Privacy Policy

Identity of the controller of the processing you personal data

HealthSPA ry (Upgraded)  (Business ID: 2627557-1)
Lapinlahdenkatu 16, 00180 Helsinki, Finland

The purpose of processing personal data
Your personal data is processed during operations that are related to the updating of the member and customer register and managing of the membership, such as handling orders, registrations to events and projects, customer service, communication and marketing.

Purchase information and transaction details handled in the register can be used for profiling and for the targeting of marketing and customer communication to make it interesting to the registrant. Personal data is also processed when sending newsletter, in events and during the participation in other marketing activities.

Data content
Personal data may include name of the organisation, visiting address, billing address, contact details of contact person (name, e-mail, phone number), industry, founders, description of the company, business ID and additional details. Personal data that is submitted by you when participating in an event organised by Healthspa ry, such as first and last name, possible contact details, and other given information that are necessary for the event, may be processed in the register. Other information may include among other things: email, phone number, address, date of birth or allergy information.

Technical data might also be automatically collected from Healthspa ry websites by Healthspa ry or a third party. Technical Data may include the browser name, the type of computer or device, time spent on website, interaction with the Services, URL of the website you visited before and after visiting the Services, the time and date of user visits, surfing habits, IP address, operating system and the Internet service providers utilized and other similar technical information.

Various technologies might be used to collect and store information when you visit one of Healthspa ry’s  websites, including cookies. Cookies allow us monitor the use of the websites. This helps us improving our websites and better serve our users. We also use tracking and analytics cookies to see how well our services are being received by our users

Source of information
The information is collected from you or your organisation itself, through the membership as well as event, newsletter and project registrations.

Sharing of information
In general information will not be shared to other parties, but it may happen occasionally when it can be considered to be beneficial for you.

Transferring data outside of EU or ETA
Information will not be transferred outside of EU or ETA.

Protection principles of the register
Electronically saved data is saved in a database provided by a third party. Username and password is required to access the system.

Your rights:

You have the right to:

  • ask for access to the personal data processed by us
  • ask to correct, to delete, to restrict and object the processing of your data, as well as the right to transmit the data to another system;
  • inspect and when needed, correct the data processed by us. The request should be submitted as written to the email address stated in this privacy policy.
  • opt out of receiving electronic direct marketing communications from us by clicking on the opt-out link provided in all marketing communications we send you and choosing not to receive marketing communications from us in the future. You also have the right to prohibit us from using your personal data for direct marketing purposes, market research and profiling by contacting us on the addresses indicated above
  • make a complaint of the processing of your personal data to the supervising authority

Information Security
We will take all reasonable, appropriate security measures to protect Healthspa ry and our customers, partners and contacts from unauthorized access to or unauthorized alteration, disclosure or destruction of personal data we are in possession of. Measures include, where appropriate, encryption, firewalls, secure facilities and access rights systems. Should despite of the security measures, a security breach occur that is likely to have negative effects to your privacy, we will inform you about the breach as soon as possible.

Applicability and changes
Our Privacy Policy applies worldwide, to all of the services offered by Healthspa ry. This Privacy Policy is published in English. Our Privacy Policy may change. In case of changes, the current version of the document is available on our website (  No substantial changes will be made to this this Privacy Policy. We will not reduce the rights of our customers, partners or contacts without a notification beforehand.