Privacy Policy
Privacy Policy
Peppi services for planning officers privacy statement
Peppi services for planning officers privacy statement

Peppi services for planning officers privacy statement

Articles 13 and 14 of the EU General Data Protection Regulation

Data Protection Act (1050/2018)

Articles 13 and 14 of the Combined Data Subject Information Document (EU Data Protection Regulation 2016/679)

1. Controller

Seinäjoki University of Applied Sciences
Kampusranta 11, Frami F
FI-60320 Seinäjoki, Finland
+358 20 124 3000
seamk(at)seamk.fi

2. Controller’s representative

Asmo Myllyaho, Head of Property and Information Management, Seinäjoki University of Applied Sciences
tel. +358 40 830 4262
asmo.myllyaho(at)seamk.fi

2a. Official responsible for the personal data file

Maria Hemminki, Planning Officer, Seinäjoki University of Applied Sciences
tel. +358 40 680 7016
maria.hemminki(at)seamk.fi

Katariina Lehto, Planning Officer, Seinäjoki University of Applied Sciences
tel. +358 40 830 0430
katariina.lehto(at)seamk.fi

2b. Contact persons in matters relating to the data file

Maria Hemminki, Planning Officer, Seinäjoki University of Applied Sciences
tel. +358 40 680 7016
maria.hemminki(at)seamk.fi

Katariina Lehto, Planning Officer, Seinäjoki University of Applied Sciences
tel. +358 40 830 0430
katariina.lehto(at)seamk.fi

2c. Contact details of the Data Protection Officer

Jarmo Jaskari, Data Protection Officer, Seinäjoki University of Applied Sciences
tel. +358 40 868 0680
jarmo.jaskari(at)seamk.fi

3. Name of the data file

Peppi services for planning officers.

4. Purpose of processing personal data/data file use

Peppi is a tool for planning and implementing teaching at SeAMK. The registered persons (SeAMK staff members) are involved in planning SeAMK’s teaching. Only the data concerning each person necessary for the planning and implementation of SeAMK’s activities are registered in the system.

5. Purpose of maintaining the data file

Planning and implementation of teaching at Seinäjoki University of Applied Sciences.

5a. Data content of the file

Study data

  • curricula
  • studies (modules and courses)
  • course implementations

Resource planning and reservation data

  • working time plans
  • timetables
  • teaching facilities

Basic data concerning staff members

  • username, Winha username
  • last name, preferred name
  • title
  • e-mail address
  • organisation unit

5b. Information systems using the data file

  • Timetable applications: publication of timetables
  • Education search: publication of implementations
  • Study guide: publication of curricula, studies and implementations
  • Moodle: basic data concerning implementations for the creation of workspaces
  • Workseed: basic data on studies for reporting on internships
  • Reportronic: staff working time plans for the basis of working time monitoring

6. Regular sources of data

  • Seinäjoki University of Applied Sciences’ centralised user administration system
  • WinhaPro

7. Regular disclosure of data

No regular disclosures of data.

8. Transfer of data outside the EU or the EEA

No data stored in the file is transferred outside the EU or the EEA.

9. Principles of data file protection

Data in the file are processed ensuring that the staff’s privacy is not unduly compromised. The data in the file are stored in compliance with the requirements in sections 6e, 6b and 6c of Act 484/2013.

A.      Manual material

Manual material is stored and protected ensuring that third parties have no access to it and that it cannot be accidentally destroyed, modified, disclosed, transmitted or otherwise processed unlawfully.

Documents containing personal data are destroyed as data protection waste.

B.      Computer-processed data

Peppi is used across the Internet. The server hardware is maintained by the IT services of Seinäjoki University of Applied Sciences. The hardware is centralised to locked facilities with strict access control. The network and servers are appropriately protected.

User rights are restricted by user group. The visibility of data and right to update the system are determined by the access right roles of different user groups.

The data are only accessible to users who have been granted rights to the system. Access rights to the system depend on each person’s tasks. The staff are bound by an obligation of non-disclosure set out in the employment contract.