Data privacy statement
Mall of Tripla website, camera surveillance and customer information privacy statement.
1. Registrar
Mall of Tripla and/or Tripla Mall Ky (Business ID 2704252-6)
Fredikanterassi 1, 00520 Helsinki
2. Name of the register
Mall of Tripla website customer register
Mall of Tripla camera surveillance
3. Contact persons and contact information of the register issues
Marjo Hiirola (website customer register)
marjo.hiirola@malloftripla.fi
mob. +358 40 707 6926
and/or
Päivi Salonen (website customer register)
paivi.salonen@malloftripla.fi
mob. + 358 40 746 5055
and/or
Petri Tynkkynen (camera surveillance customer register)
petri.tynkkynen@malloftripla.fi
mob. +358 40 350 2502
4. Purpose and grounds for the processing of personal data
The primary basis for the processing of personal data collected from registrants is the customer relationship, the customer's consent or other connection between Mall of Tripla and the customer.
Personal data is collected, processed and used by Mall of Tripla for the purpose of managing customer relationships, providing services, maintaining services and contacting customers. In addition, the data will be used for statistical purposes and for the development of Mall of Tripla's services.
Mall of Tripla also processes personal data for property maintenance and fault reporting.
Camera surveillance
Personal data is also processed in recording of surveillance cameras. We collect camera surveillance data to ensure safety and security at the shopping center’s properties as well as in its yard area such as near entrances, waste disposal points and parking lots. We announce camera surveillance with signs and stickers at the entrances and driveways of the property. The purpose of camera surveillance is to protect and prevent crimes and disturbances, to protect and prevent vandalism or other threats to the property, and to assist in detecting crimes or misconduct against persons or property in the area. The personal register of camera surveillance is maintained and used by Securitas Oy security officers responsible for the security of Mall of Tripla and parking operator Finnpark Oy.
5. Information content of the register and group of registrants
The register contains the following personal data necessary for the customer relationship:
Basic personal information provided through the contact or feedback form (optional for sending feedback):
• First and last name
• Contact information (email address, phone number)
Camera system information:
• Camera surveillance information includes information about people moving in the camera surveillance area. In addition to the video image, the date and time of the events are stored in the register.
6. Sources of information
The personal data collected in the customer database is data obtained from the data subject itself.
The data is collected in the following situation:
• when the registrant is connected to the Mall of Tripla through the website’s contact or feedback form
Camera surveillance information sources::
Camera surveillance information is automatically saved when a person enters the surveillance area while the camera is operating.
7. Data releases
Personal data is regularly handed over to the following parties:
• Property management, security, customer service
Mall of Tripla and/or Tripla Mall Ky use external service providers for the shopping centre's website, policies, security, property maintenance services and customer service, who process the personal data only to the extent necessary, e.g. to perform system maintenance and fault repair or to contact.
Disclosures of camera surveillance data:
The information shall be provided to the investigating authority as far as technically possible. Under the authority of the registrar, surveillance records may be presented (not handed over) to co-operation bodies in the property area (youth work, property maintenance, car park maintenance, etc.) for events that do not involve a crime but help to promote their work.
8. Transfer of data outside the EU or EEA
Personal data will not be passed on and will not be transferred outside the EU or the EEA.
9. Principles of protection of the register and data retention periods
The data is stored in information systems that use both technical and software means to ensure data security and control the use of the data. Access to the information in the register is restricted to certain persons to the extent necessary for the performance of their duties. All persons using the information in the register are bound by professional secrecy.
Personal information is retained for 126 days, after which it is automatically deleted.
Camera surveillance:
The recording shows the movement in the camera's shooting sector. Image recordings are stored for each camera separately. Recordings are automatically destroyed within about 10 days.
For criminal investigation or misuse, the desired recording can be stored on computer's hard disk. Data stored on the hard disk will be deleted one (1) year after the recording. Written documents from the maintenance of the registers are archived and kept in a locked room that can only be accessed by pre- defined persons (security company, data processors).
The registry in digital format (computer, server, or similar hard drive) is locked and monitored. The data in the register shall be kept for the period required for the purpose, unless there are special reasons to the contrary. The data is automatically destroyed by saving new data on top of it. Data is accessed from the hard drive by printing, copying, or monitoring.
10. Rights of the data subject
The data subject has the right to inspect the data stored in the personal register concerning himself or herself and the right to request the rectification and deletion of the data. A person has the opportunity to review and edit their own information by contacting them through the Mall of Tripla website using the contact form. Otherwise, requests for inspection and rectification must be submitted in person or in writing to the contact persons mentioned in point 2.
In accordance with the privacy setting (25th May 2018), the data subject has the right to object to or request a restriction on the processing of his or her data and to lodge a complaint against the processing of personal data with the data protection officer.