Privacy Statement - Customer Data (Mywellness application)

Privacy statement under the EU General Data Protection Regulation (EU 2016/679).

1 Controller

UniSport, University of Helsinki (Business ID 0313471-7)
P.O. Box 53 (Fabianinkatu 28)
FI-00014 University of Helsinki
Tel. +358 2941 22151

2 Contact person in matters concerning the register

UniSport customer service
P.O. Box 53 (Fabianinkatu 28)
FI-00014 University of Helsinki
Tel. +358 2941 22151,

Contact the University of Helsinki Data Protection Officer by e-mail:

3 Purpose of processing of personal data and legal basis

Personal data is used for managing and developing a customer relationship and, with the customer's permission, for marketing purposes (such as electronic customer letters). The data referred to in section 4 is collected from customers so that they can be granted the right to reserve and use UniSport's virtual services on the Mywellness platform and, if necessary, be notified of a change or cancellation of the reserved service. In addition, UniSport uses the data for business development, statistics and analysis. The processing of personal data is based on the agreement between UniSport and the customer and, in certain cases, on your consent.

4 What personal data do we process?

Data collected on private customers:
The customer's first name, surname, gender, e-mail address, reservations, cancellations and participation information made by the customer, weight and height as well as any other information you have provided to us for the purpose of managing the customer relationship, acceptance of terms of use (opt-in), access rights (training card, online card, course), and its validity (active or outdated), when your Mywellness account was created, the date on which the access or course starts or ends, user ID in Enkora's system.

5 Regular sources of data

The name, gender, email address, access rights and user ID are transferred from the Enkora customer information system. Data related to the use of the service are collected in the Mywellness application when the customer uses UniSport services through the application. The customer enters weight and height information. The customer may also choose to store information in their own customer information (address, telephone number).

6 Regular disclosures of data

Data are not disclosed outside UniSport.  The Service Provider has access to customer information.

7 How long will we process your personal data?

We will process your personal data during the customer relationship and keep it for two years from the date of your last use of service or registration.

8 Transmission of data outside the EU or EEA

The service provider for Mywellness, Technogym, uses subcontractors who may disclose information outside the European Union. The data is transmitted using standard contractual clauses approved by the EU Commission.

9 What rights do you have?

To use your rights, you can edit and delete your data through the application.

Withdrawal of consent

You have the right to withdraw your consent if the processing of personal data is based on consent. The withdrawal of consent shall not affect, on the basis of the consent, the legality of the processing carried out before its withdrawal. You can withdraw your consent in Mywellness in your personal information.

Right to access data

You have the right to be informed of what personal data we process and how they are processed. You can also request a copy of the personal data being processed. The user interface of the system is available on the Internet, where the customer can check their data and reservation information by means of personal identification.

Right to the rectification of data

If your personal data is inaccurate or incorrect, you have the right to request their rectification or supplementation. Incorrect information can be reported to any UniSport customer service point where it will be rectified.

Right to delete data

You have the right to demand the deletion of your unnecessary personal data. The data will be deleted in the following cases:

  • personal data is no longer needed for the purposes for which they were collected
  • you withdraw the consent on which the processing was based and there is no other legal basis for processing
  • you object to the processing (the description of the right to object is below) and there is no justified reason for the processing
  • unlawful processing of personal data

Right to the restriction of processing

You have the right to request that the processing of your personal data be restricted. This means that we will store your data, but we will not process it in any other way.

You have this right in the following cases:

  • you dispute the accuracy of your personal data, in which case the processing is restricted during a period within which we can verify that they are correct
  • The processing is illegal and you are opposed to the deletion of personal data and require that their use be restricted instead
  • we no longer need such personal data for the purposes of processing, but you need it to establish, present or defend a legal claim

Right to transfer data from one system to another

You have the right to receive the personal data you provide to us in a structured, commonly used and machine-readable format and to transfer that data to another controller.

Right to object

You have the right to object to the processing of your personal data if the processing is based on a legitimate interest (such as marketing).

Right of appeal

If you have any questions regarding the processing of your personal data, you can always contact the contact persons mentioned in section 2. However, you also have the right to lodge a complaint with the Office of the Data Protection Ombudsman ( if you consider that the processing of your personal data has violated valid data protection legislation.

Changes to the privacy statement

We may make changes to this privacy statement. You can always find the latest version of the privacy statement in Mywellness and on our website.