PRIVACY POLICY STATEMENT
On this page, you can find two different versions of ViLLE’s privacy policy statement.
Choose the correct statement on the following bases:
PRIVACY POLICY STATEMENT 1: TEACHING OR RESEARCH ORGANISED BY THE UNIVERSITY OF TURKU
The University of Turku staff is responsible for teaching. The statement does not apply to courses that use ViLLE or materials provided by the University of Turku but in which another party is responsible for teaching.
PRIVACY POLICY STATEMENT 2: TEACHING ORGANISED BY ANOTHER PARTY
Teaching is organised by a party other than the University of Turku. The teaching organiser must make available a separate description of file regarding the collection of personal data.
PRIVACY POLICY STATEMENT 1: TEACHING OR RESEARCH ORGANISED BY THE UNIVERSITY OF TURKU
This is the ViLLE service’s privacy policy statement compliant with the EU’s General Data Protection Regulation (GDPR) and the Data Protection Act (1050/2018).
Created on 22 August 2023. Last update on 22 February 2024.
1. DATA CONTROLLER
Research Institute for Learning analytics
University of Turku, FI-20014 University of Turku, Finland
+358 29 450 5000
2. CONTACT PERSON RESPONSIBLE FOR THE DATA FILE
Research Institute for Learning analytics
villeteam@utu.fi
FI-20014 University of Turku, Finland
+358 29 450 4666
University’s Data Protection Officer
dpo@utu.fi
+358 29 450 3009
3. LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA
Personal data are processed on the basis of article 6, section 1 of the General Data Protection Regulation (GDPR) as follows:
- processing is necessary for compliance with a legal obligation to which the controller is subject (GDPR, article 6, section 1, subsection c)
- a task carried out in the public interest or the exercise of official authority vested in the controller (GDPR, article 6, section 1, subsection e)
- scientific or historical research purposes or statistical purposes (Data Protection Act, section 4, subsection 3)
4. PERSONAL DATA COLLECTED, THEIR PROCESSING AND THE PURPOSES OF THE PROCESSING
The ViLLE service is an exercise-based learning environment that includes various exercise types developed for learning. The user registers in the service using an email address or an external login service. An email address or other username can be used as an identifier.
4.1. PERSONAL DATA COLLECTED
The Research Institute for Learning analytics processes personal data to provide services to students and teachers. These data include the person’s name, nickname or other identifier, email address or other username, and educational institution. In addition, if the user logs in to the service with the MPASS ID, data such as class level, class ID, municipality information, learner ID or role information (student or teacher/staff) can be received.
In addition, the processing of register data, such as grade data, may be enabled with a separate agreement. The data collected are used to produce learning analytics and statistics for teaching staff and teaching administration staff.
The service collects data associated with personal data as follows:
- IP address when logging in
- Return of assigned exercises (score, response, time spent, time of return). This data are used for creating learning analytics for the course teacher.
In addition, log data are collected about the users’ activities in the ViLLE service, in connection with the initiation, deletion or return of an assigned exercise, for example; the purpose of collecting this data is to investigate possible error situations at the request of the users.
4.2. PROCESSING OF PERSONAL DATA AND ITS PURPOSES
The person’s identification data make the registration for the service, the login and the recovery of a forgotten password possible. The identification data can be used to inform teachers about service-related events, research results and training. The teacher may refuse to receive such messages by adjusting the settings of the service.
Personal data are not used for automated decision-making or profiling.
The data collected about study performance are used to produce learning analytics and statistics for teachers. If you want to collect other data about the user for research purposes, a separate research permit is collected for this purpose. Users always have the right to refuse to grant a research permit. The data used in research are anonymised before analysis.
4.3. DURATION OF THE PROCESSING OF PERSONAL DATA
The personal data stored in the service are stored for five years after the user’s last login. Data anonymised for research purposes will not be deleted as they cannot be linked to user login data.
5. TRANSFER OR DISCLOSURE OF PERSONAL DATA TO THIRD PARTIES
As a rule, data will not be disclosed to other parties. Data may be published to the extent agreed upon with the user. Studies based on anonymised data may be published without separate consent, in scientific journals or conferences, for example. Published data cannot be associated with users.
6. PRINCIPLES OF THE PROTECTION OF THE DATA FILE
The data file is processed diligently and the data processed with the help of data systems are protected appropriately. The data are stored on a secure server located in Finland, which can only be accessed by separate administrators. The data controller ensures that the stored data, server access rights and other information critical to the security of personal data are treated confidentially and only by the employees whose job description it belongs to.
7. RIGHTS OF THE DATA SUBJECT
According to the General Data Protection Regulation, the data subject has the right to
- receive information about the processing of their personal data
- obtain access to data
- rectify their data
- restrict the processing of data
- transfer the data from one system to another
- object to the processing of data
- not be subject to automated decision-making.
In order to exercise their rights, the data subject must contact the Research Institute for Learning analytics.
More detailed information about the rights of the data subject can be found on the website of the Data Protection Ombudsman.
The data subject has the right to lodge a complaint with the Office of the Data Protection Ombudsman if they consider that the processing of personal data has violated the applicable data protection legislation.
Office of the Data Protection Ombudsman
Visiting address: Lintulahdenkuja 4, FI-00530 Helsinki, Finland
Postal address: P.O. Box 800, FI-00531 Helsinki, Finland
Telephone switchboard: +358 29 566 6700
Registry: +358 29 566 6768
Email: tietosuoja(at)om.fi
PRIVACY POLICY STATEMENT 2: TEACHING ORGANISED BY ANOTHER PARTY
This is the ViLLE service’s privacy policy statement compliant with the EU’s General Data Protection Regulation (GDPR) and the Data Protection Act (1050/2018). Created on 22 August 2023.
Last update on 28 August 2023.
1. DATA CONTROLLER
Teaching organiser, mentioned in the description of file provided by the organiser.
2. CONTACT PERSON RESPONSIBLE FOR THE DATA FILE
Mentioned in the description of the file provided by the teaching organiser.
With regard to the processing of personal data, you can contact the Research Institute for Learning analytics at
Research Institute for Learning analytics
villeteam@utu.fi
FI-20014 University of Turku, Finland
+358 29 450 4666
University’s Data Protection Officer
dpo@utu.fi
+358 29 450 3009
3. PERSONAL DATA COLLECTED, THEIR PROCESSING AND THE PURPOSES OF THE PROCESSING
The ViLLE service is an exercise-based learning environment that includes various exercise types developed for learning. The user registers in the service using an email address or an external login service. An email address or other username can be used as an identifier.
3.1. PERSONAL DATA COLLECTED
The Research Institute for Learning analytics may receive personal data to provide services to students and teachers. These data include the person’s name, nickname or other identifier, email address or other username, and educational institution. In addition, if the user logs in to the service with the MPASS ID, data such as class level, class ID, municipality information, learner ID or role information (student or teacher/staff) can be received.
In addition, the processing of student-related register data may be enabled with a separate agreement. The data collected are used to produce learning analytics and statistics for teaching staff and teaching administration staff.
The service collects data associated with personal data as follows:
- IP address when logging in
- Return of assigned exercises (score, response, time spent, time of return). This data are used for creating learning analytics for the course teacher.
In addition, log data are collected from users, in connection with the initiation, deletion or return of an assigned exercise, for example; the purpose of collecting this data is to investigate possible error situations at the request of the users.
3.2. PROCESSING OF PERSONAL DATA AND ITS PURPOSES
The person’s identification data make the registration for the service, the login and the recovery of a forgotten password possible. The identification data can be used to inform teachers about service-related events, research results and training. The teacher may refuse to receive such messages by adjusting the settings of the service.
Personal data are not used for automated decision-making or profiling.
The data collected about study performance are used to produce learning analytics and statistics for teachers. If you want to collect other data about the user for research purposes, a separate research permit is collected for this purpose. Users always have the right to refuse to grant a research permit. The data used in research are anonymised before analysis.
3.3. DURATION OF THE PROCESSING OF PERSONAL DATA
The personal data stored in the service are stored for five years after the user’s last login. Data anonymised for research purposes will not be deleted as they cannot be linked to user login data.
4. TRANSFER OR DISCLOSURE OF PERSONAL DATA TO THIRD PARTIES
As a rule, data will not be disclosed to other parties. Data may be published to the extent agreed upon with the user. Studies based on anonymised data may be published without separate consent, in scientific journals or conferences, for example. Published data cannot be associated with users.
5. PRINCIPLES OF THE PROTECTION OF THE DATA FILE
The data file is processed diligently and the data processed with the help of data systems are protected appropriately. The data are stored on a secure server located in Finland, which can only be accessed by separate administrators. The data controller ensures that the stored data, server access rights and other information critical to the security of personal data are treated confidentially and only by the employees whose job description it belongs to.
6. RIGHTS OF THE DATA SUBJECT
According to the General Data Protection Regulation, the data subject has the right to
- receive information about the processing of their personal data
- obtain access to data
- rectify their data
- restrict the processing of data
- transfer the data from one system to another
- object to the processing of data
- not be subject to automated decision-making.
In order to exercise their rights, the data subject must contact the teaching organiser acting as the data controller.
More detailed information about the rights of the data subject can be found on the website of the Data Protection Ombudsman.
The data subject has the right to lodge a complaint with the Office of the Data Protection Ombudsman if they consider that the processing of personal data has violated the applicable data protection legislation.
Office of the Data Protection Ombudsman
Visiting address: Lintulahdenkuja 4, FI-00530 Helsinki, Finland
Postal address: P.O. Box 800, FI-00531 Helsinki, Finland
Telephone switchboard: +358 29 566 6700
Registry: +358 29 566 6768
Email: tietosuoja(at)om.fi