Education services
Fintraffic Air Navigation Services Ltd training services
Introduction
Protecting your privacy and the transparency of the processing of your personal data are important to the Fintraffic Group. The purpose of this privacy statement is to inform you of the processing of your personal data in Avia College training services.
We process your personal data will in accordance with the EU General Data Protection Regulation (EU) 2016/679 and national data protection legislation.
2. Controller
Fintraffic Air Navigation Services Ltd business ID 2767840-1
Street address:
Lentäjäntie 1 B, 01530 Vantaa
Postal address:
PO Box 157, 01531 Vantaa
Switchboard:
+358 (0)20 4284 000
Controller's representative:
Training assistant Tommi Sundqvist
Email: ans@fintraffic.fi
Telephone +358 20 4284 000
Group Data Protection Officer:
Email: privacy(at)fintraffic.fi
Telephone: +358 29 450 7000
3. Categories of data subjects and personal data we process
The system collects and stores information on the study attainments of Avia College students.
Categories of data subjects
- Avia College students
Personal data to we process
Personal data provided by the data subject to Air Navigation Services:
- Contact information
- Other identification and demographic data: last name, first name, gender and personal identity code.
- Training feedback
Personal data created/collected through the air navigation services:
- Student number
- Study attainments and certificates
- Information on the cessation of the right to study (not for postgraduate students)
- Information on disciplinary measures (not post-graduate students)
4. Data sources
The data in the register is obtained from the student, the results of the entrance examinations and from study attainments.
5. Purpose and legal basis for processing
The purpose of the processing the students' personal data is the implementation of basic and advanced vocational education and training and the organisation of student administration in educational services, which requires the processing of normal information on studies. The fulfilment of the statutory obligations of Air Navigation Services is the basis for the processing of the students' personal data. The activities of Avia College and the processing of personal data are governed by laws on vocational education and training and common European regulations on aviation training.
| LEGAL BASIS | PROCESSING PURSUANT TO THE BASIS |
| Compliance with a legal obligation to which the controller is subject |
|
6. Disclosure of data and data recipients
The controller uses instructions and written data processing agreements to ensure that each recipient complies with the regulations related to the processing of personal data.
Other companies belonging to the controller's group may process your personal data on the basis of the legitimate interest of the controller. However, your data is disclosed and processed within the group only to the extent necessary to implement the purposes described in this privacy statement.
Your data can be disclosed to the following parties:
Disclosure of personal data to processors
The processor of personal data may only process data in accordance with instructions issued by the controller.
- Visma InSchool Primus
Disclosure to third parties
- KOSKI service (Finnish National Agency for Education)
- training name, the start and end dates of the studies
Transfers of personal data outside the EU or EEA countries
Personal data will not be disclosed t0 countries outside the EU or EEA
7. Data storage
Personal data of students in education leading to an occupation are stored for five (5) years after the completion of the training.
In addition, copies of all students' certificates are kept permanently archived. Personal data will only be processed for the period and to the extent necessary for the purposes listed in this privacy statement. When the legal basis for processing no longer exists or personal data is no longer needed, the data will be properly destroyed.
8. Protection of personal data
The controller has access to appropriate technical and organisational personal data protection measures. With these measures, the controller ensures that the data subject’s personal data are not accidentally or unlawfully destroyed, lost or altered. The controller also ensures that the data are not disclosed without authorisation and cannot be accessed by anyone who does not have the right to process the data.
Data is stored in electronic systems protected by firewalls, passwords and other appropriate technical solutions. The right to access to the register is limited to certain persons employed by Fintraffic Navigation Services Ltd and other specified persons who need information in their tasks. Everyone who has access to the register data is bound by a duty of non-disclosure.
9. Data subject’s rights
Right to receive information on the processing of their own data, right of access to their data and right to request rectification of their data
You have the right to be informed by the controller of whether your personal data is being processed. If your personal data is being processed, you have the right to receive a copy of your personal data and information on the purposes of the processing and other matters related to the nature of the processing.
If your personal data is incomplete or otherwise incorrect, you can demand that the controller rectify your data.
Right to request the restriction of processing of one's own data
You may require that the controller restrict the processing of your personal data to only include its storage, for example when it is unclear whether your personal data is accurate or being lawfully processed.
When the legal basis for the processing of your data is the legitimate interest of the controller, the public interest or the exercise of public authority, you have the right to object to the processing of your data on the basis of your personal, special situation. However, if there is a significant and justified reason for processing that overrides your rights, the processing of your data can continue.
Exercise of the data subject's rights
As a rule, the actions the controller takes due to your request are free of charge for you. However, you must be able to identify yourself reliably for your request to be approved. Therefore, if necessary, the controller may require you to prove your identity at the time of your request.
The controller will respond to your request without undue delay and, as a rule, within one month of receiving the request.
10. Referral to the Data Protection Ombudsman
If you feel that your personal data has been processed in a manner that does not comply with data protection legislation, you may lodge a complaint with the supervisory authority. The Office of the Data Protection Ombudsman acts as the competent supervisory authority in Finland:
Street address: Lintulahdenkuja 4, 00530 Helsinki, Finland
Postal address: PO Box 800, 00531 Helsinki, Finland
Switchboard: +358 29 566 6700
Registry: +358 29 566 6768
Email (registry): tietosuoja(at)om.fi
However, the controller would appreciate if you could first notify the controller of the matter. For further information on the data subject's rights please see https://tietosuoja.fi/yksityishenkilot