Privacy policy

Who is responsible for your data

Providental Oy (“Providental”, “we”, “us”) is the controller for the personal data processed through this website and in the course of treating patients at Kalevankatu 4, 2nd floor, 00100 Helsinki.

If you have any question about how we handle your data, or you want to exercise any of the rights described below, contact us at providental@providental.fi or on 09 6227 0770.

What we collect, and why

Enquiries through this website. If you use the contact form we process the name, email address, phone number and message you give us, solely in order to answer you. The legal basis is our legitimate interest in responding to people who get in touch (GDPR Art. 6(1)(f)).

Appointment booking. When you book an appointment we process the details needed to make and confirm the booking, and to identify you as a patient. The legal basis is the performance of a contract (Art. 6(1)(b)) and our obligations as a healthcare provider.

Patient records. Treatment generates health data, which is a special category of personal data. We process it in order to provide healthcare, under Art. 9(2)(h), and we are required to keep patient records under Finnish law.

Website analytics. With your consent we use analytics to understand which pages are read and how people arrive at the site, so we can improve it.

Cookies

Cookies are small text files stored on your device when you visit a website. This site uses cookies that are strictly necessary for the site to work, and — only if you agree — cookies for analytics and advertising measurement.

You can withdraw or change your consent at any time using the cookie settings link in the footer, and you can delete cookies or block them entirely in your browser. Blocking necessary cookies may stop parts of the site from working.

Who we share data with

We do not sell your personal data. We share it only with suppliers who process it on our behalf — for example our website host, our booking system and our email provider — and only under a data processing agreement that limits them to our instructions.

Where a supplier processes data outside the EU/EEA, that transfer is covered by the European Commission's standard contractual clauses or an equivalent safeguard.

How long we keep it

Enquiries sent through the contact form are kept for as long as needed to deal with them and for a reasonable period afterwards, then deleted.

Patient records are kept for the period required by Finnish healthcare legislation, which is considerably longer than we would otherwise keep personal data, and we cannot delete them on request while that obligation applies.

Your rights

You have the right to ask what personal data we hold about you and to receive a copy of it; to have inaccurate data corrected; to have data erased where we have no continuing obligation to keep it; to object to or restrict certain processing; and to receive data you have given us in a portable format.

You can also withdraw consent at any time, where our processing is based on consent. Withdrawing consent does not affect processing that already took place.

To exercise any of these rights, write to providental@providental.fi. We will respond within one month.

If you think we are handling your data incorrectly, you can complain to the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto, tietosuoja.fi).

Security

We apply technical and organisational measures appropriate to the sensitivity of the data we hold, including access control, encryption in transit, and limiting access to patient records to the staff who need it in order to treat you.

Changes to this policy

We may update this policy as our systems or the law change. The date below tells you when it was last revised.