Privacy statement for camera surveillance

Processing of personal data in Posti camera surveillance register is the responsibility of Posti Group Corporation

Purpose and legal basis of personal data processing

Posti processes data in the camera surveillance register in order to:

• Ensure the personal safety of employees;

• Protect property;

• Supervise the appropriate operation of the production process;

• Prevent and investigate incidents that compromise safety, property and the production process;

• Prevent and investigate apparent work-related risks and threats;

• Prevent and investigate property crime;

• Ensure an employee’s interests and rights at the employee’s request (requires an agreement).

In respect of the SmartPOST Parcel Locker service, data is also processed for the purpose of controlling proper use, as well as for preventing and investigating cases of vandalism and fraud.

The processing of data is based on the legitimate interests of Posti.

Data processed in the camera surveillance register and its retention

The camera surveillance register consists of digital image recordings of surveillance cameras. In addition to the image itself, the register contains information about the monitored area or parcel locker where the camera is located, as well as the date and time of the events recorded in the image.

Camera surveillance recordings are retained for as long as is necessary for the purpose of use of personal data. The retention time varies depending on the technical solution, but will not exceed three months from the date of creating the image, unless a longer time is required for the purpose of use of the register in a particular case.

Regular sources of data

The data in the register originates from camera surveillance systems of Posti Group Corporation and its subsidiaries.

Disclosure of data

Due to the technical implementation of the processing of data, some data may be physically situated on external subcontractors’ servers or hardware, where they are processed through a technical interface. Personal data is not transferred outside the European Union or the European Economic Area.

Data protection principles

Access to digital records is restricted. Images or video recordings are only processed by persons who are responsible for the operation and/or maintenance of the equipment and those whose work involves the processing of records.

Data subject rights 

 The data subject has the right to receive information about the processing of their personal data and to know whether their data is being processed. They also have the right to access their personal data, obtain a copy of it, and request the correction or completion of inaccurate or incomplete data. The data subject may request the deletion or transfer of data, or in certain cases, request restriction of processing or object to processing based on their specific personal situation. When processing is based on consent, it may be withdrawn at any time. 

If you are a customer of the OmaPosti service, you can check and correct your own information in the Your information section. When logged into the service, you can also change your marketing concents. 

You can make a data request regarding the information stored in Posti's personal registers and exercise your other rights as follows. We recommend submitting your request with authentication, as this enables faster processing. Authentication can be done via your Posti user account or with online banking credentials or a mobile. If you do not use our electronic services or are submitting a request on behalf of someone else (e.g. a dependent or ward), we recommend using a printable form. Send the completed form in a stamped envelope to the address provided in the form. You may also submit your request in person at Posti’s head office, Postintaival 7 A, Helsinki. Alternatively, you can contact Posti’s customer service. 

We will process your request without undue delay and respond within one month of receiving it. You generally have the right to receive your data free of charge. If your requests are clearly unfounded or excessive—particularly if made repeatedly—we may charge a reasonable fee to cover the administrative costs. 

If you have any questions about the processing of your personal data or feel that we have not carried out the actions you requested, you can contact Posti’s Data Protection Officer at: tietosuoja@posti.com. You also have the right to lodge a complaint with a supervisory authority, particularly in the EU country where your permanent residence or workplace is located, or where the alleged violation of the General Data Protection Regulation has occurred (in Finland: the Data Protection Ombudsman). More information: tietosuoja.fi/en 

Controller

Posti Group Corporation (business ID: 1531864-4) PO Box 1, FI-00011 POSTI

Street address: Postintaival 7 A, Helsinki Tel. +358 (0)100 5577 (mpc/lnc, also while queueing)

Customer service

Data Protection Officer: tietosuoja@posti.com