Data protection

The Student Union of the University of Eastern Finland (ISYY) has committed to protect its members’ privacy, in accordance with the valid EU’s General Data Protection Regulation and other applicable legislation. ISYY’s right to process its members’ personal data is based on the statutory duty of the register’s controller (Universities Act 2009/558, section 46). In addition, ISYY processes personal data to provide various services. Authorisation to process personal data is based on the consent given by a data subject (EU’s General Data Protection Regulation, Article 6, paragraph 1, point a).

It is more specifically explained in ISYY’s Data Protection Records, how, where and on what grounds the personal data are processed. A data subject has the right to check from the controller, what information has been collected of the data subject. If wanting to, a data subject may also claim the controller to restrict the processing of the data subject’s personal data, or claim for rectification or erasure of the personal data. Processing period of the forms concerning data protection is one month from the day the form has been received or it has arrived.

ISYY’s Data Protection Officer operates as a specialist in data protection matters and as a link between ISYY and supervisory authorities. If you notice any deficiency or malpractice of data security or data protection, please contact the Data Protection Officer. Contact information of the Data Protection Officer can be found here.

Read more:

ISYY’s Data Protection Records
Forms concerning data protection
Data Protection Ombudsman
EU’s General Data Protection Regulation (2016/679)