Personal data and data Protection
Introduction
We are committed to ensuring the security of your personal data and protecting your privacy. This policy will inform you about how we look after your personal data when you use our website and our services. It will also tell you about your privacy rights and how the law protects you.
Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.
Personal Data
Data about your use of the website, which ads you receive and possibly click on, geographic location, gender, and age segment, etc., are disclosed to third parties to the extent that these details are known. You can see which third parties are involved in the section about “Cookies” above. The information is used for targeted advertising and to improve the experience of our website.
We also use a number of third parties for storing and processing data. These parties process information solely on our behalf and may not use it for their own purposes.
Disclosure of personal data such as name and email, etc., will only happen if you give consent to it. We only use data processors in the EU or in countries that can provide your information with adequate protection.
Automated Technologies or Interactions.
When you interact with our app or website, we may automatically collect personal data. We collect this personal data using cookies and other similar technologies. Please see about cookies (link to Cookies) for further information.
Who we are
We are Patient Involvement and Collaboration Community United (PiCC-United). We are a company incorporated and registered in Finland. Our company number is 3403110-4. Our registered office address:
PiCC United (Patient Involvement and Collaboration Community United)
– a initiative of MediPaCe Limited, Suomen Sivuliike/ Finland Branch
PL 15
00811 Helsinki
Finland
PiCC United is a branch of MediPaCe Ltd. that is registered in England and Wales under Company registration number 10943570. MediPaCe Limited, Suomen Sivuliike/ Finland Branch is registered with the Finnish Trade Register under registration number 3403110-4. MediPaCe Ltd. Is registered in England and Wales under Company registration number 10943570. Registered Address: 167-169 Great Portland Street, London, W1W 5PF.
When we refer to “PiCC United” or “we,” “us,” or “our” in this policy, we refer to PiCC United. We are the ‘data controller’ in relation to the personal data you provide to us, which means we determine the purposes and the manner in which your personal data is processed and are responsible for it.
How to contact us
Questions, comments, and requests regarding this policy are welcomed. You can either use our contact form to get in touch with us or write to our Data Protection Officer at:
Email: compliance @piccunited.org
Phone: +358-40-769 0602
About our service
PICC United processes personal data about you when you contact us by email, letter, or phone. We also process personal data about you if you receive a message from a board member.
Employees in the Organization
If you hold a position in the PICC United organization or are employed by us, we process your personal data electronically. Personal data that we process in relation to job applicants or employees is processed to manage your employment relationship or to establish an employment relationship.
To process your personal data for application or employment at PiCC United, we follow the Data Protection Act §6, section 1, point 2, and §7, section 3.
In accordance with the Data Protection Act §28, we must inform you that we process personal data electronically that is necessary to handle your inquiry, your association, or cooperation with you. This means we need to process your personal data.
Data Controller and Processor :
Data Controller: Chi Pakarinen
PiCC United Data Processor: John Fabule
Information About the Company
The purpose of this privacy policy is to give you information on how we collect and process your personal data so that you can feel secure when using our website, knowing what your personal data is used for, and that it is kept secure.
The purpose of processing is to protect your interests according to the organization’s statutes and purpose, to communicate with you in our cooperation, and generally to carry out the administration necessary and customary in PICC United’s work.
Definitions
It is important that you read this privacy policy together with any other privacy notice or fair processing notice we may give on specific occasions when we are collecting or processing personal data about you, so you are fully aware of how and why we are using your data. This privacy policy supplements other notices and is not intended to override them. Your healthcare provider will also have a privacy policy detailing how they handle your data.
Personal data is any kind of information that to some extent can be attributed to you. When you use our website, we collect and process various such information. This happens, for example, when you access content generally, sign up for our newsletter, participate in competitions or surveys, register as a user, member, or subscriber, use other services, or make purchases via the website.
We typically collect and process the following types of information: a unique ID and technical information about your computer, tablet, or mobile phone, your IP number, geographic location, and which pages you click on (interests). To the extent that you give explicit consent and enter the information yourself, we also process: name, phone number, email address, and payment information. This is typically in connection with creating a login and/or making a purchase.
Storage Period
The information is stored for the period allowed by law, and we delete it when it is no longer needed. The period depends on the nature of the information and the background for storage. Therefore, it is not possible to provide a general timeframe for when information is deleted.
PiCC United has also chosen to use your consent as the basis for processing your personal data. This occurs when you choose to use the website, want to volunteer, participate in projects, or establish a membership.
Anonymized data – this is data where information that enables the concerned individual to be identified has been removed.
PiCC United does not share information about you with others without your permission unless we are obliged to do so according to EU legislation. Personal data about you will be deleted when we no longer have a purpose for processing it.
You can withdraw your consent at any time without affecting the lawfulness of the processing based on consent before its withdrawal. You should write to compliance@piccunited.org if you wish to have the consent declaration deleted prematurely. PiCC United deletes your consent after the project period ends or after a maximum of 5 years.
According to the Data Protection Act, you have the right to access and rectify or delete personal data or restrict the processing of data about you.
If you do not want PiCC United to process personal data about you that is necessary for us to manage your association with the organization, cooperate in projects, or communicate with us, it may mean that you cannot maintain your association, and our cooperative relationship must end.
Security
We have taken technical and organizational measures to prevent your information from being accidentally or illegally deleted, disclosed, lost, impaired, or accessed by unauthorized persons, misused, or otherwise processed in violation of the law.
Third-Party Links
You should be aware that our website may include links to third-party websites, plug-ins, and applications. By clicking on those links or enabling those connections, third parties may collect or share data about you. We do not control these third-party apps and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website or app you visit or use.
Disclosure of Information
Data about your use of the website, which ads you receive and possibly click on, geographic location, gender, and age segment, etc., are disclosed to third parties to the extent that these details are known. You can see which third parties are involved in the section about “Cookies.” The information is used for targeted advertising and to improve the experience of our website. We also use a number of third parties for storing and processing data. These parties process information solely on our behalf and may not use it for their own purposes.
Third Parties or Publicly Available Sources
We may receive personal data about you from various third parties. This includes your medical practice, your general practitioner, clinician, or other practitioners.
What Happens If You Do Not Provide Us With the Personal Data We Have Requested?
Where we need to collect personal data by law or in accordance with our Terms of Service (available here), and you do not provide that data when requested, we may not be able to provide our service to you. We will notify you if this is the case at the time.
Disclosure of personal data such as name and email, etc., will only happen if you give consent to it. We only use data processors in the EU or in countries that can provide your information with adequate protection.
What Information Do We Collect About You?
The information is used to identify you as a user and show you the advertisements that are most likely to be relevant to you, register your purchases and payments, and deliver the services you have requested, such as sending a newsletter. Additionally, we use the information to optimize our service and content.
Personal data or personal information means any information about a person from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
We may collect and process the following different types of personal data about you:
- Identity data: includes full name, doctor number, journal number, username or similar identifier, marital status, title, date of birth, gender
- PiCC United’s website sign-up data: includes your email address, username, password, phone number, medical practice, or other healthcare service you use, and any other information you provide to us when you register to use our membership database.
- Contact data: includes full name, email address, phone numbers
- Correspondence data: includes information submitted to us via our forms and details of any correspondence between you and us
- Problem reporting data: includes information about technical errors you tell us about that relate to our app (e.g., that may be included in screenshots that you share with us)
- Security reporting data: includes reports from users of PICC United’s website (i.e., patients, clinicians, and other administrators) about security issues related to the website
- Feedback data: includes any feedback you give us about your use of PiCC United’s website
- Marketing data: includes your preferences for receiving marketing from us and your communication preferences
To give you access to your journal-based medical data, we will also process the following “special categories” of more sensitive personal information. These are categories of personal data that require a higher level of protection.
If you want further information on how we might collect or use your personal data, please contact us email.
Sensitive Health Data
If you participate in one of PiCC United’s projects, PiCC United establishes consent forms that register, collect, and process the personal data as part of the project.
PiCC United stores consent on a GDPR-secure drive accessible only to PICC United employees. PICC United deletes your consent after the project period ends or after a maximum of 5 years. Types of data collected include:
- Name
- Portrait photo
- Profession
- Age
- Contact details
- Diagnosis§ Health and medical information (if the purpose warrants it)
- Data is stored in PiCC United’s internal data archive. Texts, quotes, and articles are published on PiCC United’s website, social media, and marketing materials.
The collected data is deleted or anonymized when it is no longer necessary for PiCC United for the purpose they were collected. All projects are indicated as CONFIDENTIAL and are not shared. If remuneration, coverage costs, or similar are offered, PICC United will need your social security number and bank details to pay you.
This is EU legislation and applies to everyone. PiCC United must store your data on a GDPR-secure drive in OneDrive, Taxes, and other accounting systems and delete them according to the law.
PiCC United, as the full data controller, is fully committed to complying with all applicable laws and regulations on personal data protection, such as the Data Protection Act and other applicable laws regulating privacy.
PiCC United establishes security measures to ensure the protection of the registered data, including the protection of the registered personal data in connection with data transfers to countries within the EU.
How Is Your Personal Data Collected?
We use different methods to collect data from and about you, including through:
Direct Interactions
You may give us your personal data by downloading our membership database and registering an account when you report a problem with our website and by corresponding with us personally, via email, phone, post, by submitting an inquiry via our website, or otherwise.
You may give us data when you enter health data in our services. This includes data you provide related to health events, activities, goals, and similar types of data related to health and activity.
We collect this data to provide the services and to tailor features, advertising, and services to your goals, reporting, and analysis, as well as product recommendations.
Automated Technologies or Interactions
When you interact with our app or website, we may automatically collect personal data. We collect this personal data using cookies and other similar technologies. Please see about cookies for further information.
What Information Do We Collect About You?
The information is used to identify you as a user and show you the advertisements that are most likely to be relevant to you, register your purchases and payments, and deliver the services you have requested, such as sending a newsletter. Additionally, we use the information to optimize our service and content.
Personal data or personal information means any information about a person from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
We may collect and process the following different types of personal data about you:
- Identity data: includes full name, doctor number, journal number, username or similar identifier, marital status, title, date of birth, gender
- PiCC United’s website sign-up data: includes your email address, username, password, phone number, medical practice, or other healthcare service you use, and any other information you provide to us when you register to use our membership database.
- Contact data: includes full name, email address, phone numbers
- Correspondence data: includes information submitted to us via our forms and details of any correspondence between you and us
- Problem reporting data: includes information about technical errors you tell us about that relate to our app (e.g., that may be included in screenshots that you share with us)
- Security reporting data: includes reports from users of PiCC United’s website (i.e., patients, clinicians, and other administrators) about security issues related to the website
- Feedback data: includes any feedback you give us about your use of PiCC United’s website
- Marketing data: includes your preferences for receiving marketing from us and your communication preferences
To give you access to your journal-based medical data, we will also process the following “special categories” of more sensitive personal information. These are categories of personal data that require a higher level of protection.
If you want further information on how we might collect or use your personal data, please contact us.