fien
Contact us tel. +358 9 439 0060 | info-acre (at) aalto.fi

Search

fien

Data protection

Aalto-yliopistokiinteistöt Oy (Aalto University Campus & Real Estate) has committed to complying with the General Data Protection Regulation (GDPR) of the European Union. In addition to the privacy policy applied on our website, you will find the existing privacy notices that apply to our operations below.

Privacy notices

Privacy notice for register of contact details (pdf)

The website’s privacy policy

Aalto University Campus & Real Estate (ACRE) collects personal data about the users of the website. ACRE is committed to complying with the requirements of the data protection legislation when processing personal data.

The purpose of the processing of personal data

The purpose of the processing of your personal data is to facilitate contacting, to send electronic notifications when subscribing to the email list and the technical maintenance and development of the ACRE website, as well as the maintenance, analysis and development of the website contents.

What data do we collect?

The ACRE website collects data about its users that is specified as necessary according to the purposes explained in this privacy policy:

The data you give to ACRE

The website will ask for your name, telephone number and email address in connection with sending a contact request. In addition, your email address will be requested when you subscribe to the mailing list. The collection of data is based on your consent.

We collect data about emails in connection with joining the mailing list in accordance with the conditions of MailChimp. MailChimp’s terms and conditions can be found here: https://mailchimp.com/legal/privacy/.

Cookies

ACRE collects data about the users of the website with cookies, among other methods. A cookie is a small text file that is sent to the user’s browser. It usually contains an anonymous identification number and is not harmful to the device.

We archive the number of users, country of use, time of use, used browser and contents that visiting users have viewed, for instance. An individual user cannot be identified with this data.

Automatically collected data

The ACRE website automatically collects the users’ IP address information to an IP log.

How do we use the data we collect?

The website stores and archives data that is obtained via the contact form, subscribing to the mailing list and through cookies. Analysing the data occurs, for instance, via Google Analytics. For more information about Google Analytics, please visit  http://www.google.com/analytics/. You can decline the collection of data by Google Analytics by downloading a browser extension form  https://tools.google.com/dlpage/gaoptout.

In addition, the ACRE website articles can include embedded content (such as videos, photos, articles, etc.). Opening embedded content in a third-party website is comparable to the user visiting this third-party website by themselves.

These websites may collect data about you, use cookies, embed third party tracking cookies and monitor your interactions with the embedded content, including tracking your interactions if and when you are logged in to the website as a user. Terms and conditions set by the third party are applied to the services provided by the third party or applications provided by the third party in question that are found on the ACRE website.

Do we disclose your personal data?

We only transfer personal data inside the ACRE organisation and only to the extent to which it is necessary for technical maintenance and development, as well as the maintenance, analysis and development of the website contents.

ACRE will only disclose personal data to third parties in the following cases:

Your consent

Your personal data may be disclosed with your consent for instance in connection to a service provided by a third party, such as to MailChimp that provides email services, when you subscribe to a mailing list. You can withdraw your consent whenever you wish. In this case your personal data will no longer be collected.

Service providers

We only disclose personal data to the extent third parties need access to personal information handled by us to provide services to ACRE for purposes that are specified in this privacy policy. This means, for instance, the GoogleAnalytics analysis tools provided by Google.

We have carried out appropriate procedures to ensure that your personal data is then handled only for the purposes specified in this privacy policy and in accordance with the existing legislation. The processing of your personal data will then be done by ACRE and for ACRE.

For legal reasons

ACRE may share your personal data with a third party if access to the data or their handling otherwise is necessary i) to meet applicable legislation and/or a court order; ii) to identify, prevent or handle a misuse, security risk or technical problem. ACRE will inform you of this kind of use of your personal data when possible.

International transfer of data

ACRE conducts services and process personal data utilizing operators and services within the EU or EEA to the best of our abilities. When using services outside of the EU or EEA area, ACRE commits to ensuring a sufficient level of data protection for personal data.

Data protection

Data is gathered into databases that are kept in locked and secured premises. Only persons named beforehand have access to this information.

Data storage

After submitting information via a form, the data is transferred automatically and via a secured connection to the email address info-acre (at) aalto.fi, where the data is stored as long as it requires to process the request. After the request is processed, this data is manually removed.

The IP address log is stored on the server and is emptied every two years.

Rights of the data subject

You have the right to request for a rectification of or addition to incorrect, inaccurate, imperfect, outdated or irrelevant data by contacting us.

You can request us to erase your personal data from our systems. We will perform the erasure unless we have a legal basis not to do so. The data may not be erased from all back-up and other systems immediately.

You have the right to check the data collected from you that has been stored in our personal data file by contacting us.

The data subject has the right to ask the office of the Data Protection Officer for an evaluation of the legality of operations to do with data security (tietosuoja (at) om.fi).

Updating the privacy policy

ACRE may update this privacy policy. If ACRE makes changes to this privacy policy, we will always inform you of these changes on this page.

Who controls the register and whom can I contact?

The controller is:
Aalto-yliopistokiinteistöt Oy
Post Box 12600
00076 AALTO
Switchboard: (09) 439 0060
Email: info-acre (at) aalto.fi

The person in charge of register issues will answer questions and feedback on this register as soon as possible.