• Skip to primary navigation
  • Skip to main content
  • Skip to footer
Digipedagogical guidelines

Digipedagogical guidelines

  • Suomi
MENUMENU
  • Planning
        • Planning and administration of teaching
          • Digipedagogical tips for everyday e-learning
          • Design quality for module implementation
          • Show all
        • Module implementation plan
          • Design quality for module implementation
          • Quality criteria for module implementations
          • Storyboard for module implementation
          • Blueprint for module implementation
          • Feedback and development
          • Show all
        • Planning and building Moodle workspace for module
          • Learning activity or assignment template
          • Show all
        • Planning online meeting
          • Logging in to Zoom
          • Zoom Online Meeting Service
          • Zoom LTI Pro Activity in Moodle
          • Show all
  • Teaching and guidance
        • Online teaching and studying
          • Digipedagogical tips for everyday e-learning
          • Log in to HAMK Services
          • Quality criteria for module implementations
          • Show all
        • Online meetings
          • Log in to HAMK Services
          • Zoom Online Meeting Service
          • Joining a Zoom meeting
          • Adding Zoom Activity to the Moodle Course Area and Scheduling Meetings (Fall 2020>)
          • Zoom LTI Pro Activity in Moodle
          • Show all
        • Online exams
          • EXAM for electronic individual exams and maturity tests
          • Show all
        • Learning platforms
          • Moodle: Student’s Guide
          • Moodle’s assignments
          • Moodle’s discussion forums
          • Zoom Online Meeting Service
          • Show all
        • Online teamwork
          • Moodle’s discussion forums
          • Show all
        • Communication
          • Moodle’s discussion forums
          • Show all
        • Data protection
          • Short check list for processing personal data
          • What is personal data and specific (sensitive) personal data?
          • Filming and photography permits in teaching
          • Privacy Protection of Zoom
          • Data protection – informing the data subject
          • Show all
  • Content production
        • Video production
          • Kaltura Video Platform
          • Kaltura’s upload and share your video
          • Show all
        • Questionnaires
          • Webropol-survey and reporting tool
          • Show all
  • Content sharing
        • Sharing content
          • Kaltura’s upload and share your video
          • Show all

Personal Data Processing Agreements (DPA)

Kuuntele

Personal Data Processing Agreements (DPA)

Article sections


    Kuuntele

    The concepts of controller and processor are essentially linked to the processing of personal data. The controller is the party defining the purposes and means of processing personal data. HAMK is a controller for information such as data on HAMK students, personnel, alumni, suppliers and customers. As for the processors of personal data, they process personal data on behalf of the controller. Processors typically include subcontractors and service providers who process or may process the controller’s personal data. In this context, the processor does not refer to the HAMK personnel.

    The General Data Protection Regulation requires a Data Processing Agreement (DPA) between the controller and the processor. The mini-content of the agreement is described in the General Data Protection Regulation.

    For instance, an agreement is needed if personal data is processed in a cloud service with HAMK being the controller and the service provider being the processor. An agreement is also needed if HAMK acts as the processor of personal data. An agreement is also required for the use of services without charge.

    Agreements relating to the processing of personal data, derived from centrally acquired systems and services at HAMK, are processed centrally. For instance, this agreement has been concluded on Webropol and all services provided by CSC.

    However, in research/RDI projects, field-specific teaching systems and other similar situations, it may be necessary to draw up a separate agreement on processing personal data. This may be the case, for instance, if the processing of personal data is purchased from an external operator in a research project. This may include, for instance, a service used for collecting or processing research material containing personal data or commissioning the analysis of collected material by an operator external to HAMK. Before implementing such a service or system, you should ensure, among other things, the following:

    • Roles: which party acts as a controller and which entity as a processor of personal data
    • Appropriateness and protective measures for processing personal data. This particularly includes, inter alia, the geographical area where the processing takes place (e.g. EU / EEA).
    • Agreement on the processing of personal data between the controller and the processor

    There are several options for concluding contracts on the processing of personal data:

    • In the ideal case, the service agreement includes an annex on the processing of personal data.
    • Major cloud providers in particular may find completed contract details on the home page. These can be found, for instance, by searching for information using the DPA GDPR search.
    • The service provider may have a contract template available upon request.
    • Recommendation: EU standard contractual clauses between controllers and processors.
    • Where necessary, you can also use JHS 166 General Terms and Conditions of Governmental IT Procurement (JIT 2015) Appendix 9: Particular terms for the processing of personal data

    For additional information, please contact your data protection officer.

    Last Updated: 1 year ago
    in Privacy protection
    Tags: Data protection
    Oliko artikkeli hyödyllinen?

    Related Articles

    • The visibility of chat messages in Teams-meetings
    • Data protection concepts
    • What information participants will see during the Zoom meeting or on the recording
    • Microsoft 365 (former Office 365)
    • Webropol-survey and reporting tool

    Footer

    Häme University of Applied Sciences
    (HAMK) / PO Box 230 13101 Hämeenlinna Finland
    03 6461
    HAMK@HAMK.FI

    Privacy policy
    Cookies
    Takedown request
    Accessibility summary
    Site map

    cc-lisenssi

    This material is CC licensed Attribution-ShareAlike 4.0 International.