YIT Road Ltd's privacy notice for camera surveillance (ITRM)
YIT Road Oy is committed to processing personal data lawfully, appropriately, and transparently. This privacy statement describes how YIT Road Oy processes personal data collected through camera surveillance.
- Data Controller
YIT Road Oy, Business ID 3370400-4
Panuntie 11, P.O. Box 36
00620 Helsinki
Finland
Tel. +358 20 433 111
- Contact Information for Privacy Matters
If you have questions about the processing of your personal data or wish to exercise your rights under applicable data protection laws, please contact us by filling out this form or by sending an email to privacy@yit.fi, from where your inquiry will be directed to the appropriate person.
- Purposes and Legal Basis for Processing Personal Data
YIT Road Oy is responsible for processing personal data generated through camera surveillance for the purposes and on the legal bases described in this statement.
Personal data is processed lawfully, appropriately, and transparently. Data is collected for specific, explicit, and legitimate purposes and is not subsequently processed in a manner incompatible with the purposes stated in this notice.
YIT Road Oy uses appropriate technical and organizational measures to protect the collected and processed personal data. Only those individuals whose job responsibilities require it are allowed to process personal data.
Camera surveillance is used at YIT Road Oy’s maintenance worksites, warehouses, and production vehicles.
YIT Road Oy may record visual material of individuals and vehicles that move in the aforementioned locations or in their immediate vicinity.
We inform about camera surveillance with signs at locations where surveillance is used.
YIT Road Oy processes personal data generated from camera surveillance for work planning and monitoring, ensuring safety, protecting YIT Road Oy's property, and for preventing and investigating criminal, hazardous, and misuse situations.
The processing of personal data is based on the legitimate interests of YIT Road Oy.
Recordings are not used to monitor employees’ job performance or working hours.
- Sources of Personal Data
Visual material may be collected when a person or their vehicle moves within the area monitored by the camera surveillance system or when the person or their vehicle is in an area filmed by the data controller’s production vehicle. Cameras are placed to avoid identifying individual persons whenever possible.
- Disclosure and Transfer of Personal Data
Personal data may be disclosed within the limits permitted by the applicable legislation, for example to authorities or for managing or responding to legal claims.
Personal data may also be disclosed to the client in accordance with the contract. Disclosure occurs to the extent necessary for fulfilling the contract and providing the service.
Data collected through camera surveillance is not transferred outside the EU/EEA area.
- Retention Period of Personal Data
Camera surveillance recordings are retained only as long as necessary to fulfill the above-mentioned purposes, generally up to about one month, unless a longer retention period is required in a specific case considering the purpose of the register.
- Rights of the Data Subject
Under applicable data protection legislation, you have the rights detailed below regarding the processing of your personal data. We process your personal data to the extent necessary to fulfill your rights. You must verify your identity before exercising your rights. Please note that not all rights are absolute, and some rights may be secondary to our legitimate interests. These rights include:
Right of Access
You may request confirmation as to whether we are processing your personal data and gain access to your data and additional information about the processing. You also have the right to receive a copy of the personal data being processed.
Right to Object
You may object to the processing of your personal data on the basis of legitimate interest if you have a specific situation. We will stop processing unless we can demonstrate that our legitimate interest overrides your need for protection or that data use is necessary for managing or responding to legal claims.
Right to Rectify Data
You have the right to have incorrect personal data rectified.
Right to Erasure
In certain situations, you may request the deletion of your personal data, for example if the data is no longer needed for its original purpose. Not all data can be deleted, for example if we have a statutory obligation to process it.
Right to Restrict Processing
You may request that the processing of personal data be restricted to storage only, for example if the processing is unlawful but you do not want the data to be deleted.
Right to Withdraw Consent
You may withdraw your consent to the processing of personal data at any time if the processing is based on consent.
Right to Data Portability
You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format and to request its transfer to another data controller, if technically feasible. This applies to personal data collected based on your consent or a contract.
- Automated Decision-Making (including profiling)
YIT Road Oy does not use automated decision-making or profiling in connection with the processing of personal data described in this privacy statement.