Data Protection

The Student Union of the University of Eastern Finland (ISYY) has committed to protecting its members’ privacy, in accordance with the EU’s General Data Protection Regulation and other applicable legislation. ISYY’s right to process its members’ personal data is based on the statutory duty of the register’s controller (Universities Act 2009/558, section 46). In addition, ISYY processes personal data in order to provide various services. Authorisation to process personal data is based on the consent given by a data subject (EU’s General Data Protection Regulation, Article 6, paragraph 1, point a).

It is more specifically explained in ISYY’s Data Protection Records, how, where and on what grounds the personal data are processed. The data subject has the right to check from the controller, what information has been collected of them. The data subject may also demand the controller to restrict the processing of the data subject’s personal data, or claim for rectification or erasure of the personal data. Processing period of the forms concerning data protection is one month from the day the form has been received or it has arrived.

ISYY’s Data Protection Officer works as a specialist in data protection matters and as a link between ISYY and supervisory authorities. If you notice any deficiency or malpractice of data security or data protection, please contact the Data Protection Officer. Contact information of the Data Protection Officer can be found here.

Forms Concerning Data Protection (in Finnish)

Restriction and objection of processing personal data (pdf)
Rectification and erasure of personal data (pdf)
Inspection request of personal data (pdf)

Read More:

Tietosuoja.fi: Data Protection Ombudsman
Eur-lex.europa.eu: EU’s General Data Protection Regulation