Purpose of processing personal data

UniSport uses access control and closed-circuit television (CCTV) to protect its assets, prevent criminal activity and misconduct, investigate criminal activity and misconduct that has already occurred, and provide a safe, secure and peaceful environment for staff and clients.
UniSport’s access control systems collect and store data about the opening of doors with access control tags that are registered in the systems. This prevents and minimises unauthorised access to premises, enables appropriate access and accessibility to authorised individuals, and helps maintain safe, secure and comfortable facilities for work and training.

What data are processed?

•    Name
•    Date of birth
•    Phone number
•    Validity of access control tags
•    Log data for access control tags issued
•    Digital video recordings in which persons captured on camera can be identified

What are the legal grounds for processing personal data?

The processing of personal data is based on legislation concerning UniSport and on legitimate interests. UniSport is obliged by law to provide its staff with a safe working environment (Occupational Safety and Health Act, 738/2002).

Sources of personal data

For access control, customer data are derived from ERP system Enkora. For CCTV, data are derived from the digital images recorded by cameras that are installed in UniSport’s premises or their immediate vicinity.  

Storage periods

Access control data (log data) is stored in the relevant systems for about two years after customer’s latest activity when individual data is anonymized.
CCTV recordings are stored depending on the capacity of the systems. Well-grounded suspicions of criminal activity or misconduct may lead to the storage of data for a longer period.

To whom are your data disclosed?

Data are not disclosed regularly to parties outside the University of Helsinki or University of Helsinki Property Services Ltd.
Data from the systems can be disclosed to the authorities, for example, for the purpose of criminal investigations.

Are data disclosed outside the EU?

We store all data within the European Economic Area (EEA).