Privacy state­ment: Proces­sing of perso­nal data contai­ned in Webro­pol surveys

Privacy state­ment, Created on: 3.5.2023 Regu­la­tion of the Euro­pean Union (679/2016) as of 25th May 2018, Data Protec­tion Act (1050/2018)

1 Cont­rol­ler of the register

Karelia Ammat­ti­kor­kea­koulu Oy / Karelia Univer­sity of Applied Sciences Ltd.

Address: Tikka­rinne 9, 80200 Joensuu, Finland

Tel. +358 13 260 600, Email: info(at)karelia.fi

2 Person in charge of the register

CEO / Presi­dent of Karelia UAS

3 Proces­sing of perso­nal data contai­ned in Webro­pol surveys of Karelia Univer­sity of Applied Sciences staff

This notice/information sheet contains infor­ma­tion for the data subject (natural person) in accor­dance with Articles 12 and 13 of the EU General Data Protec­tion Regu­la­tion (EU) 679/2016. This notice is given to the data subject when perso­nal data is collected.

4 Contact persons regar­ding Webro­pol surveys

The admins of Webro­pol surveys (service) at Karelia UAS are Mikko Pent­ti­nen and Tuula Hiltu­nen. Helpdesk(at)karelia.fi.

5 Data protec­tion officer

Karelia Ammat­ti­kor­kea­koulu Oy, Data protec­tion officer, Tikka­rinne 9, 80200 Joensuu, Finland

Tel. +358 50 525 0623, email: tietosuoja(at)karelia.fi

6 Purpose of proces­sing perso­nal data

Prepa­ring and sending out surveys requi­red for the statu­tory tasks of the UAS, collec­ting respon­ses and enrol­ments, crea­ting reports and orga­ni­sing events.

The legal basis for proces­sing perso­nal data is the perfor­mance of a task in the public inte­rest, the exercise of public autho­rity, the perfor­mance of a statu­tory task [Act on Univer­si­ties of Applied Sciences (932/2014) and Govern­ment Decree on Univer­si­ties of Applied Sciences (1129/2014)].

7 Desc­rip­tion of cate­go­ries of data subjects and perso­nal data

The data subjects are the staff, students and persons of the UAS and other partici­pants in the events of the UAS. The perso­nal data are perso­nal data requi­red for the purpo­ses of surveys, respon­ses, regi­stra­tions, report gene­ra­tion and event orga­ni­sa­tion orga­ni­sed by the UAS.

8 Grounds for provi­ding perso­nal data

The perso­nal data is neces­sary for the perfor­ming the controller’s tasks mentio­ned in section 6.

9 Legi­ti­mate advan­ta­ges of the regis­ter controller

Emplo­y­ment-related issues of the staff of Karelia UAS.

10 Secu­rity of proces­sing perso­nal data

The persons proces­sing the data are bound by confi­den­tia­lity. The obli­ga­tion of profes­sio­nal secrecy conti­nues after the end of the emplo­y­ment rela­tions­hip. Access to the systems is limited to those persons who need to process the data for their duties.

11 Reci­pients or reci­pient groups of perso­nal data

Data may be disclo­sed on a case-by-case basis to the actors invol­ved in the surveys, such as the recep­tion staff. Webro­pol Oy proces­ses perso­nal data as a service provider.

12 Trans­fer of perso­nal data outside the Euro­pean Union or the Euro­pean Econo­mic Area

Perso­nal data will not be trans­fer­red outside the EU or EEA.

13 Reten­tion of perso­nal data

The appropriate reten­tion period for the purpose of the survey is, for example, the time needed to orga­nise and follow up on regi­stra­tions for an event, up to 6 months after the event. On a case-by-case basis, it may be the time requi­red for financial mana­ge­ment, archi­ving or tech­nical back-ups.

14 Rights of the regis­te­red person

The rights of the regis­te­red person are deter­mi­ned accor­ding to the purpose of proces­sing perso­nal data. The regis­te­red person has the right to inspect the data concer­ning him/herself stored in the regis­ter. The request for the inspec­tion has to be made to the cont­rol­ler of the regis­ter. The regis­te­red person has the right to request correc­tion or removal of data, set limi­ta­tions for the hand­ling of his/her perso­nal data, object the hand­ling of the data, and s/he has the right to trans­fer data from one system to another. The regis­te­red person has the right to with­draw his/her consent to the hand­ling of his/her perso­nal data at any time. In addi­tion, the regis­te­red person has the right to file a complaint with the super­vi­sory autho­rity. The contact person concer­ning the rights of the regis­te­red person is the person in charge of data protec­tion, whose contact details are in section 5 of this statement

15 Auto­ma­tic deci­sion making and profiling

Not in use.