Skip to content

Audio-visual materials

Register controller and contact information

Diaconia University of Applied Sciences, P.O. Box 12, 00511 Helsinki

Data protection officer’s e-mail:

What is the purpose of processing personal data?

The purpose of processing audio-visual materials is to document Diak’s operations and history and to carry out marketing communications.

What is the basis for processing the data?

Processing is based on consent and legitimate interest. The legitimate interest is documentation of Diak’s operations and history.

Whose personal data does the register contain?

The personal data register for audio-visual materials contains data from individuals participating in Diak events, Diak’s current and former employees, Diak’s current and former students, and Diak’s current and former senior management. The register also includes data from performers and event workers involved in Diak events.

Where was the data collected?

The data is collected directly from the data subjects themselves.

What personal data does the register contain?

The audio-visual materials personal data register contains photos, video recordings and audio recordings.

How long is personal data stored in the register?

Register data will be stored until consent is revoked. Some of the materials will be stored permanently for the purpose of documenting Diak’s own history.

How is the data protected?

Digital materials: Use of the data requires personal access rights, which are only granted to individuals whose job is connected to processing the data. Diak’s systems are protected using both administrative and technical means, including personal user IDs, limitations of access rights and IT measures.

Paper materials: Photography permits are collected on paper forms. They are stored in a locked space with access control. When the paper material is no longer needed, it is disposed of in a locked trash container (“data protection bin”).

Will the data be disclosed to external parties?

Diak may contract outside processors of personal data, who will process the personal data. An outside processor may be the IT system’s supplier, for instance. If necessary, personal data may be disclosed to an external event venue.

Is the data subject to automatic decision-making?

Systems using the register do not have automatic decision-making functions.

Will the data be transferred outside of the EU/EEA?

As a rule, the personal data contained in the register is not transferred outside the European Union or the European Economic Area or to international organisations. However, due to the international nature of the operations, Diak may use resources, applications and servers located outside the EU or EEA when providing the services. In these cases, Diak ensures that there is a legal basis for the transfer of data and that personal data is protected, for example by requiring standard contractual clauses approved by the EU Commission and compliance with appropriate technical and organizational security measures. In addition, where appropriate, a TIA assessment will be carried out in connection with such data transfer, as well as monitoring the overall level of data protection in known countries. In all cases, the data transfer is carried out in accordance with the General Data Protection Regulation and only to the extent strictly necessary.

What rights do I have?

You have the right to information on how and for what purpose your personal data will be processed. You can also request access to records of your personal data, and request that incorrect information be rectified.

You can also submit a request to delete your data or restrict its use. However, in some cases the data cannot be deleted or its use restricted, for example if the personal data is being processed to fulfil a legal obligation, complete a task in the public interest orexercise public authority vested in Diak.

In certain situations, you also have the right to transfer the personal data you have provided to us to another controller or to object to the processing of your personal data, i.e. to request that we do not process them at all. In addition, you may request that we do not make a decision on your part based solely on automated processing of personal data.

If you would like to know more about the processing of your data or exercise your rights, you can contact Diak’s Data Protection Officer ( or submit a request using the form found on Diak’s website

You also always have the right to lodge a complaint with a supervisory authority. If necessary, you can also contact the Data Protection Ombudsman, a government official who supervises the processing of personal data in Finland.

Contact information:
Office of the Data Protection Ombudsman
P.O. Box 800, 00531 Helsinki
Tel. +358 29 566 6700

General advice for individuals: Tel. +358 29 566 6777