The Finnish National Agency for Education's event management system
Privacy statement for the event management system
This statement was drawn up on 25 September 2025. EU General Data Protection Regulation 2016/679 (GDPR).
Finnish National Agency for Education
P.O. Box 380, 00531 Helsinki
Visiting address: Hakaniemenranta 6, 00530 Helsinki
Email: kirjaamo [at] oph.fi (kirjaamo[at]oph[dot]fi)
Phone number: +358 29 5331000 (switchboard)
Annakaisa Rouvali
Email: koulutuspalvelut [at] oph.fi (koulutuspalvelut[at]oph[dot]fi)
Phone number: +358 29 5331000 (switchboard)
Jyrki Tuohela
Email: tietosuoja [at] oph.fi (tietosuoja[at]oph[dot]fi)
Phone number: +358 29 5331000 (switchboard)
The register may contain the following categories of information about a data subject:
- Name
- Personal identity code (collected for billing of individual customers)
- Phone number
- Title
- Organisation/company and its address information
- Information that the controller may disclose or share without consent, such as public information (e.g. business information) that may be used for analysis and communication for a specific purpose.
- Classification information provided by the data subject. These are personal data that the data subject has directly provided or authorised the processing of for a specific purpose, such as by giving consent.
- Order, billing and delivery information
- Information on services ordered and changes to them
- Information collected through cookies
- Information about the device used by the data subject, such as device type, browser, IP address and other device information
- Any other information collected with the consent of the data subject.
The purpose of processing personal data is to enable registration for events, the purchase of online courses, services and products, invoicing and the provision of information to customers (confirmation messages and communication necessary for use). In addition to this, the personal data may be used for the purpose of marketing services and products produced by the Finnish National Agency for Education and sold through the event management system, if the customer has given their consent for this.
The legal basis for processing the personal data is section 4 of the Act on the Finnish National Agency for Education 508/2025. The processing is based on Article 6(1)(c) of the EU General Data Protection Regulation.
Eventilla Oy and its subcontractors. The personal data are not disclosed for any other purposes.
The personal data in the service are not transferred outside the EU/EEA.
The personal data are retained for a maximum of two years, after which they are anonymised for statistical purposes.
The data subject has the right to obtain from the controller confirmation as to whether or not personal data concerning them are being processed. The data subject also has the right to request access to personal data concerning them and to ask the controller to rectify or erase inaccurate or outdated data and to restrict the processing of their personal data.
If the data subject considers the processing of their personal data to be unlawful, they have the right to lodge a complaint with the Data Protection Ombudsman.
Cookies are small text files that a browser stores on the user’s device when they visit a website. Mandatory cookies are used to ensure technical functionality and are not used for any other purpose. Performance cookies are only used to measure and analyse performance.
The service also collects and processes data that do not allow the identification of individual users, anonymises some data and collects general statistics that do not contain personal data. These anonymous data or statistical data are used only for developing the service or for analysing the use of the service.
Data collected by Matomo Analytics is used by the Finnish National Agency for Education to evaluate the use of the website and to compile usage reports. Matomo Analytics do not collect personal data. IP addresses are anonymised.
Paytrail collects data on the user’s IP address, payment method and the time of payment when a payment transaction is made. Click here to read Paytrail's privacy policy (paytrail.com).
Updated