Updated 5.3.2024

1 Data controller and contact details for register matters

Lahden Talot Oy (business ID 1108275-0) and its affiliated companies Lahden Asunnot Oy (2108080-4) and Lahden Palveluasunnot Oy (2110856-3)

Lahden Talot Oy / Data protection issues
Aleksanterinkatu 8, 15110 Lahti
Tel. 03 851 570
tietosuojavastaava@lahdentalot.fi

2 For what purposes and on what basis do we process your personal data?

Each Group company as a controller maintains its own register of the locking systems of the properties it manages. The processing of personal data is based on the legitimate interest of the Lahden Talot Group and the lease agreement (for key management of apartments).

The purpose of the data processing is the safe organisation of access management:

• Management of access to premises, access rights and keys
• Preventing and investigating incidents and crimes
• Protecting the property and property of residents and ensuring the safety of residents and others.

3 What kind of personal data do we process and where do we collect it from?

The register contains the following information about the persons to whom the keys to the property have been handed over:.

• Name and address of the recipient of the keys; key number and access rights assigned to it
• Information on the handing over and return of the key (including date, key number and receipt and, if applicable, the power of attorney).

Based on the use of the key, the locking system creates a register which, depending on the property, records the access events to the public areas of the property (date, time, property and door) and/or the access sequence to the lock case (i.e. information on the use of the key without precise time information).

The personal data to be recorded in the register is primarily collected from the resident/key holder in connection with the handover and control of the key. Other data sources are used within the limits set by law.

4 To whom do we disclose or transfer data and do we transfer data outside the EEA?

We do not routinely disclose your personal data outside the Lahden Talot Group, nor do we transfer it outside the EEA. Data may be disclosed to public authorities, such as customs authorities or the police, for the purpose of investigating criminal offences.

We use external service providers, such as locksmiths, to manage and maintain our locking systems and manage keys. We contract with all service providers to process personal data and require our partners to process personal data only to the extent necessary to provide the service.

5 How long do we keep your data?

The data is stored on information systems and platforms that use both technical and software tools to ensure data security and control access to the data.

The data are kept for as long as they are necessary for the purpose of the control. The maximum period of time during which the transaction data are kept in the database is two months. Data needed for the presentation or defence of a claim or as evidence in a criminal case, for example, are kept for as long as the case is closed, e.g. a final judgement has been obtained.

6 Your rights as a data subject in relation to data processing

Requests concerning the rights of data subjects should be sent to the address mentioned in paragraph 1. As a registered user, you have the following rights:

• Right of access and right to request rectification and deletion of data
• Right to object and restriction of processing
• Right to complain to a supervisory authority