Donor register
Information to the data subject in accordance with the EU General Data Protection Regulation (2016/679) articles 13-14.
1. Controller
Arcada University of Applied Sciences Ltd
Jan-Magnus Janssonin aukio 1
00560 Helsinki
Business ID: 2553871-2
2. The controller’s representative
Head of Communication Hanna Donner
Tel. 0294 282 523
E-mail address in the format firstname.surname
3. Contact person for the register
Fundraising Manager Mia-Maja Wägar
Tel. 0294 282 804
E-mail address in the format firstname.surname
4. Data protection officer
Data protection officer, legal counsel Anna Härmä
Tel. 0294 282 888
E-mail address dataprotection
5. Purposes for processing personal data
The donor register contains information about donors (private persons as well as organizations) who have made donations to Arcada. The personal data is used for internal control of donations, for reporting to the authorities, for publication purposes, for maintaining contact with the donors and for making visible the donors who have given their consent thereto.
If the donor has given his or her consent, he or she can receive newsletters and other information about the activities at Arcada.
6. Legal basis for processing personal data
The legal basis for processing personal data is Arcada’s legal obligation to keep records of received donations and Arcada’s legitimate interest to maintain contact with the donors.
7. Categories of personal data and the duration of storage
Individuals: Name, social security number, contact information and donated amount and/or nature of the donation, for donations of 850 euro or above also a deed of gift.
Companies and organizations: Company name, contact person(s), contact information and donated amount and/or nature of the donation, for donations of 850 euro or above also a deed of gift.
In addition, information about who the donor is, his or her connection to Arcada and notes on relevant information about the donation process collected before and after the donation was made may also be processed.
The data is stored for 10 years. For the purpose of historic monitoring, the donor’s name and the donated amount and/or the nature of the donation as well as the time period of the fundraising campaign is stored permanently.
8. IT systems used when processing personal data
Mira Network CRM – contact register
Dynasty - case management system
9. Data sources
The data is provided by the donor when he or she makes the donation.
10. Recipients of the personal data
The name of the donor may be published in Arcada’s internal and external communication channels if the donor has given his or her consent. The amount of the donation is only published with the donor’s separate consent.
Data can be disclosed to authorities if required by law, regulation or a decision made by the authorities.
11. Transfer of personal data outside the EU and the EEA and the basis for the transfer
Personal data is not transferred outside the EU or the EEA without the donor’s consent.
12. Principles for the protection of personal data
Material in electronic format is stored in IT systems and on computers protected from unauthorized use with security measures including firewalls and passwords. The systems have different user levels, and users are granted access to the data only to the extent the user’s work tasks require.
Material in paper format is stored in locked rooms with limited access and access control.
13. Automated decision-making
Automated decisions and profiling are not made based on personal data within the register.
14. The data subject’s rights
Information about the data subject's rights can be found here.