Right to access and rectify personal data
You have the right to know whether the University of Helsinki is processing your personal data. Additionally, you have the right to know which personal details are being processed.
If there are inaccuracies in your personal data being processed, you have the right to request their rectification or completion.
Details on the personal data contained in various applications are available in the data protection statements of the applications (see section 12).
In many of our applications, you can view your personal data by logging in (e.g., WebOodi and Moodle). If you wish to know in even more detail which personal details are being processed, please contact email@example.com.
Right to withdraw consent
If the University of Helsinki is processing your personal data based on consent given by you, you have a right to withdraw any such consent. Please note that the processing of data related to studying is usually based on legislation or public interest, not on personal consent.
The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
Withdrawal of consent should be primarily submitted to the recipient of the consent.
Right to erasure
You have the right to request the erasure of your personal data on the following grounds:
- The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
- You withdraw the consent on which the processing is based, and there is no other legal grounds for the processing;
- You object to the processing (the right to object is described below), and there are no overriding legitimate grounds for the processing;
- The personal data have been unlawfully processed; or,
- The personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
The right to erasure does not apply when the processing of personal data is necessary for compliance with a legal obligation to which the University is subject or if the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the University. Therefore, this right does not, in principle, apply to the personal data files controlled by the University. The storage and erasure of data is conducted in compliance with the archiving plan of the University and the data storage periods required by legislation.
The right to erasure does not apply to situations when erasing the data prevents or seriously impairs the processing for scientific research purposes.
Right to restriction of processing
You have the right to restrict the processing of your personal data under the following conditions:
- You contest the accuracy of your personal data, in which case the processing will be restricted for a period enabling the University to verify the accuracy of the personal data.
- The processing is unlawful, and you oppose the erasure of the personal data and request the restriction of their use instead.
- The University no longer needs the personal data for the purposes of the processing, but you need them for the establishment, exercise or defence of legal claims.
- You have objected to processing (see details below), pending the verification whether the legitimate grounds of the controller override those of the data subject.
Right to data portability
You have the right to receive the personal data concerning you, which you have provided to the University, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the University, where the legal grounds for the processing are based on consent or a contract, and the processing is carried out by automated means.
When exercising your right to data portability, you have the right to have the personal data transmitted directly from one controller to another, where technically feasible.
This right does not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. Therefore, this right does not, in principle, apply to the personal data files controlled by the University.
Right to object to the processing of personal data
You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you when the legal basis for processing is carrying out a task in the public interest or in the exercise of official authority vested in the University. In such case, your data can only be processed if the controller demonstrates compelling legitimate grounds for the processing.
Right to lodge a complaint with a supervisory authority
You have the right to subject the legality of the University’s activities to a review by the Data Protection Ombudsman.
Office of the Data Protection Ombudsman
Street address: Ratapihantie 9, 6th floor, 00520 Helsinki
Postal address: PO Box 800, 00521 Helsinki
Tel. (switchboard): 029 56 66700
Fax: 029 56 66735