Tietosuojaseloste |  Kultaharkkoarvonnan tietosuojaseloste | Kameravalvonnan tietosuojaseloste | Privacy Notice for Camera Surveillance

Privacy Notice for Camera Surveillance

This privacy notice describes how Kultakiertue Oy, its subsidiaries and other group companies (hereinafter “Kultakiertue”) collect and process personal data in connection with camera surveillance in our premises and mobile service points. The purpose of camera surveillance is to ensure a safe environment for our customers and employees and to protect property.

Privacy and the security of personal data are important to us. As the data controller, Kultakiertue is responsible for ensuring that personal data is processed securely and in accordance with applicable data protection legislation.

1. Data Controller

Kultakiertue Oy
Business ID: 3473674-5
Postal address: Mäkelänkatu 87
Postal code and city: 00610 Helsinki
Email: privacy@kultakiertue.fi

2. Purpose of Processing Personal Data

Purpose of Processing Personal Kultakiertue processes the collected data for the following purposes:

• Ensuring the safety of employees and customers and preventing and investigating situations that may compromise safety.
• Protecting property and preventing or investigating situations that may endanger property.
• Preventing, investigating, and substantiating crimes, violations, and other misuse.
• Monitoring the proper functioning of production processes (quality assurance) and investigating situations that may endanger the production process.
• Preparing and handling insurance claims of Kultakiertue or third parties.

In addition to the purposes described above, camera surveillance may also be used when necessary in situations referred to in the Act on the Protection of Privacy in Working Life.

3. Data Subjects and Collected Personal Data

We obtain personal data through camera surveillance systems. Personal data is collected directly from the camera surveillance system when a data subject moves within the surveillance area. Personal data is recorded as individuals move within the monitored areas of our premises, mobile service points, and their immediate surroundings.

The camera surveillance system produces real-time images and records video footage and, when necessary, individual still images, as well as information about the time of recording. Entry into a monitored area is clearly indicated with appropriate signage.

The camera surveillance system does not record audio.

We may combine camera surveillance data with receipt information to verify the accuracy of purchase transactions.

4. Legal Basis for Processing Personal Data

Processing is based on legitimate interest.

Through camera surveillance, we increase transaction safety and prevent and reduce crime. Camera surveillance also helps us correct errors and ensure the legal protection of customers and employees. In addition, we may record and use the collected material for the preparation, presentation, and defense of legal claims, such as compensation claims.

5. Processors of Personal Data and Disclosures

Personal data is processed by authorized Kultakiertue employees based on their job responsibilities, as well as by potential service providers. Kultakiertue processes personal data itself but may also use various service providers, such as camera surveillance system providers and security companies. These service providers act as data processors for Kultakiertue and process personal data in accordance with a data processing agreement. We may share your personal data with companies within our corporate group.

Personal data included in the register may be disclosed to insurance companies of Kultakiertue’s partners or of individuals or companies operating in the monitored premises for the purpose of handling compensation claims related to damage incidents, provided that we have considered that the disclosure of the recording does not disproportionately infringe upon the rights or interests of the individuals appearing in the recording.

We may also disclose personal data to authorities, either on the basis of authorities’ statutory right to obtain information or if disclosure is necessary to safeguard the legal rights of Kultakiertue or a third party.

As a rule, personal data is not disclosed or transferred outside the EU or EEA.

6. Principles of Personal Data Protection

Recordings are generally retained for a maximum of 30 days. If the data contained in a recording is needed for the presentation, investigation, or defense of a legal claim or for handling an insurance matter, the data will be retained until the matter has been fully resolved.

7. Rights of the Data Subject

Recording devices and the surveillance system are located in locked premises with restricted access. Access to recordings is granted only to specifically designated individuals using personal user IDs and passwords. Access rights are limited according to job duties and all access is logged.

8. Rights of the Data Subject

Right of access

The data subject has the right to inspect the data processed about them and to receive a copy of it. When you request access to your data, Kultakiertue will inform you whether personal data concerning you is being processed and will provide a copy of the personal data being processed.

Right to erasure

The data subject has the right to request the deletion of their personal data from the register. The data will be deleted if there is no longer a lawful basis for processing.

To exercise your rights, we require that you specify the exact time and place as well as a description of identifying characteristics by which you can be identified in the camera surveillance area. Please note that statutory obligations may prevent us from disclosing or transferring all of your data or deleting it immediately.

9. Right to Lodge a Complaint

If the data subject considers that we do not process personal data in accordance with the EU General Data Protection Regulation, the data subject may lodge a complaint with the supervisory authority.

10. Contact Details

If you have questions about this privacy notice, the processing of your personal data, your rights, or if you wish to exercise any of your rights, please contact us at privacy@kultakiertue.fi. We may request additional information to verify your identity.

11. Changes to the Privacy Notice

This privacy notice may be updated from time to time due to changes in business operations or regulation. Any changes will be published on this website.