8 Transfer of Data to a Third Country (Outside the EEA) or to an International Organization
As a rule, personal data is processed within the European Union (EU) and the European Economic Area (EEA). However, personal data may be transferred to or accessed from countries outside the EU/EEA where this is necessary for the provision of recruitment services, the use of IT systems, cloud services, or other service providers.
Transfers outside the EU/EEA are carried out on the basis of an adequacy decision adopted by the European Commission or the European Commission’s Standard Contractual Clauses (SCCs), supplemented with additional safeguards where necessary.
9 Your rights
You may contact NHG and request information about which categories of personal data are being processed, for what purpose, who has (or will) receive which data and if any information has been collected from other sources than yourself (and if so, from where).
If you suspect, or consider, your personal data is being processed unlawfully, or that the personal data being processed is inaccurate, you should contact NHG by sending an email to: dataprotection@nhg.fi. You may request that your data is rectified, erased or that processing is restricted (as applicable). You also have the right to file a complaint with the supervisory authority.
In certain situations, you have the right to data portability, meaning that your data is transferred directly (or via yourself) from the employer to another controller in a structured, commonly used and machine-readable format.
You have the right to request an excerpt of the personal data stored about you and to change the data if it is inaccurate and to request its erasure where the processing no longer has a valid legal basis.
Where processing is based on consent, you have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.
Contact information for data protection ombudsman:
Address: Ratapihantie 9, 6. krs, 00520 Helsinki
Mail: PL 800, 00521 Helsinki
Phone: 029 56 66700
Fax: 029 56 66735
tietosuoja(at)om.fi