Kuopio conservatory 10.3.2026

PRIVACY NOTICE

1. Data controller
   
   Kuopio conservatory
   
   
2. Contact person for register matters
   
   Tuija Vihreäpuu (Basic education and early age education in music and dance)
   opintosihteeri@kuopionkonservatorio.fi
   0447279200
   Piia Suhonen (Vocational Education and Training)
   opintosihteeri.ammatillinen@kuopionkonservatorio.fi
   0447279200
   
   
3. Data protection officer
   
   Klaus Sallavo
   tietosuoja@kuopionkonservatorio.fi
   0447279200
   
   
4. Data processor
   
   Mediamaisteri Oy
   P.O. Box 82 (Erkkilänkatu 11)
   33101 Tampere
   010 281 8000
   info@mediamaisteri.com
   
   
5. Name of the register
   
   User register of the learning management system
   
   
6. Purpose of processing personal data
   
   Personal data is processed for the purpose of providing and administering the Learning Management System (LMS) service, including enabling users to access and use the system for learning, training, and competence development.
   
   
7. Legal bases for processing (GDPR Article 6)
   
   
   • Contract (GDPR Article 6(1)(b))
     Processing of personal data is necessary for the performance of a contract in order for the data controller to provide the service (such as access to and use of the learning environment) to the data subject.
   
   
   
8. Categories of personal data
   
   The register contains users’ basic contact details such as name, email address, username, password, and profile image. In addition, users may store supplementary personal data in the system, such as their home address, telephone number, and personal interests.
   
   
9. Sources of personal data
   
   Personal data concerning the data subject is regularly obtained:
   
   • directly from the data subject when they become a customer, register as a user of the service, use the service, or otherwise establish a relevant relationship with the data controller
   • from third parties within the limits permitted by applicable legislation and for the purposes described in this privacy notice.
     
     
10. Recipients of personal data
    
    Personal data may be disclosed or transferred to the following categories of recipients:
    
    • Mediamaisteri Oy, which acts as the technical service provider and data processor of the service.
    • Other service providers acting on behalf of the data controller (to be specified by the customer where applicable).
    
    Visibility of data within the service:
    
    • A user’s name is visible to other users of the service.
    • Users may determine which additional profile information they make visible to other users.
    
    
    
11. Transfers of personal data outside the EU/EEA
    
    User data will be deleted 3 months after the user’s last login or the termination of the training relationship, unless longer retention is required by applicable legislation.
    
    
12. Retention period of personal data
    
    User data will be deleted 3 months after the user’s last login or the termination of the training relationship, unless longer retention is required by applicable legislation.
    
    
13. Principles of data protection
    
    Personal data is processed securely according to the following principles:
    
    • the information system is protected by user authentication, passwords, and firewalls
    • access to the register is restricted to designated personnel only
    • persons processing personal data are bound by confidentiality obligations
    • log data is monitored, and systems are protected against attacks using technical and organizational security measures
    
    
    
14. Automated decision-making and profiling
    
    The register does not involve automated decision-making or profiling as defined in Article 22 of the GDPR.
    
    
15. Rights of the data subject
    
    The data subject has the right to:
    
    • access their personal data
    • request the rectification of inaccurate data
    • request erasure of their data or restriction of processing
    • object to the processing of personal data
    • receive their personal data in a structured format and transfer it to another system (data portability)
    • withdraw consent at any time, where processing is based on consent
    • lodge a complaint with the supervisory authority
    
    Requests concerning personal data must be submitted in writing to the data controller.
    
    
16. Supervisory authority
    
    Office of the Data Protection Ombudsman
    
    P.O. Box 800
    FI-00531 Helsinki
    Finland
    
    Email: tietosuoja@om.fi
    Website: www.tietosuoja.fi