Information to the data subject in accordance with the EU General Data Protection Regulation (2016/679) articles 13-14

1. Controller

Arcada University of Applied Sciences Ltd
Jan-Magnus Janssonin aukio 1
00560 Helsinki
Business ID: 2553871-2

2. The controller’s representative

Head of communication Hanna Donner
Tel. 0294 282 523
E-mail address in the format

3. Contact person for the register

External relations manager Mia Ingman
Tel. 0294 282 667
E-mail address in the format

4. Data protection officer

Data protection officer, legal counsel Anna Härmä
Tel. 0294 282 888
E-mail address

5. Purposes of processing personal data

Job Board is Arcada UAS’s electronic recruitment service, through which companies and organisations may advertise job listings and project assignments for Arcada students and alumni.

6. Legal basis for processing personal data

The processing of personal data is based on consent, which the company or organisation gives by implication when they register their information on Job Board.

7. Categories of personal data and the duration of storage

The only personal data processed in the register is data that the company or organisation has registered. The personal data being processed is the name, phone number and email address to the contact person at the company or organisation.

The personal data is stored in Job Board during the period the company or organisation collaborates with Arcada UAS and for the following five years.

8. IT systems used when processing personal data

Job Board – in-house IT system, works as Arcada UAS’s electronic recruitment service for

9. Data sources

All data on the company or organisation is given in connection to the registration on Job Board or when the company or organisation lists a job on the website.

10. Recipients of the personal data

Personal data is only disclosed to authorities when there is a legal basis for it. In other situations, no personal data is disclosed without the data subject’s consent.

11. Transfer of personal data outside the EU and the EEA and the basis for the transfer

Personal data is not transferred outside the EU or the EEA without the contact’s consent.

12. Principles for the protection of personal data

Material in electronic format is stored in IT systems and on computers protected from unauthorised use with security measures including firewalls and passwords. The systems have different user levels, and users are granted access to the data only to the extent the user’s work tasks require.

Material in paper format is stored in locked rooms with limited access and access control.

13. Automated decision-making

Automated decisions and profiling are not made based on personal data within the register.

14. The data subject's rights

Information about the data subject's rights can be found here.