Privacy policy statements

The information on this page is translated from Finnish. In case of conflict between the translation and the original, the Finnish version has priority.

Privacy policy statement for the Vibemetrics service

Updated 22.3.2019

Registrar

Vibemetrics Oy (VAT number FI2988220-3)
Halkivahantie 3
FI-04300 TUUSULA
info@vibemetrics.com

Contact person

Mikko Ruokojoki
c/o Vibemetrics Oy
Halkivahantie 3
04300 TUUSULA
mikko.ruokojoki@vibemetrics.com

Name of the register

User register of Vibemetrics service

Purpose of processing personal data

The justification of processing personal data in the register is the customer relationship between the employer (or similar organisation) of the data subject and Vibemetrics Ltd associated with the Vibemetrics service.

Personal data is recorded and processed in Vibemetrics for the purpose of

  • aggregating measurement results according to organisation hierarchy
  • grouping measurement results geographically according to organisational units
  • statistical analysis of measurement data
  • access control of the service
  • delivering personal messages associated with the service to the users
  • troubleshooting associated with the service.

Register contents

The register contains the following personal data about data subjects:

  • email address
  • mobile phone number
  • a unique internal identifier generated by the service
  • organisation
  • location (on user group level) in the organisation’s hierarchy
  • user interface language
  • a unique identifier of the user’s device generated by the service
  • the measurement results (“feelings”, comments and reactions) input by the user
  • for each measurement result
    • IP address where the result was submitted from unless forbidden by the organization.
    • geographical location (latituden and longitude) inferred from the IP address unless forbidden by the organisation.

Personal data is retained in the register for the duration of the organisation’s contract and no more than one year after the termination of the contract.

Regular data sources

Email address, mobile phone number, organisation, user group and user interface language are received from the organisation or the user.

Measurement results are received directly from the user.

The IP address is gathered from the network address of the user’s browser or device.

Regular transfers of personal data

Personal data in the register is not transferred on a regular basis.

Data transfer outside EU or EEA

Personal data in the register is no transferred outside EU or EEA. The service is hosted in cloud services that store the data in data centres located inside EU or EEA.

Data protection principles of the register

Processing and protection of personal data in the register is carried out according to proper practices. Physical and digital security of the data processing infrastructure is taken care of with diligence.

Access to personal data in the register is limited to those employees of Vibemetrics Ltd whose tasks (such as troubleshooting) require the access.

Right for inspection and correction of personal data

The data subject has the right to inspect their personal data recorded in the register and demand correction of incorrect or incomplete data. The demand must be submitted in writing to the registrar. The registrar may require the requestor to prove their identity. The registrar responds to the requestor within the time limit imposed by the EU general data protection regulation (one month as a rule).

Other rights associated with processing personal data

The data subject has the right to demand the removal of their personal data recorder in the register. The data subject also has the other rights stated in the EU general data protection regulation such as limiting the processing of personal data in certain circumstances. The demands must be submitted in writing to the registrar. The registrar may require the requestor to prove their identity. The registrar responds to the requestor within the time limit imposed by the EU general data protection regulation (one month as a rule).

The majority of personal data recorder in the register is essential for the functioning of the service. If the data subject requests partial removal of their personal data, the registrar may remove all of the data subject’s data, after which the service is no longer usable by the data subject.

Contact Us

If you have any questions, please contact us at support@vibemetrics.com.