Who we are
The controller is Cardiolyse Oy (Reg. no 2773211-3), Terkko Health Hub, Haartmaninkatu 4, 00290 Helsinki, Finland. For any privacy question, email [email protected] with “Privacy” in the subject line.
What this notice covers
This notice covers our website, enquiries, meeting bookings and newsletter. The processing of ECG and other data on the Cardiolyse platform and in our services is governed by our agreements with customers. If you are a patient, please contact the organisation that recorded your ECG.
What we process and why
| Purpose | Data | Legal basis | How long |
|---|---|---|---|
| Answering enquiries sent by email or through the website | Name, work email, organisation, role, message content | Legitimate interest in responding to you (Art. 6(1)(f)) | As long as needed to handle the enquiry and any follow-up |
| Booking meetings through TidyCal | Name, email, chosen time, details you add | Legitimate interest in arranging the meeting (Art. 6(1)(f)) | As long as needed for the meeting and any follow-up |
| Newsletter | Email address, subscription status | Consent (Art. 6(1)(a)) | Until you unsubscribe |
| Website analytics with Google Analytics | Pages viewed, referring site, approximate location, device and browser information, online identifiers | Consent (Art. 6(1)(a)) | Up to 14 months |
| Running and securing the website | IP address, browser information and technical logs | Legitimate interest in a secure, working website (Art. 6(1)(f)) | Only as long as needed for security and troubleshooting |
You do not have to give us personal data to browse the website. Without your contact details, however, we cannot reply to you or send you the newsletter. We do not make decisions about you based solely on automated processing, and we never sell personal data.
Cookies and analytics
We use Google Analytics to understand how visitors use our website, so we can improve it. Analytics cookies are set only if you accept them in the cookie banner. You can change your choice at any time, and declining has no effect on how the website works.
A strictly necessary cookie remembers your cookie choice. To display our pages, your browser also loads fonts from Google Fonts, which receives your IP address. Links to LinkedIn and TidyCal take you to those services, where their own privacy policies apply.
Who receives data
- Service providers that host our website or provide email, newsletter, scheduling and analytics tools, including Google Ireland Limited. They process data on our behalf, under written agreements.
- Authorities, when the law requires it.
Transfers outside the EU/EEA
Some providers, such as Google, may process data in the United States. These transfers rely on the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.
Your rights
Under the GDPR, you can ask us to:
- give you a copy of your personal data
- correct inaccurate data
- delete your data
- restrict how we use it
- object to processing based on legitimate interest
- send your data to you or another organisation
You can withdraw your consent at any time, by unsubscribing from the newsletter or changing your cookie choice. This does not affect processing that took place before.
Send your request to [email protected]. We may need to confirm your identity first. You can also complain to the Finnish supervisory authority, the Office of the Data Protection Ombudsman, or to the authority in your own EU country.
Changes to this notice
We update this notice when our website or the law changes. The date at the top shows the latest version.
Contact
Cardiolyse OyReg. no 2773211-3
Terkko Health Hub, Haartmaninkatu 4
00290 Helsinki, Finland
[email protected]