Privacy policy

Published 14/5/18. Updated 2/2/2026, and translated 23/2/2026

Privacy Notice – Dopinglinkki

This privacy notice describes what kind of personal data is collected in the Dopinglinkki project. All general terms and shared data protection principles of the A-Clinic Foundation can be found in the main privacy notice: https://a-klinikkasaatio.fi/tietosuoja/ (in Finnish). The data controller is continuously A-Clinic Foundation, not the project or project team.

This privacy notice was last updated in Finnish: 2 February 2026 and translated 23 February 2026

1. Name and description of the project

Project / service Name: Dopinglinkki

Purpose of the Project / service:
Anti-doping activities in recreational sport. Evidence-based information, education and health counselling related to recreational doping. Clean Exercise Commitment -operating model for professionals and organisations in the sports and fitness sector.

Project / service contact person:
Joni Askola, Team Manager
[email protected]

2. What personal data is collected and from where?

We collect the following personal data:

Health counselling service

The user’s voluntarily provided email address, if they wish to receive notification of a response.
Voluntary background information (e.g. gender, age, place of residence, education).
The content of the question and any possible voluntary personal data included by the user in the message.
Technical log data, such as IP address and usage time data.

Surveys (Webropol)

The content of responses and voluntary background variables (e.g. age, gender, education, region).
Technical log data, such as IP address.

The Clean Exercise Commitment (orig. Puhtaan liikunnan puolesta)

Company name and address
Name, phone number and email of the responsible representative

Competitions and prize draws

Name, phone number and/or email address for conducting the prize draw and contacting winners.

Feedback forms and ordering education via the website

Contact details provided by the user (e.g. email) and the message content for possible follow-up contact.

Note on sensitive data

Using the services does not require the provision of sensitive personal data. However, users may voluntarily include information in their messages that contains sensitive personal data (e.g. health data or substance use history). Such data is processed only for the purpose of providing the service and responding to messages.

Personal data collected on this website in connection with donations is processed in the A-Clinic Foundation’s donation register.

3. What is personal data used for?

In the project / on the website, personal data is required for the following purposes:

[ ] Service registration and user account management
Personal data is processed to create user accounts, enable login, and maintain user rights.

[X] Processing contact requests and messages
Personal data is processed to receive and respond to user inquiries and to handle the related issues.

[X] Implementation of education, events and stakeholder cooperation
Personal data is used for registrations, participant communication and maintaining cooperation.

[X] Newsletters and other consent-based communications
Personal data is processed based on consent for sending newsletters or other voluntary communications.

[ ] Receiving donations and related communication
Personal data is processed to manage donations, process payments and comply with statutory obligations.

[X] Recruitment process
Personal data is used to receive applications, evaluate them and communicate with applicants.

[X] Research and evaluation
Personal data is used for research or assessments.

[ ] Statistics and reporting to project funders
Personal data is processed for project reporting purposes.

[ ] Coordination of volunteer activities
Personal data is processed for coordinating volunteer activities and communication.

[ ] Managing matters related to contractual partners
Personal data is processed in communication and invoicing related to service providers and cooperation partners.

4. On what legal basis is personal data processed?

The processing of personal data is based on the legal grounds set out in the EU General Data Protection Regulation (GDPR).

GDPR 6(1)(a) Consent:

Email address for health counselling service notifications
Voluntary background information in counselling and surveys
Participation in competitions and prize draws

GDPR 6(1)(f) Legitimate Interest:

Responding to feedback
Technical log data to ensure information security and monitor service functionality

In research, personal data processing is based either on the participant’s consent or on research carried out in the public interest.

GDPR 6(1)(a): The participant’s voluntary consent for the use of personal data
GDPR 6(1)(e): Processing is necessary for carrying out a task in the public interest

If sensitive data is processed in research, the processing is additionally based on:

GDPR 9(2)(j): Processing is necessary for scientific research purposes with appropriate safeguards

GDPR 9(2)(a): The participant’s explicit consent for the use of sensitive data, or

5. Who processes the data and to whom may it be disclosed?

Collected personal data is processed by Dopinglinkki’s / A-Clinic Foundation’s employees for the purpose of providing the service.

In compliance, data is not disclosed outside the organisation. As an exception, anonymised data may be disclosed for research purposes to external researchers who have been granted a research permit by the A-Clinic Foundation.

As a rule, data is not transferred outside the EU/EEA. If any service we use requires transfers outside the EU/EEA, such transfers are carried out with safeguards in compliance with data protection legislation.

6. How long is data retained?

We retain personal data only for as long as necessary to fulfil its intended purpose:

The health counselling service email address is automatically deleted after the notification has been sent.
Contact details of competition and prize draw participants are deleted after the draw has been completed and winners have been contacted.
IP addresses and log data are automatically deleted after one year.
Anonymised excerpts of health counselling questions and survey responses may be retained for statistical, development and research purposes in a way that individuals cannot be identified.

7. How Is data protected?

We comply with legislation and official regulations, good data management practices, and the A-Clinic Foundation’s data protection and information security policies.

Personal data is stored in protected systems. Electronically collected data is stored in the service provider’s database, to which external parties do not have access. The database is protected by usernames and passwords, and access is restricted based on job responsibilities.

8. Cookies and similar technologies

Our website and digital services use cookies and other similar technologies, such as local storage space and tracking tools. Cookies are used to ensure technical functionality, improve user experience, analyse service usage, and, where necessary, implement targeted communication and marketing.

Essential cookies are set to ensure the technical operation of the service. The legal basis for their processing is legitimate interest. Non-essential cookies, such as analytics and marketing cookies, are set only based on the user’s consent.

In certain situations, information collected through cookies may be considered personal data, especially if it can be linked to the user’s device or use of the service. Data may be processed by us or disclosed to our partners who provide analytics or marketing-related services. The names of these service providers and more detailed information about cookies, their retention periods and purposes are described in our separate cookie notice.

Users have the right at any time to change their cookie settings or withdraw previously given consent. Cookie settings management and detailed descriptions of the cookies used are available through the site’s cookie banner or cookie notice.