Privacy Policy

1. Introduction

This Privacy Policy explains how the DigiVuo Digital Health Check tool ("we," "us," or "the tool"), developed as part of the IKAPO Project at the University of Oulu, collects, uses, and protects your personal information. We are committed to safeguarding your privacy in accordance with the EU General Data Protection Regulation (GDPR) and Finnish data protection legislation.

2. Data Controller

The data controller for personal data collected through DigiVuo is:

IKAPO Project — University of Oulu, Faculty of Information Technology and Electrical Engineering (ITEE)
P.O. Box 4500, FI-90014 University of Oulu, Finland
📧 hanna.saarela@oulu.fi

3. What Data We Collect

When you use DigiVuo, we may collect the following types of information:

• Contact information: Your name, email address, phone number, and company name — provided voluntarily through the lead capture form.
• Assessment responses: Your industry selection and pain-point responses used to generate project recommendations. These are processed locally in your browser and are not stored on any server unless you submit the contact form.
• Selected projects: The project recommendations you express interest in, submitted alongside your contact details.

We do not collect any sensitive personal data, financial information, or data about minors. We do not use cookies, tracking pixels, or third-party analytics tools at this time.

4. How We Use Your Data

The personal data you provide is used exclusively for the following purposes:

• To connect you with relevant student-led technology projects offered through the IKAPO Project.
• To allow IKAPO Project coordinators to follow up with you regarding project opportunities.
• To measure aggregate interest in different project types for programme planning (anonymized and aggregated only).

We will never sell, rent, or share your personal data with third parties for marketing purposes.

5. Legal Basis for Processing

We process your personal data based on the following legal grounds under the GDPR:

• Consent (Article 6(1)(a)): By voluntarily submitting the lead capture form, you consent to the collection and processing of your contact information for the stated purposes.
• Legitimate interest (Article 6(1)(f)): We have a legitimate interest in facilitating connections between SMEs and student projects as part of the university's educational mission.

6. Data Sharing

Your submitted contact information and selected project preferences are shared only with:

• IKAPO Project coordinators at the University of Oulu.
• Student project teams assigned to work on the projects you expressed interest in.

We do not transfer your data outside the European Economic Area (EEA). We do not share your data with any commercial third parties.

7. Data Retention

Your personal data is retained only for as long as necessary to fulfill the purposes described in this policy. Specifically:

• Contact form submissions are retained for the duration of the current IKAPO Project cycle (typically one academic year).
• After the programme cycle ends, your data will be anonymized or securely deleted unless you have given separate consent for longer retention.
• Assessment responses processed locally in your browser are not stored by us and are discarded when you close or refresh the page.

8. Data Security

We take appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encrypted transmission of form data (HTTPS/TLS).
• Access controls limiting data access to authorized programme coordinators only.
• Regular review of data handling procedures.

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

9. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can ask us to correct any inaccurate or incomplete data.
• Right to erasure: You can request that we delete your personal data ("right to be forgotten").
• Right to restrict processing: You can ask us to temporarily stop processing your data.
• Right to data portability: You can request your data in a structured, machine-readable format.
• Right to withdraw consent: You can withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to lodge a complaint: You have the right to file a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).

To exercise any of these rights, please contact us at hanna.saarela@oulu.fi. We will respond to your request within 30 days.

10. Cookies & Local Storage

DigiVuo does not currently use cookies, local storage, or any client-side persistence mechanisms to store your data between sessions. All assessment data is held in memory during your session and is discarded when you leave or refresh the page.

If we introduce cookies or analytics in the future, this policy will be updated accordingly and you will be notified through a visible consent mechanism.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. Any updates will be posted on this page with a revised "Last updated" date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

IKAPO Project — University of Oulu
Faculty of Information Technology and Electrical Engineering (ITEE)
📧 hanna.saarela@oulu.fi