Updated 18th August 2026
Disclaimer: This document is a translation of the original policy produced in Finnish. The original Finnish policy takes precedence in the event of any conflict, discrepancy, or ambiguity between the translated version and the original.
This privacy policy specifies how the Niilo Mäki Foundation processes personal data in connection with the use of the ProKoulu.fi website, including enquiries, and registrations for events and seminars related to ProKoulu activities.
The ProKoulu.fi website publishes information on the ProKoulu/ProSkola and ProVaka/ProSmå frameworks, their implementation and development and other events and activities related to these frameworks (together “Pro-activities”).
The processing of personal data for research related to Pro-activities is described in separate, research-specific privacy policies. This privacy policy does not replace the research-specific privacy policies.
1. Data controller
The Niilo Mäki Foundation
PO Box 29
40101 Jyväskylä
Business ID 0920779-6
The technical infrastructure of the ProKoulu.fi website and the WordPress database are hosted on a server managed by NMI. NMI is responsible for the technical maintenance of the website.
Enquiries regarding this privacy policy
For questions regarding the processing of personal data and matters relating to the exercise of rights under the privacy policy, please contact the data protection officer at NMI:
Maria Haakana,
Niilo Mäki Institute
maria.haakana@nmi.fi
Postal address:
Niilo Mäki Foundation
PO Box 29
40101 Jyväskylä
2. For what purposes is personal data processed?
In connection with the website ProKoulu.fi, personal data is processed for the following purposes:
Website maintenance and data security
Personal data and technical data may be processed to ensure the technical functioning of the website, to maintain data security, to investigate faults, and to develop and maintain the service.
Handling enquiries
Data submitted via the contact from on the website ProKoulu.fi is processed in order to respond to the enquiry.
Messages sent via the contact form are forwarded to: proinfo@nmi.fi
Organisation of events and seminars
Personal information submitted during the registration process for events and seminars through the ProKoulu.fi website is processed for the purpose of organising the event and managing practical matters directly related to it.
The data may be used for purposes including but not limited to the following:
- receiving registrations for events and managing participant numbers
- providing information about the event to participants before and after the event
- practical arrangements related to planning and organising the event
- notifying participants of any changes or cancellations
- reporting and administration relating to the organisation of the event.
NMI mailing list
When registering, participants have the option of joining the NMI mailing list. Joining the mailing list is voluntary and is not a prerequisite for attending the event. If a person joins the mailing list, their data will be processed for the purposes of NMI’s news and information communications on the basis of a separate consent.
3. What personal data is processed?
The following personal data may be processed when registering for a seminar or event:
- name
- email address
- place of work
- municipality or town of employment
- information on whether the person works in early years education or primary education
- information on whether the person is involved in Pro-activities and their role in them
- which workshops the person chooses to attend and other choices the person makes in relation to the event
The contact form is used to process the personal data that the individual provides when making contact.
4. Legal bases for the processing of personal data
The processing of personal data is based on a lawful ground for processing in accordance with the General Data Protection Regulation (GDPR).
The legal basis for processing registration data for events related to Pro-activities is the data controller’s legitimate right in organising and managing events and handling communication related to them.
NMI’s legitimate interest lies in carrying out ProKoulu activities, organising events and providing information about these activities to those who have registered for them.
The legal basis for the processing of technical data is the data controller’s legitimate interest in ensuring the proper functioning of the online service and data security.
The legal basis for joining the NMI mailing list is the individual’s consent. Consent may be withdrawn at any time.
5. Sources of personal data
Personal data is mainly obtained directly from the individual themselves:
- via the ProKoulu.fi contact form
- via an event or seminar registration form
- through other communications relating to Pro-activities.
In connection with the technical operation of the website, technical data transmitted automatically by the browser and server may also be processed.
6. Data processors and recipients
Personal data on ProKoulu.fi is processed by NMI staff who, as part of their duties, are involved in managing Pro-activities, events, communications, technical maintenance or data protection.
The ProKoulu.fi WordPress site and its database are hosted on a server managed by NMI, and server maintenance has not been outsourced to an external service provider.
Any other parties involved in the content of the event do not act as the data controller for the personal data collected through this registration. Any other parties are only involved in the content-related organisation of the event, whilst NMI acts as the data controller for personal data relating to event registrations.
Personal data will not be disclosed to external parties for marketing purposes.
7. Transfer of personal data outside the EU or EEA
Personal data collected through the ProKoulu.fi website is stored on a server managed by NMI. Data is not transferred outside the EU/EEA.
If personal data is transferred outside the EU/EEA, such transfers will be carried out in accordance with GDPR requirements using appropriate safeguarding measures.
8. Retention period for personal data
Personal data will only be retained for as long as is necessary for the purpose for which it was collected, or as required by law.
Event registration details
Event registration data is retained for the duration of the event and any related communications, and for a period of six months following the end of the event. After this, any unnecessary personal data is destroyed.
Enquiries
Data received via the contact form is retained for as long as is necessary to process the enquiry and resolve any matters arising from it. After this, any unnecessary personal data is destroyed.
NMI mailing list
The data of individuals who have subscribed to the mailing list will be retained until the individual withdraws their consent or unsubscribes from the mailing list, unless there is another lawful basis for retaining the data.
9. Website cookies and technical information
ProKoulu.fi uses cookies and other technical solutions related to the technical functioning of the website. The site utilises the WordPress content management system as well as technical solutions for managing the site’s language versions.
GDPR features have been enabled in the WPForms settings, and the storage of the user’s UUID cookie, IP address and User Agent information has been disabled.
The website does not currently use a separate Google Analytics service or any other similar visitor analytics service.
YouTube videos
The ProKoulu.fi website may display videos published on YouTube.
Based on testing, loading a YouTube video onto the page does not trigger any data transfer to YouTube until the user plays the video. When the user plays the video, a connection is established between the browser and YouTube services.
After this, YouTube may process data relating to the user and their use of the video in accordance with its own policies.
10. Photographs taken at events
Photographs may be taken at events related to Pro-activities for the purposes of documenting the event and communicating about Pro-activities. Photographs may be published, for example, on the ProKoulu.fi website and on NMI’s social media channels.
When publishing descriptions and images relating to specific individuals, the relevant data protection and copyright regulations are observed as appropriate to the situation.
11. Rights of the data subject
In accordance with GDPR, the data subject has the right to:
- be informed about the processing of their personal data
- access their personal data
- request the correction of inaccurate or incomplete personal data
- request the deletion of personal data in circumstances permitted by law
- request restriction of processing of personal data in circumstances permitted by law
- object to the processing of personal data in circumstances permitted by law
- withdraw consent where the processing of personal data is based on consent
- lodge a complaint with the supervisory authority.
12. Exercising your rights
Requests concerning the rights of data subjects may be submitted to the person responsible for data protection at NMI:
Maria Haakana
maria.haakana@nmi.fi
or by post:
Niilo Mäki Foundation
PO Box 29
40101 Jyväskylä
Where possible, the request should specify the personal data or processing operations it relates to. If necessary, NMI may request further information to verify the identity of the person making the request.
13. Right to lodge a complaint with a supervisory authority
If a data subject believes that their personal data is being processed in breach of data protection legislation, they have the right to lodge a complaint with the competent supervisory authority. In Finland, the competent supervisory authority is the Office of the Data Protection Ombudsman.
14. Updating the privacy notice
This privacy notice may be updated if there are changes to the operation of the ProKoulu.fi website, its technical implementation or the processing of personal data, or if the applicable legislation changes.
The up-to-date privacy policy is available on the ProKoulu.fi website.
