The General Data Protection Regulation requires that the person is informed when personal data is collected. However, it is not necessary to inform the person if this has previously been done. The person must be informed, if, for instance:

• Registrations are collected for an event, using tools such as Webropol
• Research material with personal data is collected

Information is provided by means of a data protection notice, which is linked to a data collection form. In addition, the main matters relating to the processing of personal data may be added to the form.

Data protection notices have been prepared centrally using common registers, and they are available at www.hamk.fi/tietosuojailmoitukset​ and https://www.hamk.fi/privacy-policy/?lang=en. If no applicable data protection notice is found, such a notice shall be made (and distributed, for example, through the public _ html folder). An empty template is available on the intranet:

• Template for research / RDI activities: Privacy policy template for research
• The template for other activities: Privacy notice template

The templates contain instructions between the <> characters. The instructions and templates may still be finalised when the interpretation of the legislation becomes more precise.

For more details on informing persons, see Articles 12, 13 and 14 of the General Data Protection Regulation.

The data protection for research activities is examined in more detail on the Data Protection in Research page.