UEF CONNECT
- The documents do not say whether your data trains AI.
- The documents do not say whether your data is used for ads.
- Data is shared only with the providers who run the service.
- The documents do not say who can read your content.
A university page plus library rules: they collect IDs including SSN, and you can ask the DPO to see or erase data.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Name, ID, social security number for a library card, plus examples like email, photo, voice, and IP.
Read the exact line
Privacy policy
“For example, a person’s name, social security number, occupation, location data, email address, photograph, voice, IP address and even vehicle registration plate may constitute personal data”
Training
The university says it processes personal data only as far as its activities require, under .
Read the exact line
Privacy policy
“The university is required to: • process personal data only to the extent required by its activities”
Sharing
Library loan data is not given to others except a collection agency; staff must keep it confidential.
Read the exact line
Terms of service
“Loan register data shall not be delivered to any third party other than the collection agency to which all such collection cases will be assigned.”
Kept
Loan details are removed when a book is returned, unless it is overdue; other retention times are not spelled out.
Read the exact line
Terms of service
“The library shall also ensure that all information relating to a loan will be removed from the register when the loaned item is returned to the library, provided that the item is not overdue or otherwise marked for processing.”
Controls
You can ask to see, correct, or erase your data via e-Services, a form, or the Data Protection Officer.
Read the exact line
Privacy policy
“To exercise his or her rights at the University of Eastern Finland, the can make a request via the university's e-Services (staff and students), via a form available on the university’s website, or by contacting the university’s Data Protection Officer.”
Fine print
The library can change these terms; fights in court go to Northern Savo District Court.
Read the exact line
Terms of service
“Should a disagreement result in civil action, the trial shall be held before the Northern Savo District Court.”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Request access, correction, or of your data
University e-Services (staff and students), a form on the university website, or Data Protection Officer helena.eronen@uef.fi
Review your data in the library loan register
Ask the library, citing Article 15 as stated in the library terms
Complain about a library decision
University administration within two weeks of the decision
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
You have to give your social security number to get a library card.
Read the exact line
Terms of service
“As decreed by the EU (EU- 2016/679, Article 6; “Lawfulness of processing”), a person’s social security number must be given when applying for a library card.”
For example, a visitor who only wants to borrow a book still has to hand over their national ID number.
If you pay an overdue invoice and then return the books, they do not have to give that money back.
Read the exact line
Terms of service
“In the event that the library user returns overdue loans after having paid the invoiced fees, the library is not obliged to repay the sum to the user.”
For example, you pay a late-fee invoice, then drop the books off, and you still do not get a refund.
If library computers crash or infect your files, they say they are not responsible.
Read the exact line
Terms of service
“The library assumes no responsibility for damage caused by system malfunctions or computer viruses.”
For example, a virus on a library PC wipes your USB stick and they do not cover the loss.
They can rewrite the library rules without saying here that they will warn you first.
Read the exact line
Terms of service
“The library reserves the right to change the terms of use.”
For example, loan periods or fees could change and you would need to check the website yourself.
If you break the rules, they can freeze your borrowing for a set time.
Read the exact line
Terms of service
“Failure to comply with the library’s rules and regulations will result in a suspension for a fixed period of time.”
For example, staff at the desk can suspend your card after you ignore instructions.
You can ask to be erased, except where the law says they must keep a register.
Read the exact line
Privacy policy
“be forgotten, i.e. be fully erased from the register (not applicable to statutory registers)”
For example, you can ask them to delete extra contact details, but not records they are legally required to keep.
Kids under 15 need a parent or guardian to sign before they get a card.
Read the exact line
Terms of service
“Library users under the age of 15 shall receive rights of use only with a guardian’s written approval.”
For example, a 14-year-old cannot get a library card without a written note from a parent.
If you sue, the case goes to a Finnish court.
Read the exact line
Terms of service
“Should a disagreement result in civil action, the trial shall be held before the Northern Savo District Court.”
For example, a fee dispute that goes to court would be heard in Northern Savo.
They say they use security steps like encryption, access control, and logs.
Read the exact line
Privacy policy
“carry out sufficient measures to comply with the (e.g. information security, access control, log files, data encryption, instructions, regulations, training, non-disclosure agreements)”
For example, they claim staff need access control and encryption when handling student data.
Borrowing records are meant only to track who has which books.
Read the exact line
Terms of service
“The library shall use the loan register only for supervising the circulation of materials.”
For example, they should not use your loan history to send you unrelated ads.
Words to know
Legal words from the lines above, in plain English.
- precise geolocation
- Your exact position, usually from GPS, often accurate to within a few metres. For example, an app can tell not just your city but which building you are in right now.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- data subject rights
- The legal rights you have over your data, such as seeing it, fixing it, deleting it or moving it. For example, you can email the company and ask for a copy of everything it holds about you.
- GDPR
- Europe's privacy law, which requires a legal reason for using your data and gives you strong rights over it. For example, an EU user can demand to know why the app keeps their location history.
How we got here · grade D · score 38/100 · 15 of 15 policy answers backed by a verified quote · 7 not stated
What does the app collect beyond what it needs to work?
They treat many identifiers as personal data and the library requires a social security number for a card, which is more than needed just to log in.
Does it record your voice, face or body, and what happens to that?
Not stated in the documents.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
Not stated in the documents.
Do they sell or share your data, and can you opt out?
The library says loan data is not given to third parties except a collection agency, and national stats are impersonal.
What rights do they take over what you type and what the AI makes?
Not stated in the documents.
How long do they keep your data after you delete it, and can you delete it in the app?
You can ask to be erased (except statutory registers) via e-Services, a form, or the DPO; loan rows are dropped when books return.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
They list measures such as access control, logs, encryption, training, and non-disclosure agreements.
Is there a real age gate, and are teens protected?
Under-15s need a guardian’s written approval for a library card; there is no described age-assurance system for 18+.
Will they tell you when the rules change, and is the policy specific?
Library terms are dated from 1 September 2018 and they reserve the right to change them; the privacy page has no date.
Can they close your account without warning, and can you get your data out first?
They can suspend borrowing for unpaid fees or rule-breaking; desk staff decide and enforce the suspension.
If something goes wrong, who pays?
The library takes no responsibility for computer malfunctions or viruses, and you must pay for damage you cause.
Do subscriptions renew on their own, and can you get a refund?
Not stated in the documents.
The privacy policy is 705 words at a professional or legal expert level (Flesch reading ease 28); the terms are 1,398 words at a college level.
