Your privacy is our priority
Your privacy matters. Discover how we handle your data responsibly, why we collect it, and the measures we take to keep it safe. You’re always in control.
Security and compliance
Your privacy matters to us
At DEEP, we prioritize your privacy and data protection. Our policy explains what data we collect, why we collect it and how we keep it secure.
You have full control over your personal information, including rights to access, correct, or delete your data.
Key highlights of our privacy policy
- Who we are
DEEP Measures Oy explains how it protects personal data when you use the DEEP platform, website, or interact with us as a customer, partner, applicant, or visitor.
- Our role under GDPR
We act both as a Data Processor (on behalf of our customers using the platform) and as a Data Controller (for our own business activities such as marketing, recruitment, and website management).
- What personal data we process
This includes contact details, account and login information, service usage data, communications, project‑related data, and recruitment information where applicable. We only process data that is necessary for defined purposes.
- What we do not collect
We do not process patient or clinical trial data, and we do not knowingly collect data from children under 16.
- Why we process personal data
Data is used to operate and improve the platform, manage user accounts, provide support, communicate with customers, run marketing activities, and comply with legal obligations.
- Marketing and communications
We may send B2B marketing and informational communications based on legitimate interest or consent. You can unsubscribe or object to marketing at any time. Some marketing emails may include engagement tracking.
- Cookies and analytics
We use necessary cookies for platform functionality and optional cookies (such as analytics) only with your consent. Cookie types, purposes, and retention periods are clearly explained.
- Use of sub‑processors
Trusted third‑party service providers (such as Microsoft Azure, Microsoft 365, ClickUp, and Microsoft Clarity) support our services under strict GDPR‑compliant agreements.
- International data transfers
If data is transferred outside the EU/EEA, appropriate safeguards such as EU Standard Contractual Clauses are used to protect your data.
- How long we keep data
Personal data is retained only as long as necessary for contractual, legal, or regulatory purposes and is then securely deleted or anonymized. Recruitment data is retained only with consent.
- Your rights
You have GDPR rights including access, correction, deletion, restriction, objection, data portability, and the right to withdraw consent at any time.
- Security and protection
We use technical and organisational security measures, including encryption, access controls, and secure cloud infrastructure, to protect personal data.
- Questions or complaints
You can contact DEEP directly about privacy matters or lodge a complaint with the Finnish Data Protection Ombudsman or your local authority.
Stay informed
Sign up for our newsletter to explore the latest solutions, discover new opportunities and gain expert insights on digital health measures.