Personal data is processed for the implementation of the eAutokoulu service, which is used as the registrar’s customer management system and for carrying out teaching activities in the driving school. The driving and teaching data obtained through the service is stored for educational purposes. Personal data is also processed for the aforementioned purposes in order to maintain student records. The basis for processing personal data is a contract between the parties or a legitimate interest of the registrar based on a factual link between the parties.

The person has a customer relationship or a relationship that is equivalent to a customer relationship with the registrar.

The Driving Licence Act Section 81 Supervision of Driving Schools obliges the driving school to keep student records.

The driving school must keep records of the pupils and the instruction given to them, the vehicles used in the instruction, the method of instruction and the teaching certificates issued for the instruction. The driving school shall keep the student records referred to in this subsection for six calendar years following the year in which the education is provided, after which the student records shall be destroyed.

The providing of personal data is a condition for accessing or using the service. The registrar reserves the right to suspend the provision of services or block access to services if the data subject does not provide information that is relevant to the service or requests its deletion.

In particular, the register contains the following groups of personal data: The student records must include the following information: the student’s name, personal identification number, instructor, start date of driving instruction, driving licence category, dates, times, and the subjects of theory and driving lessons, as well as the instructor’s name. Additionally, information on simulator-based driving instruction must be recorded. The providing of personal data is a condition for accessing or using the service. The registrar reserves the right to suspend the provision of services or block access to services if the data subject does not provide information that is relevant to the service or requests its deletion.

Personal data is collected from the data subject.

The personal data processed in the service will not be transferred outside the EU or EEA.

The registrar shall process your personal data in this register for as long as the registrar has a valid basis for processing the data as described in this policy, and for a reasonable period thereafter, or for as long as it has a legal obligation to store the personal data. The driving school shall keep the student records referred to in this subsection for six calendar years following the year in which the education is provided, after which the student records shall be destroyed.

Right of access to data: The data subject has the right to check the personal data stored in the register at reasonable intervals.

Right to rectify data: The data subject has the right to request that the registrar will rectify, without undue delay, inaccurate or erroneous personal data concerning him or her.

Right to erasure: Data subjects have the right to obtain the erasure of their data without undue delay, for example, where the personal data are no longer necessary for the purposes for which they were originally processed, where the personal data have been unlawfully processed, or where the data subject withdraws his or her consent and there is no other lawful basis for the processing.

Right to restriction of processing: The data subject has the right to require the registrar to restrict processing in certain circumstances, for example, where the data subject contests the accuracy of his or her data or where the processing is unlawful.

Right to object: In certain situations, the data subject has the right to object to the processing of personal data, for example, when processing personal data for direct marketing purposes or when the processing is based on legitimate interests.

The right to data portability: If the data subject’s personal data is processed automatically based on your consent or a contract, and the data has been obtained from the data subject, the data subject has the right to request the transfer of the data to another system.

The right to withdraw consent: If the processing is based on the consent given by the data subject, the data subject has the right to withdraw their consent at any time.

The right to lodge a complaint with a supervisory authority: Primarily, the registrar hopes that any disputes regarding the processing of personal data will be resolved amicably between the parties. However, if such a matter cannot be amicably resolved, the data subject has the right to lodge a complaint with the data protection supervisory authority.

The registrar monitors changes in data protection legislation and regulatory guidelines and develops the operation of the service and may, therefore, update this policy.