Information to the data subject in accordance with the EU General Data Protection Regulation (2016/679) articles 13-14

1. Controller

Arcada Foundation
Jan-Magnus Janssonin aukio 1
00560 Helsinki
Business ID: 0200099-5

2. The controller’s representative

Managing Director Klas Nyström
Tel. 0294 282 699
E-mail address in the format

3. Contact person for the register

Research Advisor Michael von Boguslawski
Tel. 0294 282 859
E-mail address in the format

4. Data protection officer

Data protection officer, legal counsel Anna Härmä
Tel. 0294 282 888
E-mail address

5. Purposes of processing personal data

Personal data is processed in connection with the handling of applications for funding and for reward grants received by the funds administered by the Arcada Foundation as well as in connection to reporting, evaluation and follow-ups of the granted funds.

6. Legal basis for processing personal data

The legal basis for processing personal data is Arcada Foundation’s legitimate interest as the recipient of the applicants’ funding applications and of suggestions on recipients of reward grants.

7. Categories of personal data and the duration of storage

The following categories of personal data may be processed for persons applying for funding:

  • Name, social security number, contact information and bank account information
  • Information about projects or other purposes for which the funding is applied, applied amount, information about other sources of funding, collaborating partners and attachments to the application
  • Information about granted and not granted funding
  • Reports on the use of the granted amount and attachments to the report.

The following categories of personal data may be processed for students who are suggested as recipients of reward grants:

  • Name, social security number, contact information and bank account information, degree programme, granted amount and motivation for the reward grant.
  • Information about granted and not granted reward grants

To enable evaluation of the funds’ activities and the impact and results of the funded projects as well as to enable cultural and scientific historical follow-ups, the data is stored permanently.

8. IT systems used when processing personal data

The external web-based tool eLomake is used for sending and processing applications.

9. Data sources

The data is provided by the applicant in connection to his or her application for funding, when he or she provides information necessary for the payment of funding and when he or she reports on the use of the granted funding.

For reward grants, information about suggested recipients is provided by personnel at Arcada University of Applied Sciences.

10. Recipients of the personal data

Data is disclosed to other companies within the corporate group in connection with payments of granted funding.

The recipient, the amount granted and the purpose of use can be published on the Arcada Foundation’s websites.

Data can be disclosed to authorities if required by law, regulation or a decision made by the authorities.

11. Transfer of personal data outside the EU and the EEA and the basis for the transfer

Personal data will not be transferred outside the EU or the EEA without the applicant’s consent.

12. Principles for the protection of personal data

Material in electronic format is stored in IT systems and on computers protected from unauthorized use with security measures including firewalls and passwords. The systems have different user levels, and users are granted access to the data only to the extent the user’s work tasks require.

Material in paper format is stored in locked rooms with limited access and access control.

13. Automated decision-making

Automated decisions and profiling are not made based on personal data within the register.

14. The data subject’s rights

Information about the data subject's rights can be found here.