Related parties register privacy statement
Controller of the register
The data controller decides on and is responsible for the processing of personal data.
Laurea University of Applied Sciences
Ratatie 22
01300 Vantaa
Contact person regarding the processing of personal data:
Vice President (Support Services) Kimmo Hannonen, kimmo.hannonen(at)laurea.fi
Purpose of processing personal data:
Personal data is collected for maintaining the related parties register
No automated decision-making or profiling is carried out with regard to personal data.
Legal basis for processing personal data:
Personal data is processed on the basis of Article 6(1) of the EU General Data Protection Regulation
- Compliance with a legal obligation
Collected personal data:
Members of the Board, the CEO, the deputy rectors and other directors specified in Laurea’s rules of governance. The spouses and cohabiting partners of the foregoing, the individual’s and their spouses’ children and other dependants.
Names and the names of legal persons in which they serve as members or deputy members of the board or supervisory board, as managing directors or their deputies, or in a corresponding position
Sources of the collected personal data:
Collected via an electronic questionnaire addressed to the members of the Board and the directors mentioned in the rules of governance.
Disclosures of personal data:
Data may be disclosed to the auditors of Laurea University of Applied Sciences Ltd.
Transfer of data outside EU or EEA countries:
Personal data is not transferred outside the EU or EEA countries
Duration of processing of personal data:
A person’s data will be kept in the register as long as the person is considered to belong to the related parties of Laurea University of Applied Sciences Ltd and for 2 years after this has ended.
Principles for protecting personal data:
The register is managed in accordance with Laurea University of Applied Sciences’ information security and data protection guidelines.
The document is stored in Laurea University of Applied Sciences’ document management system.
The information systems used are protected with user IDs, passwords and, where necessary, logging of use.
Manual materials are kept in locked facilities with access limited to authorised persons. The premises are under access control.
Rights of the data subject:
The rights of the data subject are determined by Articles 15-22 of the EU General Data Protection Regulation as follows:
- The data subject may inspect the data concerning them and correct it if necessary.
- The data subject may restrict processing of their data when they dispute the accuracy of the personal data.
- The data subject may object to the processing of data for reasons relating to a specific personal situation. However, the right to object does not apply if the processing is necessary for the performance of a task carried out in the public interest.
- The data subject may lodge a complaint with the Data Protection Ombudsman if they consider that personal data has been processed in violation of data protection legislation.
The contact person regarding the data subject’s rights is the Data Protection Officer.
The Data Protection Officer of Laurea University of Applied Sciences is Marjo Valjakka, tietosuoja@laurea.fi