Privacy notice
Protecting your privacy and your personal data is of great importance and we are committed to complying with the requirements for protecting personal data. This privacy notice contains information about
- What is privacy notice, personal data, and processing?
- Why does EDUCase process personal data?
- What personal data does EDUCase collect and from which sources?
- What is the lawful basis for processing your personal data?
- How and who processes my personal data?
- Transfers of personal data and retention period.
- What are your rights?
- Who is the controller and who can I contact?
The means and purposes of processing your personal data are described in further detail in this privacy notice. This privacy notice will be updated and found on this website if changes are implemented.
EDUCase will only process personal data that is necessary for the processing purposes defined in this privacy notice. We recommend that you read the privacy notice of EDUCase. By using our services and contacting us, you accept the terms of our privacy notice. Please make note that personal data from minors will not be stored nor processed on any accounts.
1. What is privacy notice, personal data, and processing?
Privacy notice is the information that is provided for data subjects explaining personal data gathering, the purpose of processing, the data subject’s rights, etc.
Personal data is any kind of information that can identify a person. Personal data can be a person’s name, address, ID number, IP address, photograph, or other information that, can form knowledge about a person directly or when combined with other forms of data.
Processing of personal data means but is not limited to, the collection, recording, storage, adaptation, combination, transmission, and destruction of data.
2. Why does EDUCase process personal data?
EDUCase collects and processes certain personal data to
- enable communication and marketing,
- maintain and develop the network,
- EDUCase will also process personal data for data security and to prevent and resolve possible infringement of content, such as copyright infringement.
3. What personal data does EDUCase collect and from which sources?
EDUCase collects personal data from you when you interact with us and with the analytics provider when you visit our website. The personal data that EDUCase collects can be grouped into the following categories:
- Identification information such as title, forename, surname, and contact information such as telephone number and email address. This information will be collected in conjunction with registration for events or requests for service.
- Data collection through observing the website such as time of visit, the page from which the system accessed the website, pages visited during the session, Internet Protocol address (IP address), browser type, and similar technical information. More information about our cookie policy is available here.
4. What is the lawful basis for processing your personal data?
We process your personal data on a legal basis and only to the extent necessary for the following uses:
- Based on legitimate interest, to maintain and develop our website and observe the use of the website and to communicate and market the network.
- Based on legitimate interest, to protect data security, detecting, preventing, or handling data misuses or technical issues, and to prevent copyright infringement.
- Based on your consent, we may use your personal data for outreach and networking.
5. Where, how, and who processes my personal data?
Personal data is stored on the servers provided by Aalto university’s service providers. Your personal data is primarily processed by the staff and the personnel of Aalto University. We may outsource some parts of the processing to third parties, such as the data systems used to store and process personal data.
Your data is also processed by service providers and the cookies of our service providers. In these situations, we make sure that the confidentiality of your personal data is secured, and data is processed lawfully. For more information on the cookies that we use and on how you can change the settings for cookies, see our Cookie Policy.
6. Transfers of personal data and retention period.
The server on which the EDUCase website is operated is in the European Economic Area (EEA). Your personal data is not transferred outside the EU.
Your personal data will be retained for the duration of the legal basis for processing and only for as long as necessary. Generally, the personal data of website users will be retained for a period of one year, after which the personal data will be deleted.
7. What are your rights?
Stakeholders can use the following rights in relation to EDUCase as the controller for the stakeholder’s personal data:
- Right of access and rectification
You have the right to receive confirmation on whether we process your personal data and the right to access any such personal data. In addition, you have the right to request the rectification of incorrect personal data relating to you, or to supplement incomplete personal data.
- Right to data erasure
You have the right to request the erasure of your personal data from our data systems. EDUCase will comply with your request, provided that there is no legitimate reason to retain the data. Personal data may not be deleted instantly from backup copies and other such data systems but will be deleted through regular database retention practices.
- Right to object
You have the right to object to the processing of your personal data if your personal data is processed for other purposes than otherwise agreed such as direct marketing. Objecting to the processing of your personal data may lead to a limitation on the usage of the EDUCase website.
- Right to restriction of processing
We may request EDUCase to restrict the processing of your personal data to only storage if you have asked for the correctness of the data that we have registered about you, or if you have objected to the processing of your personal data.
- Right to data portability
You have the right to receive your personal data from us in a structured, commonly used format so that you may transfer your personal data to another controller, provided that the processing of your personal data is based on consent or a contract between you and EDUCase.
8. Who is the controller of personal data and who can I contact?
The controller of the personal data is Aalto University, the coordinating organization of the EDUCase website. You can contact the Data Protection Officer of Aalto University for any questions regarding the use of personal data in EDUCase ([email protected]). For more information and clarification, you can contact the coordinator of the EDUCase Platform (Riina Subra-[email protected]) or the communication officer (Najmeh Viki-[email protected]).
If the processing of your personal data is in breach of applicable legislation, you have the right to lodge a complaint with the national supervisory authority. You can lodge the complaint with a competent supervisory authority. In Finland, this is the Data Protection Ombudsman, and the complaint must be lodged in accordance with instructions provided by the Office of the Data Protection Ombudsman. Please see https://tietosuoja.fi/en/home for more information.