WordPress web content management system's privacy statement
Articles 13 and 14 of the EU General Data Protection Regulation
Description of the personal data processing activities and the rights of the data subject/Privacy Notice
EU General Data Protection Regulation (2016/679)
Data Protection Act (2018/1050)
1. Controller
Seinäjoki University of Applied Sciences, SeAMK Library
Kampusranta 11, Frami F
FI-60320 Seinäjoki, Finland
+358 20 124 3000
seamk(at)seamk.fi
2. Controller’s representative
Johanna Säilä-Jokinen, Director of Administration, Seinäjoki University of Applied Sciences
johanna.saila-jokinen(at)seamk.fi
2a. Official responsible for the personal data file
Panu Savolainen, Planning Officer, Seinäjoki University of Applied Sciences
panu.savolainen(at)seamk.fi
2b. Contact persons in matters relating to the data file
Panu Savolainen, Planning Officer, Seinäjoki University of Applied Sciences
panu.savolainen(at)seamk.fi
2c. Contact details of the Data Protection Officer
Jarmo Jaskari, Data Protection Officer, Seinäjoki University of Applied Sciences
tel. +358 40 868 0680
tietosuojavastaava(at)seamk.fi
3. Name of the data file
SeAMK WordPress web content management system.
4. Purpose of processing personal data/data file use
The personal data are stored in the web content management system of the Seinäjoki University of Applied Sciences for the platform access rights and the identity cards displayed on the website. The www.seamk.fi website also includes a person search feature, to which information is stored on SeAMK’s full-time personnel.
5. Purpose of maintaining the data file
–
5a. Data content of the file
- First name
- Last name
- User ID
- Access role
- Email address
- Image
- Area of expertise (FI/EN)
- Title
- Telephone number
- Unit
5b. Information systems using the data file
–
6. Regular sources of data
The person’s basic data are retrieved from Active Directory and other data are maintained in WordPress.
7. Regular disclosure of data
No regular disclosure of data.
8. Transfer of data outside the EU or the EEA
Personal data may be transferred to and processed by service providers outside the European Economic Area (EEA). Any such transfers are carried out subject to appropriate safeguards in accordance with applicable data protection legislation.
Personal data may be processed outside the EU/EEA in accordance with Microsoft’s data processing arrangements.
Transfers of personal data are protected by safeguards required under European Union data protection legislation, including the European Commission’s Standard Contractual Clauses (SCCs).
9. Principles of data file protection
A. Manual material
–
B. Computer-processed data
Data maintenance is protected by an AD ID and password. The data stored in the system are used by a restricted group with access right in the data file.
The database is protected by the server’s username and password credentials.