Updated 14.4.2023

1 Data controller and contact details for register matters

Lahden Talot Oy (business ID 1108275-0)

Aleksanterinkatu 8, 15110 Lahti, Finland

Tel. 03 851 570

tietosuojavastaava@lahdentalot.fi

2 For what purposes and on what basis do we process your personal data?

The processing of data is based on the legitimate interest of Lahden Talot Oy. The purpose of camera surveillance is:

• protect property, prevent vandalism and crime
• assist in the investigation of crimes that have already taken place and situations that endanger property and security
• ensure the safety of people and areas in the area.

Recordings from camera surveillance may also be used for the following purposes:

• to establish the grounds for termination of employment
• to investigate and prove harassment or harassment within the meaning of the Equality Act or harassment or inappropriate behaviour within the meaning of the Health and Safety at Work Act, if there are reasonable grounds to suspect that the employee has committed harassment, harassment or inappropriate behaviour
• to investigate an accident at work or any other situation involving a risk or threat within the meaning of the Occupational Safety and Health Act.

3 What kind of personal data do we process and where do we collect it from?

The register contains images of persons moving around the areas and premises of residential buildings owned by Lahden Talot Oy that are subject to camera surveillance. In addition to the image, the register records the date and time of the events.

The personal data recorded in the register is collected in connection with the surveillance of the recording camera. Other data sources are used within the limits set by law.

4 To whom do we disclose or transfer data and do we transfer data outside the EU or EEA?

We do not routinely transfer your personal data outside the EU or EEA. It may be disclosed to public authorities, such as the police, for the purpose of investigating criminal offences.

We use an external service provider to carry out camera surveillance.

5 How do we protect your data and how long do we keep it?

The electronically processed data contained in the register are protected by firewalls, passwords and other technical means generally accepted in the field of information security. Manually maintained data shall be located in premises to which unauthorised access is denied.

Only identified employees of the controller and of companies acting on behalf of and for the account of the controller, who have signed a confidentiality agreement, have access to the data contained in the register, subject to individual access rights granted by the controller.

We contract with all service providers acting as processors to process personal data and require service providers to process personal data only to the extent necessary to provide the service.

The recordings are kept for as long as they are necessary to fulfil the purpose of the camera surveillance. The camera surveillance recordings shall be destroyed after two months at the latest. Recordings that are needed, e.g. as evidence, are kept until the case has been concluded, e.g. until a final judgement has been obtained.

6 Your rights as a data subject in relation to data processing

Requests concerning the rights of data subjects should be sent to the address mentioned in paragraph 1. As a registered user, you have the following rights:

• Right of access and right to request rectification and deletion of data
• Right to object and restriction of processing
• Right to complain to a supervisory authority