Study psychologist's client register's privacy statement

Articles 13 and 14 of the EU General Data Protection Regulation

Data Protection Act (1050/2018)

Articles 13 and 14 of the Combined Data Subject Information Document (EU Data Protection Regulation 2016/679)

1. Controller

Seinäjoki University of Applied Sciences
Kampusranta 11, Frami F
FI-60320 Seinäjoki, Finland
tel. +358 20 124 3000
seamk(at)seamk.fi

2. Controller’s representative

Johanna Säilä-Jokinen, Director of Administration
tel. +358 40 570 8723
johanna.saila-jokinen(at)seamk.fi

2a. Official responsible for the personal data file

Anne-Mari Maunumaa, Study Psychologist
tel. +358 40 8300 370
anne-mari.maunumaa(at)seamk.fi

2b. Contact persons in matters relating to the data file

Anne-Mari Maunumaa, Study Psychologist
tel. +358 40 8300 370
anne-mari.maunumaa(at)seamk.fi

2c. Contact details of the Data Protection Officer

Jarmo Jaskari, Data Protection Officer, Seinäjoki University of Applied Sciences
tel. +358 40 868 0680
dpo(at)seamk.fi

3. Name of the data file

Client register of the Seinäjoki University of Applied Sciences’ Study Psychologist.

4. Purpose of processing personal data/data file use

This privacy statement describes how service of the Seinäjoki University of Applied Sciences’ Study Psychologist processes personal data of individual counselling clients. The employee responsible for the study psychology service at Seinäjoki University of Applied Sciences is a licensed health care professional who is bound by the Act on Health Care Professionals, the Act on the Status and Rights of Patients and the Decree of the Ministry of Social Affairs and Health on patient documents.

The main regulations:

  • EU General Data Protection Regulation (EU) 2016/679
  • General Data Protection Act (1050/2018)
  • Security Act (738/2002)
  • Law on Universities of Applied Sciences (932/2014)
  • Act on the Status and Rights of Patients 13§ (785/1992)
  • Health Care Act (1326/2010)
  • Act on the Electronic Processing of Social and Health Care Customer Data (159/2007)
  • Act on Health Care Professionals (559/1994)
  • Decree of the Ministry of Social Affairs and Health on medical records 30.3.2009/289

5. Purpose of maintaining the data file

Legal basis for processing personal data:

In accordance with Article 6(1)(a) of the EU General Data Protection Regulation, the data subject has given his or her consent to the processing of personal data.

Pursuant to Article 6(1)(c) of the EU GDPR, in order to comply with a legal obligation of the controller.

5a. Data content of the file

Personal data stored in the client register of the Seinäjoki University of Applied Sciences’ Study Psychologist is processed and collected for the purpose of providing the Study Psychologist service and managing the relationship with the Study Psychologist.

The following information about clients is collected in the client register:

Basic information:

  • First name
  • Last name
  • Date of birth
  • Personal identification number
  • Municipality of origin
  • Address
  • Degree programme and starting year
  • Date of entry
  • Reason for visit
  • Number of visits and description of the visit or issues addressed

In addition in the appointment system:

  • E-mail address
  • Telephone number

The Study Psychologist may also process any test results and assessment forms.

5b. Information systems using the data file

The processing of personal data is carried out using the university’s own secure information systems and software provided by Microsoft (Bookings). Microsoft Teams will be used for any remote meetings.

6. Regular sources of data

The information required for the register is collected from the individual. The Study Psychologist can obtain temporary access to the student information system if there is a need to check the client’s personal data.

7. Regular disclosure of data

The university’s Study Psychologist has access to the personal data stored in the university’s systems. As a general rule, personal data processed in the work of the Study Psychologist will not be disclosed.

8. Transfer of data outside the EU or the EEA

Data is not transferred outside the EU or the EEA.

9. Principles of data file protection

A. Manual material

Manual material is kept in a locked room and locked cupboards.

B. Computer-processed data

The electronically processed data is stored behind personal IDs on a secure and encrypted disk drive.