Privacy Policy

Updated 18 September 2025

Purposes of processing personal data

Boosting innovation and entrepreneurship in the RUN-European University (RUN InnoBoost) is a European project that strengthens the role of RUN-EU institutions in driving innovation, entrepreneurship, and regional development. RUN InnoBoost is built around three strategic themes: 1) Building Innovative Institutions, 2) Empowering People, 3) Creating Interregional Innovation Pipelines.

A key activity of the second theme, Empowering People, is enhancing the entrepreneurial and innovation skills of students, teachers, and researchers. This includes organising educational activities, such as educational programmes and workshops. RUN InnoBoost will also organize educational sessions in targeted RUN-EU events.

The purposes of processing personal data are:

• Organising educational activities/ events (online and in person) that participants can register/ apply to,
• Transferring participant data to the member institutions if needed for local evaluation or compliance reporting (and allowing the transfer of these personal data if required by the funding organization).

RUN InnoBoost is a cooperation project between:

Lead Partner Häme University of Applied Sciences (HAMK) and Project Partners: Polytechnic Institute of Leiria (IPL), Polytechnic Institute of Cavado and Ave (IPCA), Technological University of the Shannon: Midlands Midwest (TUS), Stichting NHL Stenden Hogeschool (NHL Stenden), FHV – Vorarlberg University of Applied Sciences (FHV), Howest University of Applied Sciences (Howest), University of Burgos (UBU), StartUp Leiria, Momentum.

Duration of the project: 1.4.2025-30.4.2027

This is a one-off project. The project is funded by the Higher Education Initiative of the European Institute of Innovation and Technology / EIT Food of the European Union.

Contact person for matters related to the project

Kirsi Vesterinen

+358504761824

kirsi.vesterinen@hamk.fi

PL 230 (Visamäentie 35 A), 13101 Hämeenlinna

Director responsible for the project: Annukka Pakarinen

Persons processing data

Individuals entitled to process data during the project:

• HAMK: Kirsi Vesterinen (Project Manager), Henna Keränen (Project Coordinator), Katriina Peuhkuri (Project Specialist), Jukka Raitanen (Project Specialist), Milla Mäkinen (Project Specialist), and other future members of the same project team may also process data collected here.
• IPL: Joaquina Pinheiro (Project Coordinator) and other future members of the same project team may also process data collected here.
• IPCA: João Vilaça (Project Coordinator), Sandra Costa (Project Manager)
• TUS: Michelle Conney (Project Manager), Anna Connaughton (Project Coordinator), and other future members of the same project team may also process data collected here.
• NHL Stenden: Ewald Chocolaad (project lead), Hans Schülski (project responsible), and other future members of the same project team may also process data collected here.
• Howest: Vic Vansevenant (Project coordinator), Joost Vansteenkiste (Project specialist) and other future members of the same project team may also process data collected here.
• FHV: Florian Maurer (Project Manager & Project Coordinator at FHV), Shahin Manafi Varkiani, Jens Schumacher, Margarethe Blum-Prochazka (Project Specialists at FHV), and other future members of the same project team may also process data collected here.
• UBU: Juan Bautista Delgado García (Project Coordinator), Virginia Blanco Mazagatos (Project Coordinator), Verónica Sedano (Project Manager) and other future members of the same project team may also process data collected here.
• StartUp Leiria: Vitor Ferreira (Project Manager), Bruno Ramalho (Project Coordinator), Luis Fonseca (Project Specialist), and other future members of the same project team may also process data collected here.
• Momentum: Orla Casey (Project Coordinator), Paula Whyte (Project Coordinator) and Leon Quinn (Webmaster)

Legal basis for processing

The processing of personal data is based on:

• to carry out a task in public interests or to exercise the public authority of the controller 

The processing is necessary for the performance of the statutory educational mission of higher education institutions, including jointly organized study modules that promote students’ academic progress, accessibility of education, and lifelong learning.

Personal data content and retention periods

The project collects the following personal data: 

Data collected	Retention period
Name	Information will be archived for 15 years after the end of the project
Email address	Information is destroyed after the end of the activity for which information was collected
RUN-EU institute to which a person belongs to	Information will be archived for 15 years after the end of the project
Role (student/ academic staff/ non-academic staff/ other)	Information will be pseudonymized and archived for 15 years after the end of the project
Country of citizenship	Information will be pseudonymized and archived for 15 years after the end of the project
Country of residence	Information will be pseudonymized and archived for 15 years after the end of the project
Gender (female/ male/ prefer not to say)	Information will be pseudonymized and archived for 15 years after the end of the project

Data subjects

The data subjects include:

• The students of RUN-EU institutions
• The personnel of RUN-EU institutions
• Other individuals participating in the project activities

Source of the data

Data received from the person participating in the project activities and, where necessary, the study registers or other registers of the RUN-EU institutions.

Recipients of personal data

The recipients of the personal data are:

• Project Partners with whom Data Processing Agreement has been signed,
• Potential auditors and other potential external project controllers,
• Potential external processors (Microsoft Oy, Zoom, Webropol Oy) with whom Data Processing Agreements have been signed.

Principles of protection

A Manual material

Any physical data material that includes personal data will be retained in a locked facility that can only be accessed by appointed persons entitled to access the material to perform their duties.

The physical data material including personal data will be retained only for the duration and to the extent necessary for the original or compatible purposes. After this, the material is, if needed, transferred into electronic format and the physical material is destroyed in a secured manner.

B Electronic material

Data is collected using Microsoft Forms or Webropol or Zoom tools to which users have personal user IDs. Access is granted only to those persons who are entitled to access and use the data in the system in order to perform their duties.  

Data is stored in an information system. Users have personal user IDs. Access is granted only to those persons who are entitled to access and use the data in the system in order to perform their duties.

In case of pseudonymized personal data, the pseudonymization keys will be stored separately in a secure location with restricted access.

The lawful processing of personal data is ensured by categorisation of data and with operating methods that are in compliance with the data handling rules concerning data set.

Controller

Controller is Häme University of Applied Sciences (HAMK).

Contact details

Häme University of Applied Sciences,

Telephone: +358 3 6461, e-mail address: hamk@hamk.fi

Data protection officer

Name of data protection officer (if applicable)

Kirsi Laaksonen

tietosuojavastaava@hamk.fi

Häme University of Applied Sciences Ltd, data protection officer, P.O. Box 230, FI-13101 Hämeenlinna

Automated decision-making

No automated decision-making is performed on the recorded data.

Transfer of data outside the EU or EEA

No data is transferred outside the EU or EEA.

Data subject’s rights and restriction of these rights

The EU General Data Protection Regulation (2016/679) provides the data subject with the following rights:

Right to withdraw consent

The data subject shall have the right to withdraw his or her consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal of consent. (Article 7).

Right of access by the data subject

The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed. The data subject shall have the right to access to the personal data concerning him or her. Where requests are manifestly unfounded or excessive, in particular because of their repetitive character, the data controller may charge a fee or refuse to act on the request. (Article 12 and Article 15).

Right to rectification

The data subject shall have the right to obtain from the data controller the rectification of inaccurate personal data concerning him or her contained in the register (Article 16). A request for rectification shall be submitted in writing. In some information systems, persons using the system can correct their own data.

Right to erasure

The data subject shall have the right to request the erasure of personal data concerning him or her where one of the following grounds applies (Article 17):

• the personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed;
• the data subject withdraws consent on which the processing is based and there is no other legal ground for the processing;
• the data subject objects to the processing, and there are no overriding legitimate grounds for the processing (Article 21);
• the personal data have been unlawfully processed;
• the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.

However, the data subject does not have the right to delete the data in the studies if the deletion of the data is likely to prevent the processing concerns or to greatly impede it.

Right to restriction of processing

The data subject shall have the right to obtain restriction of processing where one of the following applies (Article 18):

• the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
• the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
• the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims;
• the data subject has objected to processing pursuant to Article 21(1) pending the verification whether the legitimate grounds of the controller override those of the data subject.

Right to data portability

Where the processing is based on consent and carried out by automated means, the data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a data controller, in a machine-readable format (Article 20).

Requests to exercise these rights are to be submitted:

Contact details

Häme University of Applied Sciences Ltd

Data protection officer

dpo@hamk.fi

P.O. Box 230 (Visamäentie 35A)

FI-13101 Hämeenlinna, Finland

Right to lodge a complaint

The data subject shall have the right to lodge a complaint with the Office of the Data Protection Ombudsman, https://tietosuoja.fi/.