Privacy Policy: Camera Surveillance
This privacy policy describes how SAKA Finland Oy, Saka Finland Group Oy, and Saka Ab (hereinafter "SAKA") process personal data collected through camera surveillance.
SAKA uses recording camera surveillance at its locations. Camera surveillance is indicated by separate signs in the premises. The system collects and stores information as digital video recordings.
1. Data Controller
SAKA Finland Oy (Business ID: 3205932-2)
Portinkaarre 3, 90410 OULU
SAKA acts as the data controller for the collected personal data.
2. Contact Person for Data Protection Matters
3. Purpose and Legal Basis for Processing Personal Data
We process camera surveillance recordings for predefined and lawful purposes. The purpose of camera surveillance is to:
Protect property and prevent vandalism and crimes.
Ensure the safety of people moving in SAKA's areas, such as customers and personnel.
The processing of personal data is based on SAKA's legitimate interest related to property protection, crime prevention, and ensuring personal safety.
Personal data is collected via the camera surveillance system when individuals move within SAKA's premises.
4. Processed Personal Data and Categories of Data Subjects
The following personal data is collected and processed through camera surveillance:
Video footage and images of people moving in the premises.
Vehicle license plate numbers.
Camera surveillance may target the following groups of people:
Customers.
Employees.
Business partners and stakeholders.
5. Data Retention Period
Camera surveillance recordings are retained for 28 days. This retention period is necessary to address potential misuse, crimes, or other situations requiring investigation and to provide recordings to authorities upon request.
6. Regular Disclosure of Data and Transfer Outside the EU/EEA
Recordings are handled confidentially. Access to recordings is limited only to individuals whose job duties require it. Recordings may be disclosed only for justified reasons:
To authorities, such as the police, based on statutory requests for crime investigation.
To a personal data processor acting as a security service provider.
Data is not transferred outside the European Union (EU) or the European Economic Area (EEA).
7. Principles of Registry Protection
The security of personal data is ensured through appropriate technical and organizational measures.
Access to recordings is protected and limited only to predefined individuals
Access rights are based on job duties.
Personnel processing personal data have received appropriate training in information security and data protection.
Necessary technical safeguards are in place, such as firewalls and secure equipment facilities.
8. Rights of the Data Subject
The data subject has rights under the EU General Data Protection Regulation, such as:
Right of access: The data subject has the right to check what information about them has been stored.
Right to rectification: The data subject has the right to request correction of incorrect information. Due to the nature of camera surveillance recordings, this right is applied in a limited manner.
Right to erasure: The data subject has the right to request deletion of their data under certain conditions.
Right to restriction of processing: In certain situations, the data subject has the right to request restriction of the processing of their personal data.
Please note that legislation and the nature of processing may impose limitations on the exercise of these rights.
Requests regarding these rights should be sent in writing to the email address
tietosuoja@saka.fi. SAKA may, if necessary, request the person making the request to verify their identity.
9. Changes to the Privacy Policy
We continuously develop our operations, and therefore reserve the right to change this privacy policy. Changes may also be based on changes in legislation. We recommend reviewing the content of the privacy policy regularly.
Last updated: February 12, 2026
