This privacy statement describes how Laurea processes personal data in the online store.

Controller

Laurea University of Applied Sciences Ltd, Ratatie 22, 01300 Vantaa, Finland

• Controller’s contact person: President, Managing Director, Jouni Koski, jouni.koski@laurea.fi
• Person in charge of the personnel register: Director Teemu Ylikoski, teemu.ylikoski@laurea.fi
• Data protection officer: Marjo Valjakka, marjo.valjakka@laurea.fi

The responsible person provides more detailed information about the processing of personal data to the data subject and responds to requests related to the rights of the data subject, such as checking data and correcting errors.

What personal data do we process and for what purposes?

We process the following personal data

• First and last name
• Contact information
• Email address
• Mobile phone number
• Identification number
• Country of residence
• Citizenship
• Mother tongue
• Gender
• Job title/task
• Information about marketing authorizations declared by the person
• Education
• Participation fee information
• Dates of participation
• Enrolment date
• Other voluntary information provided by the participant himself, such as special diets and any information given in the feedback survey

In the online store, personal data is processed in connection with course enrolments and invoicing. The personal identification number needed to identify a person can be obtained either through strong identification or as indicated by the person himself during enrolment. Personal data is stored in the online store’s database in a secure format.

For Laurea’s partners and customers, in addition to the personal data listed above, we process the following data:

• Name of the company
• VAT
• OVT-code
• Operator
• Reference information
• Professional title/ job title

We process the personal data of partners and customers for the implementation and enforcement of cooperation agreements and customer agreements. We also process customer data to map needs for possible cooperation.

On what basis do we process personal data?

The processing of personal data is based on the agreement made at the time of registration and our statutory obligation regarding data stored in the study administration systems (University of Applied Sciences Act 932/2014 and Act on National Study and Degree Registers 884/2017).

The background of Laurea’s cooperation projects and clients is the obligation laid down in the University of Applied Sciences Act (932/2014) to carry out teaching and research, development and innovation activities in cooperation with business and working life and other operating environments.

In addition, a possible marketing license is based on the consent given by the person. It is possible to withdraw consent in connection with marketing letters.

Where do we collect the processed personal data?

We collect information from the person himself during registration and enrolment.

Cookies

We use Google remarketing cookies. This allows us to serve targeted banner ads to website visitors as they browse other sites. In targeting advertising using cookies, the visitor is not identified, and the information is not combined with personal information obtained from the visitor in other contexts.

With the help of remarketing cookies, we can manage the settings so that the visitor is not shown too many of our ads. Visitors’ computers may occasionally receive so-called cookies.

Cookies can be used to collect information, for example, from which page you have moved to the address, which of our web pages you have browsed and when, which browser you are using, what is the resolution and operating system of your screen, and what is the IP address of your computer, i.e. from which Internet address the data you send comes from and where it is received.

With the help of cookie data, the number of visitors to the service can be monitored by Laurea University of Applied Sciences and its partners and analyzed and developed to better serve visitors. In addition, the partners of Laurea University of Applied Sciences may use cookies to target advertising, which collect information about the visitor’s visits to this and other sites.

The visitor has the option to prevent the use of cookies by changing the settings of his browser so that the browser does not allow cookies to be stored. The visitor accepts that, for some services, preventing the use of cookies may affect the functionality of the service.

How long do we store personal data?

Personal data is stored for 3 years from the last active login/purchase.

Purchase information transferred to Laurea’s accounting is kept for 6 years in accordance with the Accounting Act.

Where do we hand over personal data?

The person’s identification information is transferred to user management. In the case of credit-generating studies, personal and registration data are transferred to Laurea’s study data register, from which the data is transferred to the Ministry of Education and Culture for statistical purposes and, if necessary, to other entities implementing the relevant education.

Personal data is not transferred outside the EU or EEA.

No automatic decision-making or profiling is carried out regarding personal data.

How do we protect personal data?

When processing personal data, the information security and data protection guidelines of Laurea University of Applied Sciences are followed. Personal information is only available to those persons who need it to perform their duties.

The use of the service is based on the performance of the person’s work tasks. Access restrictions have been implemented with personal access rights and data traffic. Use of the systems requires a username and password. The system administrator is responsible for granting access rights.

In accordance with the agreements, the system supplier acting as a processor of personal data is responsible for the technical protection and data security of personal data.

When processing personal data, Laurea follows the good data processing practices of the Public Disclosure Act.

Rights of the registrant

The rights of the data subject are determined in accordance with Articles 15-22 of the EU General Data Protection Regulation. The contact person in matters related to the rights of the data subject is Laurea University of Applied Sciences’ data protection officer Marjo Valjakka, marjo.valjakka@laurea.fi.

The right to access information

The person can view the information provided during registration and enrolment in the online store on the My account profile tab. In addition, the data subject can request information about himself. The request is made in writing to the person in charge of the register. The request must specify which information the request applies to. When submitting the request, the registered person must also prove his identity in a reliable way.

Data correction

The registered person can make a request to correct their data to the person in charge of the register.

Restriction of data processing

The registered person has the right to limit processing if

• the data subject disputes the accuracy of the personal data, in which case the processing is limited to a period during which the controller can verify their accuracy
• the processing is against the law and the data subject opposes the deletion of personal data and instead demands the restriction of their use
• the controller no longer needs the personal data in question for processing purposes, but the data subject needs them to prepare, present or defend a legal claim.

The right to file a complaint with the data protection authority

The data subject has the right to file a complaint with the supervisory authority if the data subject considers that the processing of personal data concerning him/her violates applicable data protection regulations. The national supervisory authority in Finland is the office of the Data Protection Commissioner.