Protection of privacy
EU General Data Protection Regulation (2016/679)
Articles 13 and 14
Creation date: 11.10.2018, updated:
12.10.2022
Purpose of processing personal data
DuuniExpo is a recruitment and networking fair organised by students. DuuniExpo is a learning environment for LAB UAS where students learn about event sales, marketing, financial management, teamwork, project management, safety, feedback and programme building for the event.
Students will manage the sales of the event independently, under the guidance of their teachers. For event sales, a register of potential companies participating in the fair will be collected, which will be used to contact companies and manage customer relations.
Data content of the register
The following information is collected from businesses:
- Company name, business ID, billing address and other information related to the customer relationship and the services ordered
- Company contact name, phone number and email address
- Date of contact by the project, company response to the enquiry
On what basis do we collect data?
The processing of personal data is based on the legitimate interest of the controller. The data is collected through the website duuniexpo.eu, for direct marketing by e-mail and telephone and for customer relationship management.
As the processing of personal data is based on legitimate interests, data subjects have the right to object to the processing of their data at any time. If the company / its contact person objects to the processing of their data, they can no longer be used for direct marketing.
Data sources
The data are mainly collected from public websites of companies. In addition, information on the companies that have booked a place at the fair in previous years and their contact persons will be collected. The register may also contain information obtained from the customer, e.g. through web forms, e-mail, telephone, social media, contracts, customer meetings and other situations where the customer provides information.
Transfer or disclosure of data
The DuuniExpo organisation is always run by the same students for one year at a time. After the end of the previous fairs, the student group changes and the information is transferred to the new students responsible for the DuuniExpo organisation.
Transfer or disclosure of data outside the EU or the European Economic Area
The file is stored on Microsoft OneDrive.
Microsoft is committed to complying with the EU Commission's standard contractual clauses to ensure an adequate level of protection for the data it processes: https://privacy.microsoft.com/fi-fi/privacystatement
Secure storage of collected data
The information in the register is not public. The data will be handled with care to ensure that the privacy of the individual is protected. Only students participating in the DuuniExpo project in a given year and their supervising teachers have access to the register. The data is protected by OneDrive access settings.
The information collected through the duuniexpo.eu website is stored in the website's WordPress content management system, which is not accessible to third parties.
Retention periods
The data will be kept for as long as LAB-ammattikorkeakoulu organises the DuuniExpo project.
Automated decision-making
There is no automatic decision-making when processing the data.
Rights of the data subject
The data subject has the right to withdraw his or her consent where the processing of personal data is based on consent. The data subject has the right to lodge a complaint with the Office of the Data Protection Ombudsman if the data subject considers that the processing of personal data concerning him or her infringes the applicable data protection legislation.
The data subject has the following rights under the EU General Data Protection Regulation:
a) The data subject's right to check his/her personal data.
b) The data subject's right to rectify his/her data.
c) The data subject's right to have his/her data erased.
d) The data subject's right to restrict his/her data.
e) The data subject's right to transfer his/her data to another controller.
Requests should be sent in writing by e-mail to the controller. The controller may, if necessary, ask the applicant to prove his or her identity. The controller will reply to the customer within the time limit set by the EU General Data Protection Regulation (as a general rule, within one month).
Project information
LAB-ammattikorkeakoulu, DuuniExpo project
Controller
LAB-ammattikorkeakoulu Oy
Mukkulankatu 19, 15210 Lahti
Business ID: 2630644-6
Contact details
Lecturer Tatu Saarinen
LAB-ammattikorkeakoulu, Mukkulankatu 19, 15210 Lahti
Phone number: 044 708 1832 E-mail address: tatu.saarinen@lab.fi
LAB-ammattikorkeakoulu Oy's Data Protection Officer
Lawyer Anne Himanka
Lappeenranta University of Technology, Skinnarilankatu 34, 53850 Lappeenranta
Phone number: 050 564 4623 E-mail address: servicedesk@lab.fi