This is Outokoulu's register and data protection statement in accordance with the EU General Data Protection Regulation (GDPR).
Prepared on 15 February 2022. Last modified on June 24, 2024.
Registrar
Outokoulu
c/o Ritva Kari
Konduktöörinkatu 2 C 39
60100 Seinäjoki
Y-tunnnus 3102359-8
The contact person responsible for the register
Ritva Kari
ritu@outokoulu.fi
puh. 050 5949200
Registry name
Outokoulu's student and customer register
Legal basis and purpose of personal data processing
According to the EU General Data Protection Regulation, the legal basis for processing personal data is an agreement between the parties.
The purpose of processing personal data is managing customer relations, organizing teaching, invoicing and possible collection.
The information is not used for direct marketing.
Data content of the register and data retention period
Data content of the register and data retention period The information to be recorded in the register is: - the student's information such as name, contact information and social security number - billing information such as the payer's name and contact information - for business customers, name, contact information and social security number - teaching and degree information such as the start date of teaching, time and content of lessons – EAS and RTK certificates given to the student – contacts and feedback
In accordance with the Accounting Act, billing information and receipts are stored for six years after the end of the accounting period.
In accordance with the Driver's License Act, student records are kept for six years following the year of teaching.
Regular sources of information
The information to be recorded in the register is obtained from the data subjects themselves when ordering and using the services.
Contact information of companies and other organizations can also be collected from public sources such as websites.
Regular transfers of data and transfer of data outside the EU or EEA
For the theory training, the student's email address and name will be handed over to Ajokaista Oy to create a username.
In order to apply for a driver's license and reserve a degree, the student's personal and educational information is handed over to Ajovarma Oy based on the Driver's License Act.
Invoicing and payment information is handed over to the accounting firm.
Data from the register can be disclosed to competent authorities based on legislation, e.g. in connection with the supervision of the driving school.
In order to collect receivables, investigate possible violations or prepare, present or defend a legal claim, the data subject's personal data may be disclosed to a third party.
The data in the register is not transferred outside the EU or EEA.
Principles of registry protection
The information in the register is kept protected in several different ways, e.g. with firewall, lock and password. Access to data requires sufficient access rights.
The information in the register can only be accessed by specially named persons: Outokoulu's entrepreneur and data security officer.
The right of inspection and the right to demand correction of information
Every person in the register has the right to check their information stored in the register and demand the correction of any incorrect information or the completion of incomplete information. If a person wants to check the information stored about him or demand correction, the request must be sent to the controller. If necessary, the registrar may ask the requester to prove his identity. The controller responds to the customer within the time stipulated in the EU data protection regulation.
Other rights related to the processing of personal data
A person in the register has the right to request the removal of personal data about him from the register ("right to be forgotten"). The request should be sent to the controller. If necessary, the registrar may ask the requester to prove his identity. The controller responds to the customer within the time stipulated in the EU data protection regulation.
However, data is not deleted in those parts when it is necessary to keep it to comply with a legal obligation or to fulfill the contractual relationship between the data subject and the data controller or to prepare, present or defend a legal claim.
The registered person has the right to file a complaint with the authority if he considers that the data has been processed in violation of the applicable data protection legislation.
Cookies
Outokoulu's websites do not use cookies.