Privacy notice: Marketing
Privacy notice: Marketing: joint informative document for data subjects (Articles 13 and 14 of the General Data Protection Regulation [2016/679]).
Purposes of processing personal data
Data subjects are communicated about the operations and activities of Häme University of Applied Sciences Ltd and Häme Vocational Institute Ltd (training, research, services, events or other similar matters) based on the consent provided by the data subjects and on the matters that interest them.
Legal basis for processing
The legal basis for processing personal data is consent.
Personal data content and retention periods of the register
|Data category name||Retention period|
|Name and contact details||To be retained until the person withdraws his/her consent, the contact details expire or the matter the person is interested in ceases (e.g. a project ends).|
|Matter of interest||To be retained until the person withdraws his/her consent, the contact details expire or the matter the person is interested in ceases (e.g. a project ends).|
|Employer information / role-related information||To be retained until the person withdraws his/her consent, the contact details expire or the matter the person is interested in ceases (e.g. a project ends).|
Persons who have requested further information on the operations or activities of Häme University of Applied Sciences Ltd or Häme Vocational Institute Ltd: training, research, services, events, or other similar matters.
Regular sources of data
Personal data is collected directly from data subjects based on their consent/approval.
Regular disclosures of data
No personal data is disclosed to third parties.
Principles of data protection of the register
A Manual material
Contact details collected in paper form are transferred as quickly as possible to a digital marketing register, and the papers are properly destroyed.
B Data processed through automated data processing
Data is stored in an information system. Users have personal user IDs. Access is granted only to those persons who are entitled to access and use the data in the system in order to perform their duties.
The lawful processing of personal data is ensured by categorisation of data and with operating methods that are in compliance with the data handling rules concerning data set.
No automated decision-making is performed on the recorded data.
Marketing can be targeted at IP addresses based on behaviour on websites or social media. IP addresses are no connected to individuals or their contact details.
Transfer of data outside the EU or EEA
Data is transferred outside the EU or EEA.
- The contact details and matters of interest of persons who have requested information on international training possibilities may be transferred outside the EU or EEA to third parties assisting Häme University of Applied Sciences in applicant marketing if the data subject has given his or her explicit consent to the proposed transfer, after he or she has been informed that such transfers may pose data security risks to them due to no decision on an adequate level of data protection in place and the lack of appropriate security measures.