Skip to content

Information about processing camera surveillance data from Diak’s Oulu, Pieksämäki, Pori and Turku campuses

Register controller and contact information

Diaconia University of Applied Sciences, P.O. Box 12, 00511 Helsinki

https://www.diak.fi/diak/contact/

Data protection officer’s e-mail: tietosuojavastaava@diak.fi

What is the purpose of processing personal data?

The purpose of access control, key control and any camera surveillance on each campus is to monitor and if necessary, check who has moved in the property. The objective of processing the data is to protect property from vandalism and crime and to ensure people’s safety.

Diak’s Oulu, Pieksämäki, Turku and Pori campuses are operating on rented premises. Because of this, Diak does not manage access control, key control and any camera surveillance themselves, but it is done by the landlord.

This account will give you a general picture of the situation on different campuses and information regarding whom to ask for further information.

Diak rents premises from the following operators:

Oulu campus: Oulun Diakonissalaitoksen säätiö (ODL)
Pieksämäki campus: Kirkkopalvelut ry.
Pori campus: Diakon Palvelut Oy
Turku campus: Old Mill Oy (owned by Varma Mutual Pension Insurance Company)

What is the basis for processing the data?

Further information on the basis for processing personal data will be provided by the landlords of the premises.

Whose personal data does the register contain?

  • Oulu: The register contains the data of people who move in the property. The register of keys only contains data regarding staff, because students do not have the keys to the property.
  • Pieksämäki: The register contains the data of people who move in the property. The register of keys only contains data regarding staff, because students do not have the keys to the property.
  • Pori: The register contains the data of people who move in the property. The register of keys only contains data about staff, because students do not have the keys to the property.
  • Turku: The register contains the data of people who move in the property.

You can ask for further information directly from Diak’s landlords

Where was the data collected?

The data is collected directly from the persons themselves, from Diak’s HR management systems and from surveillance systems in use on the properties.

You can ask for further information directly from Diak’s landlords.

What personal data does the register contain?

The access control personal data register typically contains, among other things, people’s names and contact details, information about where and when the person has moved in the property, and information about their role.

More detailed information regarding the personal data contained in the access control, key control and camera surveillance personal data registers will be provided by the landlords of the premises.

How long is personal data stored in the register?

More detailed information regarding storage times will be provided by the landlords of each campus.

How is data protected?

More detailed information regarding data protection will be provided by the landlords of each campus.

Will the data be disclosed to external parties?

The general practise is that data is not disclosed to external parties, except by request to authorities for a criminal investigation, for example. You can ask for more detailed information from the landlords of each campus.

Is the data subject to automatic decision-making?

Systems using the register do not have automatic decision-making functions.

Will data be transferred outside of the EU/EEA?

Data will not be transferred outside the EU/EEA.

Data is transferred or disclosed outside the EU/EEA, where and to whom:

 

As a rule, the personal data contained in the register is not transferred outside the European Union or the European Economic Area or to international organisations. However, due to the international nature of the operations, Diak may use resources, applications and servers located outside the EU or EEA when providing the services. In these cases, Diak ensures that there is a legal basis for the transfer of data and that personal data is protected, for example by requiring standard contractual clauses approved by the EU Commission and compliance with appropriate technical and organizational security measures. In addition, where appropriate, a TIA assessment will be carried out in connection with such data transfer, as well as monitoring the overall level of data protection in known countries. In all cases, the data transfer is carried out in accordance with the General Data Protection Regulation and only to the extent strictly necessary.

What rights do I have?

You have the right to information on how and for what purpose your personal data will be processed. You can also request access to records of your personal data, and request that incorrect information be rectified.

You can also submit a request to delete your data or restrict its use. However, in some cases the data cannot be deleted or its use restricted, for example if the personal data is being processed to fulfil a legal obligation, complete a task in the public interest orexercise public authority vested in Diak.

In certain situations, you also have the right to transfer the personal data you have provided to us to another controller or to object to the processing of your personal data, i.e. to request that we do not process them at all. In addition, you may request that we do not make a decision on your part based solely on automated processing of personal data.

If you would like to know more about the processing of your data or exercise your rights, you can contact Diak’s Data Protection Officer (tietosuojavavavaava@diak.fi) or submit a request using the form found on Diak’s website https://www.vismasignforms.com/form/fa53720e-cc71-4b92-b062-6db43e0d33d3.

Oulu campus

If you wish to know more about how your data is being processed or make use of your rights, please contact ODL’s data protection officer at tietosuojavastaava@odl.fi.}

ODL’s privacy policy

Pieksämäki campus

If you wish to know more about how your data is being processed or make use of your rights, please contact Kirkkopalvelut ry’s data protection officer at (tietosuojavastaava@kirkkopalvelut.fi).

Kirkkopalvelut ry’s privacy policy

Pori campus

You can find further information on Diakon Palvelut Oy’s data protection practises from their privacy policy.

 

You also always have the right to lodge a complaint with a supervisory authority. If necessary, you can also contact the Data Protection Ombudsman, a government official who supervises the processing of personal data in Finland.

Contact information:
Office of the Data Protection Ombudsman
P.O. Box 800, 00531 Helsinki
tietosuoja(at)om.fi
Tel. +358 29 566 6700
www.tietosuoja.fi

General advice for individuals: Tel. +358 29 566 6777