Aalto University Campus & Real Estate (ACRE) collects personal data about the users of the website. ACRE is committed to complying with the requirements of the data protection legislation when processing personal data.
The purpose of the processing of personal data
The purpose of the processing of your personal data is to facilitate contacting, to send electronic notifications when subscribing to the email list and the technical maintenance and development of the ACRE website, as well as the maintenance, analysis and development of the website contents.
What data do we collect?
The data you give to ACRE
The website will ask for your name, telephone number and email address in connection with sending a contact request. In addition, your email address will be requested when you subscribe to the mailing list. The collection of data is based on your consent.
We collect data about emails in connection with joining the mailing list in accordance with the conditions of MailChimp. MailChimp’s terms and conditions can be found here: https://mailchimp.com/legal/privacy/.
ACRE collects data about the users of the website with cookies, among other methods. A cookie is a small text file that is sent to the user’s browser. It usually contains an anonymous identification number and is not harmful to the device.
We archive the number of users, country of use, time of use, used browser and contents that visiting users have viewed, for instance. An individual user cannot be identified with this data.
Automatically collected data
The ACRE website automatically collects the users’ IP address information to an IP log.
How do we use the data we collect?
The website stores and archives data that is obtained via the contact form, subscribing to the mailing list and through cookies. Analysing the data occurs, for instance, via Google Analytics. For more information about Google Analytics, please visit http://www.google.com/analytics/. You can decline the collection of data by Google Analytics by downloading a browser extension form https://tools.google.com/dlpage/gaoptout.
In addition, the ACRE website articles can include embedded content (such as videos, photos, articles, etc.). Opening embedded content in a third-party website is comparable to the user visiting this third-party website by themselves.
Do we disclose your personal data?
We only transfer personal data inside the ACRE organisation and only to the extent to which it is necessary for technical maintenance and development, as well as the maintenance, analysis and development of the website contents.
ACRE will only disclose personal data to third parties in the following cases:
Your personal data may be disclosed with your consent for instance in connection to a service provided by a third party, such as to MailChimp that provides email services, when you subscribe to a mailing list. You can withdraw your consent whenever you wish. In this case your personal data will no longer be collected.
For legal reasons
ACRE may share your personal data with a third party if access to the data or their handling otherwise is necessary i) to meet applicable legislation and/or a court order; ii) to identify, prevent or handle a misuse, security risk or technical problem. ACRE will inform you of this kind of use of your personal data when possible.
International transfer of data
ACRE conducts services and process personal data utilizing operators and services within the EU or EEA to the best of our abilities. When using services outside of the EU or EEA area, ACRE commits to ensuring a sufficient level of data protection for personal data.
Data is gathered into databases that are kept in locked and secured premises. Only persons named beforehand have access to this information.
After submitting information via a form, the data is transferred automatically and via a secured connection to the email address info-acre (at) aalto.fi, where the data is stored as long as it requires to process the request. After the request is processed, this data is manually removed.
The IP address log is stored on the server and is emptied every two years.
Rights of the data subject
You have the right to request for a rectification of or addition to incorrect, inaccurate, imperfect, outdated or irrelevant data by contacting us.
You can request us to erase your personal data from our systems. We will perform the erasure unless we have a legal basis not to do so. The data may not be erased from all back-up and other systems immediately.
You have the right to check the data collected from you that has been stored in our personal data file by contacting us.
The data subject has the right to ask the office of the Data Protection Officer for an evaluation of the legality of operations to do with data security (tietosuoja (at) om.fi).
Who controls the register and whom can I contact?
The controller is:
Post Box 12600
Switchboard: (09) 439 0060
Email: info-acre (at) aalto.fi
The person in charge of register issues will answer questions and feedback on this register as soon as possible.