Hyppää sisältöön

Privacy Notice – CCTV Surveillance

1. Data Controller
Kiinteistö Oy Kauppakeskus Kaari / Shopping Centre Kaari
Kantelettarentie 1
00420 Helsinki

2. Contact for Data Protection Matters
Shopping Centre Kaari management office staff
Email: info@kauppakeskuskaari.fi

3. Scope of This Privacy Notice
This Privacy Notice applies to CCTV surveillance carried out on the premises of Shopping Centre Kaari and to the related processing of personal data.

4. Purpose of CCTV Surveillance
The purposes of CCTV surveillance are to:

  • ensure the safety of people and property
  • prevent crime, disturbances, and damage
  • investigate damage, misuse, and situations that may endanger safety
  • where necessary, prepare, present, defend, or investigate legal claims

5. Legal Basis for Processing
The processing of personal data in connection with CCTV surveillance is based on the legitimate interests of the data controller in ensuring the safety of the shopping centre, its customers, employees, tenants, and other property.

6. Personal Data We Process
In connection with CCTV surveillance, the following data may be processed:

  • CCTV footage of individuals
  • event information recorded in the footage
  • the time the footage was recorded
  • the location where the footage was recorded
  • any additional information related to the footage in connection with an investigation

7. Categories of Data Subjects
The following categories of individuals may be subject to CCTV surveillance, for example:

  • customers
  • visitors
  • employees of the stores
  • service providers
  • other persons moving around the shopping centre premises

8. Areas Under Surveillance
CCTV surveillance may be carried out in the public areas of Shopping Centre Kaari, near entrances, along access routes, in loading and service areas, and in other locations where surveillance is justified for security reasons.

9. Recipients of Personal Data
Recordings may only be processed by persons who are authorized to do so.

Data may be disclosed or shown to:

  • authorized personnel of Shopping Centre Kaari
  • providers of guarding and security services
  • technical service providers in connection with system maintenance
  • authorities in situations required or permitted by law

10. Disclosure and Transfer of Data
As a rule, recordings are not transferred outside the European Union or the European Economic Area.

Data may be disclosed to authorities in accordance with applicable legislation.

11. Retention Period
CCTV recordings are retained only for as long as necessary to fulfill the purposes of CCTV surveillance.

As a rule, recordings are stored for no more than 30 days, unless there is a need to retain a recording for longer due to a crime, damage, misuse, or another investigative matter.

12. Protection of the Register
Recordings are protected by appropriate technical and organizational measures.

Access to recordings is limited to specifically authorized persons to the extent required for their job duties.

Access rights are restricted, and all persons processing the data are bound by confidentiality obligations.

13. Rights of the Data Subject
Under applicable data protection legislation, the data subject has the right to:

  • receive information about the processing of their personal data
  • request access to personal data concerning them
  • request the rectification of inaccurate data
  • request erasure of data where there is a lawful basis for doing so
  • request restriction of processing
  • object to processing on grounds relating to their particular personal situation
  • lodge a complaint with the supervisory authority

The exercise of rights relating to CCTV recordings is always assessed on a case-by-case basis, as the rights of other individuals and the protection of their privacy may limit the disclosure of recordings.

14. Exercising Your Rights
Requests relating to data protection may be sent by email to info@kauppakeskuskaari.fi.

To process the request, the data controller may ask for additional information, such as:

  • as precise a time as possible
  • the location
  • a description of the incident
  • information necessary to verify identity

15. Right to Lodge a Complaint with the Supervisory Authority
The data subject has the right to lodge a complaint with the Data Protection Ombudsman if they believe that their personal data has been processed in violation of data protection legislation.

16. Updates to This Privacy Notice
Shopping Centre Kaari reserves the right to update this Privacy Notice as necessary, for example in response to changes in its operations, the implementation of CCTV surveillance, or legislation.