Privacy policy | Oxygen Clinic Turku

1. Data controller

Oxygen Clinic Finland Oy
Satamakatu 31 A, 20100 Turku, Finland
Business ID: 3444049-3
Phone: +358 10 579 4848
Email: [email protected]

2. Contact for privacy matters

For anything related to privacy, email [email protected] or call +358 10 579 4848.

3. Why we process personal data

Managing the customer relationship and providing our services. Basis: contract and the controller's legitimate interest.
Booking and checking suitability. Basis: contract. If you tell us about your health, we process that information only with your explicit consent (see section 4).
Handling enquiries. When you contact us, for example through the website or social media, we process your data to reply to you. Basis: consent.
Following up on the recovery period and the satisfaction guarantee. In the initial and final interviews we note your wishes and your assessment. Basis: contract. If health-related information comes up in the interviews, we process it only with your explicit consent (see section 4).
Marketing and communication. Basis: consent or legitimate interest.
Legal obligations, such as accounting. Basis: legal obligation.

4. What data we process

name, phone number and email address
information you give us when you contact us
information related to the customer relationship, such as bookings and visits
billing and payment information

Health-related information. We may process information about your health so that we can check that the sessions are suitable and safe for you. We process this information only with your explicit consent. Giving it is voluntary, and you can record your wishes for the recovery period without any health information. Information from the initial and final interviews is deleted 12 months after your last visit.

5. Where the data comes from

We get the data mainly from you, when you book a session, contact us by phone, email or social media (for example Meta ads) or use our services.

6. Who we share data with

We do not sell your personal data. We do not share it with third parties for marketing purposes either, with one exception: if you have accepted marketing cookies, the Meta pixel sends Meta information about your visit to our site (see section 11). In this respect Meta is a joint controller with us and also processes the data for its own purposes. In addition, we use trusted service providers who process data on our behalf:

Vello: booking
Cloudflare: website hosting
Meta: advertising and measuring it, only if you have accepted marketing cookies
Google: email (Google Workspace), plus visitor statistics and ad measurement (Google Analytics and Google Ads) only if you have accepted cookies
other IT systems, such as accounting

We may disclose data to the authorities when the law requires it.

Transfers outside the EU and EEA. Some service providers, such as Meta, Google and Cloudflare (Cloudflare, Inc., USA), may transfer data outside the EU and EEA. Transfers are based on the EU–US Data Privacy Framework, the standard contractual clauses approved by the European Commission, or other lawful transfer mechanisms.

7. How long we keep data

enquiries: 12 months, unless a customer relationship follows
initial and final interview information: 12 months after your last visit
customer data: for the duration of the customer relationship and a reasonable time after it ends
accounting records: 6 years from the end of the financial year, as required by the Finnish Accounting Act

8. How data is protected

We protect personal data with appropriate technical and organisational measures. Only people who need the data for their work have access to it.

9. Your rights

Under the EU General Data Protection Regulation you have the right to

see what data we process about you
ask us to correct inaccurate data
ask us to delete your data when there is no longer a basis for processing it
ask us to restrict processing
receive your data in a machine-readable format and transfer it to someone else
object to processing based on legitimate interest
withdraw your consent at any time

To use your rights, email [email protected]. We reply within one month.

10. Complaints to the supervisory authority

If you believe your personal data is being processed in breach of data protection law, you can lodge a complaint with the Office of the Data Protection Ombudsman in Finland: tietosuoja.fi, [email protected], phone +358 29 566 6700.

11. Cookies

We use necessary cookies on our website and, if you accept them, Google Analytics cookies and Meta and Google marketing cookies. The embedded booking calendar is Vello's service, which uses its own cookies and Google Analytics. The map on the contact page is loaded from Google Maps only when you press Show map. Google may then set cookies in your browser, and your choice is remembered in your browser. Read more in our cookie policy. You can change your cookie choice at any time from the Cookie settings link at the bottom of the page.

12. Changes

We may update this policy. We will announce significant changes on our website.