Wise Wolf Therapeutics is committed to protecting your privacy and personal data. This policy describes how we process data in compliance with the EU General Data Protection Regulation (GDPR) and Finnish law while providing psychotherapy and expertise services.

1. Data Controller

Wise Wolf Therapeutics / Terapiapalvelut Viisas susi Oy

Business ID: 3515705-9
Address: Flexio Therapy Center,
Hämeenkatu 29 A 1, 33200
Tampere, Finland

Data Protection Officer:
Oskari Ventilä, Psychiatrist, Licensed Psychotherapist
Email: terapiapalvelut@viisassusi.fi
Phone: +358 45 7834 6640

2. What Personal Data We Collect

We collect data depending on the nature of the service relationship (Therapy Clients vs. Expertise Clients):

a) Client Information (All):

• Name and contact details (email, phone, address)
• Invoicing details
• Messages sent via contact forms

b) Health & Patient Data (Therapy Clients only):

• Personal Identity Number (identification and Kela)
• Mandatory medical records and treatment plans
• Referrals and statements
• Self-assessment forms

c) Technical Data:

• Essential logs regarding website and booking system usage.

3. Purpose and Legal Basis

We process personal data for the following purposes:

• Providing Psychotherapy: Legal obligation (Act on the Status and Rights of Patients) and service contract.
• Expertise Services: Contractual necessity (consulting/training delivery).
• Medical Record Keeping: Legal obligation to maintain patient records and connect to Kanta services.
• Invoicing & Accounting: Legal obligation (Accounting Act).
• Communication: Legitimate interest (scheduling, cancellations).

4. Data Retention Periods

We retain data only for as long as necessary or required by law:

• Patient Records: 12 years after the end of treatment (Patient Act).
• Accounting Data: 6–10 years (Accounting Act).
• Other Communication: Deleted when the client relationship ends and data is no longer needed.

5. Data Transfers & Processors

Data is handled confidentially. We do not sell data to third parties. Data is shared only with the following parties under strict Data Processing Agreements (DPA):

• EHR Provider: Brightlife Oy (Electronic Health Records & Booking).
• Financial Admin: Accounting firm (Invoicing & Bookkeeping).
• Authorities: Kela or supervisory authorities (only if legally required).

6. Your Rights

Under GDPR, you have the right to:

• Access your personal data.
• Request correction of inaccurate information.
• Request erasure (excludes mandatory medical or accounting records).
• Withdraw consent (e.g., for contact).
• File a complaint with the Data Protection Ombudsman.

7. Data Security

We employ appropriate technical and organizational security measures. Patient data is stored in an A1-certified Electronic Health Record system (Brightlife Flow) with a direct connection to Kanta. Digital connections are protected with encryption.

8. Cookies

Our website uses only essential cookies required for functionality and security. We do not use marketing or tracking pixels.

9. Updates to Policy

This Privacy Policy may be updated to reflect changes in the law or our practices. The latest version will always be available on our website.

10. Contact

For all inquiries regarding data protection, please contact us via email: terapiapalvelut@viisassusi.fi