Privacy

Privacy Policy

This notice describes how Healthcare Staffing Solutions Oy processes personal data when you use hsso.fi or contact us. It is based on the EU General Data Protection Regulation (GDPR).

1. Data controller

Healthcare Staffing Solutions Oy (business ID 2831041-3)
Arkadiankatu 6, 7th floor, 00100 Helsinki, Finland
info@hsso.fi

2. What personal data we process

  • Contact form submissions: name, email, organisation, message and any other information you include.
  • Site usage data: IP address, browser, time of visit, pages viewed. Processed in pseudonymised form for visitor analytics.
  • Cookies: essential cookies for site functionality. See our cookie banner for details.

3. Purpose of processing

  • Responding to your enquiries
  • Assessing applications and preparing programme intake
  • Monitoring and improving site operation

We do not use contact form data for marketing or profiling without your separate consent.

4. Legal basis

  • Your own request (contact form)
  • Legitimate interest of the controller (site operation and analytics)

5. Retention

  • Contact form data: retained for up to 24 months from last contact, then deleted or anonymised.
  • Site usage logs: pseudonymised logs retained for up to 13 months.

6. Data sharing

We do not sell or share personal data with third parties for commercial purposes. Data may be shared with:

  • Technical subcontractors (hosting, email, form tool) under data processing agreements
  • Authorities where required by law

Data is not transferred outside the EU/EEA without appropriate safeguards.

7. Your rights

You have the right to:

  • Be informed of what personal data we hold about you
  • Rectify incorrect or incomplete data
  • Request deletion when the lawful basis for processing has ended
  • Withdraw consent (where processing is based on consent)
  • File a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi)

To exercise any right, contact info@hsso.fi.

8. Security

Personal data is protected by appropriate technical and organisational measures. Site traffic is SSL-encrypted. Access to personal data is restricted to employees whose duties require it.

9. Updates to this notice

This notice is updated as needed. Material changes will be announced on this page. Last updated 16 August 2026.