Page History

CSC - Finnish IT Сentre for Science Ltd
P.O. Box 405 (Keilaranta 14)
FI-02101 Espoo
tel. 09 457 2821 (operator)
customerservice@eduuni.fi

Business ID: 0920632-0

www.csc.fi
eduuni.fi

(hereinafter referred to as "we" or "CSC")

CSC Service Desk
tel. 09 457 2821 (operator)
servicedesk@csc.fi

Data Protection Officer Marita PajulahtiOfficer
privacy@csc.fi

User register of Eduuni services

The basis for processing personal data is CSC's entitlement based on Eduuni and Tiimeri service production and user management.

The purpose of processing the personal data is to:

• produce and develop our products and services,
• fulfil our commitments and obligations from contracts or other sources and
• process our customer relationships.
  
  

The user register holds and processes the following personal data of registered persons:

• data subject's basic details, such as email*, name*, organisation*, unique identifier from user's sign in method*;
• Group memberships in Eduuni and Tiimeri services, which data subject is member of;
• Optional user profile information in Eduuni services such as phone number, address and job title. Data subject maintains optional user profile information him- or herself;
• information about the use of the services generated by technical systems, such as logs, online identifiers

The personal data marked with an asterisk is data that is required for establishing a contract relationship and/or a customer relationship. Without this necessary personal data, we are unable to provide products and/or services.

We acquire data primarily from the following sources

• Data provided by the data subject
• Data provided by the data subject's sign in method
• Data provided by users of Eduuni and Tiimeri services e.g. when users are invited to groups.
  
  

We hand over data to services that use Eduuni-ID as identity management. Personal data is handed over at the time of sign in, service implementation and changes. It can be data subject's basic details and group memberships information in Eduuni and Tiimeri services.

We do not transfer personal data outside of the EU/EEA.

The only persons authorised to use the systems containing personal data are those employees of our company who have the right to process customer data on the basis of the work they carry out. Each user has their own user ID and password for the systems. The data is collected into databases that are protected by firewalls, passwords and other technical measures. The databases and backups of these databases are located in locked facilities and only previously selected individuals have access to this data.

We store the personal data for as long as it is needed for the purposes for which it was acquired.

We regularly assess the need for storing data, taking into account the applicable legislation. In addition, we take reasonable measures to ensure that the personal data about registered persons stored in the register is not contradictory to the data processing purposes, out-of-date or inaccurate. Where such data is identified, it is either corrected or destroyed without delay.

Your personal data will be protected according to the Code of Conduct for Service Providers, a common standard for the research and higher education sector to protect your privacy.

As a data subject, you have the right to inspect the data about yourself that has been saved into the user register and to demand the correction of inaccurate data or its removal, provided that there is a legal justification for its removal.

You can correct yourself the personal data you have given or request for its removal. Contact your sign in method if you need to correct the data provided by your sign in method.

As a data subject, you have the right under the General Data Protection Regulation (as of 25.5.2018) to oppose the collection of your data or to request that it be restricted and to make a complaint about the processing of personal data to the supervisory authority.

All enquiries and requests regarding this privacy policy should be made in writing or in person to the contact person specified in section two (2).

According to Information Society Code (917/2014) cookies are used in Eduuni and Tiimeri services in such way that it do not violate your privacy.

Cookies are used in Eduuni and Tiimeri services for

• remembering the sign in method you have chosen and
• for managing your sign in information.

Preventing the use of cookies prevents you from signing in to Eduuni and Tiimeri services.

If we make changes to this policy, we will make these accessible by updating this privacy policy document. If the changes are significant, we may inform people about these changes in some other way, such as by email or by publishing a notification on our webpage. We recommend that you visit our webpage regularly and pay attention to any changes to this privacy policy.