Alumni register
Information to the data subject in accordance with the EU General Data Protection Regulation (2016/679) articles 13-14.
1. Controller
Arcada University of Applied Sciences Ltd
Jan-Magnus Janssonin aukio 1
00560 Helsinki
Business ID: 2553871-2
2. The controller’s representative
Head of Communications Hanna Donner
Tel. 0294 282 523
E-mail address in the format E-mail: firstname.surname
3. Contact person for the register
Alumni Relations Manager Mia Ingman
Tel. 0294 282 667
E-mail address in the format E-mail: firstname.surname
4. Data protection officer
Data Protection Officer, Legal Counsel Anna Härmä
Tel. 0294 282 888
E-mail address E-mail: dataprotection
5. Purposes of processing personal data
The data is used for maintaining contact and cooperating with Arcada’s alumni. Forms of cooperation can include engagements, events, collection of feedback and information about Arcada’s activities. Arcada also has a duty to carry out a yearly national career follow up.
With the alumnum’s consent, he or she can receive newsletters and information about courses and other activities at Arcada.
6. Legal basis for processing personal data
The legal basis for processing personal data is the performance of a task carried out in the public interest or in the exercise of official authority.
7. Categories of personal data and the duration of storage
The following categories of personal data are processed in the register:
- The alumnum's name, personal identity number, contact information, organization and title as well as the possibility to subscriptions and participation made with requests for updating contact information. The alumnum can change this information himself/herself.
- The alumnum's personal data, gender, degree, graduation date, student number, education, start and end date of studies for recent graduates (after 2013) are stored permanently. The alumnum's home address is deleted after 10 years, if there has been no contact with the alumnum.
- Information about participation in events and other activities at Arcada. Information about participation in events is deleted in accordance with the storage times mentioned in the event register.
- If the alumnum subscribes to newsletters, Arcada also follows up on activities relating to the newsletters.
Requests for updating contact information for further processing of personal data are made to the alumni every three years.
8. IT systems used when processing personal data
Mira Network CRM – contact register
9. Data sources
The data within the register is transferred from Arcada's student register after the alumni has graduated.
Information about participation in events and activities relating to newsletters is collected when the alumnum signs up to events and when newsletters are sent.
10. Recipients of the personal data
Personal data is not disclosed without the alumnum’s consent.
11. Transfer of personal data outside the EU and the EEA and the basis for the transfer
Personal data is not transferred outside the EU or the EEA without the alumnum’s consent.
12. Principles for the protection of personal data
Material in electronic format is stored in IT systems and on computers protected from unauthorized use with security measures including firewalls and passwords. The systems have different user levels, and users are granted access to the data only to the extent the user’s work tasks require.
Material in paper format is stored in locked rooms with limited access and access control.
13. Automated decision-making
Automated decisions and profiling are not made based on personal data within the register.
14. The data subject’s rights
Information about the data subject's rights can be found here.