Privacy Policy – Hoivita SafeApp and OloSeuranta

Last updated: 22 October 2026

1. Introduction

Hoivita Oy is a Finnish technology company providing the OloSeuranta monitoring service and the Hoivita SafeApp mobile application.

We are committed to protecting personal data and processing information in accordance with the EU General Data Protection Regulation (GDPR) and applicable Finnish data protection legislation.

This Privacy Policy explains how personal data is processed when using SafeApp and OloSeuranta.

Service provider

Hoivita Oy
Lappeenranta, Finland
Email: info@hoivita.com
Website: https://www.hoivita.com

2. Description of the service

OloSeuranta is a sensor-based monitoring service designed to support care organisations, assisted living facilities and home care.

The service collects information about movement, door activity and environmental conditions, including temperature, humidity and sound levels.

OloSeuranta does not use cameras or require residents to wear monitoring devices. Sound monitoring measures sound levels without recording conversations.

SafeApp allows authorised users to receive and view alerts and notifications generated by OloSeuranta.

3. User accounts and access

SafeApp does not allow users to register or create accounts within the application.

User accounts are created and managed by authorised administrators through the Hoivita Admin management system.

Access to the service is restricted to authorised users according to their assigned permissions.

When access is no longer required, an authorised administrator can remove the user account through Hoivita Admin.

4. Personal data processed

Depending on the service configuration and user permissions, the following information may be processed:

• User identification and contact information, including name, email address and organisation.

• User account details and access permissions.

• Authentication and service usage information.

• Technical information required for operating and securing the service.

• Sensor events, alert information and timestamps.

• Information identifying monitored rooms, locations or residents where necessary for service operation.

Monitoring information associated with an identifiable individual may constitute personal data and, depending on its content and context, health-related information.

Only information necessary for providing the service and supporting the agreed monitoring activities should be processed.

5. Purpose and legal basis of processing

Personal data is processed to:

• Provide and maintain SafeApp and OloSeuranta.

• Manage authorised user access.

• Deliver alerts and notifications.

• Support care organisations in responding to relevant monitoring events.

• Maintain service reliability, security and technical functionality.

• Provide customer support and fulfil applicable contractual and legal obligations.

Customer organisations generally determine the purposes and legal basis for processing their residents' or clients' monitoring information.

Hoivita processes such information according to its agreements with the customer organisation and applicable data protection requirements.

Where Hoivita determines the purposes of processing its own service administration data, the legal basis may include performance of a contract, legitimate interests or compliance with legal obligations, as applicable.

Special categories of personal data, where processed, require an additional applicable legal condition.

6. Data storage and location

Hoivita uses Microsoft Azure as its cloud hosting platform.

The main OloSeuranta service environment is located in Microsoft's North Europe region in Ireland, within the European Union.

Microsoft Azure provides the technical infrastructure used to operate the service.

Microsoft may process limited information outside the European Economic Area in certain circumstances, such as technical support or security operations, subject to applicable contractual and data protection safeguards.

Hoivita does not sell personal data or use resident monitoring information for advertising.

7. Data retention

Personal data is retained only for as long as necessary for the purpose for which it was collected or where continued retention is required by applicable law.

The retention of different categories of information follows these principles:

User accounts: Account information is maintained while the user requires authorised access to the service. When access is no longer required, the account can be removed through Hoivita Admin. Any remaining personal information is handled according to applicable deletion and retention requirements.

Monitoring and alert information: Information is retained according to the purposes of the monitoring service, applicable customer agreements and legal requirements. Information forming part of statutory social or healthcare documentation may be subject to separate retention obligations.

Technical and security information: Technical records are retained for the period necessary to maintain service operation, investigate technical or security incidents and meet applicable obligations.

Information is deleted or anonymised when there is no longer a lawful reason to retain it.

8. Data security

Hoivita uses technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration and misuse.

Access to the service requires authentication.

Access rights are managed through Hoivita Admin and restricted according to user responsibilities.

Personal data is processed only by authorised persons and service providers where necessary for the operation and maintenance of the service.

9. Disclosure of information

Monitoring information is made available to authorised users of the relevant customer organisation according to their access permissions.

Hoivita may use Microsoft Azure and other technical components necessary to provide the service, subject to applicable data protection requirements.

Personal data is not disclosed to third parties for advertising purposes.

Information may be disclosed where required by applicable law.

10. Account deletion

SafeApp user accounts are created and managed through Hoivita Admin.

Users cannot create accounts directly in SafeApp.

An authorised administrator can remove a user account when access to the service is no longer required.

Users may request account deletion through their organisation's administrator or by contacting Hoivita:

info@hoivita.com

Requests for deletion of associated personal information are handled according to applicable data protection requirements.

Deleting an individual user account does not automatically require deletion of monitoring or care-related records that the customer organisation must lawfully retain.

11. Your data protection rights

Depending on the circumstances and applicable law, individuals have the right to:

• Request access to their personal data.

• Request correction of inaccurate information.

• Request deletion of personal data.

• Request restriction of processing.

• Object to certain processing activities.

• Request data portability where applicable.

• Lodge a complaint with a supervisory authority.

Requests concerning care-related monitoring information may need to be addressed to the care organisation responsible for the data.

The Finnish Data Protection Ombudsman can be contacted at:

https://tietosuoja.fi/en

12. Changes to this Privacy Policy

Hoivita may update this Privacy Policy when the service, its operation or applicable legal requirements change.

The current version will be published on the Hoivita website.

13. Contact information

For questions concerning privacy, data protection or personal data requests:

Hoivita Oy
Lappeenranta, Finland
Email: info@hoivita.com
Website: https://www.hoivita.com