Open university customers – Privacy notice
What should you know about the processing of your personal data?
The Ä¢¹½Ö±²¥ collects personal data about you to carry out its duties. You have rights to this data, such as the right to access the data and the right to be sure that it is stored securely and only for the necessary time. Above all, you have the right to know the following:
- what information we collect about youand why,
- for how long, and where we keep this information, and
- to whom we share this information.
All of these points are explained in this privacy notice.

How to find the information you are looking for?
We have created this privacy notice to be as easy as possible to use and understand. That is why you will find the key points summarised under each section. If you are interested in knowing more, please follow the links in the sections or contact the data protection officer of the Ä¢¹½Ö±²¥.
Why we process your personal data?
Your personal data is used to manage the customer relations of the Open University. We provide you with information on the educational products, services, events and topical contents of the Open University.
You can give your consent to the processing using the forms available on the Open University website or when completing event-specific forms. You are the active partner in the consent-giving process: you give consent by entering the required information. The data is collected and updated on the basis of the information that you have given. We send you messages about once a month and you can withdraw your consent at any time in the manner described below.
The Open University may possess information on stakeholders that by virtue of their position or task (in central or local government, the business sector, organisations or in other similar areas) act as experts, partners or visiting lecturers or in other similar roles in the University. Data subjects whose details are contained in the lists of stakeholders have the same rights as all other data subjects (including the right to have their data removed from the lists).
The Open University also uses the information collected via the Ä¢¹½Ö±²¥ website (such as cookies) in the management of its customer relations. You can view the Ä¢¹½Ö±²¥ privacy notice at: /en/university/privacy-notice No data is combined with the personal data kept in the newsletter register at any stage of the processing.
What data we process and how long?
The time we store your personal data varies and is specified in the Records Management Plan. To get more information about what personal data we collect and how long we keep certain information, check the sections below.
What rights you have and how to exercise them?
You have the following rights:
- Right to access your data.
- Right to have any incorrect information corrected.
- Right to have your data erased (right to be forgotten), in certain situations.
- Right to restrict processing.
- Right to have the responsible unit inform the party to which your data is disclosed of your data being corrected, erased, or the processing being restricted.
- Right to object processing, e.g. direct marketing.
- Right to have your data transferred from one system to another, when processing is based on an agreement or your consent.
- Right to be notified of any information security breaches resulting in a high risk.
- Right to file a complaint with the supervisory authority.
- Right to withdraw consent
You have the right to withdraw consent to the processing of your personal data at any time. Withdrawing consent is easy and you can give and withdraw consent online at The same link is also given at the end of each Open University newsletter (the link is only in Finnish). Withdrawing consent does not have any impact on the personal data processing carried out before the withdrawal.
You can exercise your rights by sending a request to the university's Registry Office. You can use the form on the Registry Office's website or send your request informally. Keep in mind that withdrawing your consent doesn’t change the processing that happened before the withdrawal.
Who can access your personal data?
Your personal data can only be accessed and processed by the administrative staff members of the Open University and Ä¢¹½Ö±²¥ Communications who, as part of their duties, manage customer relations of the Open University and provide information on its products and services.
Also, the service providers we use can access your personal data in their role as data processors. However, these providers do not actively process your personal data, but they have access to it for maintenance reasons.
How to contact us?
If you want more information about the processing of your personal data, do not hesitate to contact our data protection officer via email or phone (+358 40 805 3297).
Contact information of units
Below you find the contact information of the responsible unit. If you wish, you can directly contact the unit instead of the data protection officer.
If you want to exercise your rights (withdraw your consent for example) you can contact the Registry Office by email: