University of Oulu Kerttu Saalasti Institute’s Privacy Notice concerning information on the minunpolkuni.fi website: 

This Privacy Notice applies to the minunpolkuni.fi website and the information collected and processed about its visitors. 

Data controller: 

University of Oulu
Kerttu Saalasti Institute
90014 UNIVERSITY OF OULU

Unit supervising the processing operations: 

Kerttu Saalasti Institute, University of Oulu

Communications specialist Minna Kilpeläinen, email: minna.kilpelainen(at)oulu.fi.

University Data Protection Officer: dpo(at)oulu.fi

For what purpose is your personal data used?

The purpose of processing your personal data is the technical and content-related maintenance and development of the minunpolkuni.fi website of the University of Oulu Kerttu Saalasti Institute (later OY KSI) and the development and targeting of the functionality of the website.

What is the legal basis for the processing?

In accordance with Article 6.1. c) of the EU Data Protection Regulation, the processing is necessary for compliance with a legal obligation of the controller.

The University of Oulu fulfils the statutory task assigned to it in § 2 of the Universities Act on the basis of public interest when it researches, teaches and engages in social interaction.
The data subject has given his or her consent in accordance with Art. 6 Art. 1. a) of the EU General Data Protection Regulation.

The user of the website gives his/her consent to the use of his/her data through a pop-up window informing about cookies.

How is your data processed?

Log records are generated when you use the service. The log files are used to ensure the security of the service, to improve the technical development of the service and to detect, prevent and solve problems.

The minunpolkuni.fi website of the University of Oulu Kerttu Saalasti Institute stores the data stored by cookies of third-party services. Cookies from third-party services are stored on the visitor’s device, which can be used to collect anonymous information about the visitor and his/her device and the use of our online service.

The Matomo tool (https://matomo.org/) is used to measure the usage data of the web service and to analyse the data collected. Matomo does not disclose data to third parties.

University of Oulu Kerttu Saalasti Institute´s minunpolkuni.fi website may contain a third-party community plug-in service, Youtube. The third-party plug-ins on the University of Oulu Kerttu Saalasti Institute’s minunpolkuni.fi website are uploaded from the services’ own servers. Minunpolkuni.fi website does not send customer information via social plug-ins.

Services provided by third parties or applications provided by third parties on the University of Oulu Kerttu Saalasti Institute’s mypolkuni.fi website are subject to the third party’s own terms of use and other conditions.

Information about and permission for cookies will be requested through a separate pop-up window.

Read more about our cookie policy: https://www.kyberturvallisuuskeskus.fi/en/our-activities/regulation-and-supervision/confidential-communications

What personal data do we process?

The University of Oulu Kerttu Saalasti Institute’s mypolkuni.fi website collects the following necessary information about its users for the purposes specified in this Privacy Policy. Data observed and derived from the use of the services:

• OY KSI collects information about the users of the web service, including through cookies. A cookie is a small text file sent to the user’s browser, usually containing an anonymous identification number, the cookie does not harm the terminal device.
• Statistics on the use of the website include the number of users, country of use, time of use, browser used and the content visited by the visitor. Statistics are also collected on whether the user is an internal or external user of OY KSI.
  Through Matomo, visitors’ movements from one page to another can be viewed through a visitor profile (based on ID), but no personal data (such as IP addresses, locations or names) is stored about them.
  
  

Who has access to your personal data? 

We transfer personal data only within the University of Oulu organisation and only to the extent necessary for the technical maintenance and development of the online service and for the maintenance, analysis, development and targeting of the communication and marketing of the content of the online service. Personal data is processed by the University of Oulu’s Communication, Marketing and Public Relations Unit, the communication officers of the Kerttu Saalasti Institute of the University of Oulu and other units that maintain the content of the web service.
OY KSI will disclose personal data to third parties only to the extent that third parties need access to the personal data we process in order to provide services to the University of Oulu for the purposes specified in this Privacy Notice. The University may share anonymous information with third parties who assist the University in developing the online service and troubleshooting issues.

Is your personal data transferred outside the EU/EEA, and how is it protected?

Some of the services provided by third parties may be located in countries outside the European Economic Area.

OY KSI is not responsible if you access third party services via its website (Youtube).

Data retention period 

The data will be kept for the duration of the maintenance of the site, i.e. 5 years after the end of the VÄKEVÄ project (March 2023), after which the continuation of the maintenance of the site will be reviewed.

What rights do you have as a registered user? 

You have the following rights as a registered user:

• Right of access to data
• Right to correct any incorrect data.
• In certain circumstances, the right to have your data erased (“right to be forgotten”)
• In certain circumstances, the right to restriction of processing
• In certain circumstances, the right to object to processing
• In certain circumstances, the right to have data transferred from one system to another, where the processing is based on consent or a contract and is carried out automatically

Please note that the applicability and scope of your rights mentioned above will be determined on a case-by-case basis in accordance with the EU GDPR, depending on, the specific processing ground in question. You may not have the above rights in all cases.

How can you exercise your rights?

If you have any questions about your rights, you can contact the University’s Data Protection Officer or the contact person in the responsible unit.

Right to complain to the supervisory authority 

In addition to the rights mentioned above, you have the right to lodge a complaint about the processing of your personal data with the Office of the Data Protection Supervisor. The telephone number and opening hours of the Office of the Data Protection Ombudsman can be found on the website of the Office of the Data Protection Ombudsman (https://tietosuoja.fi/en/home).

General description of technical and organisational safeguards 

The University, as the controller, uses appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing and against accidental or unlawful destruction or loss.