Last update: April 15, 2020
This Oura Teams Privacy Policy describes how Oura process personal data on behalf of its Partners in connection with the Oura Teams service.
When worn, the Oura ring automatically collects data of your body responses during sleep and daily activity. That data can be uploaded to Oura Cloud via the Oura mobile app. The data can be accessed using the Oura mobile app or Oura on the web.
Oura Teams is a service that allows you to share your Oura ring data with your doctor, coach, trainer or other researchers (“Partners”) that invite you to share your data.
Once you have consented to sharing your personal data with the Partner, the data that you sync to your Oura mobile application is available for the Partner in Oura Teams.
The Oura Teams service shows Teams administrators their team's stats at a glance and allows them to get a detailed look into your data, such as heart rate, heart rate variability, activity level and other data that you sync to your Oura mobile application.
Once your data is transferred to the Oura Teams service, the Partner becomes the controller of your personal data. The Partner is responsible for processing your personal data according to applicable laws. Oura, as a processor, processes your data on behalf and under the direction of the Partner.
If you have questions or requests concerning your personal data after it has been transferred to the Oura Teams service, please contact the Partner that invited you to participate in Oura Teams. Please see the privacy policy of the Partner for contact details.
Once you give consent to share your Oura data with the Partner, the administrators of the Oura Teams service may get access to the following personal data.
Account data as inserted by you:
Automatically collected and generated data:
Usage-related and technical data:
The purpose of Oura Teams is to provide an easy way for Partners to gather, analyze and modify your Oura data for research purposes as well as for tracking and/or improving the wellbeing of the Oura ring users.
Your personal data is used by Partners in accordance with their own privacy policies. Partners also determine the legal basis for the processing. For more information, please see the privacy policy of the Partner that invited you to participate in Oura Teams.
Your Oura data is disclosed to the Partner only if you consent to it. You can withdraw your consent at any time from your Oura on the Web account settings. If you withdraw your consent, the Partner no longer has access to your data in the Oura Teams service. Please note that your consent settings in Oura on the web do not affect the processing of data that the Partner may have extracted from the Oura Teams service.
Oura uses aggregated Oura Teams data for analytics, statistics, research and development purposes.
Personal data in Oura Teams is stored primarily within the European Economic Area. Oura can transfer personal data to, or access it in, jurisdictions outside the European Economic Area or your domicile. Oura will take steps to ensure that your personal data receives an adequate level of protection in the jurisdictions in which it is processed. Oura ensures adequate protection for the transfers of personal data to countries outside of the European Economic Area by using contractual measures, such as Standard Contractual Clauses.
The Partner may transfer personal data to, or access it in, jurisdictions outside the European Economic Area or your domicile. Please see the privacy policy of the Partner for information about the international transfers of personal data.
Your personal data in the Oura Teams service can be accessed by Oura and organizations providing services to Oura, such as Oura’s cloud service providers. These service providers (sub-processors) are contractually bound to process personal data only as instructed by Oura.
Oura discloses your Oura data in personally identifiable form to third parties only with your consent, or if required by applicable law, regulation, and/or court order.
If Oura is involved in a merger, acquisition or asset sale, we may transfer personal data to the third party involved. However, Oura will continue to ensure the confidentiality of all personal data. Oura shall give notice to all participants concerned as soon as reasonably possible when any personal data is transferred or becomes subject to a different privacy statement.
After you have disclosed your personal data to the Partner, the Partner determines who can access your personal data. Please see the privacy policy of Partner for information on who can access your personal data.
Oura stores your personal data in the Oura Teams service as long as it is necessary for the purposes specified by the Partner. The Partner, as the controller, defines how long your personal data is stored. Please see the privacy policy of the Partner for more information on how long your data is stored.
You have several rights concerning your personal data in the Oura Teams service.
You have the right to access your personal data. You can contact the Partner and they will inform you what personal data they have collected and processed regarding you.
Your personal data is disclosed to the Partner if you give consent to it. You can withdraw your consent at any time from your Oura on the web account settings. Instructions on how to withdraw your consent can be found here. If you withdraw your consent, the Partner can no longer access your data. Please note that withdrawing your consent from the Service or changing any other consent settings do not affect the processing of data that the Partner may have extracted from the Oura Teams service.
You have the right to have incorrect or incomplete personal data corrected or completed. You can correct or update some of your personal data through your user account settings in the Oura mobile application or Oura on the web account settings.
You can ask the Partner to erase the personal data that they have collected about you. Your Partner will comply with such a request unless it has a legitimate ground to not delete the data.
You can object to processing that is based on public interest or legitimate interest of the Partner or by a third party. If the Partner does not have legitimate grounds to continue processing such personal data, it shall no longer process the personal data after your objection. If the Partner processes your personal data for direct marketing purposes, you always have the right to object to such processing.
You can request the Partner to restrict processing of personal data, for example, when your data erasure, rectification or objection requests are pending and/or when the Partner does not have legitimate grounds to process your data.
You have the right to receive your personal data from the Partner in a structured and commonly used format. With certain exceptions, you have the right to request the Partner to transmit your data to a third party.
You can use your rights by contacting the Partner (data controller) that invited you to participate in Oura Teams. Please see the privacy policy of the Partner for contact details.
Oura does its best to keep your data safe and secure.
Oura uses administrative, organizational, technical, and physical safeguards to protect the personal data we collect and process. Measures may include, for example, where appropriate, encryption, pseudonymization and access right systems. Oura’s security controls are designed to maintain an appropriate level of data confidentiality, integrity, availability, resilience and ability to restore the data. Oura regularly tests its service, systems, and other assets for security vulnerabilities.
Oura will take all reasonable precautions to ensure that staff and employees who have been specifically granted access to information about you have received adequate training to ensure that they process that information in accordance with this policy and with our obligations under applicable legislations.
Should, despite the security measures, a security breach occur that is likely to have negative effects to your privacy, Oura will inform you and relevant authorities as required by applicable data protection laws.
Oura is not responsible for the security of personal data that the Partner has extracted from the Oura Teams service. Please see the privacy policy of the Partner for more information on the Partner’s security measures.
In case you consider Oura’s processing of personal data to be inconsistent with applicable data protection laws, please contact the Partner responsible for the processing of your personal data. You also have the right to lodge a complaint with the data protection supervisory authority.