Alumni lecturer database privacy statement

Data controller

Laurea University of Applied Sciences, Ratatie 22, 01300 Vantaa

Controller's contact person: Coordinator Jenni Köykkä, jenni.koykka@laurea.fi

What personal data do we process and for what purposes?

We process the following personal data in the alumni lecturers' database:

• Name
• E-mail
• Telephone number
• Degree title
• Degree programme
• Year of graduation
• Current workplace and job title
• Work history / LinkedIn profile
• Competence/topics on which they can provide lectures
• Languages in which they can lecture
• Photograph (optional)

Personal data is processed in matters related to the Laurea lecturers' database:

• Contacts related to lectures
• Fee payment
• Monitoring the use of the lecturer bank
• Data update

On what basis do we process personal data?

The processing of the alumni lecturers' database personal data is based on the alumni's consent. The data source for the personal data in the register are lecturers who have registered with the lecturer database via an open online form. The changes will not be made automatically, but the lecturers will themselves report any changes to personal data.

Where do we collect the personal data we process?

The data of alumni lecturer database is collected using the form available on Laurea’s website.

How long do we store personal data?

The personal data in the lecturers' database will be stored as long as there is a need to use them to carry out alumni activities. If a person requests that their personal data be deleted, it is removed from the lecturers' database. 

Where do we disclose personal data?

The data is available to Laurea staff in the lecturers' database through Laurea's Sharepoint personnel intranet. The database is a shared tool for the entire staff, which is used to support teaching and alumni activities.

Personal data is not disclosed outside Laurea. Personal data are not transferred outside the EU or ETA area. No automatic decision-making or profiling is carried out on the basis of personal data.

How do we protect personal data?

The data security and data protection guidelines of Laurea University of Applied Sciences are followed in the processing of personal data.

When processing personal data, Laurea applies good practices of data processing pursuant to the Act on the Openness of Government Activities.

The rights of data subjects

The rights of data subjects are determined in accordance with Articles 15–22 of the EU’s General Data Protection Regulation. The contact person for matters related to the rights of data subjects is Marjo Valjakka, Data Protection Officer at Laurea University of Applied Sciences, marjo.valjakka@laurea.fi

Right of access

Data subjects may request access to the data concerning themselves. The request is made in writing to the person responsible for the register. The request must specify the data it concerns. When submitting a request, the data subject must also prove their identity in a reliable manner.

Right to rectification

Data subjects may request the person in charge of the register to rectify their data.

Right to erasure

The data subject has the right to request the erasure of their data stored in the register. The data is deleted in the service management interface by the person responsible for the register.

Restriction of processing

The data subject has the right to restrict the processing,

• if the data subject disputes the accuracy of the personal data, in which case the processing is limited to a period during which the controller can verify their accuracy
• the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead
• the controller no longer needs the personal data for the purposes of the processing but the data subject needs them for the establishment, exercise or defence of legal claims.

Portability of data that are based on consent

The data subject has the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a machine-readable format if the processing is based on consent and the processing is carried out by automated means.

Right to lodge a complaint with a data protection authority

The data subject has the right to lodge a complaint with the supervisory authority if the data subject considers that the processing of personal data concerning them is in breach of applicable data protection legislation. In Finland, the national supervisory authority is the Office of the Data Protection Ombudsman: