Privacy notice: Processing personal data in student wellbeing
Privacy notice: Data protection activities: joint informative document for data subjects (Articles 13 and 14 of the General Data Protection Regulation [2016/679]).
Purposes of processing personal data
The system records students’ visits to HAMK’s student wellbeing actors: Study psychologist, Student Welfare Officer and/or Special needs teacher. Recording ensures the legal protection of students.
The purpose of the processing of personal data is:
- planning and implementation of student wellbeing guidance
- promoting students’ ability to study and planning it
- reporting on the controller’s own operations and organising proactive support measures and developing the operations of wellbeing
Legal basis for processing
The processing of personal data in the register is based on the public interest and the law. Main legal instruments include the Finnish Universities of Applied Scienc-es Act 932/2014 and the Finnish Government Decree on Universities of Applied Sciences 1129/2014.
The university of applied sciences does not serve as a health care unit. Instead, HAMK’s wellbeing services (e.g., study psychologist, student welfare officer and special needs teacher) are student welfare services. The higher education institution processes student data in order to perform duties set for universities of applied sciences. The higher education institution must process student personal data in order to enable for the students to study, get guidance, complete studies and/or study for a degree.
Personal data content and retention periods of the register
Data category name | Retention period |
First name, last name | 12 years |
Personal identity code | 12 years |
Contact details | 12 years |
Degree programme, teaching format, teaching group, teaching campus, level of education | 12 years |
Municipality of residence | 12 years |
Nationality | 12 years |
Reason for contact | 12 years |
Contact date | 12 years |
Contact summary posting | 12 years |
Electronic printouts and attachments related to the summary | 12 years |
Data subjects
Students who have used HAMK’s personal wellbeing services are data subjects.
Regular sources of data
Data sources include the student and the information in the study administration system.
Recipients of personal data
The system provider is CGI. Data transfer takes place at Frends.
Principles of data protection of the register
A Manual material
No manual material is created.
B Data processed through automated data processing
Data is stored in an information system. Users have personal user IDs. Access is granted only to those data controllers/persons who are entitled to access and use the data in the system in order to perform their duties.
The lawful processing of personal data is ensured with operating methods that are in compliance with the data handling rules concerning data set.
Automated decision-making
No automated decision-making is performed on the recorded data.
Transfer of data outside the EU or EEA
No data is transferred outside the EU or EEA.
Rights of the data subject
The EU General Data Protection Regulation (2016/679) provides the data subject with the following rights:
Data controller
Häme University of Applied Sciences Ltd
P.O. Box 230 (Visamäentie 35A), FI-13101 Hämeenlinna
13101 Hämeenlinna
Telephone: +358 3 6461, e-mail address: hamk@hamk.fi
Contact person of the register

Data protection officer

Häme University of Applied Sciences Ltd
data protection officer
P.O. Box 230
FI-13101 Hämeenlinna