DATA PRIVACY POLICY OF SOOMA OY’S PATIENT REGISTER

Date: 20.2.2019

1 REGISTRATION HOLDER

Soo­ma Oy
Kuor­ta­neen­ka­tu 2 A
SF-00510 Hel­sin­ki

Busi­ness ID: 2527296–9

Health ser­vices pro­vi­ded by Tuu­ma, a brain simu­la­tion cen­ter ope­ra­ting under the aus­pices of Soo­ma Oy.

2 CONTACT PERSON REGARDING REGISTERS

Data Pro­tec­tion Officer Tuo­mas Neu­vo­nen, tuomas@soomamedical.com, telep­ho­ne 010 318 9811.

3 PURPOSE OF USE OF THE PATIENT REGISTER AND BASIS FOR ANALYSIS OF PATIENT DATA

The use of patient data is based on laws or patient con­sent.

The data sto­red in the Patient Regis­ter is used for patient care, com­mu­nica­tion, loca­ting of the bor­rowed devices, and other uses in accor­dance with law and con­sent.

4 DATA RECORDED TO THE PATIENT REGISTER

Con­tact infor­ma­tion:
Patient name, date of birth, address, email and pho­ne num­ber

Patient infor­ma­tion:
Start and end dates of treat­ment, infor­ma­tion on the level of depres­sion or pain in a patient with stan­dar­dized met­rics (BDI) befo­re and after treat­ment.

Patient health care per­son­nel infor­ma­tion and patient appoint­ment data are sto­red in the patient regi­stry sub-regis­ter.

REGULAR SOURCES OF INFORMATION

The infor­ma­tion in the regis­ter is obtai­ned from the patient him­self. The infor­ma­tion from the patient’s pain and depres­sion meters will come from a healthca­re pro­fes­sio­nal toget­her with the patient.

Nur­sing staff and healthca­re pro­fes­sio­nals.

5 DELIVERY OF PATIENT INFORMATION

Patient records are con­fi­den­tial and staff mem­bers have a duty of pro­fes­sio­nal sec­recy.

Infor­ma­tion is not disclo­sed to any­one. Only the cli­nic’s own staff will use the infor­ma­tion for the bene­fit of the patient. If third par­ties want to ask for infor­ma­tion, the patient’s own aut­ho­riza­tion is requi­red.

6 USE OF PATIENT INFORMATION AND GENERAL PRINCIPLES OF PROTECTION

Patient infor­ma­tion is pro­vi­ded for con­fi­den­tia­li­ty. Patient infor­ma­tion must not be disclo­sed to third par­ties.

Patient data may only be used by per­sons in the rele­vant ope­ra­tio­nal unit or, at the request of the patient, invol­ved in or rela­ted to the patient. The chief execu­ti­ve of the cont­rol­ler deci­des on orga­niza­tio­nal solu­tions and gives access to the emplo­yees to the records of the patient records to the extent requi­red by the tasks.

The patient regis­ter infor­ma­tion is sto­red in a loc­ked arc­hi­ve loca­ted in a loc­ked room.

7 RIGHTS OF THE REGISTERED

The patient has the right, in accor­dance with Chap­ter 6, Sec­tion 23 of the Per­so­nal Data Act, to ins­pect the patient records concer­ning him­self or her­self, to claim the cor­rec­tion of incor­rect infor­ma­tion, and otherwi­se to invo­ke his or her rights pro­tec­ted by the Per­so­nal Data Act. The right of ins­pec­tion may be refused on the grounds laid down by law. The infor­ma­tion is pro­vi­ded by a phy­sician appoin­ted by the health care unit or by anot­her health care pro­fes­sio­nal who makes an ent­ry in the Patient Regis­ter. The infor­ma­tion is pro­vi­ded to the patient in wri­ting. The exerci­se of the right of ins­pec­tion is, in principle, free of char­ge.

Right of the data subject to lodge a complaint with the Supervisory Authority

The data sub­ject has the right to appeal to the com­pe­tent super­vi­so­ry aut­ho­ri­ty if the cont­rol­ler has not complied with the applicable data pro­tec­tion rules.

8 CONTACT INFORMATION

In all mat­ters rela­ting to the proces­sing of per­so­nal data and in the exerci­se of their rights, the data sub­ject shall con­tact by post to: Soo­ma Oy / Patient Regis­ter, Kuor­ta­neen­ka­tu 2 A, 00510 Hel­sin­ki. If neces­sa­ry, Soo­ma may request to regis­ter its request in wri­ting and, if neces­sa­ry, the iden­ti­ty of the data sub­ject may be veri­fied befo­re taking other mea­su­res.