PRIVACY STATEMENT  4^th May 2018

Regulation (EU) 679/2016 on General Data Protection as of 25^th May 2018

Karelia University of Applied Sciences / Draft Program®

(see description at www.draftprogram.com)

1. Register Controller

Karelia Ammat­ti­kor­kea­koulu Oy / Karelia University of Applied Sciences Ltd.

Address: Tikka­rinne 9, FI-80200 Joensuu

Tel. +358 13 260 600

Email: [email protected]

2. Person in Charge of the Register

CEO / President of Karelia UAS

3. Person in Charge of the Draft Program®

Research and Development Director Anne Ilvonen, tel. +358 50 311 6314, email: [email protected], Tikka­rinne 9, FI-80200 Joensuu

4. Contact Person of the Draft Program®

Principal Lecturer of Entrepre­neurship Heikki Immonen, tel. +358 50 310 9657, email: [email protected], Karja­lankatu 3, FI-80200 Joensuu

5. Person in Charge of Data Protection

Karelia Ammat­ti­kor­kea­koulu Oy, Tieto­suo­ja­vas­taava, Tikka­rinne 9, FI-80200 Joensuu

Tel. +358 50 525 0623, email: [email protected]

6. Purpose of processing personal data

According to the Univer­sities of Applied Sciences Act, the mission of univer­sities of applied sciences is to provide higher education for profes­sional expert jobs based on the requi­re­ments of working life and its development and on the premises of academic research and academic and artistic education and to support the profes­sional growth of students. They shall also carry out applied research, development and innovation activities and artistic activities that serve education in univer­sities of applied sciences, promote industry, business and regional development and regenerate the industrial structure of the region. In carrying out their mission, univer­sities of applied sciences shall promote lifelong learning. These are statutory tasks.

The Draft Program® (www.draftprogram.com) is a program at Karelia University of Applied Sciences that promotes the emergence of entrepre­neurship in higher education insti­tu­tions. The program provides support for teams selected for the program by providing infor­mation, organising training workshops, and providing funding for purchases needed when commercia­lising the partici­pants’ business ideas and experi­menting them. Personal data is collected within the Draft Program® for conducting the application process and for informing the selected teams about new applica­tions and training workshops. In order to monitor the development budget allocated to the teams partici­pating the program, purchases made within the program are stored together with the name of the contact person of the team. In addition, anony­mised personal infor­mation is gathered in activity reports that are submitted to program partners as well as in the development of program activities. The anony­mised data collected within the program can be used, for example, in research activities in the field of entrepre­neurship and innovation, but a separate research permit from Karelia UAS will be requested for this purpose.

7. Content of the Register

Data on the following groups of people has been collected for the Draft Program®: team leaders who can be students, alumni or repre­sen­ta­tives of the staff of Karelia UAS or partner insti­tu­tions of the Draft Program®, and other team members. The categories of personal data processed in the system are as follows: name, email, telephone number, employer, field of study, and the person’s role or duty. Furthermore, infor­mation on the team’s business idea, application points received during the application process as well as the judges’ comments, and purchased made during the team’s development project.

8. Legal basis for processing personal data

The Draft Program® is a voluntary program. When applying for the program, the applicant accepts the processing of his/her personal data by giving his/her consent to the processing of data.

9. Grounds for providing personal data

The infor­mation required for the applicants of the Draft Program® is needed for imple­menting the program application and program services (purchases, training workshops).

10. Legitimate advan­tages of the register controller

Imple­men­tation and development of the Draft Program®.

11. Security of processing personal data

Infor­mation on the applicants who have applied for the program and have been selected to the program is stored in elect­ronic form in a separate DRAFT folder on the server of Karelia UAS. Only those Karelia UAS employees have access to the folder that need this infor­mation for imple­menting program activities. The descrip­tions of business ideas in paper format, including personal infor­mation of the applicants, as well as judges’ comment forms are stored in a locked closet in the office of the Principal Lecturer of Entrepre­neurship. External judges, who have signed a confi­den­tiality agreement, will have access to the infor­mation about the applicants on the application day (i.e. judge’s comment form). The forms will be collected from the judges at the end of the application day.

12. Recipients or recipient groups of personal data

As part of the application process, applicants’ infor­mation is displayed on a separate screen in a closed confe­rence room for the repre­sen­ta­tives of Draft Program® partners. The partners are the University of Eastern Finland and Riveria. The purpose of displaying the infor­mation is to pre-select the applicants and to form the final scores.

13. Transfer of personal data outside the European Union or the European Economic Area

Personal data will not be trans­ferred outside the EU or EEA.

14. Retention of personal data

A person who has applied for the Draft Program® or partici­pated in the program may request for removal of his/her personal data by contacting the contact person for the Draft Program®, whose contact details are in section 4 of this statement.

15. Rights of the regis­tered person

The rights of the regis­tered person are deter­mined according to the purpose of processing personal data. The regis­tered person has the right to inspect the data concerning him/herself stored in the register. The request for the inspection has to be made to the controller of the register. The regis­tered person has the right to request correction or removal of data, set limita­tions for the handling of his/her personal data, object the handling of the data, and s/he has the right to transfer data from one system to another. The regis­tered person has the right to withdraw his/her consent to the handling of his/her personal data at any time. In addition, the regis­tered person has the right to file a complaint with the super­visory authority. The contact person concerning the rights of the regis­tered person is the person in charge of data protection, whose contact details are in section 5 of this statement.

16. Automatic decision-making and profiling

Not in use.