^{Privacy policy, EU 016/679
Prepared 23.10.2025
Updated 23.10.2025}

Name of the service	Implementation of projects
	Centria University of Applied Sciences Talonpojankatu 2, 67100 Kokkola, Tel. (06) 868 0200
Contact persons in matters related to the service	Anu Kamau anu.kamau@centria.fi Tel. +358 40 624 7952
Data Protection Officer	Centria University of Applied Sciences, Data Protection Officer, Talonpojankatu 2, 67100 Kokkola, Phone: +358 06 868 0200 Email: tietosuojavastaava@centria.fi
Purpose and Legal Basis for Processing Personal Data	The processing of personal data is necessary for the implementation of actions within the projects of Centria University of Applied Sciences Ltd’s HealthLab (hereafter referred to as HealthLab). Contact details and personal data of HealthLab’s partners are used for project collaboration, event organization, communication and information sharing, as well as for project reporting, documentation, and statistics. The legal basis for processing personal data is consent (the data subject has given consent to the processing of their personal data for one or more specific purposes) (Article 6(1)(a) of the TSA).
Legitimate Interest of the Controller	The legal basis for the processing is not legitimate interest. That is why this passage is not suitable.
Processed personal data and categories of personal data	Data subjects include individuals interested in HealthLab activities and projects, as well as those who wish to participate in project activities or events. Personal data is collected from data subjects via voluntary online surveys or questionnaires at events. Identification Information: Contact person’s name and email, organization name/unit. Event-Related Information: – Allergies and special dietary requirements (if food or drinks are served) – Location (if relevant for event implementation or reporting) – Preferences related to event arrangements (e.g., workshop selection), if relevant – Information needed to organize the event in an accessible and inclusive manner, if relevant Information on agreed project-related actions with the contact person (e.g., preferred timing for equipment trials and other relevant details)
Regular sources of information	The personal data has been obtained from the data subject themself.
Recipients or categories of recipients of the data and regular disclosures	The data controller is Anu Kamau, responsible for the Centria HealthLab research group. Personal data is processed by HealthLab project staff. No data is disclosed to third parties from the register. Personal data is processed in systems for which Centria University of Applied Sciences has a data processing agreement in accordance with Article 28. In such cases, data is transferred to the service provider. These systems include Microsoft O365 environment, Teams, Forms, Outlook, and Webropol. Mandatory disclosures required by law: Your personal data may be disclosed to competent authorities based on legal requirements.
Is the provision of personal data a statutory, contractual or contractual requirement, and is the data subject obliged to provide the personal data and the consequences of not providing the data	Not applicable to this legal basis.
Retention period of personal data	Personal data is retained until the joint action within the project has concluded, the event has been held, and any post-event materials have been delivered. Retention period: 2–18 months. Retention of materials possibly transferred to authorities is determined by the authority’s data protection principles.
Transfer of data outside the EU or EEA	As a rule, the personal data contained in the personal data register is not transferred outside the EU or EEA countries.
Principles of Data Protection	Personal data is protected by technical measures. Access rights are restricted to individuals whose job duties include processing the register data.
Automated Decision-Making and Profiling	Personal data is not used for automated decision-making or profiling.
Rights of the Data Subject	Your data protection rights depend on the legal basis for processing. You can find more information about your rights on the Centria Data Protection page. You have the right to lodge a complaint with the supervisory authority, which is the Data Protection Supervisor. You have the right to receive your own information free of charge. If a person requests more than one copy, the controller may charge a reasonable fee based on administrative costs (Article 15(3) of the EU General Data Protection Regulation)