Privacy Notice for Laurea’s Research Permit Applications
This privacy notice describes how personal data is processed in connection with research permit applications at Laurea University of Applied Sciences.
Controller
Laurea University of Applied Sciences Ltd, Ratatie 22, 01300 Vantaa, Finland
- Contact person for the controller: President & CEO Jouni Koski – jouni.koski@laurea.fi
- Person responsible for the register: Vice President (RDI) Mari Vuolteenaho – rehtorintoimisto@laurea.fi
- Data Protection Officer: Marjo Valjakka – tietosuoja@laurea.fi
Purpose and Legal Basis for Processing Personal Data
Personal data of research permit applicants is processed for the purpose of evaluating research permit applications and maintaining communication related to the application process.
The processing of personal data is based on public interest and the exercise of official authority.
Categories of Personal Data and Regular Sources of Data
The applicant provides the following information in the research permit application:
- Name
- Email address
- Phone number
- Organisation
- Position / official title / academic degree
When necessary, the following information may also be collected about the applicant’s research supervisor:
- Name
- Email address
- Phone number
Additional personal data may be processed if it is included in the documents attached to the research permit application.
Regular Disclosures and Transfers of Data
Personal data related to research permit applications is not disclosed outside Laurea, nor is it, as a rule, transferred outside the EU or EEA.
Principles of Data Protection
The processing of personal data complies with Laurea’s information security and data protection guidelines. Personal data is accessible only to those individuals who need it to perform their work-related duties.
Personal data is processed solely for tasks related to Laurea’s research permit services. Access restrictions are implemented through personal user permissions and technical safeguards. Access to the systems requires a personal username and password.
System providers acting as data processors are responsible, in accordance with contractual obligations, for the technical security and protection of the personal data they process.
Retention Period
Research permit applications are stored in Laurea’s case management system for 10 years.
Automated Decision-Making and Profiling
No automated decision-making or profiling is carried out in Laurea’s research permit process.
Rights of the Data Subject
The rights of the data subject are determined in accordance with Articles 15–22 of the EU General Data Protection Regulation (GDPR).
Right of Access
A data subject has the right to inspect and obtain a copy of the personal data concerning them. Requests must be submitted in writing to rehtorintoimisto@laurea.fi.
The request must specify which information the data subject wishes to access.
Right to Rectification
A data subject may request the rectification of inaccurate or incorrect personal data.
The request must be submitted in writing to rehtorintoimisto@laurea.fi, specifying which data the request concerns.
Right to Erasure
Because the processing of personal data is based on public interest, the data subject does not generally have the right to have their personal data erased.
A data subject may request erasure if:
- the personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
- the personal data has been processed unlawfully; or
- the personal data must be erased in order to comply with a legal obligation under EU or national law.
Right to Lodge a Complaint
A data subject has the right to lodge a complaint with the supervisory authority.
Office of the Data Protection Ombudsman
Visiting address: Lintulahdenkuja 4, 00530 Helsinki
Postal address: P.O. Box 800, 00531 Helsinki
Switchboard: +358 29 56 66700
Registry: +358 29 566 6768
Email: tietosuoja@om.fi