Study psychologist's client register's privacy statement
Articles 13 and 14 of the EU General Data Protection Regulation
Data Protection Act (1050/2018)
Articles 13 and 14 of the Combined Data Subject Information Document (EU Data Protection Regulation 2016/679)
1. Controller
Seinäjoki University of Applied Sciences
Kampusranta 11, Frami F
FI-60320 Seinäjoki, Finland
tel. +358 20 124 3000
seamk(at)seamk.fi
2. Controller’s representative
Johanna Säilä-Jokinen, Director of Administration
tel. +358 40 570 8723
johanna.saila-jokinen(at)seamk.fi
2a. Official responsible for the personal data file
Anne-Mari Maunumaa, Study Psychologist
tel. +358 40 8300 370
anne-mari.maunumaa(at)seamk.fi
2b. Contact persons in matters relating to the data file
Anne-Mari Maunumaa, Study Psychologist
tel. +358 40 8300 370
anne-mari.maunumaa(at)seamk.fi
2c. Contact details of the Data Protection Officer
Jarmo Jaskari, Data Protection Officer, Seinäjoki University of Applied Sciences
tel. +358 40 868 0680
dpo(at)seamk.fi
3. Name of the data file
Client register of the Seinäjoki University of Applied Sciences’ Study Psychologist.
4. Purpose of processing personal data/data file use
This privacy statement describes how service of the Seinäjoki University of Applied Sciences’ Study Psychologist processes personal data of individual counselling clients. The employee responsible for the study psychology service at Seinäjoki University of Applied Sciences is a licensed health care professional who is bound by the Act on Health Care Professionals, the Act on the Status and Rights of Patients and the Decree of the Ministry of Social Affairs and Health on patient documents.
The main regulations:
- EU General Data Protection Regulation (EU) 2016/679
- General Data Protection Act (1050/2018)
- Security Act (738/2002)
- Law on Universities of Applied Sciences (932/2014)
- Act on the Status and Rights of Patients 13§ (785/1992)
- Health Care Act (1326/2010)
- Act on the Electronic Processing of Social and Health Care Customer Data (159/2007)
- Act on Health Care Professionals (559/1994)
- Decree of the Ministry of Social Affairs and Health on medical records 30.3.2009/289
5. Purpose of maintaining the data file
Legal basis for processing personal data:
In accordance with Article 6(1)(a) of the EU General Data Protection Regulation, the data subject has given his or her consent to the processing of personal data.
Pursuant to Article 6(1)(c) of the EU GDPR, in order to comply with a legal obligation of the controller.
5a. Data content of the file
Personal data stored in the client register of the Seinäjoki University of Applied Sciences’ Study Psychologist is processed and collected for the purpose of providing the Study Psychologist service and managing the relationship with the Study Psychologist.
The following information about clients is collected in the client register:
Basic information:
- First name
- Last name
- Date of birth
- Personal identification number
- Municipality of origin
- Address
- Degree programme and starting year
- Date of entry
- Reason for visit
- Number of visits and description of the visit or issues addressed
In addition in the appointment system:
- E-mail address
- Telephone number
The Study Psychologist may also process any test results and assessment forms.
Retention period is 7 years from the first record.
5b. Information systems using the data file
The processing of personal data is carried out using the university’s own secure information systems and software provided by Microsoft (Bookings). Microsoft Teams will be used for any remote meetings.
6. Regular sources of data
The information required for the register is collected from the individual. The Study Psychologist can obtain temporary access to the student information system if there is a need to check the client’s personal data.
7. Regular disclosure of data
The university’s Study Psychologist has access to the personal data stored in the university’s systems. As a general rule, personal data processed in the work of the Study Psychologist will not be disclosed.
8. Transfer of data outside the EU or the EEA
Data is not transferred outside the EU or the EEA.
9. Principles of data file protection
A. Manual material
Manual material is kept in a locked room and locked cupboards.
B. Computer-processed data
The electronically processed data is stored behind personal IDs on a secure and encrypted disk drive.