Home Privacy Policy Visma InSchool Primus – Student management system Visma InSchool Primus – Student management system Privacy PolicyCamera Surveillance Runeberginkatu Visma InSchool Primus – Student management system Visma InSchool Primus – Student management system Updated 9.12.2024 Contact information Helsingin aikuisopisto/peruskoulu00100 Helsinkiperuskoulu@helao.fi Reason for processing data The staff of the Institute of Adult Education in Helsinki processes data for the purposes of organising education, teaching and student welfare. The student management system Primus processes information about applicants and students, as well as contact details of staff. Only data necessary for the management of cases and for the legal protection of data subjects is collected in Primus. In addition, data is collected for customer service, planning and statistics. This information is necessary for the production of statutory statistics by the central government and public authorities and for financial planning. Basis for processing data The Institute of Adult Education in Helsinki’s right to process personal data as a data controller is based on the data subject’s consent and/or contract and legitimate interest. The school complies with its legal obligation. The existence of a register is necessary for the planning of education, teaching and the organisation of student welfare. Recipients of personal data Primus data is processed by staff whose job description includes the processing of data. The student’s study rights, academic records and degree data are transferred from Primus to the statutory KOSKI database, which is maintained by the Finnish National Agency for Education. The education providers and administrators of educational institutions are responsible for the accuracy of the data they store and for the right of the data subject to rectify the data. Finnish National Agency for Education is responsible for the general operation of the repository and for maintaining and providing the data access service. If the customer is a customer of the TE Office, the necessary information is entered in the education portal (KOPO), which is maintained by the TE Office. The providers of education and training and the operators of educational institutions are responsible for the accuracy of the data they store and for the data subject’s right to rectify the data. The TE Office is responsible for the general operation of the education portal (KOPO) and for the technical access for the storage, processing and disclosure of data, as well as for the other obligations of the data controller under the General Data Protection Regulation. If the client is a client of the Municipal Employment Experiment, the necessary study-related information is reported to the office of the student’s municipal experiment area using a form. The personal study plan (HEOPS) is handed over to the student’s next educational institution or other partners with the student’s consent. Disclosures of personal data The information contained in the register will not be disclosed to third parties, for direct marketing, market research, opinion polls, personal data matrices or genealogical research. Data will not be disclosed outside the EU or EEA. Retention periods for personal data The Institute of Adult Education in Helsinki will retain personal data for as long as it is necessary for the purposes for which the personal data is processed or to comply with legal obligations. The school complies with the general regulations and recommendations of the National Archives of Municipal Education, the EU Data Protection Regulation 2016/679 and the Basic Education Act 628/1998; Permanently stored documents: the Archives Department’s Regulation 321/43/03 and the Archives Act L831/94; non-permanently stored records: the EU Data Protection Regulation GDPR 2016/679. Physical data Application form – study period + 1 year Enrolment form – study period + 1 year Decision on student selection, enrolment form – study period + 1 year Aptitude tests and results – study time + 1 year Graduation certificate – retained permanently Certificate of expulsion and its attachments – retained permanently Certificate of completion of initial phase studies – study period + 1 year Certificate of completed initial studies – study period + 1 year Certificate based on a special degree – study period + 1 year Study card after the academic year ends – study time + 1 year Subject selections – study period + 1 year Requests, clarifications, and decisions regarding credit transfers (recognition of prior learning) – study period + 1 year Test questions and answers – academic year + 1 year Documents about exemptions from studying– study period + 10 years Teacher’s individual student assessment logs – study period + 1 year Homework and answers – academic year + 1 year Temporary expulsion decision – study period + 10 years TEM forms – study period + 1 year Electronic data Registering as an applicant – retained permanently Registration as a student – retained permanently Grading information – retained permanently Attendance records – retained permanently Documents created during educational guidance – study period + 1 year Personal Study Plan, HEOPS – study period + 10 years Graduation certificate– 50 years Certificate of expulsion and its attachments – 50 years Certificate of completion of initial phase studies – study period + 1 year Certificate of completed initial studies – study period + 1 year Certificate based on a special degree – study period + 1 year Student card after the academic year ends – study period + 1 year Fixed-term expulsion decisions – study period + 10 years Counselor’s statements and reports – study period + 1 year Student welfare report – study period + 10 years Student-specific notes – study period + 1 year Information in the teacher and staff registry is retained permanently. Rights of the data subject The data subject always has the right to request access to their personal data from the data controller, as well as the right to request the rectification or deletion of such data, or to restrict processing and to object to processing. The right to erasure generally does not extend to personal data that is processed based on a statutory task or for which there is another retention obligation. The request or demand must be sent in writing and signed to the address Toimihenkilöjärjestöjen Opintoliitto ry/Helsingin aikuisopisto, Runeberginkatu 22–24, 00100 Helsinki. It must include the registered person’s name, personal identification number, postal address, and phone number. The response to the request will be sent to the address verified from the registrant’s population information system. The data controller has the right to carry out identification measures to the necessary extent before sending the information. A request for inspection or a requirement for data processing can also be made in person at the aforementioned address, in which case the data subject must present an official document for identification (ID card, driver’s license or passport) if requested. Right to lodge a complaint with the supervisory authority A complaint to the supervisory authority is made directly to the authority in the manner instructed by the competent authority, which in Finland is the Data Protection Ombudsman (http://www.tietosuoja.fi/en/). Is the provision of personal data a statutory or contractual requirement, or a requirement for entering into a contract, and is the data subject obliged to provide personal data and what are the possible consequences of failing to provide such data. The personal data has been obtained from the data subject themselves. Providing personal data is a prerequisite for handling the matter. Automated decision making and profiling Automated decision-making or profiling is not done.