PRIVACY NOTICE – University of Helsinki, Spanish-Finnish Seminar in Legal Theory

EU General Data Protection Regulation
Art. 12 to 14
Date: 27.4.2022

1. Controller for the processing of personal data
The organization responsible for the processing of personal data is the University of Helsinki
Contact information:
Visa Kurki University of Helsinki
P.O.Box 4
FI-00014 Helsingin yliopisto, Finland
Contact persons for the processing described in this notice is:
Visa Kurki,

2. Contact details for the Data Protection Officer
You can contact the Data Protection Officer by email:


3. Why do we process your personal data and what is the lawful basis for processing?
The necessary personal data is collected from the participants in order to organize the
Conference and to inform about the conference. We only collect
personal data for the necessary purposes for organizing the conference.

Personal data will only be processed for pre-defined purposes, which are as follows:
- Organizing the conference and taking special needs into account
- Reporting and informing about the conference
- Possible billing for a transaction
- Gathering event feedback
- Marketing of similar events in case you have wished to join in our project mailing list.
The legal basis for processing is:
Your consent that you can withdraw.

4. What personal data do we process?
Personal data is collected from you in the registration form of the conference.
We process the following data:
-Email address
-Information on special diets
In addition, Information you provide via email, phone, or an appointment may also be stored
if it affects on the arrangements of the conference and information about payments and
payment methods will be stored if participation is subject to a fee.

5. What are the sources for personal data?
Personal data is collected from the data subject via sign-up form of the conference.

6. For how long do we process and retain your personal data?
All personal data will be deleted when it is no longer needed for organizing or collecting
feedback from the conference, but no later than a year from the conference.
Notwithstanding the above, if you have signed up for our project mailing list, we will process
your contact information (name, email address) until your consent is withdrawn. The
accounting information is stored as regulated in the Accounting Act.

7. Who do we share your personal data with?
Organizers of the conference may process personal data in accordance with the
data protection legislation in force at the time.
According to your consent given in the sign-up form, your name and email address are
shared to the presenters and participants of the conference.

8. Filming in the conference
Taking photographs or filming is allowed in the conference and may be published University
of Helsinki website, on social media accounts or in other publications related to the
university. The material may not be used for commercial purposes.

9. Transfers of personal data to countries outside the EU/European Economic Area
No personal data will be transferred to recipients outside the European Economic Area.

10. What rights do you have?

The contact person in matters concerning the rights of the participant is the person
mentioned in section 1 of this notice.
Right to withdraw your consent
When the processing is based on your consent, you have the right to withdraw your
consent any time. The withdrawal of your consent does not affect the lawfulness of
processing based on consent before the withdrawal.
Right to access
You have the right to know whether we process your personal data and what data we
process about you. You have also the right to request for the access to that data.
Right to rectification
You have the right to request for the rectification of inaccurate personal data concerning
you. You also have the right to have incomplete personal data completed.
Right to erasure and right to be forgotten
You have the right to request for the erasure of your data from our systems. The data will
be erased in the following cases:
a) the personal data are no longer necessary in relation to the purposes for which they
were collected or otherwise processed
b) You withdraw your consent on which the processing was based and there is no other
legal ground for the processing
c) You object for the processing and there are no overriding legitimate grounds for the
d) The personal data have been unlawfully processed
e) The personal data have to be erased for compliance with a legal obligation in Union or
Member State law to which the controller is subject
You do not have the right to erasure, if the processing is necessary:
a) For compliance with a legal obligation which requires processing by law
b) For the performance of a task carried out in the public interest or in the exercise of
official authority
c) For archiving purposes in the public interest, scientific of historical research purposes or
statistical purposes if the erasure is likely to render impossible or seriously impair the
achievement of the objectives of that processing
d) For the establishment, exercise or defense of legal claims
Right to restriction of processing
You have the right to request for the restriction of processing. This means that we store the
data but do not process it in any other way.

You have this right when:

a) The accuracy of the personal data is contested by you. Then the processing will be
restricted until the accuracy of the data is verified.
b) The processing is unlawful and the data subject opposes the erasure of the personal data
and requests the restriction of their use instead
c) We no longer need the data for the purposes of the processing, but you need the data
for the establishment, exercise or defense of legal claims
d) You have objected to processing that is based on legitimate interest. Then the processing
will be restricted for the time it is verified whether the legitimate ground for the
controller override those of the data subject.
Right to lodge a complaint with a supervisory authority
You can always contact us if you have any questions or concerns about the processing of
your personal data. However, you have also the right to lodge a complaint with the Data
Protection Ombudsman’s Office if you think your personal data has been processed in
violation of applicable data protection laws.
Contact details:
Office of the Data Protection Ombudsman
Visiting address: Ratapihantie 9, 6. krs, 00520 Helsinki
Postal address: PL 800, 00521 Helsinki
Switchboard: 029 56 66700
E-mail: tietosuoja@om.f