EU’s General Data Protection Regulation (EU 2016/679), Articles 12–14
University of Helsinki; University of Eastern Finland; University of Jyväskylä; University of Lapland; University of Oulu; University of Turku; University of Vaasa, Åbo Akademi; Lappeenranta University of Technology; Hanken School of Economics; University of the Arts Helsinki; Aalto University Foundation operating as Aalto University; TTY Foundation operating as Tampere University of Technology (each university is a controller in terms of the personal data in its own sub-register).
FI-33014 Tampere University
Business ID: 2844561-8
- Contact person for issues related to the register
careerservices.tau [at] tuni.fi
- Data protection officer
The university’s data protection officer
dpo [at] tuni.fi
- Name of the register
Register for career monitoring surveys at Finland’s universities for graduates with a master’s degree or discontinued bachelor’s degree and for graduates with a doctor’s degree.
- Purpose of processing personal data and legal grounds for processing
The purpose of career monitoring surveys is to monitor the early career stages of university graduates and their situation in the labour market (five years for higher university degree graduates or discontinued bachelor’s degree programme graduates, for example, nursery school teachers and pharmacists, and three years for doctors) and utilise the monitoring information in research, highlighting the early career stages of people with an academic education, the development of higher education and student guidance, as well as for offering information for potential students, current students and graduates for planning their own studies and career. In the career monitoring survey, this information is produced and used without identification information about the participants. This information is university-specific, for cooperation between the universities, with cooperation partners and generally for research through the Finnish Social Science Data Archive (FSD).
Grounds for processing: Duties in accordance with public interest (evaluation and development of university education (sections 2 and 87 of the Universities Act (2009/558)) and production of related statistics). Decree of the Ministry of Education and Culture on Calculation Criteria for University Core Funding (119/2019)
- Data content of the register
The background information of the career monitoring survey’s target group (participants) will
- be recorded into the register:
university, year of graduation, year of starting studies, gender, age, nationality, native language, field of science, study subject, degree level, scope of the degree, year of selection, home municipality, date of graduation, study municipality, duration of being a registered student, duration of actual studies, grade and grade scale of thesis work, possible date of death, moving out of Finland, day of the move, home municipality, study subject and faculty.
- Identification information:
name, postal address and postal code, state, student identification code, survey ID, telephone number.
- Survey answers
With regard to those who have filled in the career monitoring survey, these sections will be filled in with the information they have given concerning their position in working life, factors related to the quality of employment and the satisfaction of graduates concerning their studies from the perspective of working life.
Information identifying the respondent (student number, name and contact information) and information about a possible date of death will only be used to send the survey and in order to link the above-mentioned background information.
- Regular data sources
The background and identification information of the group of respondents will be gathered in a centralised manner from the national VIRTA study information service and, in supplementary parts, from the student information systems of universities (study subject, faculty). Address data will be supplemented using the Population Information System, and the telephone number will be acquired from a separate telephone number supplier (Posti/Fonecta/other). Response data will be gathered from the answers of the participants. The participants have the opportunity to fill in a paper survey or an electronic online survey. Data from the paper surveys will be recorded in the electronic system as subcontracted by the controllers of sub-registers.
- Regular data transfers and recipient groups
The processing of the register’s personal data has been partly outsourced with a subcontract agreement:
☒ Yes; further information about outsourced processing:
Based on subcontracting by the controllers of sub-registers, the register is processed by TUPA, statistical research service of the University of Tampere, and CSC - IT Center for Science Ltd.
CSC - IT Center for Science Ltd selects the target group, enriches the contact information, creates the survey links and collects the online answers, as well as combines the material for reporting. CSC processes direct personal data during data collection and the survey data without the direct data when reporting the results. CSC discloses the personal data (contact information, background information and survey IDs) to TUPA so the survey and reminders can be sent and for analysis of the data.
TUPA, statistical research service of the University of Tampere, coordinates the implementation of career monitoring and processes personal data in order to send the survey and for analysing and reporting purposes. TUPA discloses university-specific data to each university, to Aarresaari, career service network of Finnish Universities and to CSC for national reporting of national survey data. Data can be disclosed to partners (such as professional associations) for research purposes, excluding any personal data from which data subjects can be directly identified.
In addition, data is also disclosed, without any identifiable personal data, to the Finnish Social Science Data Archive (FSD) for archiving and more detailed anonymisation for later research use. The data will be reported publicly so that no single individual can be identified from the results.
- Transfer of data outside the EU or EEA
Will registered data be transferred to a third country or an international organisation outside the EU or EAA?
☐ Yes, please specify:
- Register protection principles
A manual data
B electronically processed data
- Retention period for personal data or specification criteria for the retention period
Retention without identification information
Identification information enabling the identification of respondents is retained in the register only until data is combined and later destroyed after the data has been processed.
- TUPA will retain data from different years without any direct identification information for ten years in order to compile time series.
- The university will retain data from different years without any direct identification information in its sub-register for ten years in order to compile time series.
Retention with identification information
The university will also retain data with identification information in its sub-register for at most two years.
The data will be stored in the Finnish Social Science Data Archive (FSD) anonymously, which means that it cannot be linked to individual people.
- Information about the existence of automated decision-making or profiling and information about the logic of processing and its significance for data subjects
The registered data will be used for automated individual decisions, including profiling:
☐ Yes, please specify:
- Rights of data subjects
Under the EU’s General Data Protection regulation (EU 2016/679), data subjects have the right to view their data, have their data rectified or erased, have the processing of their data restricted, object to the processing of their personal data, as well as the to lodge a complaint with the supervisory authority.
- Right to view data (right of access to personal data)
- Data subjects have the right to know whether their personal data has been processed and what personal data concerning them has been recorded.
- Right to have data rectified
- Data subject have the right to claim that any erroneous, inaccurate or incomplete personal data be rectified or completed without undue delay. Furthermore, data subjects have the right to demand the erasure of any unnecessary personal data.
- Right to have data erased
- In irregular situations, data subjects have the right to have their personal data erased from the controller’s register (right to be forgotten).
- Right to restrict processing
- In certain situations, data subject have the right to request that the processing of their personal data be restricted until their data has been appropriately inspected and rectified or completed.
- Right to object
- Data subjects have the right, on grounds relating to their particular situation, to object to the processing of their personal data at any time.
Requests to exercise the rights of data subjects must be sent to the university to dpo [at] tuni.fi.
- Right to lodge a complaint with the supervisory authority
- Data subjects have the right to lodge a complaint with the supervisory authority of their permanent place of residence or employment, if they consider that the processing of personal data is in breach of the GDPR (EU 2016/679). In addition, data subjects have the right to use administrative means of change management and other legal protection.
Office of the Data Protection Ombudsman
Visiting address: Ratapihantie 9, 6th floor, 00520 Helsinki
Postal address: P.O. Box 800, 00521 Helsinki
Tel.: +358 29 56 66700
Fax: +358 29 56 66735
Email: tietosuoja [at] om.fi