Several of our facilities are equipped with cameras to prevent and investigate crimes. Below, you can read about the data we collect, your rights, and how you can exercise them.

Summary

As a complement to our privacy policy, we have established this policy for camera surveillance of our facilities. The legislation governing how camera surveillance can occur is specified in the General Data Protection Regulation (GDPR) and is also regulated in Sweden through the Camera Surveillance Act (2018:1200).

What data do we collect, and what are the purposes of processing?

Several of our facilities are equipped with camera surveillance that includes recording of image and sound. If a person can be identified through the recorded image or sound, the recording constitutes personal data.

The purpose of the camera surveillance and processing of recorded material is to prevent and investigate crimes. Through camera surveillance, we hope to increase the safety and security of our staff and protect our assets.

What is the legal basis for processing?

The legal basis for processing your personal data in connection with camera surveillance is a so-called balancing of interests (in accordance with Art. 6 para. 1. f) of the General Data Protection Regulation). We have assessed that the need for camera surveillance outweighs the intrusion into personal privacy for individuals visiting the facility. Our assessment is made with particular consideration given to the fact that our facilities are unmanned for most of the day to ensure a safe environment for our staff and our assets, and that the camera surveillance only occurs in limited areas. Furthermore, we have ensured that only a limited number of individuals have access to the recorded material and will only use it for the purposes specified above.

How long is recorded material stored?

Recorded material is only stored for as long as necessary in relation to the purposes stated in this policy, but no longer than 14 days. After that, the recorded material is deleted. We may store the material for more than 30 days if required to comply with legal requirements or safeguard legal interests, such as for an ongoing legal process.

Who has access to the recordings?

We have ensured that only a limited number of employees have access to the recorded material. Your personal data may also be processed by so-called data processors, meaning companies that we hire for monitoring, security, camera systems, error reporting, and customer support. These parties are not allowed to use your personal data for any purpose other than providing the services they have been hired for, and only under the conditions we have specified. Data may also be processed by the police authority, for example, in case of a police report or to fulfill a legal process.

If you have any questions regarding our processing of personal data or if you want to exercise any of your rights, you can contact us at our email address dataprivacy@hedinmobilitygroup.com

Your rights

• You have the right to know what personal data we process about you.
• You have the right to request that we correct or delete your personal data.
• You have the right to request that we restrict the processing of your personal data.
• You have the right to object to us processing your personal data.
• If you wish to complain about how your personal data is handled, you have the opportunity to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten):

Phone: 08-657 61 00
Email: imy@imy.se
Postal Address: Integritetsskyddsmyndigheten, Box 8114, 104 20 Stockholm