Privacy policy

1. Controller and contact details

Kinegrade is currently an early-stage project and not yet a registered company. Mikko Komulainen determines why and how the personal data described in this notice is processed and is therefore the data controller.

2. Personal data we collect

Depending on how you use the website, we may process:

• Interview and enquiry information: first and last name, profession, organisation, email address, whether you currently conduct grip-strength measurements, suitable interview times and any other information you choose to provide.
• Interview records: scheduling correspondence, participation status, notes and feedback shared during the interview. We ask you not to provide patient information, health data or confidential third-party information.
• Consent records: the wording accepted, date and time of submission, and related technical information needed to document the submission.
• Technical data: IP address, browser and device information, requested pages, timestamps, referring page, and security or error logs generated when the website is used.

We do not intentionally collect patient records or special-category health data through this website. Please do not enter such information in the form or ordinary email.

3. Why we use personal data and our legal basis

You may withdraw consent at any time by emailing privacy@kinegrade.com. Withdrawal does not affect processing that was lawful before the withdrawal. Providing the required form fields is voluntary, but without them we may be unable to arrange or conduct the interview.

4. Sources of personal data

We normally obtain personal data directly from you through the website form, email correspondence and the interview. Technical data is generated by your browser, the website, its hosting environment and security systems when you use the site.

5. Recipients and service providers

Personal data is available only to the controller and, where necessary, service providers that operate the website, forms, hosting, email, backups or security on the controller’s behalf. These providers may process data only for the agreed service and under appropriate data-protection obligations.

We may also disclose information where required by law, a competent authority, or the establishment, exercise or defence of legal claims. We do not sell personal data.

6. International transfers

We aim to use services that process data within the European Economic Area. If a service provider processes personal data outside the EEA, the transfer will rely on a lawful safeguard, such as an adequacy decision or the European Commission’s standard contractual clauses, together with supplementary safeguards where required. You may request further information about the applicable safeguards by contacting us.

7. How long we keep personal data

• Interview-form submissions, correspondence and identifiable interview notes are retained for up to 12 months after the last contact or interview, unless you withdraw consent earlier or continued retention is agreed for a stated purpose.
• Aggregated or genuinely anonymised research and market-validation findings may be retained indefinitely because they no longer identify an individual.
• Technical and security logs are normally retained for up to 90 days, unless a longer period is needed to investigate misuse, a security incident or a legal claim.
• Data required to demonstrate consent or comply with a legal obligation may be retained for as long as the relevant obligation or limitation period requires.

Backups may retain deleted data for a limited additional period before routine overwriting.

8. Cookies and similar technologies

The website may use strictly necessary cookies or local storage required for security, form operation, session management and saving cookie preferences. These technologies are used because they are necessary to provide the website or a service you request.

Kinegrade does not currently use advertising cookies or behavioural profiling. Non-essential analytics or embedded third-party services will not be activated without the consent required by applicable law.

If such services are introduced, the cookie notice and this policy will be updated to identify them and explain how consent can be changed or withdrawn. You can remove stored cookies through your browser settings.

9. Embedded content and external links

The site may link to external websites. Their operators process data under their own privacy notices. If third-party content such as a video, map or social-media post is embedded, the provider may receive technical data when that content is loaded. Where required, such content will be blocked until you consent.

10. Automated decision-making

We do not use the personal data described in this notice for solely automated decisions that produce legal or similarly significant effects, and we do not use it for profiling.

11. Your data-protection rights

Subject to the conditions and limitations in data-protection law, you may have the right to:

• obtain confirmation of whether we process your personal data and receive a copy;
• have inaccurate or incomplete personal data corrected;
• request deletion of your personal data;
• request restriction of processing;
• receive data you provided in a structured, commonly used and machine-readable format where data portability applies;
• object to processing based on legitimate interests;
• withdraw consent at any time; and
• lodge a complaint with a supervisory authority.

To exercise a right, email privacy@kinegrade.com. We may request information needed to verify your identity. Requests are normally handled within one month.

The Finnish supervisory authority is the Office of the Data Protection Ombudsman .

12. Security

We use reasonable technical and organisational safeguards appropriate to the nature of the data, including access controls, software updates, protected connections and service-provider controls. No online system is completely risk-free.

Please do not submit patient data, medical records, passwords or other sensitive or confidential information through the interview form.

13. Changes to this notice

We may update this notice if the website, project or processing practices change. The latest version is published on this page with its revision date. If a change materially affects processing based on consent, we will request new consent where required.