Privacy Statement: Video Surveillance

Oy Matkahuolto Ab Business identity code 0111393-9

Oy Matkahuolto Ab Customer Service Centre P.O. Box 100 00101 Helsinki tietosuoja@matkahuolto.fi

2. What data do we process?

Some of Matkahuolto’s locations have recording camera surveillance, which is part of our surveillance system. We inform people about camera surveillance with signs in the locations where camera surveillance is used.

Camera surveillance systems collect and store data in the form of digital video recordings. This data includes images of the surveillance area or parcel locker where the camera is located, as well as the date and time of the events.

3. Purpose and legal basis of the processing of personal data

Personal data collected through camera surveillance is processed for the following purposes:

Ensuring order and security
Investigating suspected or established cases of crime, misconduct, damage or accidents on Matkahuolto premises
Monitoring the proper functioning of the production process
Tracing lost parcels
Ensuring the personal safety of employees
Protection of property and prevention and detection of property crime
Preventing and resolving situations that could endanger safety, property and the production process
Ensuring employees’ interests and rights
As regards parcel lockers, data is also processed to monitor proper use of the equipment and to detect and prevent malicious and fraudulent activity.

The use of camera surveillance is based on the legitimate interest of Matkahuolto or a third party, which is primarily one of the following:

Ensuring the safety and security of premises and of customers, employees and other visitors to the premises
Safeguarding the legal rights of customers, employees and other persons visiting the premises
Ensuring public order
Protection of Matkahuolto’s property

4. Transfers of personal data

We may transfer personal data to third parties for the purposes of processing described in this Privacy Statement. When we transfer personal data to a processor, we ensure that the processor processes the data only in accordance with the written instructions provided by Matkahuolto and only for the purposes specified in this Privacy Statement. Access to personal data is limited to persons who need access to the data in the course of their duties.

Data collected through camera surveillance will not be transferred outside the Member States of the European Union or the European Economic Area.

5. Disclosures of personal data

We will only disclose personal data to third parties in the cases set forth below.

We disclose personal data as required by competent authorities, or as necessary to investigate criminal offences, misconduct, accidents or injuries in accordance with applicable legislation.

If we sell, buy, merge or otherwise reorganise our business, we will disclose personal data to buyers and their advisors in accordance with applicable legislation.

6. Personal data protection policy

Access to digital recordings is restricted. Images or video recordings are processed only by persons who are responsible for the use and/or maintenance of the equipment and by persons whose duties include the processing of recordings, who have received adequate training and who are bound by a legal or contractual obligation of confidentiality.

The servers are protected using technical means and all communication between the browser and the server environment is encrypted.

7. Storage period of personal data

Camera surveillance recordings are kept for the period required for the purpose for which the personal data are used, up to a maximum of one year, unless a longer period is necessary considering the purpose of the register. The storage period varies depending on the technical solution.

8. Rights of the data subject

The EU General Data Protection Regulation guarantees data subjects a number of rights that you can exercise to control the processing of your personal data.

Right of access: You can request confirmation as to whether Matkahuolto is processing information about you and ask to review the information we process.
Right to rectification: You have the right to request the rectification of inaccurate or incomplete information.
Right to be forgotten: You can request the erasure of your personal data if there is no longer a lawful basis for the processing or if there is no longer a legitimate need to retain your personal data.
Limitation of processing: In certain cases stipulated by law, you may have the right to demand that Matkahuolto limit the processing of your personal data.
Right to object to the processing of data: In certain situations where the processing of your personal data is based on a legitimate interest, you can object to the processing of your data.

To exercise your rights, please use the contact information given in section 1 of this Privacy Statement. Matkahuolto will process your request without delay and provide information on the measures taken, normally within one month of receipt of the request.

You also have the right to lodge a complaint about the processing of personal data with the supervisory authority. Address of the Data Protection Ombudsman’s website: http://www.tietosuoja.fi.

10. In conclusion

Matkahuolto reserves the right to amend and update this Privacy Statement as necessary. We recommend that you consult the contents of the Privacy Statement on a regular basis. We will communicate material changes to the Privacy Statement in a noticeable way, for example, in email newsletters or by publishing a notice on Matkahuolto’s website.