Events, staff training and Academic sports sport courses at the University – Privacy notice

This privacy notice applies to all events, staff training and academic sports sport courses at the University of Jyväskylä.
Published
18.10.2023

What should you know about the processing of your personal data?

The University of Jyväskylä collects personal data about you to carry out its duties. You have rights to this data, such as the right to access the data and the right to be sure that it is stored securely and only for the necessary time. Above all, you have the right to know the following:

  • what information we collect about youand why,
  • for how long, and where we keep this informationand
  • to whom we share this information.

All of these points are explained in this privacy notice.

How to find the information you are looking for?

We have created this privacy notice to be as easy as possible to use and understand. That is why you will find the key points summarised under each section. If you are interested in knowing more, please follow the links in the sections or contact the data protection officer of the University of Jyväskylä.

Why we process your personal data? 

1. Staff training

We process personal data on staff training provided by the University so that we can administer information on training registrations and participants. This information is required to provide the training and to apply for statutory training compensation.

The staff training is mainly intended for persons in an employment relationship with the University of Jyväskylä. Other members of the university community, such as postgraduate students and grant researchers, can also take part in the training on a case-by-case basis.

2. Other events

Other events are represented by various academic celebrations and stakeholder events, some of which are organised as invited guest events and some as public events. The purpose of processing data related to the University's events and celebrations is to manage event registration and participant data for the appropriate event arrangements and in order to obtain participant feedback.

Events are organised in order to maintain and develop PR activities for the university's various stakeholders: students, staff, alumni, partners and supporters, potential partners and supporters, decision-makers, citizens, families, and school classes.

We also process your data for direct marketing. Read more below.

What data we process and how long? 

The time we store your personal data varies. To get more information about what personal data we collect and how long we keep certain information, check the sections below.

What rights you have and how to exercise them?

You have the following rights: 

  • Right to access your data.
  • Right to have any incorrect information corrected.
  • Right to have your data erased (right to be forgotten), in certain situations.
  • Right to restrict processing.
  • Right to have the responsible unit inform the party to which your data is disclosed of your data being corrected, erased, or the processing being restricted.
  • Right to object processing, e.g. direct marketing.
  • Right to have your data transferred from one system to another, when processing is based on an agreement or your consent.
  • Right to be notified of any information security breaches resulting in a high risk.
  • Right to file a complaint with the supervisory authority.
  • Right to withdraw consent to direct marketing
  • Right to withdraw consent

You can exercise your rights by sending a request to the university's Registry Office. You can use the form on the Registry Office's website or send your request informally. Keep in mind that withdrawing your consent doesn’t change the processing that happened before the withdrawal.

Who can access your personal data?

Personal data is processed by the University of Jyväskylä staff members who are responsible for the personnel, event or course arrangements in question. 

When the University of Jyväskylä uses the Kongressi system to collect personal data in connection with event registrations, the data is processed by Data Prisma Ltd. University of Jyväskylä may also use Webropol for data processing. If the training or event is held remotely in the Teams app, the processor of personal data will be Microsoft. If a training or event is held remotely in the Zoom app, it is supplied by CSC/Funet. The University of Jyväskylä has personal data processing agreements with the processors of personal data.

Also, the service providers we use can access your personal data in their role as data processors. However, these providers do not actively process your personal data, but they have access to it for maintenance reasons.

To whom we transfer your data?

Personal data may only be disclosed to specified third parties if this is required to ensure proper organisation of the event, e.g. money transactions, accommodation, catering and transport services.

Names and contact information of persons can be shared with the event participants for networking purposes.

Using the information on staff training participants as a basis, we submit the details of the participants and participant-specific training days to the Employment Fund as part of the application for the statutory training compensation. The information is supplied to the fund each year. Only the statistical data is submitted and no personal data is transferred.

No personal data is transferred outside the EU/EEA.

On what basis we process your personal data?

We process your personal data based on legal grounds, agreements, or your consent. If you want to dive deeper into our legal bases, such as the relevant legal provisions, you can find more information through the menu below. 

How to contact us?

If you want more information about the processing of your personal data, do not hesitate to contact our data protection officer via email or phone (+358 40 805 3297).

Below you find the contact information of the responsible unit. If you wish, you can directly contact the unit instead of the data protection officer.

If you want to exercise your rights (withdraw your consent for example) you can contact the Registry Office by email: