EfTEN Kristiine OÜ and its subsidiaries and affiliates (hereinafter "Kristiine Keskus") respect the privacy of its customers. This privacy notice (hereinafter "Privacy Notice") describes how Kristiine Keksus collects and processes its customers' personal data and how Kristiine Keskus ensures the privacy and security of the information it collects and processes. In this Privacy Notice, "personal data" refers to any information you provide or that is received through other channels that can identify you.
EfTEN Kristiine OÜ
Registration Code: 17116468
Email: info@kristiinekeskus.ee
The video surveillance system monitors both the indoor and outdoor areas of the shopping center, as well as areas adjacent to the property boundaries, including entrances, waste disposal areas, and parking areas. We process the personal data of individuals passing through the surveillance area to protect our property, prevent and solve abuse and criminal activities, ensure the safety of our customers and the shopping center, enforce legal claims, or defend against claims made against Kristiine Keskus.
The legal basis for processing personal data is legitimate interest, compliance with legal obligations, and the fulfillment of contractual obligations. Personal data processing is permitted when necessary for the legitimate interests of the data controller or a third party, or to fulfill legal obligations. We consider processing personal data for the purposes outlined above to be necessary to protect the property of Kristiine Keskus and to ensure the personal safety of our customers and employees, which cannot be effectively protected by other less invasive measures.
Personal data is recorded and transmitted by the video cameras installed by Kristiine Keskus on its premises.
We notify individuals of video recording at each entrance to the shopping center through stickers and/or signs stating: "Video surveillance in operation."
In general, Kristiine Keskus does not share personal data with third parties. Data may only be shared with third parties in cases and within the limits provided by applicable law.
Access to personal data is granted to Kristiine Keskus employees who, according to their job description, handle cases related to thefts or other incidents involving damage to property at the shopping center or its clients, as well as incidents related to personal security. Kristiine Keskus employees responsible for maintaining and developing the camera surveillance system, as well as security personnel employed by subcontracted security companies providing services to the shopping center, may also have access to the data.
Data may be shared with the police or other competent authorities for the purpose of criminal investigations based on a specific request. Personal data may also be shared with insurance companies for the purpose of resolving insurance claims.
Personal data is not transferred outside the EU or the EEA.
We do not use your personal data to create profiles.
Kristiine Keskus retains video recordings for thirty (30) days from the time of recording. After this period, the recordings are automatically deleted. The recordings may be kept longer if they are needed for the investigation of a criminal or damage incident. Even in such cases, the recordings will be deleted no later than one year after they are no longer required.
We decided to retain video footage for thirty (30) days because many criminal cases and damage incidents do not immediately attract our attention. For example, it may take several days before the police request video footage from us. We want to ensure that we can use our video surveillance in accordance with our designated purposes.
Kristiine Kekus has implemented appropriate technical and organizational measures to limit access to the personal data in its possession and to protect it from loss, accidental destruction, misuse, and unlawful alteration. Access to personal data is restricted to individuals (employees and service providers of Kristiine Keskus) who need access to the data for the purposes for which it was collected.
You have the right to verify what personal data is stored about you in the register and to request the correction or deletion of incorrect, outdated, or unlawful data. In such cases, we will ask for the time and location from which you are requesting the footage. You also have the right to request the restriction of processing on legal grounds.
If there are grounds to believe that the video recordings may be needed to defend or assert legal claims, investigate a criminal offense or other incident, or investigate an event that caused damage to the property of Kristiine Keskus, it will not be possible to fulfill the data subject’s request to delete personal data in such cases.
You have the right to lodge a complaint with a supervisory authority if you believe that we have not followed the applicable data protection rules. In Estonia, the relevant authority is:
Data Protection Inspectorate, Tatari 39, 10134 Tallinn, email: info@aki.ee
If you have questions about the protection of your personal data in our data processing activities or wish to exercise your rights, please contact us at:
Email: info@kristiinekeskus.ee
We may update this Privacy Notice from time to time to reflect changes in our operations and/or applicable law. All changes will be posted here.