Custom register (Jamk) – Privacy Statement

GDPR (2016/679)

Updated: 11.2.2019

1 Name of the register

Custom register of Jamk University of Applied Sciences (The customer management system)

2 Controller

Jamk University of Applied Sciences
P.O. Box 207
FI-40101 Jyväskylä, Finland
+358 20 743 8100

3 Contact person in matters concerning the register, contact information during office hours

Director in charge of the register: Director of Administration Mikko R. Salminen                                                                                                             

Responsible for the process and contact person: Marketing Manager Heli Toivola
firstname.surename[a]jamk.fi

4 Purpose of the processing of personal data

The purpose of maintaining the register is management of Jamk University of Applied Sciences customer and interest group relations as well as marketing and sale of education and service products.

5 Data contents of the register

The customer management system contains the following data

Compulsory information:

  • Name
  • Address
  • Home municipality
  • e-mail
  • Consents

Volunteer information:

  • Phone number
  • Nationality
  • Organisation
  • Title

Groups:

  • Potential customers; individuals and organisations
  • Customer and interest group organisations
  • Contact persons in the aforementioned organisations
  • Activities targeted at customers

6 Legal bases for processing personal data

The basis for the processing of personal data is the consent of the data subject. Consent can be revoked by contacting the administrator or via newsletter.

7 Regular information sources

Information is gathered from the person, other information systems or the third parties.

8 Regular information disclose and information transfer outside the EU or the European Economic Area

No outside parties have access to the information in this register.

Information is not regularly rendered to third parties. Data is not transmitted outside the EU or EEA, or international organizations.

9 Register protection principles

The register does not contain manually collected material.

Access to the system is limited at Jamk to specific persons and is determined by their working duties. The use of the system requires a user ID and a password.

All servers are located in a locked location and access is monitored. Servers are only allowed for administrators.

10 Retention period or criteria for determining

The information is stored for the duration of the customer relationship or until the data subject withdraws his or her consent.

11 Automatic decision-making/profiling

Automated profiling related to personal data is not conducted.

12 Rights of the Data Subject

Read more information about the Jamk’s Privacy Policy, Data Protection Officer and the rights of the data subject and their implementation.