Information about JCE Group Aktiebolag’s processing of personal data with closed-circuit television (“CCTV”)
The information concerns use of CCTV at JCE Group Aktiebolag’s (JCE Group) premises located at Högåsplatsen 3 in Göteborg. The General Data Protection Regulation (GDPR) and the Camera Surveillance Act (2018:1200) govern the use of CCTV in Sweden.
What personal data are processed and the purpose of processing
Certain areas of JCE Group's premises, both inside and outside the property, are monitored by CCTV cameras. This involves recording of video footage (no sound recording). If a person whose image is recorded is identifiable, the recording constitutes personal data about that person. The purpose of using CCTV is to prevent, detect and investigate criminal activity, thereby enhancing security for JCE Group's staff and visitors, and protecting the company's property. CCTV monitoring and review of recorded footage are carried out only to the extent necessary to achieve these purposes.
Clear information signs are displayed in the monitored areas.
Legal basis for processing
The processing is based on JCE Group's legitimate interests pursuant to Article 6(1)(f) GDPR in preventing, detecting and investigating criminal activity and in protecting employees, visitors and company property. We consider that these legitimate interests outweigh the intrusion into the privacy of individuals who may be recorded.
Access to personal data
We have taken appropriate technical and organisational measures to protect the personal data that we process from unauthorised access.
Only a few authorised persons at JCE Group have access to the CCTV footage. JCE Group will not disclose personal data to any third parties other than the police or other law enforcement agencies engaged in investigating crime. JCE Group may engage data processors to operate and maintain the CCTV system. Such providers process personal data only on JCE Group's instructions and are bound by data processing agreements.
How long personal data is retained
CCTV footage is normally retained for a maximum period of 20 days, after which it is automatically deleted or overwritten. Where footage is required to investigate suspected criminal activity, security incidents, vandalism, or to establish, exercise or defend legal claims, it may be retained for as long as necessary for the relevant purpose and will thereafter be deleted when no longer required.
Rights of individuals whose personal data is processed
JCE Group Aktiebolag, Reg. No. 556240-1553, with the address Box 53230, SE-400 16 Göteborg, is the controller for the processing of the personal data described above. This means that we are responsible for ensuring that the personal data is processed correctly and in accordance with applicable laws.
Data subjects have, among other rights, the right to obtain information about the personal data we process concerning them and to request the erasure of such data. In addition, data subjects have the right to object to specific processing of personal data and request that processing of personal data be restricted.
The rights of access and erasure may be limited in certain circumstances, for example where personal data must be retained in order to investigate incidents, establish, exercise or defend legal claims, or to protect the rights and freedoms of other individuals.
Anyone who has objections to, or comments on, the way we process personal data has the right to contact or file a complaint with the Swedish Authority for Privacy Protection (IMY, www.imy.se), which is the supervisory authority for our processing of personal data.
If you have any questions or complaints about how we process personal data or wish to exercise any of your rights as set out above, you are welcome to contact us by email at info@jcegroup.se or by post to the address above.
Head office in Gothenburg, Sweden
JCE Adress
Högåsplatsen 3,
412 56 Gothenburg,
Sweden
Contact
Phone: +46 31 759 55 00
Email: info@jce.se
@JCE All rights reserved