Privacy policy

PRIVACY NOTICE

Updated 25. April 2022

We are committed to protecting your privacy.

Data Controller and Data Protection Officer

Finnish Biobank Cooperative – FINBB, Ruukinkatu 2-4, 20540 Turku, Finland, business id-code 2853268-2. You can reach FINBB:s data protection officer by emailing tietosuojavastaava@finbb.fi.

Purpose and Legal Bases of Processing

We may process your personal data for the following purposes on the following grounds:

  1. to provide the FINGENIOUS® -services, including processing applications to biobanks made through the services.

    • This processing is based on the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, ‘GDPR’) Article 6 sub-paragraph 1 point b: processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.

  2. to monitor and ensure the proper operations of our online services, for example to prevent or investigate unauthorised use, and to address claims made against us.

    • This processing is based on the GDPR Article 6 sub-paragraph 1 point f: processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party.

  3. to provide information about our services.

    • This processing is on our legitimate interest to keep our users informed (GDPR Article 6 sub-paragraph 1 point f). You can opt-out from receiving these messages at any time. For those who specifically subscribe to our newsletter or other information, we process personal data based on consent (GDPR Article 6 subparagraph 1 point a). You can withdraw your consent at any time.

  4. to organise events and to provide information about events.

    • This processing is based on our legitimate interest to keep our users informed (GDPR Article 6 sub-paragraph 1 point f) or consent (GDPR Article 6 subparagraph 1 point a). You can opt-out from receiving messages or withdraw your consent at any time.

Providing personal data is required for using services with registration, like FINGENIOUS services for making applications for biobank samples and associated data. It is required also for subscribing to information and to participate in events.

Personal Data Collected

We collect the following types of personal data:

At online-services registration and use we may collect your

  • Name and title

  • E-mail address

  • Address

  • Telephone number

  • Represented organisation (applicant organisation) and its type (e.g. academic, industry)

  • Selected language option

  • IP-address

In the application forms we may also collect

  • Names and organisations of the researchers participating in the research project

  • Names, addresses, e-mail addresses and represented organisations of the person responsible for the research project and of the persons authorised to sign contracts.

For newsletter subscriptions we may collect

  • Name and title

  • E-mail address

  • Telephone number

  • Represented organisation

  • Voluntary comments by the subscriber

  • Consent information

For events we may collect

  • Name and title

  • E-mail address

  • Telephone number

  • Represented organisation

  • Diet preferences

  • Event photos and video recordings

  • Consent information

Recipients of Personal Data

We share the applications and the personal data included in them only with the biobank operators, registries and authorities to whom the applications are addressed.

We may use information technology and other subcontractors (processors) to provide our services and to manage personal data. Some of these subcontractors may reside outside the European Union or the European Economic Area in countries, where the European data protection laws do not apply. In such cases, sufficient data security and protection are secured by contracts using terms approved by the EU Commission and other appropriate technical and organisational means.

Storage of Personal Data

We will store personal data as long as they are needed for the purpose for which they have been collected.

Your Rights

Each person whose personal data we process has the rights provided in the GDPR:

  • right to withdraw your consent

  • right to be informed of the processing

  • right of access to the personal data

  • right to rectification of personal data

  • right to demand erasure of personal data

  • right to restriction of processing of personal data

  • right to data portability

  • right to object processing of personal data

  • right to lodge a complaint with a supervisory authority

The Finnish supervisory authority is:

Office of the data protection ombudsman
Visiting address: Ratapihantie 9, 00520 Helsinki, Finland
Postal address: P.O. Box 800, 00521 Helsinki, Finland
tietosuoja@om.fi.

This Privacy Notice may be updated from time to time.