Data Protection Statement for the Users of Equipment Loaning Service of the University of the Arts Helsinki

Published 31.1.2020 | Updated 11.8.2020

1. Entity and person in charge of processing personal data

Production Secretary Miisa Järvi
E-mail address: firstname.lastname@uniarts.fi, telephone: +358 40 710 4334

2. Contact persons for handling personal data

Head of AV Department Marko Myöhänen
E-mail address: firstname.lastname@uniarts.fi, telephone: +358 40 710 4349

3. Name of register

Equipment loaning

4. What are the purpose and the legal basis for processing personal data?

As based on the Universities Act, the mission of the University of the Arts Helsinki includes social interaction and artistic activities. For studies, teaching, research, and artistic activities conducted or performed by students and staff, the University has a selection of loan equipment which can be booked and loaned for use. The equipment available for various user groups differs. We process students’ and staff members’ personal data in order to plan and to implement equipment-loaning activities, to follow and monitor use, and to establish statistics. The purpose of the equipment-loaning activities is to enable smooth progress in studies without the obligation for the student to acquire his or her own equipment and to support the artistic activities of both students and staff members.

In practice, personal data are processed as follows:

• various user groups are offered possibilities to loan and book equipment as agreed 
• a person’s booking and loaning information is maintained on file
• steps are taken to have overdue equipment returned
• the procedure for replacing broken and disappeared equipment is initiated

The processing of personal data is based on the legitimate interest of the University pursuant to the booking and loaning event of a piece of equipment.

5. What data do we process?

In conjunction with equipment loans and equipment booking, we use the following personal data:

• basic information: name and e-mail address
• contact information: telephone number
• the time for booking and loaning the equipment

6. Where do we get information?

We obtain the personal data on a person entitled to use equipment management from the user management system of the University. The user gives his or her telephone number if he or she so wishes.  

7. To whom do we disclose and transfer data, and do we transfer data outside the EU or the EEA?

In processing, we use a third-party IT service provider with which we have concluded the agreements for processing personal data as required by the Data Protection Regulation. We do not transfer personal data beyond the EU or outside the EEA.

Only certain University employees who log into the system with their University of the Arts IDs are authorized to use the equipment-loaning system containing personal data. The students entitled to use to the system log also into the service with their own user information at the University of the Arts Helsinki. Personal data are gathered in databases protected with firewalls, passwords, and other technical means. The databases and their backup copies are situated in locked spaces, and the data can only be accessed by certain pre-named persons.

8. How long will we keep data?

We keep personal data for as long as is necessary for the purpose for which they are used. The data are erased after the expiry of the access right.

We regularly evaluate the need to preserve data in keeping with the legislation. In addition, we will take such reasonable steps as are necessary to ensure that no personal information about data subjects that is incompatible with the purposes of data processing, outdated, or erroneous is kept in the register. We will rectify or erase such information without delay.

9. With whom can you get in touch?

All questions on the processing of personal data as described in this data protection statement are to be asked by getting in touch with the contact person named in Point two who will, in case of need, forward the matter to the Data Protection Officer. In case you feel that your rights are not respected, you may get directly in touch with the Uniarts Data Protection Officer.