Privacy notice for customer relations at the University of Jyväskylä

This privacy notice applies to the University of Jyväskylä’s customer relationships.
Published
15.4.2026

What should you know about the processing of your personal data? 

The University of Jyväskylä collects personal data about you to carry out its duties. You have certain rights to these data, such as the right to access your personal data and the right to be sure that the data are stored securely and only for the necessary time. Above all, you have the right to know the following:

  • what data we collect about you and why
  • where, and for how long we keep these data, and 
  • to whom we share these data

All these points are explained in this privacy notice. 

Picture of the main building from outside

How to find the information you are looking for?

We have made this privacy notice to be as comprehensible and easy to use as possible. For this reason, you can find the most important information summarised under each section. For more information, please follow the links in each section or contact the Data Protection Officer directly.
 

Why do we process your personal data? 

Your personal data is processed for the following purposes:

Communication and marketing

  • University communications and newsletters
  • Organising events and providing information about them
  • Marketing the University’s educational products, services, events, and current content
  • Personalisation and development of online services (e.g., cookie data)
  • Providing information about the Open University’s continuing education offerings
  • Production of marketing and communication materials (including photographs and recordings)

Managing stakeholder relationships

  • Maintaining contact with alumni (lifelong alumni relationship)
  • Maintaining contact with friends of the university (former employees, donors, graduates)
  • Fundraising campaigns
  • Public relations, collaboration, and meetings
  • Event management and payment processing, e.g., international conferences
  • Employer collaboration (internships, jobs, assignments, employer presentations)
  • Maintaining stakeholder lists (experts, project partners, partner organisations)
  • Commercial champions and angel investors
  • Voluntary EIR (Entrepreneur in Residence) collaboration

Surveys and feedback

  • Collecting feedback
  • Surveys on social interaction, training, and evaluation
  • Reports and research collaboration

Data security, prevention of misconduct, and system functionality

  • Processing of data generated from the use of services
  • Security measures
  • Investigation of potential misconduct

What rights do you have and how to exercise them? 

You have the following rights:

  • The right to access your personal data.
  • The right to rectification.
  • The right to erasure (right to be forgotten) in some cases.
  • The right to restriction of processing.
  • The right of notification so that the data controller (unit responsible for the register) further informs any third-party recipients of the data about your request for the rectification, erasure, or restriction of processing of your personal data.
  • The right to object to processing, e.g. for direct marketing.
  • The right to data portability, i.e. to have the data transferred from one system to another when processing is based on an agreement or your consent.
  • The right to be informed about any information security breaches that cause a major risk.
  • The right to lodge a complaint with a supervisory authority.
  • The right to withdraw your consent

You have the right to withdraw your consent for the processing of your personal data at any time. At the end of each of our newsletters, there is a link you can use to withdraw your consent. The withdrawal has no impact on processing measures taken before it.

You can exercise your rights by sending a request using the form available on the Registry Office website or by sending an informal request. 

Who can access your personal data?

University of Jyväskylä staff whose duties include the processing of this personal data.

In addition, the service providers we use have access to your personal data in their capacity as data processors. However, service providers generally do not actively process personal data, but they have access to it, for example, to perform maintenance tasks.

Who do we transfer your personal data to?

  • Service providers used by the university (event management systems, newsletter tools, website maintenance)
  • Liana Mailer newsletter tool (no transfers outside the EU/EEA)
  • Social media platforms (Facebook, Instagram, LinkedIn, TikTok, YouTube) — these are subject to the services’ own privacy policies
  • Event service providers (e.g., dietary information primarily without direct identifying information)
  • Participant lists are distributed to event participants (name and organisation) if the nature of the event requires it

The University of Jyväskylä uses partners for the processing of personal data in accordance with the purposes specified in this privacy notice, such as website maintenance and event organising.

In addition, the University of Jyväskylä may share photos and videos on social media services if there is a valid reason to do so. The processing of personal data contained in these materials is subject to the privacy policies of these services. See, for example, the following social media services:

On what basis do we process your personal data?

The processing of your personal data is based on legal grounds, agreements or your consent. If you wish to take a closer look at our legal grounds, such as the relevant legislation, you can find additional information in the menu below.

How to contact us?

For further information about the processing of your personal data, please feel free to contact our Data Protection Officer by email or phone (+358 40 805 3297).

You can also contact the unit concerned directly if you wish. Contact information of the responsible unit is given below.

To exercise your rights, such as withdrawing your consent for the disclosure of your personal data to certain third parties, please contact the Registry Office by email: