What personal data are processed and the purpose of processing
Some of JCE Group’s real estate/office is (on the in- and outside), monitored by CCTV cameras. This involves recording of video footage (no sound recording). If a person whose image is recorded is identifiable, the recording constitutes personal data about that person. The purpose of using CCTV is to prevent, avoid and investigate crime, thereby enhancing security for JCE Group’s staff and visitors, and protecting the company’s property. Camera surveillance and video footage is used only to the extent necessary to achieve these purposes.
In connection with the supervised areas there are information signs clearly displayed.
Legal basis for processing
The legal basis for the processing of personal data in conjunction with CCTV is that the processing is necessary for purposes concerning our legitimate interest in preventing and investigating crime. We consider that JCE Group’s interest in processing personal data for these purposes compensates any undue invasion of privacy to which a person whose image is recorded.
Access to the personal data
We have taken appropriate technical and organisational measures to protect the personal data that we process from unauthorised access.
Only a few authorised persons at JCE Group have access to the CCTV footage. JCE Group will not disclose personal data to any third parties other than the police or other law enforcement agencies engaged in investigating crime.
How long is the personal data kept
The basic rule is that CCTV footage is saved for approx. 14 days, after which it is automatically recorded over. However, when specific video footage is required to take action against a person who has been filmed to achieve the purpose of the recording, the footage may be saved for as long as necessary to take that action, but must be deleted immediately afterwards.
Rights of a subject whose personal data is processed
JCE Group Aktiebolag, Reg. No. 556240-1553, with the address Box 53230, SE-400 16 Göteborg, is the controller of the personal data processing as described above. This means that we are responsible for ensuring that the personal data are processed correctly and in accordance with applicable laws.
Data subjects have inter alia the right to know what personal data we process about them and has also the right to request that those personal data are erased. In addition, data subjects have the right to object to specific processing of personal data and request that processing of personal data be restricted.
Anyone who has objections to, or comments on, the way we process personal data has the right to contact or file a complaint with the Swedish Authority for Privacy Protection (Sw. Integritetsskydds myndigheten, www.imy.se), which is the supervisory authority for our processing of personal data.
If you have any questions or complaints about how we process personal data or wish to exercise any of your rights as set out above, you are welcome to contact us by email at email@example.com or by post to the address above.