{"id":6192,"date":"2023-03-16T12:47:31","date_gmt":"2023-03-16T10:47:31","guid":{"rendered":"https:\/\/saarnilearning.fi\/?page_id=6192"},"modified":"2026-05-05T15:25:11","modified_gmt":"2026-05-05T12:25:11","slug":"privacy-policy-2","status":"publish","type":"page","link":"https:\/\/saarnilearning.fi\/en\/privacy-policy-2\/","title":{"rendered":"Priima Privacy Policy"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Privacy Policy<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

The purpose of this privacy statement is to tell you what kind of information is collected in Priima learning management system, how the information is processed and how it is protected.<\/p>

Register name<\/strong>
Customer specific Priima user register<\/p>

Controller<\/strong>
Each Customer is the controller of the user register of their own Priima environment<\/p>

Processor<\/strong>
Saarni Learning Oy
Kiviharjunlenkki 1 B
90220 OULU
+358 20 718 1850
info@saarnilearning.fi<\/p>

Contact person for GDPR<\/strong>
Ville Juutinen
Kiviharjunlenkki 1 B
90220 OULU
+358 20 718 1850
dpo@saarnilearning.fi<\/p>

The processing of personal data owned by the customer, groups of the registered and type of personal data<\/strong><\/p>

The customer adds personal data when using Priima learning management system for example from their own staff, partners or other interest groups using the service. The customer owns this user register making the customer the controller and Saarni Learning Oy the processor of personal data. Saarni Learning Oy shall process the personal data of the Customer on behalf of and commissioned by the Customer.<\/p>

As processor, Saarni Learning Oy has access to user data added by the customer. Compulsory data fields in the service are e-mail, first name and last name. Additional data fields are: username, password, phone number and address. Customer\u2019s environment admin can enable saving the personal identity code in the environment by making the personal identity code field available for users.<\/p>

The basis and purpose of processing personal data<\/strong><\/p>

Saarni Learning Oy processes personal data to provide the Priima learning management system service as described in the Contract between the Customer and Saarni Learning. In addition, users are recognized technically, and a safe access can be provided with the help of personal data. Users can check their own saved data: course completions, assignments, completions, a list of files uploaded by the user and their own personal data.<\/p>

When a user submits a request to an admin user named by the Customer, their login details and all data can be deleted.<\/p>

Saarni Learning Oy never processes personal data owned by the customer without an initiative from the customer, such as getting in touch to resolve a problem situation. If the solution to the problem requires processing of personal data, a written permission is always asked from the customer.<\/p>

Applicable information security measures<\/strong><\/p>

Saarni Learning follows actively the realization and state of information security on a general level and regarding their own services. A specified person is responsible for the information security as a whole.<\/p>

Saarni Learning monitors the state of the learning management systems they offer and informs customers of any possible data leakage at once as has been agreed upon in the escalation procedure.<\/p>

Information security policy<\/strong><\/p>

Information security is a central part of Saarni Learning\u2019s business. The aim of Saarni Learning\u2019s information security policy is to ensure the confidentiality, wholeness and availability of all information, both the customer\u2019s and Saarni Learning\u2019s, in every stage of data processing. The services and functionalities must be reliable and protected so that the compliance with laws and contractual obligations are ensured.<\/p>

The incident response plan describes the operations when a general or service-related information security incident is detected in the organization.<\/p>

The rights and obligations of the customer as controller<\/strong><\/p>

Customer is responsible for reacting and answering to data requests regarding their own register and the registered users and their rights. In addition, Customer takes care of informing the end users. The customer organization is responsible for the data protection of information related to user accounts as well as materials and other information that they bring up, such as results, that have been created in Priima environment.<\/p>

The rights of the registered user<\/strong><\/p>

The registered user has the right<\/p>