Privacy policy for parking operations

This is the full privacy policy for Technopolis parking operations. A summary notice containing the controller’s identity, processing purposes, and contact details may be displayed at parking facility entrances and in the parking app/portal.

1 Data controller

The controller for your personal data depends on the location of the parking facility. Technopolis Holding Plc, a Finnish public limited liability company with business ID 0487422-3, and the following companies belonging to the same group of companies ("Technopolis Group") act as controllers in the respective jurisdictions:

Finland: Technopolis Oy (business ID 2992763-5)
Sweden - Göteborg: Technopolis Gårda AB (business ID 556970-1138)
Sweden - Kista, Stockholm: Technopolis Kista AB (business ID 559306-2572)
Norway: Technopolis Holding AS (business ID 912 237 885)

Hereinafter “we”, “us” or “our” shall refer to the data controller(s). “You” or “your” shall refer to the data subject.

In some parking services, Technopolis decides why parking access data is processed and acts as controller for that processing. For example, this applies where we use a vehicle registration number to check whether a vehicle has the right to enter or use a Technopolis parking facility.

Other controllers
In some cases, your employer or another customer of Technopolis Group decides who receives a parking right. In that case, the customer is responsible for informing you about how it processes your personal data for allocating and managing your parking right.

If you use a third-party parking app, webshop or user account, or depending on the parking service used, a parking application provider or a parking operator providing such app, webshop or user account may process your personal data as an independent controller under its own privacy policies. Technopolis is not responsible for the processing carried out by such parking application provider or parking operator. Technopolis is only responsible for the processing described in this notice. Where a parking application provider or a parking operator acts as an independent controller, that provider/operator is responsible for informing you about its processing activities and retention periods. We encourage you to check the privacy policies of the relevant parking application provider or parking operator to determine the identity of the controller. If necessary, you can contact the controller using the contact details provided in those policies. You may also contact Technopolis Group customer service for assistance in identifying the controllers involved in processing your personal data in connection with parking at a Technopolis Group facility.

2 Contact details

Privacy Coordinator of Technopolis Group, email: privacy@technopolis.fi, address: Energiakuja 3, FI-00180 Helsinki, Finland.

3 Name of register

Parking operations register

4 Legal basis and purpose of processing your personal data

We process your personal data because you use or access Technopolis parking facilities, or your vehicle registration number is recorded by our parking access systems. We process your personal data based on

  1. Granting and administering parking rights under a lease or service relationship: contractual necessity where you are a direct contracting party, or legitimate interest where parking rights are granted through your employer or customer company;
  2. Checking parking entitlement and operating access control (including ANPR (Automatic Number Plate Recognition) -based* access management): legitimate interest or contractual necessity, depending on the parking arrangement;
  3. Handling complaints, access problems and incorrect charges: legitimate interest and/or contractual necessity;
  4. Compliance with legal claims, accounting or statutory obligations: legal obligation or legitimate interest;

We process your personal data for the following purposes:

  • managing access to Technopolis parking facilities;
  • checking whether a vehicle has a valid parking right;
  • administering parking rights granted by Technopolis;
  • troubleshooting parking access and service issues;
  • investigating complaints, incorrect charges or access events;
  • securing Technopolis parking areas;
  • financial administration (including invoicing and payment management); and
  • Aggregated occupancy and utilisation analytics: where data is properly anonymised, this does not constitute personal data processing; where not fully anonymised, legitimate interest with appropriate data minimisation controls. For business development purposes, we use only aggregated data, not person-level or vehicle-level data.

5 Types of your personal data we collect

We collect the following categories of your personal data in connection with parking operations:

  • name and contact details (where Technopolis administers a parking user or contact);
  • organisation or customer company;
  • vehicle registration number;
  • parking permit information;
  • parking event information (such as entry and exit times, duration);
  • site or parking facility;
  • ANPR (Automatic Number Plate Recognition) recognition and check result;
  • access-control event data; and
  • communication and support information.

6 Regular sources of your personal data

Your personal data is collected from the following sources:

  • directly from you, when you register for parking services or contact us for support;
  • your employer or the customer or tenant company, when they administer parking rights for their employees or users;
  • Technopolis’ own records, where we directly administer parking permits or access rights for certain users;
  • the parking operator, which operates the parking platform and checks parking rights;
  • the ANPR and access-control system, which automatically captures vehicle registration numbers at entry and exit points;
  • the parking facility event log, which records access events.

7 Regular disclosure and transfer of your personal data, and transfer outside the EU or EEA

Your personal data may be disclosed to the following categories of recipients in connection with parking operations:

  • parking management platform providers, which operate the systems used to check parking rights and manage access;
  • ANPR and access-control operators, which provide the camera and barrier systems at parking facilities;
  • parking enforcement partners, which may receive registration number and parking-right information to enforce parking rules;
  • IT and system suppliers, which provide technical infrastructure and support services;
  • Technopolis group companies, where necessary for the purposes described in this notice;
  • authorities, where required by law.

Where these recipients act as processors on our behalf, we ensure they are contractually committed to protecting your personal data in accordance with applicable data protection law. We are responsible for the activities of our processors as for our own activities.

Some of your personal data may be processed outside the EU and the EEA. Where this occurs, we ensure that the recipient is covered by adequate data protection requirements, such as an adequacy decision by the European Commission or EU Standard Contractual Clauses. Your personal data may also be disclosed and transferred to the subsidiaries and associated companies of Technopolis Group for their use, for the purposes specified in this policy.

8 Principles of protection of your personal data and data storage period

The only persons who have access rights to the data system where your personal data is processed are our employees (including companies belonging to the Technopolis Group) or our subcontractors and their employees who have the right and need to process your personal data for the purposes described in this policy. Your personal data is protected by such technical and organizational measures that ensure a sufficient and appropriate level of security.

Your personal data is stored for as long as it is necessary to fulfil the purpose of the processing of your personal data. As a rule, Technopolis retains parking access-control data, including vehicle registration numbers and access event records, for thirty (30) days unless a longer retention period is required for the establishment, exercise or defence of legal claims, compliance with legal obligations, or ongoing investigations. This period allows us to handle complaints, investigate access problems or incorrect charges, and respond to enquiries about parking events.

After the retention period, the parking operator anonymises the data so that only aggregated event information remains. Where anonymisation is carried out by a parking operator or service provider, responsibility for the anonymisation process is determined by the applicable contractual arrangements and the relevant controller or processor role. Once anonymised, the data can no longer be linked to you or your vehicle.

The parking operator or app provider may retain its own data under its own privacy notice. The retention periods applied by the parking operator to data held in its own systems may differ from those applied by Technopolis.

9 Your privacy rights

You have the right to inspect your personal data that is stored in the register, as well as to demand correction of any incorrect personal data and deletion of your personal data. Any such requests must be submitted by you in writing to Technopolis reception services or to privacy@technopolis.fi, and you must verify your identity.

In accordance with the General Data Protection Regulation (Regulation (EU) 2016/679), you have the right to object or request the restriction of processing your personal data at any time, and to file a complaint against the processing of your personal data to the relevant supervisory authority.

10 Availability of this privacy policy

This privacy policy is available and updated on this website or in another location as informed by us.

Updated 22 October 2026