Zekki.fi – Privacy Policy

Updated: April 14, 2025

Date of Creation of the Privacy Policy

January 28, 2022

Project Name and Duration

The Zekki service. At present, development of the Zekki service is being conducted within the Digital Support Pathways for Young People – 3X10D – development project, which will end on December 31, 2025.

Project Description

Zekki.fi is a digital support service open to all young people. It brings together various support services targeted at young people and offers them based on the answers given by users within the service, tailoring the options to each young person’s situation.

Data Controller for the Project

Diaconia University of Applied Sciences (Diakonia-ammattikorkeakoulu Oy),
P.O. Box 12, 00511 Helsinki, Finland

Data Protection Officer
tietosuojavastaava@diak.fi

Project Contact Person
Project Manager Päivi Sipola,
paivi.sipola(at)diak.fi,
+358 50 598 1509

Project Participants
Funding provided by STEA

What personal data is processed within the project?
Zekki.fi is anonymous and open to all young people (recommended age range: 15–25 years). Users are asked about their age group (e.g., 15–17, 18–21), gender, and municipality of residence. Responding to these is optional. The contact form asks for name, email, and phone number, though only an email address is mandatory.

What is the legal basis for processing personal data?
The legal basis for processing personal data under Article 6(1) of the EU General Data Protection Regulation (GDPR) is:

Consent from the participant
Legitimate interest, namely: using the data for research into young people’s well-being and the service system.

Are sensitive personal data (special categories of personal data under the GDPR) processed in the project?
No sensitive or special categories of personal data are processed in the study.

From which sources is personal data collected?
Personal data is collected from:

Participants in the study. Participation is voluntary, and individuals are not required to provide personal data.
The contact form.

Will personal data be transferred or disclosed outside the project?
Data will not be transferred or disclosed outside the project.

Will personal data be transferred outside the EU/EEA?
Data will not be transferred or disclosed outside the EU/EEA.

How long is personal data retained?
Data is retained as long as the Zekki service is in use. Data obtained through the contact form is not retained after processing.

How is personal data protected?
A data protection impact assessment has been conducted for the project.

Physical materials
No physical materials are collected.

Electronic materials

Usernames
Passwords
Restricted access rights
Anonymization/pseudonymization of research data
The stored data is already anonymous by nature, so no further anonymization or pseudonymization is applied.

How is personal data handled after the project ends (prior to deletion)?
All personal data will be deleted.

Automated Decision-Making and Profiling
The project’s personal data register and its contents are not used for automated decision-making or profiling.

What rights do I have as a data subject?
Using the Zekki service, as well as providing age group, gender, and municipality information, is voluntary. As the stored data is inherently anonymous, it is not possible to identify anyone from it. Consequently, individuals cannot access their own data, nor can specific user data be removed from the dataset. Filling out the contact form is also voluntary.

If you would like more information or wish to exercise your rights, you can contact Diak’s own Data Protection Officer at tietosuojavastaava@diak.fi, or submit a request using the form available on Diak’s website.

You can also contact the Data Protection Ombudsman, a public authority overseeing the processing of personal data in Finland.

Office of the Data Protection Ombudsman
PO Box 800, 00531 Helsinki
tietosuoja(at)om.fi
029 566 6700
www.tietosuoja.fi

General guidance for individuals: 029 566 6777