Data protection

Data protection refers to the protection of a person’s privacy, for example, when processing personal data. The activities of the Lapland UAS require the collection and storage of personal data concerning members of staff and students. Data protection is a concern that must be taken into account in all of the Lapland UAS’s work.

Processing of personal data at the Lapland University of Applies Sciences

The Lapland UAS processes personal data in carrying out its mission under the Universities Act. It processes personal data of students, staff and members of stakeholder groups as well as research data, which may contain personal data. Data relating to alumni, marketing, clients and partners are processed in keeping with what is required or allowed by agreements, the consent of data subjects, legitimate interest or statutory duties. Personal data are processed to carry out work-related responsibilities, to enable students to pursue their studies, to keep user access up to date and to maintain information security

The Lapland UAS processes all personal data in accordance with the relevant legislation, regulations and agreements.

The Lapland UAS acts in the capacity of controller in the processing of personal data and is responsible for the processing of such data when a service that processes personal data has been purchased from a service provider or the data processing has been outsourced.

Rights of data subjects

Data subjects always have the right to request access to data concerning them from the controller. They also have the right to request rectification or erasure of such data or to restrict or object to its processing. The right to erase data does not extend to personal data which the Lapland UAS processes as part of a statutory duty, in the public interest or which it has an obligation to store for some other reason.

If data subjects wish to restrict or object to the processing of data concerning them, they are requested to contact the Data Protection Officer, whose contact details are given above.

Data subjects might have the right to transmit the data concerning them from one controller to another (data portability) where the conditions for doing so are met.

Data subjects have the right to lodge complaints with a supervisory authority. The contact information for the supervisory authority within the meaning of the Regulation, as well as instructions for drawing up a complaint, will be posted on this page when they become available.

Reguest to review personal data
Rectification and Erasure Request Form

Technical and organizational security measures

Personal data are protected as part of the ordinary information security procedures at the Lapland UAS. All of the data processing in the organization is based on user rights, which depend on a person’s role and position at the Lapland UAS. The validity of user rights is checked daily.

The ICT systems and services at the Lapland UAS are protected from unauthorised access in keeping with the best practices in the field. Their functionality has been ensured to the necessary degree and lifespan management is in order.

Cookies

A cookie is a small text file which your browser saves on your device (e.g. computer, tablet or smartphone). The file contains an anonymous, unique identifier that makes it possible for us to identify and count the different browsers that visit our website and to tell whether you visit our site a number of times using the same device and browser.
https://www.lapinamk.fi/en/Who-we-are/Communications/Cookie-Declaration

Secure email service

If you send personal data or other sensitive information to the Data Protection Officer by email, you should use the Lapland UAS’s secure email service, which can be found at:
https://securemail.lapinamk.fi

guide for securemail