Aistii Service Privacy Policy

Description of the processing of personal data in the Aistii study

Aisti Health Oy (Aistii) implements the agreed Aistii study on the subscriber’s behalf. With regard to the processing of personal data, the service subscriber acts as the data controller and Aistii as the processor of personal data.

The service subscriber provides Aisti Health Oy with the names, email addresses and possible group attributes (e.g. position, business unit, department, team or location) of the persons participating in the Aistii study in order to allow for group distinction. Aistii will send designated participants a personal single-use link to the Aistii survey by email. Based on the participant’s responses to the assessment, the participant may receive immediate personalised feedback to improve their wellbeing. Aistii analyses the responses of the participants to the survey and provides a group-level result report to the service subscriber, from which neither individual persons nor their responses can be identified. The Aistii survey is carried out using a web application maintained by Aistii. The terms and conditions valid at the time are applied to the use of the application.

The service subscriber is obligated to inform you of an upcoming Aistii survey by email. You can request more information regarding the processing of personal data from the service subscriber.

General description of the data protection and security of the Aistii study

In processing the personal data, Aistii carries out the appropriate technical and organisational measures to protect the personal data from unauthorised and illegal processing and damage and especially from unintentional or illegal deletion, loss and alteration as well as from unauthorised access or transmission of the personal data. In organising the protective measures, the available technical options and their costs are taken into account in relation to specific risks related to the processing of data and the delicate nature of the processed personal data.

Aistii ensures that the personnel participating in the processing of personal data are committed to upholding the appropriate degree of confidentiality or that they are bound by the appropriate statutory professional secrecy.

Additional information on the data protection and security principles of the Aistii may be requested at support@aistii.com.

Erasing or returning personal data

Aistii processes and stores personal data as long as it is considered necessary for the cooperation between Aistii and the service subscriber. Upon the termination of the cooperation between Aistii and the service subscriber, Aistii shall erase, or when the service subscriber’s separate instructions so require, return the personal data it has processed on behalf of the service subscriber and the copies thereof, provided that Aistii is not bound by a legal obligation to retain the personal data.