Processing of personal data - Studies
Why do we process your personal data?
We process your personal data in connection with the following tasks:
- To implement and demonstrate your right to study and organise your studies
- The management of your study attainments and completed degrees and the compilation of the related statistics
- The development of our teaching activities
- To ensure the security of students and all other members of the university community and to enable the physical and information security of our study facilities
In addition, the university may process your personal data for the following reasons:
- Scientific research and
- Study-related marketing communications or some other special purpose.
Do we use automated profiling in our decision-making processes?
Automated decision-making refers to a decision meant for the evaluation of a person’s specific characteristics that is conducted using only automated data processing and that results in legal effects for the data subject or that will otherwise affect them in a significant way. Some examples of automated decision-making include credit status decisions and profiling. The data subject has the right to not be subjected to automated decision-making.
We do not utilise automated decision-making.
Why are we allowed to process your personal data?
The processing of personal data is based on the EU General Data Protection Regulation. The more detailed justifications for processing the data are:
- the consent of the data subject (e.g. marketing communications)
- Regulations concerning the compliance with the data controller’s statutory obligation:
- The Universities Act 558/2009 and the decrees issued on the basis of it
- The Government Decree on University Degrees 794/2004 including amendments and the previous decrees concerning degrees that were related to technology, science, business, economics, art and design
- The Act on National Study and Degree Registers 884/2017 (chapter 5)
- The General Data Protection Regulation (EU) 2016/679 and the national regulations that supplement it
- The Act on the Openness of Government Activities 621/1999
- task concerning the public interest/the use of public powers that belongs to the data controller is an official duty that concerns the public interest