Data Protection Statement for the Event Management at the University of the Arts Helsinki

Published 4.2.2020 | Updated 13.8.2020

1. Entity and person in charge of processing personal data

Production Secretary Miisa Järvi
E-mail address: firstname.lastname@uniarts.fi, telephone: +358 40 710 4334

2. Contact persons for handling personal data

Head of AV Department Marko Myöhänen
E-mail address: firstname.lastname@uniarts.fi, telephone: +358 40 710 4349

3. Name of register

Production management

4. What are the purpose and the legal basis for processing personal data?

According to the Universities Act, the mission of the University of the Arts Helsinki is i.e. social interaction and artistic activities. As part of this social interaction and these artistic activities, various events are organized at the University. Managing event production requires processing the personal data of personnel taking part in the productions so that the producers and other personnel needed can be booked for each event to be produced. Additionally, data on the performers in each event are processed that are required i.e. for planning the event’s programme, for marketing the productions, for agreements to be concluded with the performers, and for paying their fees.

The processing of personal data is based on the execution of agreements made and, additionally, on the legitimate interest of the University as regards people performing and working in the events.

When processing personal data, we do not make use of automated decision-making and profiling as referred to in the Data Protection Regulation.

5. What data do we process?

In conjunction with events, we process the following personal data of event performers, equipment bookers, and other data subjects (freelancers and own personnel):

• basic data: name* and instrument*
• contact information: e-mail address* and telephone number*
• a photograph of the performer*
• information about the enterprise’s contact persons: name and contact information
• a sound and/or video recording of the event (does not apply on all events)

Providing the personal data marked with an asterisk is a prerequisite for producing events.

The performance and commission agreement also provides for payment of eventual fees. The processing of personal data in fee payment has been described separately in the data protection statement for persons not involved in a study or employment relationship with the University.

6. Where do we get information?

We obtain the personal data to process from the data subject in person.

7. To whom do we disclose and transfer data, and do we transfer data outside the EU or the EEA?

In processing, we use a third-party IT service provider with which we have concluded the agreements for processing personal data as required by the Data Protection Regulation. We do not disclose personal data outside the EU/EEA area.

Only event producers, the orchestra office, and the communications department of the University (season brochure) are entitled to use the production management system containing personal data.

8. How long will we keep data?

We keep event production data for a period of three years and older data are erased. We regularly evaluate the need to preserve data in keeping with the applicable legislation. In addition, we will take such reasonable steps as are necessary to ensure that no personal information about data subjects that is incompatible with the purposes of data processing, outdated, or erroneous is kept in the register. We will rectify or erase such information without delay.

12. With whom can you get in touch?

All questions on the processing of personal data as described in this data protection statement are to be asked by getting in touch with the contact person named in Point two who will, in case of need, forward the matter to the data protection officer. In case you feel that your rights are not respected, you may get directly in touch with the Uniarts Data Protection Officer.