Home Privacy Notice Privacy Notice The controller handles students’ personal data for the purposes of arranging education and teaching and for customer service improvement. Data is also collected for statutory authority required statistics and for funding application purposes. Privacy Notice The Institute of Adult Education in Helsinki privacy notice, drawn up May 22, 2018. This privacy notice document reports the information required in EU General Data Protection Regulation and Personal Data Act (523/1999) concerning the personal data registers of the Institute of Adult Education in Helsinki. The contents are updated accordingly when the information changes. Controller Controller: The Institute of Adult Education in HelsinkiBusiness ID: 0203131-0Postal Addresss: Runeberginkatu 22-24, 00100 HelsinkiPhone: 09 41 500 300Mail: toimisto@helao.fi The Functions and Units of the Controller A private institute of adult education, open for all. The Institute serves its customers as a goal-oriented study community, where an adult can futher life-long, continuous studies and mental growth. Contact Person for Data Protection Name: Kaisa KainulainenPostal Address: Runeberginkatu 22-24, 00100 HelsinkiPhone: +358 9 41 500 300Mail: kaisa.kainulainen@helao.fi There is no named ombudsman for data protection (grounds: EU General Data Protection Regulation Article 37) The Purpose of Handling Personal Data The controller handles customers’/students’ personal data for the purposes of arranging education and teaching and for customer service improvement. Data is also collected for statutory authority required statistics and for funding application purposes. The controller also handles personal data for the purposes of fulfilling personnel’s working relationship obligations. Personal data is not handled for the purposes of marketing without the data subject’s consent. Privacy Notice Student Registry Privacy Notice (Hellewi) Newsletter Privacy Notice Camera Surveillance System Runeberginkatu Privacy Notice Camera Surveillance System Annankatu Privacy Notice The Informational Content of the Registers Necessary information for individualising, identifying and arranging training, such as: the customer’s/student’s name and social security number;contact information: address, home county, phone number and e-mail address;background information such as native language, educational background and work experience;other more specifically individualised information as specified in the said registry documents. Regular Sources of Information The information in the registers mainly comes from the data subject. Information on previous studies come from the data subject or the Studyinfo.fi –service or the Koulutusportti system. Giving Out Information The customer’s/student’s personal data is not given out outside the third parties acting on behalf of the controller per se. Data can, however, be given out statutorily to the National Agency for Education, employment and business authorities and Kansaneläkelaitos (Kela). The controller does not move or give out personal data outside the European Union or the European Economic Area. Personal data is not given out for direct marketing purposes. The Registers’ Protection Principles TData protection and the confidentiality, integrity and usability of personal data of the controller is secured by the appropriate technical and adminstrative measures. The information and service is protected by, for example, a firewall, the protection of equipment premises, access control, access rights and encryption techniques, and also active surveillance. The personal data is protected from unauthorized access and illegal or accidental data handling. Personal data is only handled by specifically appointed persons designated by the controller and those controller employed third parties who maintain or develop services for the controller. Rights of the Data Subject The data subject has, as stated below in points 1-7, rights to the aquisition, correction, restriction, removal and moving the data concerning them as well as the right to complain about the handling of their data. The right to ask for access to one’s personal data and check what data concerning them has been saved to the controller’s register;The right to ask for the correction or removal of erroneous or inconcise data concerning them;The right to ask for the restriction of the handling of one’s personal data;The right to oppose the handling of one’s personal data (by prohibiting its handling for, for example direct marketing, marketing or opinion polls or vital records, or geneaological studies);The right to demand the transfer of one’s personal data to another system in a commonly used data format. (This right only pertains to information the data subject has given themselves.);The right to withdraw one’s consent to handle one’s personal data:The right to make a complaint to a supervising authority. The request or demand stated in points 1-6 above must be sent in written form and signed to the address Toimihenkilöjärjestöjen Opintoliitto ry, Runeberginkatu 22–24, 00100 Helsinki. In it must be stated the data subject’s name, social security number, postal address and phone number. The answer to the request will be delivered to the Population Register Centre certified address of the data subject. The register keeper has a right to take identification actions before sending information. The request or demand concerning data handling can also be presented in person at the above mentioned address, and the data subject must upon request present an official document for the purposes of identification (personal ID, driver’s lisence or passport). The compaint to the supervising authority is made following the authority provided instructions straight to the appropriate authority, which in Finland is the Ombudsman for Data Protection: http://www.tietosuoja.fi/fi.
