Information to the data subject in accordance with the EU General Data Protection Regulation (2016/679) articles 13-14

1. Controller

Arcada University of Applied Sciences Ltd
Jan-Magnus Janssonin aukio 1
00560 Helsinki
Business ID: 2553871-2

2. The controller’s representative

Head of Communication Hanna Donner
Tel. 0207 699 523
E-mail address in the format firstname.surname@arcada.fi

3. Contact person for the register

Head of Communication Hanna Donner
Tel. 0207 699 523
E-mail address in the format firstname.surname@arcada.fi

4. Data protection officer

Data protection officer, legal counsel Anna Härmä
Tel. 0207 699 488
E-mail address dataprotection@arcada.fi

5. Purposes for processing personal data

The donor register contains information about donors who have made donations to Arcada. The personal data is used for internal control of donated funds, for reporting to the authorities, for publication purposes, for maintaining contact with the donors and for making visible the donors who have given their consent thereto.

If the donor has given his or her consent, he or she can receive newsletters and other information about the activities at Arcada.

6. Legal basis for processing personal data

The legal basis for processing personal data is Arcada’s legal obligation to keep records of received donations and Arcada’s legitimate interest to maintain contact with the donors.

7. Categories of personal data and the duration of storage

Individuals: Name, social security number, contact information and donated amount, for donations of 10 000 euro or above also a deed of gift.

Companies and organizations: Company name, contact person(s), contact information and donated amount, for donations of 10 000 euro or above also a deed of gift.

In addition, information about who the donor is, his or her connection to Arcada and notes on relevant information about the donation process collected before and after the donation was made may also be processed.

The data is stored for 10 years. For the purpose of historic monitoring, the donor’s name and the donated amount as well as the time period of the fundraising campaign is stored permanently.

8. IT systems used when processing personal data

Mira Network CRM – contact register

9. Data sources

The data is provided by the donor when he or she makes the donation.

10. Recipients of the personal data

The name of the donor may be published on Arcada’s internal and external web pages if the donor has given his or her consent. The amount of the donation is only published with the donor’s separate consent.

Data can be disclosed to authorities if required by law, regulation or a decision made by the authorities.

11. Transfer of personal data outside the EU and the EEA and the basis for the transfer

Personal data is not transferred outside the EU or the EEA without the donor’s consent.

12. Principles for the protection of personal data

Material in electronic format is stored in IT systems and on computers protected from unauthorized use with security measures including firewalls and passwords. The systems have different user levels, and users are granted access to the data only to the extent the user’s work tasks require.

Material in paper format is stored in locked rooms with limited access and access control.

13. Automated decision-making

Automated decisions and profiling are not made based on personal data within the register.

14. The data subject’s rights

Information about the data subject's rights can be found here.