Technology-based security systems – Privacy notice

The following technology-based security systems are used in the Ģ��ֱ��:

Camera surveillance system
Intrusion alarm system
Access control system
Locking and key management system

Published

23.8.2023

What should you know about the processing of your personal data?

The Ģ��ֱ�� collects personal data about you to carry out its duties. You have rights to this data, such as the right to access the data and the right to be sure that it is stored securely and only for the necessary time. Above all, you have the right to know the following:

what information we collect about youand why,
for how long, and where we keep this information, and
to whom we share this information.

All of these points are explained in this privacy notice.

How to find the information you are looking for?

We have created this privacy notice to be as easy as possible to use and understand. That is why you will find the key points summarised under each section. If you are interested in knowing more, please follow the links in the sections or contact the data protection officer of the Ģ��ֱ��.

Contact the data protection officer

Why we process your personal data?

Ģ��ֱ�� manages access to the campus premises and maintains video surveillance systems to protect property, prevent misuse and criminal activities, investigate any offenses and misuse that have taken place, and ensure the safety of staff and students.

Surveillance camera recordings can also be used:

to demonstrate grounds for termination;
to investigate or prove harassment referred to in the Act on Equality between Women and Men (609/1986), harassment referred to in section 14 of the Non-Discrimination Act (1325/2014) or harassment and inappropriate behaviour referred to in the Occupational Safety and Health Act (738/2002) if the employer has justified cause to suspect the employee of harassment or inappropriate behaviour; or
to investigate an occupational accident or other dangerous or threatening situation referred to in the Occupational Safety and Health Act.

What data we process and how long?

The time we store your personal data varies from 30 days to 400 days. To get more information about what personal data we collect and how long we keep certain information, check the sections below.

Time data and image recordings. Maximum of 30 days

Recordings can, however, be retained for longer periods if this is necessary to process a matter referred to in section 3 (Why we process your personal data) or if the employer needs the recording to substantiate the legality of the termination of an employment relationship or if there are other specific reasons to retain the recordings.

Time, location, event and user data. Maximum of 400 days

Time, location, event and user data. maximum of 400 days

Time, location, event and user data. Maximum of 400 days

What rights you have and how to exercise them?

You have the following rights:

Right to access your data.
Right to have any incorrect information corrected.
Right to have your data erased (right to be forgotten), in certain situations.
Right to restrict processing.
Right to have the responsible unit inform the party to which your data is disclosed of your data being corrected, erased, or the processing being restricted.
Right to object processing, e.g. direct marketing.
Right to have your data transferred from one system to another, when processing is based on an agreement or your consent.
Right to be notified of any information security breaches resulting in a high risk.
Right to file a complaint with the supervisory authority.

You can exercise your rights by sending a request to the university's Registry Office. You can use the form on the Registry Office's website or send your request informally. Keep in mind that withdrawing your consent doesn’t change the processing that happened before the withdrawal.

Get to know your rights

Use the form of the Registry Office

Send an informal request to the Registry Office

Who can access your personal data?

The information recorded by the technology-based security systems can only be accessed by staff members who use the systems and/or process personla data as part of their work tasks.

Also, the service providers we use can access your personal data in their role as data processors. However, these providers do not actively process your personal data, but they have access to it for maintenance reasons.

Learn more about data processors

To whom we transfer your data?

Personal data recorded by the technology-based security systems can be used in the prevention and investigation of offences, accidents or other similar events involving human lives or property.

Example 1: showing surveillance camera recordings to a Ģ��ֱ�� staff member or student in order to identify stolen property and/or a suspected offender.

Personal data can be disclosed to investigative authorities on justified grounds.

Example 2: disclosing surveillance camera recordings to the police for criminal investigation.

Personal data can be disclosed to third parties on justified grounds.

Example 3: disclosing surveillance camera recordings on request to an insurance company for the processing of an insurance incident.

No personal data stored in the technology-based security systems is transferred outside the EU/EEA.

On what basis we process your personal data?

We process your personal data based on legal grounds, agreements, or your consent. If you want to dive deeper into our legal bases, such as the relevant legal provisions, you can find more information through the menu below.

We process personal data based on legal regulations (public interest) and the legitimate interests of the data controller (Article 6(1)(f)and(e) of the General Data Protection Regulation of the EU (679/2016)). We have a duty to provide our students with a safe learning environment under the Finnish Universities Act and and our staff with a safe working environment under the Occupational Safety and Health Act (738/2002).

How to contact us?

If you want more information about the processing of your personal data, do not hesitate to contact our data protection officer via email or phone (+358 40 805 3297).

Contact our data protection officer

Below you find the contact information of the responsible unit. If you wish, you can directly contact the responsible unit instead of the data protection officer.

If you want to exercise your rights (withdraw your consent for example) you can contact the Registry Office by email:

Send a request to the Registry Office

Ģ��ֱ��