Legal Notice & Data Protection

 

DATA PROTECTION AND PROCESSING OF PERSONAL DATA IN UEF

Data protection is a fundamental right that safeguards the rights and freedoms of data subjects when personal data is processed. The purpose of data protection is to define when and on what conditions personal data can be processed.

 

The processing of personal data must always be based on law. The EU’s General Data Protection Regulation (2016/679, GDPR) becomes enforceable from 25 May 2018. The GDPR specifies and unifies the rules of personal data processing in the EU Member States. The requirements of the GDPR need to be observed in all processing of personal data: within processes, information systems and acquisitions.

 

The most important change introduced by the GDPR is accountability. In other words, it is not enough to merely comply with personal data legislation; we also need to be able to demonstrate this compliance through, for example, various documents.

 

For supervisory authorities, the GDPR gives more power, including the possibility to impose financial sanctions (fines) in case of negligence. For citizens, this means better informational self-determination.

Processing of personal data

Personal data refers to any information that can be traced, either directly or indirectly, to an identifiable person. For example, a person’s name, social security number, occupation, location data, email address, photograph, voice, IP address and even vehicle registration plate may constitute personal data which needs to be processed by taking the person’s privacy protection into consideration.

What changes with the GDPR?

The university is required to:

 

• process personal data only to the extent required by its activities
• carry out sufficient measures to comply with the GDPR (e.g. information security, access control, log files, data encryption, instructions, regulations, training, non-disclosure agreements) observe the requirements of the GDPR in both its current procedures and information systems, and in the planning of new ones
• make an assessment of personal data processing risks and, if necessary, carry out an impact assessment that charts potential risks posed by data processing on privacy, and measures that are necessary to minimise those risks
• uphold the rights of data subjects.

 

Data subjects have more and increasingly specific rights. Persons whose information is being processed are called data subjects.

 

Data subjects have the right, e.g., to:

 

• request information about whether and which of their information is being processed
• obtain this information in a transparent, easily understandable and accessible format
• demand the correction of their personal data
• be forgotten, i.e. be fully erased from the register (not applicable to statutory registers)
• object to their personal data being processed in certain situations.

 

To exercise his or her rights at the University of Eastern Finland, the data subject can make a request via the university's e-Services (staff and students), via a form available on the university’s website, or by contacting the university’s Data Protection Officer.

 

The University of Eastern Finland respects the privacy of people and of the personal data it processes. In its privacy policy, the university commits to ensuring the privacy and information security of the personal data it processes. The university complies with the EU’s General Data Protection Regulation, the Finnish legislation, and the regulations and guidelines issued by the authorities. The University of Eastern Finland makes information relating to the processing of personal data in its activities openly available.

 

At the University of Eastern Finland, personal data are processed within the following processes. Please refer to the list below to learn more about the processing of personal data.

 

• Case  management and decision-making
• Academic administration
• Academic administration in the Teacher Training School
• Human resources management
• User management
• Log file management
• Recruitment
• Stakeholder collaboration
• Video surveillance
• Use of electronic learning environments
• Financial administration
• Activities of the library
• Activities of the pharmacy
• Facilities maintenance
• UEF website maintenance
• Processing of external funding applications
• Scientific research

 

Photos: University of Vienna, unsplash.com, pixabay.com; Агзам Гайсин on Pixabay; Kuopion Saana

 

Contact information - University of Eastern Finland

 

    The switchboard number for all UEF campuses is +358 (0)294 45 1111

    Business ID of the University of Eastern Finland:  2285733-9

    E-mail for personnel: firstname.lastname(at)uef.fi

    The registry office e-mail: kirjaamo(at)uef.fi

 

Admissions

 

For Masters' Programmes: admissions(at)uef.fi

 

For Exchange Studies: international(at)uef.fi

 

University's addresses

 

Joensuu Campus

Yliopistokatu 2, FI-80100 Joensuu, Finland

P.O. Box 111, FI-80101 Joensuu, Finland

Fax: +358 13 318 039

 

Kuopio Campus

Yliopistonranta 1, FI-70210 Kuopio, Finland

P.O. Box 1627, FI-70211 Kuopio, Finland

Fax: +358 17 162 131

 

Kuopio University Hospital, clinics

P.O. Box 100, FI-70029 KYS, Finland

Switchboard: +358 17 173 311

firstname.lastname(at)kuh.fi

 

Invoicing addresses

 

The university receives e-Invoices by Itella Information Oy´s e-Invoice service. If the supplier is not able to send e-Invoices, they can send a paper invoice to the P.O. Box address below.

 

Invoicing address for electronic invoices:

 

Electronic invoicing address: 003722857339

EDI code: 003722857339

Operator: OpusCapita Solutions Oy

Operator code: E204503

 

Invoicing address for paper invoices:

 

University of Eastern Finland

P.O. Box 96404

FI‐01051 Laskut

FINLAND

 

The university VAT-number: FI22857339