Event register

Information to the data subject in accordance with the EU General Data Protection Regulation (2016/679) articles 13-14.

1. Controller

Arcada University of Applied Sciences Ltd

Jan-Magnus Janssonin aukio 1

00560 Helsinki

Business ID: 2553871-2

5. Purposes of processing personal data

The personal data is processed for registration, contact, reporting, invoicing and other tasks necessary for carrying out the event to which the data subject registers.

With the data subject’s consent, the data may be transferred to Arcada’s stakeholder register and he or she can receive newsletters and information about similar events.

The legal basis for processing personal data is the existence of a contract between Arcada and the data subject.

Data that belongs to special categories of personal data (according to the General Data Protection Regulation, article 9) are processed in the register. Information about allergies is processed with the data subject’s consent in order for Arcada to be able to take them into consideration for the event catering.

7. Categories of personal data and the duration of storage

  1. Name and contact information and, if the person represents a company or an organization, also his or her title and the name of the company or the organization.
  2. Information about allergies
  3. Invoicing address, if the data subject is attending an event for which a participation fee is charged

The data is deleted within one year from the event date. Data relating to participation in events for which a participation fee is charged is stored for six years from the end of the calendar year in which the event was held.

The contact information and information about which event the person has attended of persons who have given their consent to receiving newsletters and information about similar events is transferred to the stakeholder register.

8. IT systems used when processing personal data

Mira Network CRM – event registration system and contact register

9. Data sources

The data it the register is provided by the data subject when he or she registers for an event.

If the data subject does not provide all the necessary information asked at registration, Arcada cannot approve the registration and cannot register him or her as a participant in the event.

10. Recipients of the personal data

Personal data is not disclosed without the data subject’s consent.

11. Transfer of personal data outside the EU and the EEA and the basis for the transfer

Personal data is not transferred outside the EU or the EEA without the data subject’s consent.

12. Principles for the protection of personal data

Material in electronic format is stored in IT systems and on computers protected from unauthorized use with security measures including firewalls and passwords. The systems have different user levels, and users are granted access to the data only to the extent the user’s work tasks require.

Material in paper format is stored in locked rooms with limited access and access control.

13. Automated decision-making

Automated decisions and profiling are not made based on personal data within the register.