Plint AB uses surveillance cameras to protect the company and its assets from burglary, damage/vandalism, and theft. The cameras are used both preventively and to collect evidence for investigations of potential security incidents.

The legal basis for processing personal data from camera surveillance is legitimate interest, according to Article 6.1(f) of the GDPR. We assess that our legitimate interest in protecting the company and its assets outweighs any potential negative effects on the data subject’s privacy. Camera surveillance is considered proportionate in relation to the potential risks it may pose to data subjects’ privacy and our security needs. The placement and operation of surveillance are strictly limited to ensure that only relevant areas of the business are covered.

Camera surveillance processes personal data in the form of recording and the possibility of live monitoring of moving images. Cameras are placed at all entrances and exits to the office premises, at doors to particularly sensitive areas inside the premises, and inside the server room.

Some cameras are positioned so that their field of view also includes parts of common areas and workstations adjacent to these doors. To safeguard personal privacy, a masking function is used in the system. This means that all areas not directly adjacent to the doors, including any workstations, are masked and therefore neither visible in live monitoring nor stored in recorded material. No cameras are directed at meeting rooms or break areas.

Live monitoring is never used for continuous surveillance but only in specific situations.

Recorded material (video only, no audio) from movements in the areas where cameras have been installed for the above-mentioned purposes.

Material is normally stored for 30 days. In exceptional cases, a longer retention period may occur for specific material if deemed necessary for the above purposes, such as investigations related to a security incident. In such cases, the material is deleted as soon as the purpose of retaining it has ended.

The data is only handled by a small group of authorized Plint employees.

Recorded material is only reviewed in the investigation of specific incidents or events related to security or suspected criminal activity.

Live monitoring occurs only:

–– During specific events, such as triggered alarms or other situations where immediate action is required to maintain or verify security,

–– For a short period when checking functionality or performing system maintenance.

Data is not shared externally except with law enforcement authorities for the purpose of investigating suspected crimes.

Recorded material is stored on dedicated hard drives on our own servers in a locked area, where access to both the room and the material is restricted to a small number of authorized individuals. Access to recorded material is role-based and regularly reviewed to ensure only authorized persons have access.

The material is not disseminated further, except in exceptional cases to law enforcement officers for the purpose of investigating suspected crimes.

Plint informs about camera recording through signage in connection to the monitored areas. The signage is complemented with additional information available on Plint’s website, where this policy is published.

Anyone who may reasonably be recorded by a surveillance camera has the right to request the following:

1. Confirmation of whether they appear on film.
2. Information about the purpose of the camera surveillance.
3. Information about the retention period.
4. Request to rectify or delete data on film, as well as the right to object to the camera surveillance. (Note: deletion of data or objections to processing can only be carried out insofar as it does not affect our legitimate interest or our ability to fulfill legal obligations.)
5. The right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).
6. Request access to the recorded material, insofar as it concerns the individual themselves.

You can learn more about your rights here:
https://www.imy.se/en/individuals/data-protection/your-rights-as-a-data-subject/

Info about camera surveillance:
https://www.imy.se/en/organisations/camera-surveillance/

Questions about camera surveillance and any requests according to the above should be sent to Plint by writing to dpa@plint.com and will be handled and responded to promptly.