Privacy Notice – CCTV Monitoring


This privacy notice describes the use of personal data collected through the CCTV cameras mounted beyond the point marked with a CCTV warning sign. The relevant personal data consist in video recordings of any person entering these premises.

[Cybercom Sweden AB with corp. ID no. 556254-0673] (“we”, “us” or “our”) is the controller in respect of the processing of personal data collected through the CCTV cameras.

Purposes of processing the personal data Storage period for the personal data Legal basis for processing the personal data
To prevent, investigate and facilitate mitigating/legal actions against any confirmed security breach. Recordings are kept for six (6) months before deletion. In case of suspicion of a security breach, relevant recordings will be kept as long as necessary to complete an investigation and take appropriate actions in response of any confirmed security breach. Our legitimate interest in achieving the purposes specified in this table.

Access to the CCTV recordings

The CCTV recordings are stored on our servers. Upon suspicion of a security breach, access to the recordings may be granted to authorised personnel with us and our customers with data stored on equipment within the monitored premises.

Transfer of personal data to third countries

We will not transfer the CCTV recordings to any country outside of the EEA.

Information about your rights:

You have the following general rights under applicable data protection legislation:

  1. to object to the processing of your personal data in the CCTV recordings;
  2. to request information about the personal data we process about you as well as how it is being processed. You also have the right to request a copy of any personal data about you that is being processed by us;
  3. to have inaccurate information corrected and incomplete information completed (by providing us with accurate information) without undue delay;
  4. to request deletion of personal data about you – e.g. if the data is no longer relevant in relation to the purpose it was collected for, or if you object to processing based on our legitimate interests. You may also request that the processing of your personal data be restricted – e.g. in conjunction with an objection to the accuracy of the data.

Please note that the rights described in section a) and d) above are not unconditional and, depending on the circumstances of the individual case, we might not accommodate your request to exercise these rights.

Right to data portability

The right to data portability under the GDPR does not apply to personal data in the CCTV recordings.

Right to lodge a complaint with a supervisory authority

If you have any complaints regarding our processing of your personal data, you have the right to lodge a complaint with the Swedish Data Protection Authority (www.datainspektionen.se), any other supervisory authority within the EEA where you have your habitual residence, your place of work or at the place of an alleged infringement.

Contact details

Please use the below contact details for any data protection related questions or if you would like to exercise any of the above described rights:

dpm@cybercom.com

Cybercom Group AB
Att. Data Protection Manager (DPM)
Box 7574, 103 93 Stockholm
Sweden