When using the services of Howdy ApS (referred to as “we”, “us” or “ours”) through the Howdy technology platform (“Howdy”), we will process your personal data.
This Privacy Policy (referred to as “Policy”) outlines how your personal data is processed.
We are the data controller responsible for the processing of your personal data as described in the below.
Our contact information:
Howdy ApS
Njalsgade 76,
2300 Copenhagen S
CVR: 35395539
Phone no.: +45 888 777 00
Email: gdpr@howdy.care
Website: www.howdy.care
Overview of processing activities and personal data processed
To enrol you in Howdy and thereby deliver the services as agreed with your institution.
To send you invitations to enrol through the reminder engine.
These are received from your institution. We periodically receive updates from your institution.
(GDPR art. 6 (1)(f)). Our legitimate interest is to provide services to your institution based on our agreement with them.
We do this by sending you questionnaires (if you consent) and getting you in touch, if required, with a Response Team and sending wellbeing statistics to your institution and using generic statistics to improve our service.
See chapter 3.
To evaluate your wellbeing and assess whether the Response Team should be activated.
Common information:
The personal data concerning your answers and wellbeing are received directly from you when you answer the questions in Howdy.
Your explicit consent to process general personal data (GDPR art 6(1)(a)) and special categories of personal data (art 9(2)(a))
We do this by sending you questionnaires and getting you in touch, if required, with a Response Team and sending wellbeing statistics to your institution and generic statistics to improve our service.
See chapter 3.
If your institution has chosen to add the specific module of Howdy in which your institution may define specific feedback questions, your personal data is processed for the purpose of assessing the answers to the questions and provide your institution and our partner Studenterrådgivningen with statistics.
The personal data are received directly from you when you answer the questions in Howdy.
Your consent to process general personal data (GDPR art 6(1)(a))
See chapter 3.
Some of the modules in Howdy additionally include a proactive Response Team that contacts you with the objective of advising you on how you can seek help, if – based on your answers in Howdy – you are considered to have low wellbeing, are experiencing pain or in any other way qualify to be contacted by the Response Team.
It is voluntary for you whether you wish to interact with and provide information to the Response Team.
After completing a conversation with our proactive support team, you may be asked to complete a voluntary evaluation of the conversation. The purpose is partly to give you the opportunity to provide feedback and partly to improve our service.
Common information:
The personal data is received directly from you when you answer the questions in Howdy or during your interaction with our Response Team.
Your explicit consent to process general personal data (GDPR art 6(1)(a)) and special categories of personal data (art 9(2)(a))
See chapter 3.
To provide anonymous statistics to your institution.
Statistics will be based on your personal information, but always anonymous so they cannot be tracked back to you. This means that statistics will never be with categories so it can be deducted who falls into that category.
It will also not be visible in the statistics whether you have enrolled in the program or not, and whether you had or have cases or not with the Response Team.
Special categories of information in the form of health information:
The personal data concerning your answers and wellbeing and cases are received directly from you when you answer the questions in Howdy and your interaction with the response team.
GDPR art. 6 (1)(f). Our legitimate interests to provide anonymous statistics to your institution based on our agreement.
Your consent to process special categories of personal data (art 9(2)(a)).
See chapter 3.
Personal data are used to produce anonymous statistics in order to improve our service, develop new relevant services as well as ensuring that we deliver the best possible service to you, your co-workers and employees of our other customers.
Special categories of information in the form of health information:
The personal data concerning your answers and wellbeing and cases are received directly from you when you answer the questions in Howdy and from your interaction with a Response Team
GDPR art. 6 (1)(f). Our legitimate interests to improve and develop our services.
Your consent to process special categories of personal data (art 9(2)(a)).
See chapter 3.
Ensure security and monitoring activities in the platform, errors, intrusion, etc.
Managing cases for you or on your behalf.
Directly from you through your use of Howdy
Our legitimate interests in ensuring that the systems are running safely (GDPR art 6(1)(f))
See chapter 3.
It is necessary for us to utilise profiling to be able to give you the full benefits of Howdy.
Your personal data is generally deleted when your institution removes you or when the relationship between your institution and us has ended (whichever comes first).
When you withdraw your consent, we anonymise your answers and cases, so they cannot be traced back to you, but can be used in statistics. We delete the case notes (through your interaction with the Response team) though.
Error log entries are deleted 6 months after they are created.
Security log entries are deleted 1 year after they are created.
Support cases are deleted 1 year after they are closed.
We do not transfer your personal data to others.
Your institution can choose to receive statistics or not. If they choose to receive, they can setup how they would like to breakdown statistics through Howdy. It is very important to us that your institution cannot identify the person behind a wellbeing report.
The Response Team is handled by Studenterrådgivningen who act as data processor on our behalf and according to our instructions.
Howdy is hosted on servers located within the EU/EEA and thus your personal data is generally processed within the EU/EEA.
In certain limited cases we may transfer some your personal data to countries outside the EU/EEA (third countries). In such cases we will always ensure that appropriate safeguards are in place, e.g., by using the standard contractual clauses as adopted and published by the European Commission.
You have the right to obtain a copy of these clauses and safeguards. See chapter 6 on how to exercise this right.
To exercise any of your rights below, reach out to us using the contact information under chapter 1. Your rights are not absolute and may have to be balanced with the rights of others as well as the rights subject to some exceptions as a matter of law.
At any given time, you have the right to access your personal data. This means that you can request:
You may be entitled to data portability and thereby receive your information in a structured, commonly utilised, machine-readable format. This only applies where all of the following criteria are met: i) the legal basis for our processing is your consent or our contract with you, ii) the processing is carried out by automated means, and iii) the information has been provided by you about yourself.
If you are under the impression that the personal data we process about you is inaccurate or incomplete, you have the right to have them corrected.
When you do not want us to process your personal data any more, you have the right to ask us to delete your personal data.
You have the right to object to our processing of your personal data. This right only applies insofar as the legal basis for the processing is based on our legitimate interests or public interest. If we cannot demonstrate compelling legitimate grounds for continuing the processing, we will make sure to stop the relevant processing of your personal data.
Under certain circumstances you have the right to have the processing of your personal data restricted.
Where the processing of your personal data is based on your consent you have the right to withdraw your consent at any given time. You can do that in the app or by sending an email to opt-out@howdy.care. A withdrawal of consent will imply that we can no longer deliver our services to you. However, the withdrawal does not affect the legality of the processing of your personal data that took place prior to the withdrawal.
If you wish to make a complaint about our processing of your personal data, you also have the right to reach out to a supervisory authority. Below you will find contact information for the Danish Data Protection Agency (Datatilsynet):
Datatilsynet
Carl Jacobsens Vej 35
2500 Valby
Phone no.: +45 33193200
Email: dt@datatilsynet.dk
Website: www.datatilsynet.dk
© 2024 Howdy ApS