Office Skills Accelerator Web Course
A combined notice and statement regarding the processing of personal data.
This statement was produced: 5 May 2021
This statement was translated into English: 23 August 2022
Data controller
Itsellesi Oy
Postal address: Harjunlahdentie 61, 52510 Hietanen.
E-mail: [email protected].
Person responsible for the register at the data controller
CEO
Processing of personal data included in the Office Skills Accelerator web course
This notice/statement is compliant with the EU's General Data Protection Regulation (GDPR,679/2016, Articles 12 and 13), and it provides information for registered data subjects (natural persons). This notice is given to the data subject when their information is collected.
Contact person for the Office Skills Accelerator web course
CEO Jari Mustonen, [email protected].
Contact information of the data protection officer
Itsellesi Oy, CEO Jari Mustonen, [email protected].
Purpose and legal basis for the processing of personal data
The collected personal data is used for:
- managing the licences of the web course
- enabling the contact required for the web course
- learning guidance/evaluating coursework
The personal data accumulated into logs from completing the web course is used for:
- monitoring server and data communication capacity
- investigating technical problems and misuse situations
- monitoring the active participation of the students
Description of the groups of data subjects and personal data groups
With your consent, the following data is retrieved from your home organisation every time you sign in to the service:
- Name
- E-mail address
The software service of this web course may collect and process the following user data: (i) first and last name; (ii) e-mail, (iii) location when using the software, (iv) student number or other client reference, (v) other personal data provided by the end user, such as photos (when creating a user profile, for example), answers to tasks, comments in discussions, as well as other data and files added by the end user. The software service does not collect nor process data classified as belonging to special categories of personal data in the GDPR.
The groups of data subjects consist of the web course users, who are the students in the course.
In case the student requests their data to be delivered to Karelia University of Applied Sciences to receive credits from the course, the following data will be collected:
- Name
- E-mail address
- Personal identity code
- Postal address
This data will be used for registering the course completion, as well as delivering the transcript and the course certificate.
Purpose for collecting personal data
The data controller requires the personal data to perform tasks mentioned in part 6.
Data controller's lawful privileges
Attending to the service relationship on the staff's part.
Registry security principles
All those who process the data are bound by a confidentiality agreement. This agreement remains valid even after the end of the employment period. The systems can only be accessed by those who are required to process the data in order to perform their tasks.
Personal data recipients or recipient groups
The credits for this web course are registered by Karelia University of Applied Sciences Oy (business ID: 2454377-1) by request of the participant. Karelia University of Applied Sciences Oy processes the data as a service provider.
Transfer of data outside the EU or the EEA
The data is not transferred outside the EU or the EEA.
Personal data retention times
The provider of this web course does not retain personal data for longer than is compliant with the GDPR, and necessary for those purposes for which the personal data has been collected. The software service retains the data for up to 30 days after the client relationship has ended or after the end user's licence to the software service ends, to ensure the reliability of their service.
Rights of the data subject
The rights of the data subject are defined according to the purpose of data processing. The data subject has the right to access their own personal data, the right to to rectify the data, the right to erase the data, the right to restrict or object to the processing of the data, and the right to transfer the data from one system to another. The data subject has the right to withdraw their consent for data processing at any time. Additionally, the data subject has the right to make a complaint to the supervising authority. The contact person for matters related to the data subject's rights is the data protection officer, whose contact information can be found in part 5 of this statement.
Automated decision-making and profiling
The data is not used for automated decision-making nor profiling.