Alumni lecturer bank privacy notice
Data controller
Laurea University of Applied Sciences, Ratatie 22, 01300 Vantaa
Contact person for the data controller: Specialist Jenni Köykkä, jenni.koykka@laurea.fi
What personal data do we process and for what purposes?
In the alumni lecturer bank we process the following personal data:
- Name
- Phone number
- Degree title
- Study programme
- Year of graduation
- Current workplace and job title
- Work history / LinkedIn profile
- Expertise/topics you can lecture on
- Languages in which you can lecture
- Photograph (optional)
Personal data are processed in matters related to Laurea’s lecturer bank:
- Contacting regarding lectures
- Payment of fees
- Monitoring the use of the lecturer bank
- Updating information
On what basis do we process personal data?
The processing of personal data in the alumni lecturer bank is based on the alumnus’ consent. The source of the personal data in the register is the lecturers who have registered in the lecturer bank via an open online form. Changes are not made automatically; lecturers themselves report any changes to their personal data.
Where do we collect the personal data we process from?
Information for the lecturer bank is collected via the form on Laurea’s website.
How long do we retain personal data?
Personal data in the lecturer bank are retained as long as they are needed to carry out alumni activities. If a person requests the removal of their personal data, it will be removed from the lecturer bank.
To whom do we disclose personal data?
The information in the lecturer bank is available to Laurea staff via Laurea’s SharePoint staff intranet. The lecturer bank is a shared tool for all staff and is used to support teaching and alumni activities.
Personal data are not disclosed outside Laurea. Personal data are not transferred outside the EU or EEA.
No automated decision-making or profiling is carried out with respect to personal data.
How do we protect personal data?
The processing of personal data follows Laurea University of Applied Sciences’ information security and data protection guidelines.
Laurea adheres to the Act on the Openness of Government Activities’ good data processing practices when handling personal data.
Rights of the data subject
The data subject’s rights are determined in accordance with Articles 15–22 of the EU General Data Protection Regulation. The contact person for matters related to the data subject’s rights is Laurea University of Applied Sciences’ Data Protection Officer Marjo Valjakka, tietosuoja@laurea.fi
Right of access to information
A data subject may request the information concerning them. The request must be made in writing to the person responsible for the register. The request must specify which information is being requested. When submitting the request, the data subject must also prove their identity in a reliable manner.
Right to rectification
A data subject may request the rectification of their data from the person responsible for the register.
Right to erasure
A data subject has the right to request the deletion of their data stored in the register. Deletion of data is carried out by the person responsible for the register through the service’s administrative interface.
Restriction of processing
A data subject has the right to restriction of processing,
- if the data subject disputes the accuracy of the personal data, in which case processing is restricted for the period during which the controller can verify their accuracy
- the processing is unlawful and the data subject opposes erasure and requests the restriction of use instead
- the controller no longer needs the personal data for the purposes of processing, but the data subject needs them for the establishment, exercise or defence of legal claims
Transfer of consent-based data from one system to another
The data subject has the right to receive in a machine-readable format the personal data concerning them which they have provided to the controller, where processing is based on consent and is carried out by automated means.
Right to lodge a complaint with a data protection authority
A data subject has the right to lodge a complaint with a supervisory authority if they consider that the processing of their personal data infringes applicable data protection legislation. The national supervisory authority in Finland is the Office of the Data Protection Ombudsman.