PRIVACY STATEMENT 1st of October 2018

Regulation (EU) 679/2016 on General Data Protection as of 25th May 2018

Karelia University of Applied Sciences / SHAPE eService (See description at: shapingecotoursim.eu)

  1. Register Controller 

    Karelia Ammattikorkeakoulu Oy / Karelia University of Applied Sciences Ltd. Address: Tikkarinne 9, PO Box 256, FI-80101 Joensuu. Tel. +358 13 260 600. Email: info@karelia.fi

  1. Person in Charge of the Register 

    CEO / President of Karelia UAS

  1. Person in Charge of the Shape project 

    Research and Development Director Anne Ilvonen, tel. +358 50 311 6314, email: anne.ilvonen@karelia.fi, Tikkarinne 9, FI-80200 Joensuu

  1. Contact Person of the Shape eService 

    Principal Lecturer Lasse Okkonen, tel. +358 50 3423582, email: Lasse.okkonen@karelia.fi, Karjalankatu 3, FI-80200 Joensuu

  1. Person in Charge of Data Protection 

    Karelia Ammattikorkeakoulu Oy, Tietosuojavastaava, Tikkarinne 9, PO Box 256, FI-80101 Joensuu. Tel. +358 50 3497 097, email: tietosuoja@karelia.fi

  1. Purpose of processing personal data 

    According to the Universities of Applied Sciences Act, the mission of universities of applied sciences is to provide higher education for professional expert jobs based on the requirements of working life and its development and on the premises of academic research and academic and artistic education and to support the professional growth of students. They shall also carry out applied research, development and innovation activities and artistic activities that serve education in universities of applied sciences, promote industry, business and regional development and regenerate the industrial structure of the region. In carrying out their mission, universities of applied sciences shall promote lifelong learning. These are statutory tasks.The Shape eService (www.shapingecotourism.eu) is SHAPE -project service creating a transnational web-based service to support organisations, communities and businesses in the ‘Cool North’ in developing, implementing and managing ecotourism initiatives. The SHAPE eService is an open-access platform for stakeholders to transfer knowledge, share good practices and product/service development tools, and implement these in joint ecotourism projects based on identified natural and cultural assets and opportunities.

  1. Content of the Register 

    The Shape eService is voluntary for participants. The data collected includes user profiles that service users provide in the registration, including: name, organisation, email, country, indication of competences in ecotourism and free-word description text. The free-word description text is a description of competences, products are services in ecotourism. This is own profile description of each registered person or organisation representative. The use may voluntarily sign up for the project Newsletter, and thus provide the email address to the project emailing list.The data stored in the filing system are received through online forms and given by the subject themselves.

  1. Legal basis for processing personal data 

    The Shape eService is a voluntary service. When registering, the user accepts the processing of his/her personal data by giving his/her consent to the processing of data.

  1. Grounds for providing personal data 

    The information required for the users of the eService is needed for implementing the service (supporting partnerships, collaboration and networking).

  1. Legitimate advantages of the register controller 

    Implementation and development of the Shape eService.

  1. Security of processing personal data 

    Care is exercised in the processing of the data filing system. The data are only stored in electronic form in secure third-party online servers that comply with EU’s data protection legislation.The data controller ensures that only those people within the organisation who need to do so based on their duties have access to the data.

  1. Recipients or recipient groups of personal data 

    The recipients of the data are Shape project lead partner and partner organisations. Shape project consortium is listed at: http://shape.interreg-npa.eu/contact/

  1. Transfer of personal data outside the European Union or the European Economic Area 

    Personal data will not be transferred outside the EU or EEA.

  1. Retention of personal data 

    A person who has registered for the Shape eService may request for removal of his/her personal data by contacting the contact person for the Shape eService, whose contact details are in section 4 of this statement.

  1. Rights of the registered person 

    The rights of the registered person are determined according to the purpose of processing personal data. The registered person has the right to inspect the data concerning him/herself stored in the register. The request for the inspection has to be made to the controller of the register. The registered person has the right to request correction or removal of data, set limitations for the handling of his/her personal data, object the handling of the data, and s/he has the right to transfer data from one system to another. The registered person has the right to withdraw his/her consent to the handling of his/her personal data at any time. In addition, the registered person has the right to file a complaint with the supervisory authority. The contact person concerning the rights of the registered person is the person in charge of data protection, whose contact details are in section 5 of this statement.

  1. Automatic decision-making and profiling 

    Not in use.