Privacy – Optopro

Controller

Timrocap Oy
Business ID 2922589-5
Email: info@optopro.fi
Website: www.optopro.fi

1. What personal data we process and what we use it for

Optopro processes personal data for customer communication, for handling service requests and quotations, for delivering services, and for reporting on services agreed with the customer.

In addition, personal data is processed for sending the newsletter where the recipient has subscribed to it.

The data processed may include:

name
email address and telephone number
company and other contact details provided by the customer
information given in the contact form or in other correspondence
information related to the delivery of the service and the service history
the answers concerning symptoms and functional ability given in the OSDI service, the OSDI score and index, and the report generated from them
technical log data necessary for the operation and information security of the online service
the email address of a newsletter subscriber

The data is obtained primarily from the data subject themselves, for example by email, through the contact form, in connection with the service, or in the OSDI questionnaire.

2. Purpose and legal basis of the processing of personal data

Customer and contact data is processed in order to respond to service requests, to prepare quotations, to deliver the services agreed upon, and to manage the customer relationship.

Depending on the situation, the legal basis for the processing is:

performance of a contract, or steps taken at the request of the data subject prior to entering into a contract
the legitimate interest of Timrocap Oy in maintaining customer and B2B communication and in delivering its services appropriately
a legal obligation, where the retention of data is required by law
the consent of the data subject, where the processing is based on consent

The processing of the email address of a newsletter subscriber is based on the consent of the data subject. The subscriber may withdraw their consent and cancel the newsletter subscription at any time using the unsubscribe link in the newsletter or by contacting us. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

The OSDI service processes data relating to health. Such processing is based on the consent of the data subject and on the explicit consent referred to in Article 9(2)(a) of the General Data Protection Regulation.

Consent may be withdrawn at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

3. The OSDI service

In the OSDI questionnaire the user provides an email address, a name, and answers to questions concerning eye symptoms and situations related to vision.

An OSDI score and index are calculated from the answers, and a personal report is generated for the user.

The OSDI score is calculated automatically from the answers given by the user. The service does not carry out decision-making based solely on automated processing that would have legal effects on the user or similarly significant effects.

4. Retention of data

Personal data is retained only for as long as is necessary for the purpose for which it was collected, for managing the customer relationship or delivering the service, and for fulfilling any statutory obligations.

When the data is no longer needed for the purpose of the processing and there is no other basis for retaining it, the data is deleted or anonymised.

OSDI answers and the related reports are retained only for as long as they are needed to generate and deliver the report and to handle any follow-up questions relating to the service, unless longer retention is based on law or on another applicable basis for processing.

5. Processors and disclosures of data

In delivering its services, Timrocap Oy uses external service providers that may process personal data on behalf of Timrocap Oy.

At present these are in particular:

Hostinger – website hosting and technical infrastructure
Zoner – email service
Google Workspace / Google Forms, Sheets, Drive and Gmail – processing of OSDI questionnaire answers, generation and retention of reports, and email delivery
Mailchimp – processing of newsletter subscriber data and sending of newsletters

Personal data is not sold.

Data may be disclosed to the authorities where required by law.

Where service providers transfer personal data outside the European Economic Area, the safeguards required by applicable data protection legislation are used.

6. Information security and technical logs

Personal data is processed only to the extent that the delivery of the services requires. Access to the data is limited to the persons and service providers who need it in their work.

The hosting and information security systems of the online service may process technical log data in order to operate the service, to maintain information security, to investigate incidents and to prevent misuse.

7. Rights of the data subject

Under applicable legislation, the data subject has the right to:

obtain confirmation as to whether their personal data is being processed, and to access that data
request the rectification of inaccurate or incomplete data
request the erasure of personal data where the conditions for erasure are met
request the restriction of processing
object to processing based on legitimate interest
have the data they have provided transmitted from one system to another, where the conditions for portability are met
withdraw consent at any time, where the processing is based on consent
lodge a complaint with the competent supervisory authority, in Finland the Office of the Data Protection Ombudsman

Requests concerning data protection and the rights of the data subject may be sent to: info@optopro.fi

8. Cookies and analytics

The public Optopro.fi website does not currently use non-essential analytics or marketing cookies, nor any third-party analytics tools.

If such services are introduced later, the data protection information and any consent procedures will be updated before they are taken into use.