Information to the data subject in accordance with the EU General Data Protection Regulation (2016/679) articles 13-14

1. Controller

Arcada University of Applied Sciences Ltd
Jan-Magnus Janssonin aukio 1
00560 Helsinki
Business ID: 2553871-2

2. The controller’s representative

Head of Communications Hanna Donner
Tel. 0294 282 523
E-mail address in the format

3. Contact person for the register

External relations manager Mia Ingman
Tel. 0294 282 667
E-mail address in the format

4. Data protection officer

Data protection officer, legal counsel Anna Härmä
Tel. 0294 282 888
E-mail address

5. Purposes of processing personal data

The data is used for maintaining contact and cooperating with Arcada’s alumni. Forms of cooperation can include engagements, events, collection of feedback and information about Arcada’s activities.

With the alumnum’s consent, he or she can receive newsletters and target group oriented marketing about education, courses and other activities at Arcada.

6. Legal basis for processing personal data

The legal basis for processing personal data is the alumnum’s consent.

7. Categories of personal data and the duration of storage

  1. The alumnum’s name, date of birth, contact information, organization, title, degree and graduation date
  2. Information about participation in events and other activities at Arcada
  3. If the alumnum subscribes to newsletters, Arcada also follows up on activities relating to the newsletters

Requests for updating contact information and consent for further processing of personal data are made to the alumni every three years.

8. IT systems used when processing personal data

Mira Network CRM – contact register

9. Data sources

The data within the register is transferred from the student register at Arcada after the alumni has graduated and given his or her consent to the transferring of personal data to the alumni register.

Information about participation in events and activities relating to newsletters is collected when the alumnum signs up to events and when newsletters are sent.

10. Recipients of the personal data

Personal data is not disclosed without the alumnum’s consent.

11. Transfer of personal data outside the EU and the EEA and the basis for the transfer

Personal data is not transferred outside the EU or the EEA without the alumnum’s consent.

12. Principles for the protection of personal data

Material in electronic format is stored in IT systems and on computers protected from unauthorized use with security measures including firewalls and passwords. The systems have different user levels, and users are granted access to the data only to the extent the user’s work tasks require.

Material in paper format is stored in locked rooms with limited access and access control.

13. Automated decision-making

Automated decisions and profiling are not made based on personal data within the register.

14. The data subject’s rights

Information about the data subject's rights can be found here.