Privacy Statement – Electronic Signature Service
Updated: 20 January 2026
1. Register Name
Electronic Signature Service
2. Data Controller
Jyväskylä University of Applied Sciences Oy
PL 207, 40101 Jyväskylä
+358 20 743 8100
3. Contact Person for Register-Related Matters
Responsible Director: Administrative Director Mikko R. Salminen
Content Administrator: Pasi Somero
Technical Administrator: Jussi Vihko
Email: firstname.lastname[a]jamk.fi
4. Purpose of Processing Personal Data
The service enables electronic signing of documents and sending them for review and signing.
5. Data Content of the Register
Only essential personal data necessary for case handling is stored:
Name
Phone number
Email address
Jamk/other organization
Job title
Legal Basis:
Processing is based on a legal obligation and important public interest under legislation and the legitimate interest of the controller or a third party.
7. Regular Data Sources
Jamk personnel data is fetched from the system handling the usernames and authentication.
External users provide their own data.
8. Regular Data Disclosures and Transfers Outside EU/EEA
Sarake Oy is the data processor maintaining the service and receives the data. Processing is outsourced under a commissioning agreement. The supplier processes personal data only when necessary (e.g., maintenance or troubleshooting) and only to the extent required. Processing occurs only within the EU.
No transfers outside the EU/EEA or to international organizations.
9. Principles of Register Protection
Jamk Sign is a Private/Hybrid Cloud SaaS service provided by Sarake Oy.
The service is delivered via the Internet and accessed through a web interface, mobile apps, and web service API.
Access is restricted to the customer’s environment; no public Internet access.
Jamk Sign is based on Nebula Oy’s Cloud 9 service, covering server and storage capacity, backups, and related services.
Servers are located in Lauttasaari and Pitäjänmäki.
Only authorized Jamk personnel handle personal data.
10. Data Retention Period
Staff and student data are processed during employment or studies.
Other personal data is processed as long as necessary.
Signed documents are transferred to Jamk’s case management system and retained according to the information management plan.
In Jamk Sign, documents are stored for 30 days, after which they are automatically deleted.
Signatories may save signed versions in their own systems.
10. Profiling and Automated Decision-Making
Data is not used for automated decisions, including profiling.
11. Data Subject Rights
More information about the Data Protection Officer and data subject rights is available in Jamk’s privacy statement and on the Data Subject Rights page.