Nor-Maali Oy (Business ID 2777254-5)
Vanhatie 20, 15240 Lahti
The processing of personal data is based on a legitimate interest of Nor-Maali Oy. The purpose of camera surveillance and access control is:
Additionally, the records of the camera surveillance may be used for the following purposes:
The register includes the footage recorded by the cameras located in the camera surveillance area on Nor-Maali Oy premises located at Vanhatie 20 (Lahti). In addition to the footage, the date and time is recorded to the register.
The access control system forms a register based on the use of an access card, to which accepted and dismissed access events (stamp data) including dates and times, are stored. In addition, the register includes the following information of the persons to whom the access card has been granted:
The source of the information stored to the register is primarily you in connection with the recording camera surveillance and access control. Other sources of information shall be used within the limits of the legislation.
Personal data is not regularly disclosed to third parties or transferred outside of the EU or EEA. Data may be disclosed to the authorities for the investigation of crimes if needed.
We use an external service provider to implement access control. We make data processing agreements with service providers acting as processors and ensure that our collaboration partners process personal data only to the extent that is necessary for the provision of the service in question.
The register is kept in a locked place and on password-protected devices. Only pre-designated persons have access to the register to the extent required by their working duties. By concluding the data processing agreements with our subcontractors, we ensure the protection of personal data in outsourcing situations.
The personal data processed as a part of the register shall be stored for as long as it is necessary for enforcing the purpose of the camera surveillance and access control. The access control data may be processed retrospectively for approx. 2 months. Depending on the storage capacity, the camera footage may be processed retrospectively for approx. 5 months.
The requests concerning data subject rights must be submitted using the contact details mentioned in section
Right to access, correct or delete your personal data
Right to object and restrict the processing
Right to lodge a complaint with the supervisory authority