As you enter Iver’s premises, you may notice that we use camera surveillance at our entrances – this is to ensure your safety and ours. All monitored premises shall be signposted with information that this is performed, and that processor is Iver (the controller). The signpost should also refer you to this policy for camera surveillance and our contact information that you will find at the end.
At Iver, we are committed to protecting your privacy. This policy describes how we process, use, and protect the information we collect about you when entering our premises.
Purpose of the camera surveillance
We use camera surveillance to protect Iver’s staff, visitors, and property, to prevent criminal acts and increase our ability to detect and investigate crimes and accidents.
By monitoring access at our offices and data centers, we can identify people either directly or indirectly (i.e. combined with other pieces of information) in the event of an accident, crime, or a suspected criminal act.
Surveillance cameras also act as a visual deterrent to crime and strengthening our crime prevention capabilities. Overall, camera surveillance contributes to maintaining a safe and secure working environment for our staff and visitors.
Legal basis
Camera surveillance is performed with the support of necessity and legitimate interest. As the purpose of protecting our property against burglary, theft or vandalism constitutes a legitimate interest for camera surveillance, it constitutes a viable means for processing necessary personal data.
Data retention
Recorded camera surveillance material is stored for 365 days. The preservation of recorded material is to maintain possible evidence in an investigation, legal process or to support an ongoing police investigation. The retention time is also based on requirements set in the PCI-DSS standard.
Recorded camera surveillance material may be stored longer than stated above if there is a legal obligation to comply, such as an ongoing police investigation.
Access to the camera surveillance information
Access to recorded material is limited to authorized employees at Iver on a need-to-know basis. Contractors that support or service Iver's surveillance systems may be given limited access to camera surveillance equipment on a case-by-case basis to fulfill contractual obligations.
Your rights
In accordance with current data protection legislation, you have the right to obtain information about what personal data we process about you. Under certain conditions, you also have the right to request deletion or limitation of your personal data or object to our processing of your data.
Questions
If you have questions about your rights or the processing of your personal data performed by Iver, you are welcome to contact our Data Protection Officer.
If you have any complaints regarding our processing of your personal data, you have the right to lodge a complaint with the Swedish Data Protection Authority (Integritetsskyddsmyndigheten) which is the Swedish Supervisory Authority.
Iver’s Data Protection Officer (DPO)
E-mail: dpo@iver.se
The Swedish Data Protection Authority can be reached at:
Integritetsskyddsmyndigheten
PO Box 8114
104 20 Stockholm
E-mail: imy@imy.se
Phone: 08-657 61 00
www.imy.se