Leppäkosken Sähkö Oy Etusivulle

Privacy Notice: Corporate Security

This Privacy Notice explains how Leppäkoski processes personal data relating to its premises, such as offices, power plants and substations, and to video surveillance. The Data Controller is the Group company whose corporate security is concerned.

 

1. Data Controller

Leppäkosken Sähkö Oy
Business ID: 3086071-4
Address: Eino Salmelaisen katu 23, FI-39500 Ikaalinen, Finland
Telephone: +358 3 453 400
www.leppakoski.fi

Leppäkosken Lämpö Oy
Business ID: 0840218-6
Address: Eino Salmelaisen katu 23, FI-39500 Ikaalinen, Finland
Telephone: +358 3 453 400
www.leppakoski.fi

Leppäkoski Group Oy
Business ID: 0133023-9
Address: Eino Salmelaisen katu 23, FI-39500 Ikaalinen, Finland
Telephone: +358 3 453 400
www.leppakoski.fi

For data protection matters concerning the Leppäkoski Group, please contact us by email at tietosuoja@leppakoski.fi.

 

2. Purposes and legal bases for processing personal data

We process personal data for the following purposes: ensuring the safety of individuals on the premises, protecting property, preventing vandalism, and ensuring the proper functioning of processes. The processing may also be carried out to assist in investigating misconduct and accidents that have already occurred, as well as for the establishment, exercise, or defence of legal claims.

The processing is necessary for the purposes of the legitimate interests of the Leppäkoski Group described above.

Personal data is not used for automated decision-making or profiling.

 

3. Personal data processed

Persons moving around our premises and outdoor areas may be recorded by our video surveillance system. The personal data processed includes:

  • surveillance camera recordings and the information visible in them, such as images
  • video recordings
  • vehicle registration numbers
  • timestamps

 

4. Sources of personal data

Personal data is obtained from surveillance cameras. The locations of the cameras are indicated by video surveillance signs. If you do not wish to provide us with the personal data described above, you cannot visit the Leppäkoski Group’s premises or outdoor areas.

 

5. Recipients of personal data

As a general rule, personal data is disclosed only to subcontractors engaged by the Data Controller. These subcontractors process personal data on behalf of and for the account of the Data Controller in order to provide services. We ensure that our subcontractors process personal data only for the purposes described in this Privacy Notice, in accordance with our instructions and applicable legislation.

Where required by applicable legislation, personal data may be disclosed to the police in cases involving suspected criminal activity and, when handling potential claims for damages, to parties such as insurance companies.

Personal data may also be disclosed to public authorities to the extent permitted or required by law.

 

6. Transfers of personal data outside the EU or EEA

As a general rule, personal data is not transferred outside the European Union or European Economic Area.

Where personal data is transferred outside the EU or EEA, the transfer will always be carried out in accordance with applicable legislation and on the basis of an adequacy decision adopted by the European Commission or by using standard contractual clauses approved by the European Commission, together with any necessary supplementary safeguards.

 

7. Retention period

Personal data is retained only for as long and to the extent necessary for the purposes described in this Privacy Notice. The retention period may vary depending on the category of personal data. Further information on personal data retention periods is available in the table on our website.

 

8. Rights of the data subject

The data subject has the right to:

  • request access to their personal data and obtain a copy of the personal data we process
  • request the rectification of inaccurate personal data
  • request the erasure of personal data in certain circumstances
  • request the restriction of processing or object to the processing in certain circumstances
  • receive their personal data in a commonly used and machine-readable format and request that the data be transferred to another system in certain circumstances.

Requests to access or rectify personal data may be submitted using Leppäkoski’s online form or in person at Leppäkoski’s premises at Eino Salmelaisen katu 23, FI-39500 Ikaalinen, Finland.

The data subject also has the right to lodge a complaint with the Data Protection Ombudsman. Further information on lodging a complaint is available on the website of the Office of the Data Protection Ombudsman at www.tietosuoja.fi.

This Privacy Notice was last updated on 30 September 2025.