Register description
This register description complies with the Personal Data Act (523/1999).
Creation of register description
30.10.2017
Registrar
University of Oulu, P.O.Box 8000, FI-90014 University of Oulu , 0245895-5
Data Protection Officer contact information
Data Protection Officer University of Oulu, dpo@oulu.fi
Register name
University of Oulu webstore register description
Purpose of the processing of personal data
The register is used to maintain the customer register of the University of Oulu webstore as well as to manage and process orders. The data can be used for development activities and for statistical purposes.
In addition, for the people who have ordered an access card, the data in the register is used for the automatic management of the access rights that are related to the card.
Basis for maintaining the register
Customer relationship
Data contained in the register
The Register contains the following data:
Name
Address
Phone number
Student / personnel number
Country
Order information
Order tracking codes
The picture of the person who ordered the access card
Information systems that use the Register
No other information systems that use the data that is contained in the Register
Regular information sources
The webstore and the system related to it, as well as campaigns that are related to the marketing of the webstore. The information sources for the automatic management of the access rights related to the access card are the University's information systems.
Regular disclosure of information
The access card order information is disclosed to a company that prints the information of the person who placed the order on the physical access card. In other cases, no information is disclosed to third parties apart from the activities related to the technical management of the webstore and for the delivery of the service (e.g. the management of the server or webstore platform).
The information can be disclosed to the persons on the register for review. The information can be removed from the system upon request.
Disclosure of the information to parties outside the EU or the European Economic Area
No information is disclosed to parties who reside outside the EU or the EEA.
Register protection principles
The Register is not disclosed to outside parties apart from the activities that are related to technical management (e.g. the management of the server or webstore platform). The right of use to the Register is limited to the people who work with the University of Oulu webstore. In addition, the right of use to the Register for access card orders has been limited to the party that supplies the access cards. The Register is protected with a password.
Data subject rights
The rights of data subjects are specified in articles 15−22 of the EU Data Protection Regulation:
- inspection right to the data
- rectification and erasure of data
- data processing restrictions
- portability of the data
- right to object
The contact person in matters related to the rights of data subjects is the Data Protection Officer, whose contact information can be found in the beginning of this description.