Privacy Statement: Video Surveillance

Oy Matkahuolto Ab
Business identity code 0111393-9
P.O. Box 100
00101 Helsinki
Tel. 020 710 5000

(Hereinafter “Matkahuolto” or “We”).

Some of Matkahuolto’s service outlets have recording camera surveillance.

Matkahuolto acts as a controller for the personal data it collects and processes through camera surveillance. As the controller, Matkahuolto is responsible for such personal data and their processing. As data protection is about trust, the protection of your privacy and personal data is of great importance to Matkahuolto.

Oy Matkahuolto Ab
Customer Service Centre
P.O. Box 100
00101 Helsinki
tietosuoja@matkahuolto.fi

2. What data do we process?

Camera surveillance recordings contain information about people moving in the camera surveillance area. In addition to the video, the date and time of events are recorded.

3. Purposes and legal bases for the processing of personal data

The personal data collected through camera surveillance are processed in order to ensure order and safety and to investigate suspected or known cases of crime, misconduct, damage or accident in Matkahuolto premises. Camera surveillance is also used to monitor the production process and to track down lost parcels. We inform people of camera surveillance with signs in the premises and areas where the cameras are located.

The use of camera surveillance is based on the legitimate interest of Matkahuolto or a third party. The legitimate interest in carrying out camera surveillance is, in particular, related to one of the following:

Ensuring the safety of properties as well as customers, employees and other persons visiting the premises, as well as public safety
Safeguarding the legal rights of customers, employees and other persons visiting the premises
Ensuring public order
Protection of Matkahuolto’s property

4. Regular sources of data

Recording surveillance cameras are used in the following Matkahuolto’s own service outlets: Helsinki, Jyväskylä, Lahti, Mikkeli, Pori, Tampere, Turku and Vantaa.

With the help of camera surveillance, we collect and store information at Matkahuolto outlets where camera surveillance is currently in use.

We inform people of camera surveillance with signs at Matkahuolto outlets where camera surveillance is used. Camera surveillance signs are displayed in the premises and areas where the cameras are located.

5. Transfers of personal data

We may transfer a data subject’s personal data to third parties for the purposes described in this privacy statement as explained below. When transferring personal data to their processor, we ensure, for example through contractual arrangements, that the processor processes such data only in accordance with the written instructions issued by Matkahuolto and exclusively for the purposes indicated in this privacy statement. Also, Matkahuolto ensures that access to personal data is limited to persons who need to access it for work-related reasons.

Processors of personal data: Matkahuolto may transfer personal data to processors for the purpose of providing services or completing tasks they have been assigned to carry out, such as guarding Matkahuolto premises, IT system maintenance or other data processing tasks.

Data will not be transferred outside the member states of the European Union or the European Economic Area without a transfer basis in accordance with the legislation currently applicable. To receive more information on possible transfers of personal data and the applicable transfer bases, please use the contact information given in section 1 of this privacy statement.

6. Disclosures of personal data

We will only disclose personal data to third parties in the cases set forth below.

We may disclose your personal data as required by competent authorities, or as necessary to investigate cases of crime, misconduct, damage or accident in accordance with currently applicable legislation
If we sell, buy, merge or otherwise organise our business, we or a party acting on our behalf may disclose your personal data to buyers and their advisors in accordance with currently applicable legislation.

7. Personal data protection policy

Manually processed data is kept in locked rooms at Matkahuolto outlets.

Electronic data is stored in a database that may only be accessed by specifically designated staff members of Matkahuolto or a party acting on its behalf who need to access such data for work-related reasons, have received adequate training and are bound by a statutory or contract-based non-disclosure obligation.

The machine-readable service is located in a protected and locked computer room accessible only by technical personnel with access badges. The servers are protected through technical means.

All the data communications between the browser and the server environment are encrypted.

Access to servers and applications is restricted through role-based access control management.

8. Storage period of personal data

The storage period for data collected through camera surveillance varies by service outlet depending on the storage capacity available. In all cases, the data will not be stored for longer than one year unless a longer storage period is required for the preparation, presentation or defense of a possible legal claim or other investigation of cases of crime, misconduct, damage or accident.

9. Rights of data subjects

The EU General Data Protection Regulation guarantees data subjects a number of rights that you can exercise to determine how your personal data is processed. You may exercise the following rights in respect of Matkahuolto insofar as Matkahuolto serves as the controller of your personal data.

Right of access: The data subject has the right to receive a confirmation from Matkahuolto as to whether Matkahuolto processes his or her personal data and in order to access such data. Matkahuolto may request the data subject to formulate his or her request in more detail regarding the procedure for the delivery of the data, etc.
Right to correct personal data: The data subject has the right to correct any errors in the personal data processed by Matkahuolto or complete any incomplete data.
Right to be forgotten: If there is no longer any legal basis for the processing of personal data or a statutory or contractual provision obligating Matkahuolto to retain personal data ceases to apply, the data subject has the right to demand that Matkahuolto erase his or her personal data and Matkahuolto is required to comply with the request.
Limitation of processing: In certain cases stipulated by law, the data subject may have the right to demand that Matkahuolto limit the processing of his or her personal data.
Right to object the processing of personal data: Additionally, subject to certain conditions, the data subject may have the right to object to the processing of his or her personal data in situations in which processing is based on legitimate interest, and Matkahuolto is required to comply with such a request unless Matkahuolto demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.

To exercise the above rights, you must use the contact information given in section 1 of this privacy statements.

Matkahuolto will take prompt action in response to the data subject’s request and will provide the data subject with information on the exercise of rights normally within one month of receipt of the request. Additionally, the data subject has the right to lodge a complaint concerning the processing of personal data by Matkahuolto with the data protection authority. Any complaint must be filed with the competent authority, in Finland with the Data Protection Ombudsman in accordance with the instructions they provide. Address of the Data Protection Ombudsman’s website: http://www.tietosuoja.fi.

10. In conclusion

Matkahuolto reserves the right to update and revise this privacy statement. Unless otherwise provided by law, Matkahuolto may not necessarily notify the data subject of such changes personally, and Matkahuolto therefore urges data subjects to check this private statement from time to time for any changes.