Privacy Notice – General
This privacy notice provides you with the information required by data protection legislation regarding how we process your personal data. In data protection legislation, the term “data subject” refers to the person to whom the personal data relates. In this privacy notice, we use “you” to refer to the data subject and “we” to refer to the controller.
This privacy notice may be updated or amended when necessary. If a change is significant, we will inform you in the manner required by law.
This privacy notice entered into force on 7 January 2026. This document is also available as pdf.
1. Controller
The controller responsible for your personal data is:
Tampereen korkeakoulusäätiö sr. (Tampere University)
Business ID: 2844561-8
Kalevantie 4
33100 TAMPERE, Finland
The contact person for matters related to data processing is:
Ia Hyttinen / Coordinator
Email: ia.hyttinen@tuni.fi
Phone: +358 50 469 8435
The university general phone line is available at +358 (0) 294 52 11.
For general questions related to data protection, you may contact the Data Protection Officer at: dpo@tuni.fi.
2. Purpose of Processing
The processing results in the creation of a personal data register titled “SpacEconomy Friends.” Personal data is processed as part of collaboration and communication related to the SpaEconomy project. The personal data is used to form a mailing list.
The purpose of processing personal data is to ensure that the project’s interaction coordinator, as well as people working with the project’s communications and administration, can reach individuals interested in the project’s activities, such as results, events and collaboration opportunities.
3. Legal Basis for Processing
The legal basis for processing your personal data is:
☒ Consent (of the data subject)
☐ Performance of a contract
☐ Compliance with a legal obligation
☐ Protection of vital interests
☐ Task carried out in the public interest or exercise of official authority
☐ Legitimate interest of the controller or a third party
4. Sources of Personal Data and Categories of Data
Personal data may be collected either directly from you or from other sources, depending on the situation. Data is obtained from:
☒ You, as the data subject
☐ The following regular sources:
We process the following categories of personal data:
☒ General personal data: Name, organisation, phone number, and email address
☒ Other information: The data subject’s wishes regarding potential collaboration
Providing personal data is not a statutory or contractual requirement. Providing personal data is voluntary.
5. Transfers and Disclosures of Personal Data
In certain situations, your personal data may be transferred outside the EU/EEA to third countries or international organisations. When personal data is transferred, an adequate level of data protection is ensured through appropriate transfer mechanisms (e.g., standard contractual clauses) and technical safeguards.
☒ Your personal data is not transferred outside the EU/EEA.
☐ Your personal data is transferred outside the EU/EEA as follows: ____. The transfer mechanism and safeguards are as follows: ____.
☒ Your personal data is not regularly disclosed to other controllers.
☐ Your personal data may be disclosed to other controllers based on legislation as follows: ____.
Your personal data may also be processed by data processors working within the SpacEconomy project, with whom we have concluded appropriate data processing agreements.
6. Protection of Personal Data
Your personal data is protected using appropriate technical and organisational safeguards. Technically, we protect your data with measures such as antivirus protection, firewalls, and regular software updates. We also require a password, username, and, when necessary, two-factor authentication for login. Files are stored in Microsoft’s M365 cloud service within the EU/EEA, in accordance with Tampere University’s practices.
We also protect your data through organisational measures. Our staff is bound by confidentiality, and access to data is restricted internally. When necessary, we implement additional safeguards, such as separate storage locations.
Any manual materials are stored in locked premises.
7. Retention Period of Personal Data
Your personal data is retained for a period deemed necessary on a case-by-case basis. Retention periods are also affected by legal requirements. We follow our records management plan (TOS) and applicable legislation when retaining personal data.
Your personal data is retained as follows:
The duration of the SpacEconomy project is until 31 December 2032. Personal data will be retained for the duration of the project and for an additional two years thereafter to enable communication regarding potential follow-up projects.
8. Profiling and Automated Decision-Making
Your personal data is not used for profiling or automated decision-making.
9. Your Data Protection Rights and How to Exercise Them
Data protection legislation grants you certain rights as a data subject. These rights depend partly on the legal basis of processing. In some cases, your rights may be restricted, for example due to our legal obligations or if the processing is carried out for scientific research, statistical purposes, or archiving. If your rights are restricted, we will implement the safeguards required by law.
You have the following rights, which you may exercise by submitting a request:
Right of Access
You have the right to obtain information about the processing of your personal data and to access the personal data concerning you.
Right to Rectification
You have the right to request the correction of inaccurate or incomplete personal data. You also have the right to request the deletion of unnecessary personal data.
Right to Erasure
You have the right to request the deletion of your data (“right to be forgotten”).
Right to Restrict Processing
You may have the right to restrict the processing of your personal data in cases defined by law. This may apply, for example, if you believe your data is inaccurate, is being processed unlawfully, or you have objected to its processing.
Right to Object
In certain situations, you have the right to object to the processing of your personal data based on your personal circumstances.
Right to Data Portability
In certain situations, you have the right to request the transfer of personal data you have provided from one system to another.
Right Not to Be Subject to Automated Decision-Making
You have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or significantly affects you in a similar way. There are exceptions to this right.
Withdrawal of Consent
If the processing of your personal data is based on consent, you have the right to withdraw your consent at any time.
Right to Lodge a Complaint with a Supervisory Authority
You have the right to lodge a complaint with the supervisory authority (Office of the Data Protection) if you believe that the processing of your personal data violates data protection legislation.
Office of the Data Protection
Visiting address: Lintulahdenkuja 4, 00530 Helsinki
Postal address: P.O. Box 800, 00531 Helsinki
Switchboard: +358 29 56 66700
Fax: +358 29 56 66735
Email: tietosuoja@om.fi