Text in Word - Data protection at Hanken
Hanken, established in 1909, is a triple-accredited business school with high ambitions and social responsibility. All activities at Hanken are characterised by the Nordic values of equality, openness, and integrity, and a commitment to high quality and continuous improvement.
We at Hanken value individuals' privacy and respect each individual's right to privacy and the protection of personal data. Personal data shall only be processed lawfully, fairly and in a transparent manner to protect each individual's fundamental rights and freedoms. We collect, process, and store only the minimum amount of personal data necessary and proportionate to the accomplishment of our specific purposes and work tasks in studies, scientific research, and administration. Personal data are kept up to date, rectified or erased without delay. Adequate and appropriate organisational and technical safeguard measures are implemented to minimise and eliminate the risk to the data subjects' rights and to prevent unauthorised access and usage at all units at Hanken. Hanken fulfils the data protection obligations and demonstrates compliance with the data protection legislation.
Hanken is committed to protecting the rights and freedoms of individuals in accordance with the General Data Protection Regulation of the European Union (GDPR, EU 2016/679) and any other applicable data protection laws. This Data Protection Policy sets forth the principles and obligations, roles and responsibilities, and implementation procedures that shall be followed by Hanken’s personnel (including administrative staff, teachers, and researchers), students, and other stakeholders and members of Hanken’s community, in order to ensure compliance with the data protection legislation.
Read the full text of Hanken’s Data Protection Policy.
Text in Word - Hanken’s Data Protection Policy
You as the data subjects have the right to know what personal data have been collected and stored concerning you and why and how they are processed. The privacy notices listed below (Please kindly help edit them) describe the purposes and means of the processing of your personal data pertaining to the different processing purposes at Hanken.
Data subjects' rights are further elaborated down this page. Hanken’s Data Protection Policy and implementation instructions set proper data protection practices in place, ensure the appropriate processing of personal data, and protect individuals’ privacy and rights in compliance with the data protection legislation.
For requests and questions about data protection and the processing of your personal data, contact information is available in the relevant data protection notice. Hanken’s Data protection officer (DPO) can be reached at dpo@hanken.fi.
Privacy notices:
- Studies and admissions
Studies and student admissions
- Library services
Research information system and repository
- IT services
IT services and system maintenance
- Marketing and communication
- HR services
Recruitment and job applicants
- Research services
Grant applicants and recipients
- International affairs and corporate connections
Alumni, donors, and partners collaboration
- Individuals participating in studies and research projects are separately informed of personal data processing by the students and researchers:
Privacy notices – Students’ studies and thesis-writing
Privacy notices – Research projects
According to the General Data Protection Regulation of the European Union (GDPR, 2016/679), you as the data subject have the following rights. Below you also find information on how you can exercise these rights at Hanken.
Right to obtain information on the processing of your personal data
You have the right to be informed of whether your personal data are being processed, what data are processed, and why and how they are processed at Hanken. You have the right to receive adequate, transparent information on the processing of your personal data and how you can exercise your rights. Hanken shall take appropriate measures to provide you all the mandated information relating to the processing in a concise, transparent, intelligible and easily accessible form, using clear and plain language. The information shall be provided to you in writing, by electronic means, or orally if requested by you. Hanken shall not refuse to act on your requests for exercising your rights described below unless we are unable to identify you as the data subject.
Right of access
You have the right to obtain the confirmation as to whether or not your personal data are being processed, and, when this is the case, the right to access to your personal data. You have the right to request a copy of your personal data undergoing processing free of charge. An administrative fee may be charged if a request is clearly unjustified or unreasonable.
Right to rectification
You have the right to the rectification of inaccurate personal data concerning you without undue delay. You also have the right to have incomplete personal data completed, for example, by providing the contact person a supplementary statement.
Right to erasure (“right to be forgotten”)
You have the right to the erasure of your personal data without undue delay in the following cases:
a) Your personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
b) You withdraw your consent on which the processing is based and there is no other legal basis for the processing.
c) You object to the processing and there are no overriding legitimate grounds for the processing.
d) Your personal data have been unlawfully processed.
e) Your personal data have to be erased for compliance with a legal obligation in Union or Member State law to which Hanken is subject.
You do not have the right to erasure if the processing is necessary:
a) for exercising the right of freedom of expression and information;
b) for compliance with a legal obligation which requires processing by Union or Member State law to which Hanken is subject.
c) for the performance of a task carried out in the public interest or in the exercise of official authority.
d) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes if the erasure is likely to render impossible or seriously impair the achievement of the objectives of that processing.
e) for the establishment, exercise or defence of legal claims.
If Hanken cannot erase your personal data for any of the above-mentioned reasons, Hanken will limit the processing of your personal data to only what is necessary to fulfil our obligations.
Right to restriction of processing
You have the right to the restriction of the processing of your personal data. This means that Hanken retains your information, but do not process it in any other way. You have this right in the following cases:
a) The accuracy of the personal data is contested by you. The processing will then be restricted until the accuracy of the data is verified.
b) The processing is unlawful, and you oppose the erasure of the personal data and request the restriction of their use instead.
c) Hanken no longer needs the data for the purposes of the processing, but the data are required by you for the establishment, exercise or defence of legal claims.
d) You have objected to the processing that is based on public interest or legitimate interests. The processing will then be restricted until it is verified that the lawful grounds of Hanken override those of you.
If your personal data have been transferred to other recipients or parties, Hanken will take all reasonable measures to inform these parties about your requests for rectification, erasure or restriction of processing.
Right to data portability
You have the right to receive the personal data which you have provided to Hanken, in a structured, commonly used and machine-readable format, and have the right to transmit those data to another controller. This applies when the processing is based on consent or a contract, the processing is carried out by automated means, and the rights and freedoms of other individuals are not adversely affected by the transfer. When it is technically feasible, you have the right to have the data transmitted directly to the other controller.
This right does not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority.
Right to object
You have the right to object to the processing of your personal data. Hanken shall then no longer process the data unless we demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of yours or for the establishment, exercise or defence of legal claims. Hanken can continue to process your personal data if the processing is necessary for the performance of a task carried out in the public interest.
Right not to be subject to automated decision-making
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This right does not apply when the decision is necessary for entering into, or performance of, a contract between you and Hanken, is authorised by Union or Member State law to which Hanken is subject, or is based on your explicit consent. Whenever necessary, Hanken shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, and respect and fulfil your right to obtain human intervention, to express your point of view and to contest the decision.
Right to be informed of a data breach
You have the right to be informed of a personal data breach which is likely to result in a high risk to your rights and freedoms, e.g., in the form of identity theft, payment fraud or other criminal activity. Hanken shall then communicate the personal data breach to you without undue delay and describe in clear and plain language the nature of the personal data breach and provide information on the names and contact details of Hanken’s Data protection officer (DPO) and the contact person, the likely consequences of the personal data breach, and the measures taken or proposed to be taken by Hanken to address the personal data breach, including, where appropriate, measures to mitigate the possible adverse effects.
Right to withdraw consent
When the only legal basis for the processing of your personal data is consent, you have the right to withdraw your consent at any time. Withdrawal of consent shall not affect the lawfulness of the processing carried out on the basis of the consent prior to its withdrawal.
Right to lodge a complaint
You have the right to lodge a complaint with a supervisory authority/Data protection authority (DPA) if you think your personal data have been processed in violation of any applicable data protection laws.
Contact information of the supervisory authority/Data protection authority (DPA) in Finland:
Office of the Data Protection Ombudsman
Visiting address: Lintulahdenkuja 4, 00530 Helsinki, Finland
Postal address: PO Box 800, 00531 Helsinki, Finland
Switchboard: tel. +358 29 566 6700
Registry: +358 29 566 6768
Email: tietosuoja@om.fi
https://tietosuoja.fi
More information on your rights, please see Rights of the data subject by the Office of the Data Protection Ombudsman.
If you have any questions concerning data protection and the processing of your personal data, please get in touch with the contact person specified in the privacy notice for you, or contact Hanken’s Data protection officer (DPO, dpo@hanken.fi).