Testaamo Privacy Policy for Participants

Introduction

We care about your privacy. This privacy policy explains how we process your personal data, what we use it for, and how we store and protect it. Our privacy policy is based on the terms used by the European legislator for the adoption of the General Data Protection Regulation, GDPR.

Who we are

We are the entity responsible for the processing of your personal data in accordance with this policy. Here is our information:

Tutkimustie Oy / Testaamo Naulakatu 3, 33100 Tampere, Finland Company registration no: FI20108799 Email info(at)testaamo.net https://testaamo.net

We use “we” and “our” etc. to describe our company. When we talk about our “website” we mean testaamo.net, and the other sites and apps we own and operate. When we refer to “you” we mean you as the user of our website or app or the customer of our online services or products.

What we collect and why

Purpose #1: To deliver our services

You can register on the Testaamo website by providing your personal data. We collect the Registration Information that you provide during the registration and/or when you update your user profile with additional information. Data collection is necessary in order for us to provide content and services. We also process your data to ensure that you can log into your account and that we can send you notifications, register and identify you as a user, log and save the actions you take when you use our website, respond to your questions and provide you with customer service and support, such as sending service-related messages to you. We collect your personal data directly from you.

Here is the data we process: • Your contact details such as your name, location, email and phone number • Your personal details such as your gender and date of birth • Additional personal information that you provide during the screening process. This information may include any personal information depending on the research profile setup. • When you apply to participate in a study on our website, we will maintain your registration and profile information for our records unless and until you ask us to delete this information. • Your participation activity • Date and time of registration and participation • Login details and verification • If you email us, we will collect the content of your message

Purpose #2: Improve the experience on our website and online services

Even when you use the website purely to obtain information and you do not register or submit any information to Testaamo, Testaamo collects data for technical reasons in order to guarantee stability and security.

Testaamo uses cookies. Cookies are tiny data files that are stored on your device by the web browser. When you visit the webite, we automatically collect some data about your device, including information about your web browser, IP address, your operating system and language. Additionally, as you browse our website, we collect information about the pages you visit and the products or services that you view, the websites or search terms that referred you to our website and your interaction with the website.

It is possible to object deactivate cookies at any time by adjusting your web browser’s privacy settings. Cookies that have been set can be deleted. However, if you deactivate cookies, it may exclude you from participation or negatively impact your user experience.

Purpose #3: To comply with obligations

Data is processed to comply with legal obligations and requirements, requests from public and governmental authorities, relevant industry standards and our internal policies, and to protect our operations and our rights. We process you contact details and data in order to comply with public and governmental authorities. The data retention period will be based on statutory requirements.

Legal basis of processing

We process your data on these legal bases: your consent, to perform our contract with you, to comply with our legal obligations (including those related to the Finnish Tax Administration), to pursue our legitimate business interests related to operating our website and providing our services to you.

Deleting your personal data

We will keep your personal data for as long as we need it to achieve the purpose for which it is being processed. As a general rule, data will be kept for as long as you use our products or services or have an account with us, plus 5 years following the closing of your account / ending your relationship with us. Special circumstances or legal requirements may mean that these periods may be shorter or longer, e.g. for us to comply with legal requirements for the deletion or retention of data.

Keeping your data safe

Protecting the data you give us or we collect about you is our priority. We use reasonable organisational, technical and administrative measures to protect your data within our company. We review, monitor and evaluate our privacy practices and protection systems on a regular basis. Despite this, the Internet is not a 100 % secure environment, and that means we cannot guarantee the security of transmissions. Emails sent via the Internet might not be encrypted, so we advise you not to include any confidential or sensitive information in your emails to us.

Sharing your information

We will never sell your personal Information or make it available to marketers or any other third party without your consent or unless it is required by law.

If you are selected for a study and you confirm your registration, Testaamo will forward the personal data you provided during registration as well as any additional personal information (“screening”) related to the study to our Customer. Disclosures of personal information are always made on the basis of a written agreement between Testaamo and the Customer, which limits use of the personal information. Our customers are restricted from using your personal information in any way. Testaamo can provide information regarding disclosures to any person in the record upon request. In some instances, Testaamo only provides non-indentifying data to its customers.

We use Google Analytics to help us understand how our customers use the website, to be able to analyse the use of the website, and to make regular improvements. Testaamo also uses Google AdWords and Facebook components to track interest, to display ads that may be of interest to you, to make our website more engaging for you, and to achieve a fair calculation of advertising costs.

We use companies (processors) to help us deliver our services to you, e.g. to provide a hosting environment for our services, to help us run our website, for data exploration and communication. When we use a processor we make sure that there is a legal agreement in place regarding how they will be handling data on our behalf. We’ll also make sure that they have appropriate security measures in place and that their privacy policy is in accordance with the GDPR.

Here are the tools and processors that Testaamo uses to operate its website and to deliver its services:

• MMD Network Oy, website hosting and servers, data stored within EU • Webropol Oy, website surveys, data stored within EU • Tavoittaja.fi, automated and personal text messages, data stored within EU • Microsoft Corporation, Microsoft 365 Business Services, data stored within EU

Transfer to countries outside the EU/EEA

We do not transfer your personal data outside the EU/EEA.

Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the amount of data that Google collects via this tool, nor on how the data will be used, and are therefore unable to provide information in this regard.

Your rights

As a registered user, you have the right to delete your own data by clicking "Unsubscribe" at the bottom of any recruitment message sent to you, as well as at the bottom of your account settings page (https://testaamo.net) or by sending us an email at info(at)testaamo.net.

Data subjects have the right to have their stored data deleted or rectified at any time. You can obtain information about stored data concerning you at any time.

If your personal data is processed, you are a data subject within the meaning of GDPR and you have the following rights towards Testaamo as the controller:
the right to information
the right to rectification and erasure
the right to restriction of processing
the right to object to processing
the right to data portability

You have the right to complain to a data protection supervisory authority about the processing of your personal data by Testaamo.

If you have agreed to your data being processed, you can withdraw your consent at any time. Once you have expressed the withdrawal of your consent to Testaamo, Testaamo will no longer be permitted to process your personal data.

Information about children

Our website or services are not intended for or targeted at children under 15. Protecting the privacy of the very young is especially important. That is why we never collect or maintain data on our website from those we actually know are under 15. If you believe that we have collected personal data about a child under 15, please contact us so that we can delete the information.

Changes to the policy

Sometimes we need to make changes to this policy in order to make sure that it reflects our current practices. We will take reasonable steps to let you know about any changes on our website. If you are a registered user, we will notify you via email about any significant changes to the policy using the email address you gave us when you signed up.

If you continue to use our website or services after the notification, we will regard this as your acceptance of our privacy practices.

The policy was last updated on April 9th, 2021.