Privacy notice: Management of keys
Management of keys
Privacy notice: Management of keys: joint informative document for data subjects (Articles 13 and 14 of the General Data Protection Regulation [2016/679]).
Purposes of processing personal data
To enable accessing the premises of Häme University of Applied Sciences Ltd according to each person’s respective role.
Legal basis for processing
The basis for processing personal data is our legitimate interest (employment relationship, right to study, HAMK partnership) of the data controller.
Personal data content and retention periods of the register
|Data category name||Retention period|
|Name||5 years from returning the key|
|Department||5 years from returning the key|
|Company||5 years from returning the key|
|Unit||5 years from returning the key|
|Unique identifier for the key||5 years from returning the key|
|Access right class||5 years from returning the key|
|Signature of the person for receiving the keys||5 years from returning the key|
|Signature of the person for returning the keys||5 years from returning the key|
Those of the following groups who have confirmed that they have received keys:
- students of Häme University of Applied Sciences (HAMK) and Häme Vocational Institute (HAMI)
- personnel of HAMK and HAMI
collaboration partners to the extent they have requested access rights to the premises of Häme University of Applied Sciences Ltd.
Regular sources of data
Data is received from the data subjects themselves and from their supervisor.
Regular disclosures of data
No data is disclosed to third parties.
Principles of data protection of the register
A Manual material
At some HAMK campuses, key management information and key receipt forms are retained in paper form.
B Data processed through automated data processing
At some campuses, data is saved in information systems.
Access is granted only to those persons who are entitled to access and use the data in the system in order to perform their duties.
The lawful processing of personal data is ensured by categorisation of data and with operating methods that are in compliance with the data handling rules concerning data set.
No automated decision-making is performed on the recorded data.
Transfer of data outside the EU or EEA
No data is transferred outside the EU or EEA.