Donor register

Information to the data subject in accordance with the EU General Data Protection Regulation (2016/679) articles 13-14.

1. Controller

Arcada University of Applied Sciences Ltd
Jan-Magnus Janssonin aukio 1
00560 Helsinki
Business ID: 2553871-2

5. Purposes for processing personal data

The donor register contains information about donors (private persons as well as organizations) who have made donations to Arcada. The personal data is used for internal control of donations, for reporting to the authorities, for publication purposes, for maintaining contact with the donors and for making visible the donors who have given their consent thereto.

If the donor has given his or her consent, he or she can receive newsletters and other information about the activities at Arcada.

The legal basis for processing personal data is Arcada’s legal obligation to keep records of received donations and Arcada’s legitimate interest to maintain contact with the donors.

7. Categories of personal data and the duration of storage

Individuals: Name, social security number, contact information and donated amount and/or nature of the donation, for donations of 850 euro or above also a deed of gift.

Companies and organizations: Company name, contact person(s), contact information and donated amount and/or nature of the donation, for donations of 850 euro or above also a deed of gift.

In addition, information about who the donor is, his or her connection to Arcada and notes on relevant information about the donation process collected before and after the donation was made may also be processed.

The data is stored for 10 years. For the purpose of historic monitoring, the donor’s name and the donated amount and/or the nature of the donation as well as the time period of the fundraising campaign is stored permanently.

8. IT systems used when processing personal data

Mira Network CRM – contact register
Dynasty - case management system 

9. Data sources

The data is provided by the donor when he or she makes the donation.

10. Recipients of the personal data

The name of the donor may be published in Arcada’s internal and external communication channels if the donor has given his or her consent. The amount of the donation is only published with the donor’s separate consent.

Data can be disclosed to authorities if required by law, regulation or a decision made by the authorities.

11. Transfer of personal data outside the EU and the EEA and the basis for the transfer

Personal data is not transferred outside the EU or the EEA without the donor’s consent.

12. Principles for the protection of personal data

Material in electronic format is stored in IT systems and on computers protected from unauthorized use with security measures including firewalls and passwords. The systems have different user levels, and users are granted access to the data only to the extent the user’s work tasks require.

Material in paper format is stored in locked rooms with limited access and access control.

13. Automated decision-making

Automated decisions and profiling are not made based on personal data within the register.