Privacy policy

Aalto University Campus & Real Estate (ACRE) collects personal data about the users of the A Grid website. ACRE is committed to complying with the requirements of the data protection legislation when processing personal data.

The purpose of the processing of personal data

The purpose of the processing of your personal data is to make it possible to send membership applications as well as technical maintenance and development of A Grid websites, as well as the maintenance, analysis and development of the website contents.

What data do we collect?

The A Grid website collects data about its users that is specified as necessary according to the purposes explained in this privacy policy:

The data you give to ACRE

The website will request your name, telephone number and email address in connection with submitting a membership application. The collection of data is based on your consent.

Cookies

ACRE collects data about the users of the website with cookies, among other methods. A cookie is a small text file that is sent to the user’s browser. It usually contains an anonymous identification number and is not harmful to the device.

We archive the number of users, country of use, time of use, used browser and contents that visiting users have viewed, for instance. An individual user cannot be identified with this data.

Automatically collected data

The A Grid website automatically collects the users’ IP address information to an IP log.

How do we use the data we collect?

The website stores and archives data that is obtained via the application form and through cookies. Analysing the data occurs, for instance, via Google Analytics. For more information about Google Analytics, please visit http://www.google.com/analytics/. You can decline the collection of data by Google Analytics by downloading a browser extension form https://tools.google.com/dlpage/gaoptout.

In addition, the A Grid website articles can include embedded content (such as videos, photos, articles, etc.). Opening embedded content in a third-party website is comparable to the user visiting this third-party website by themselves.

These websites may collect data about you, use cookies, embed third party tracking cookies and monitor your interactions with the embedded content, including tracking your interactions if and when you are logged in to the website as a user. Terms and conditions set by the third party are applied to the services provided by the third party or applications provided by the third party in question that are found on the A Grid website.

Do we disclose your personal data?

We only transfer personal data inside the ACRE organisation and only to the extent to which it is necessary for technical maintenance and development, as well as the maintenance, analysis and development of the website contents.

ACRE will only disclose personal data to third parties in the following cases:

Service providers

We only disclose personal data to the extent third parties need access to personal information handled by us to provide services to ACRE for purposes that are specified in this privacy policy. This means, for instance, the GoogleAnalytics analysis tools provided by Google.

We have carried out appropriate procedures to ensure that your personal data is then handled only for the purposes specified in this privacy policy and in accordance with the existing legislation. The processing of your personal data will then be done by ACRE and for ACRE.

For legal reasons

ACRE may share your personal data with a third party if access to the data or their handling otherwise is necessary i) to meet applicable legislation and/or a court order; ii) to identify, prevent or handle a misuse, security risk or technical problem. ACRE will inform you of this kind of use of your personal data when possible.

International transfer of data

ACRE conducts services and process personal data utilizing operators and services within the EU or EEA to the best of our abilities. When using services outside of the EU or EEA area, ACRE commits to ensuring a sufficient level of data protection for personal data.

Data protection

Data is gathered into databases that are kept in locked and secured premises. Only persons named beforehand have access to this information.

Data storage

After submitting information via a form, the data is stored on the server and transferred automatically and via a secured connection to the email addresses of the A Grid team. The data is stored as long as it requires to process the request. After the request is processed, this data is manually removed.

The IP address log is stored on the server and is manually emptied every two years.

Rights of the data subject

You have the right to request for a rectification of or addition to incorrect, inaccurate, imperfect, outdated or irrelevant data by contacting us.

You can request us to erase your personal data from our systems. We will perform the erasure unless we have a legal basis not to do so. The data may not be erased from all back-up and other systems immediately.

You have the right to check the data collected from you that has been stored in our personal data file by contacting us.

The data subject has the right to ask the office of the Data Protection Officer for an evaluation of the legality of operations to do with data security (tietosuoja (at) om.fi).

Updating the privacy policy

ACRE may update this privacy policy. If ACRE makes changes to this privacy policy, we will always inform you of these changes on this page.

Who controls the register and whom can I contact?

The controller is:
Aalto-yliopistokiinteistöt Oy
Post Box 12600
00076 AALTO
Switchboard: (09) 439 0060
Email: info-acre (at) aalto.fi

The person in charge of register issues will answer questions and feedback on this register as soon as possible.