Privacy Policy

Privacy policy for Jamk Arena online journals

EU General Data Protection Regulation (2016/679)

Updated 29 September 2026.

1 Register name

Jamk Arena online journals Jamk Arena Public and Jamk Arena Pro

2 Register holder

Jamk University of Applied Sciences

PO BOX 207 FI-40101 Jyväskylä

+358 20 743 8100

3 Contact person for the register holder

Person responsible for the register: Vice Rector responsible for research.

Persons responsible for the process: Editor-in-chief of Jamk Arena Public and Editor-in-chief of Jamk Arena Pro

Contact person for the register: arena[at]jamk.fi

4 Data protection officer of the register holder

Requests for the implementation of the data subject’s rights shall be addressed to the data protection officer of the register holder: tietosuoja[at]jamk.fi

Ask for advice and instructions: tietosuoja[at]jamk.fi

5 Purpose of processing personal data

The purpose of the register information is to document the personal data of Jamk Arena’s publications (author’s first and last name and affiliation information) and to request contact information (author’s email address and mobile phone number). Personal data is a prerequisite for identifying the author and for the publication to be included in the Ministry of Education and Culture’s publication data collection. Contact information is a prerequisite for contacting the author and for signing the publication agreement in the electronic contract system.

6 Register data content

The personal data collected for Jamk Arena’s publications are the author’s first and last name and the author’s affiliation information (organisational information). The contact information collected for contacting the authors and for the publication agreement consists of email address and mobile phone number.

With the author’s consent, the author’s photograph (staff photo), a free-form author description, a possible ORCID identifier, and a possible profile information published in the Research.fi service can also be linked to the author information.

7 Legal basis for processing data

The legal basis for processing name, affiliation and contact information is the register holder’s legitimate interest related to carrying out expert and publishing activities and to the attribution of authorship of publications.

The legal basis for processing a free-form author description, photograph, and links to ORCID and Research.fi is the author’s consent.

8 Regular sources of information

Information necessary for publication (name, affiliation, and contact details) is collected from all authors via a contact form (Webropol), through which authors submit their manuscripts for consideration by the Jamk Arena editorial board. If necessary, missing information may also be requested directly from the authors. For authors who are employees of Jamk University of Applied Sciences, employee data may be used, including name, affiliation, email address, and telephone number.

Other optional supplementary information is requested from authors by email.

9 Regular disclosures of data and transfer of data outside the EU or the European Economic Area

Personal data is not transferred outside the EU or the EEA.

10 Principles of register protection

Manual material

The register does not contain manually collected material.

Data stored on computers

Electronic materials are protected by usernames and passwords. The servers are located in the EU or EEA area.

11 Data retention

Author information related to publications (name and affiliation) as well as the possible author description and photograph are published alongside the article and will be retained indefinitely.

Contact information will not be published and will be stored indefinitely in password-protected systems accessible only to Jamk employees, whose duties require processing of such information.

12 Profiling and automatic decision-making

No automated profiling related to personal data is performed.

13 Rights of the data subject As a registered person, you have the right to:

  • receive information about the processing of personal data
  • access data
  • correct data
  • restrict data processing
  • notification obligation regarding the correction or restriction of personal data
  • object to data processing
  • not to be subject to a decision based solely on automated processing without a legal basis
  • ask about the processing of your own data and rights: tietosuoja(a)jamk.fi
  • file a complaint with the supervisory authority, contact details: https://tietosuoja.fi/yhteystiedot

14 General description of Jamk Arena’s technical and administrative security measures

The purpose of processing personal data at Jamk Arena is to document author information related to publications (author’s first and last name and affiliation information) and to request contact information (author’s email address and mobile phone number). Personal data is a prerequisite for identifying the author and for the publication to be included in the Ministry of Education and Culture’s publication data collection. Contact information is a prerequisite for contacting the author and for signing the publication agreement in the electronic contract system.

Jamk Arena’s online publications are handled and edited in Jamk’s protected environments (Webropol, Microsoft Teams and Outlook) and edited and published using the open-source WordPress content management system. Name and affiliation as well as possible author photograph and description are stored in content management system and published alongside of the article. Contact information is handled in closed Microsoft Teams and Microsoft Outlook environments, which can be accessed only by members of the editorial board.

The security measure for processing personal data is based on Jyväskylä University of Applied Sciences’ staff’s personal email address and the associated password. The information is handled carefully, confidentially, and only by employees whose job description requires it.

Information collected for the publication agreement is processed in the electronic contract management system in the manner described in a separate privacy statement.