Privacy Notice for Camera Monitoring

1. Introduction 

This privacy notice is a part of our General Privacy Notice. For general information on how J2 Sourcing AB (“Controller”/”we”/”us”/”our”) collect, use, disclose, and safeguard data we collect about you in general, please find that notice here. This privacy notice outlines how we collect, use, and safeguard the data we collect about you when you visit our premises and are filmed by the cameras in our offices and storage/shipping facility. 

2.Overview of processing activities 

Purpose of processing 
  • To comply with requirements under the Transported Asset Protection Association (“TAPA”) Facility Security Requirements (“FSR”). 
  • To ensure supply–chain security, reduce loss exposure, and protect assets. 
  • To ensure the safety and security of employees, visitors, and the property. 
  • Preventing, deterring, and if necessary, investigating and collecting evidence, and reporting on criminal offences, e.g., break-ins, theft, harassment, violence, or other criminal offences or inappropriate behavior, or investigating accidents. 
  • Investigating and collecting evidence, and reporting on, incidents that are due to confirmed or suspected breaches of contracts or internal policies, routines, or guidelines. 
Categories of personal data 
  • Video footage from CCTV, i.e., faces of persons, how persons move through and act on the Controller’s premises, and license plate numbers and branding on delivery vehicles. 
Categories of data subjects 
  • Employees and consultants. 
  • Customers, suppliers, and partners. 
  • Other visitors to our premises. 
Data sources 
  • Our CCTV system. 
Legal bases 
  • Legitimate interest. 
  • For personal data related to criminal offences that may be processed: necessary for the establishment, exercise, or defense of legal claims or whenever courts are acting in their judicial capacity. 
Sharing of data 
  • If CCTV footage containing personal data is relevant for the investigation of a criminal offence. 
  • If CCTV footage containing personal data is relevant for the investigation of an incident due to a breach of contract or due to breach of TAPA requirements or internal policies and guidelines. 

3.Use of Data 

The personal data is collected for the purpose stated above. Your personal data will mainly be used in the following ways:  

  • For storage: We will store the data locally on a separated server placed on our premises in a locked facility in case there is a reason for reviewing the materials to prevent, deter, or investigate unlawful or inappropriate actions, accidents, or incidents. 
  • For access and review: Where there has occurred an incident or accident or where there is a suspicion of an incident or accident, the video footage including your personal data may be accessed and reviewed by the relevant function of J2 Sourcing. 
  • For sharing: If a criminal offence, accident, or incident is confirmed and has been captured on CCTV footage, such footage can be shared with governmental bodies and other authorities investigating such event or with customers, suppliers, and partners, as is necessary to fulfil contractual obligations and requirements under applicable certifications. 

4.How we share your data with third parties 

The camera recordings can only be accessed by a limited number of authorized individuals within our organization. The recordings will only be accessed and reviewed if a claim has been made regarding, or where there is otherwise reasonable suspicion of, illegal, inappropriate, unauthorized, or otherwise unwanted access to or behavior on our premises, of an accident, or an incident. 

We will not transfer the video recordings, or any personal data collected through said the camera monitoring to any third parties, unless in order to fulfil the purpose for which it has been collected. This may for example be where the video recordings are turned over to the authorities if it has relevance for an investigation or to an insurance company in an insurance matter. 

5.Retention of data 

We will keep the footage from our security cameras for 30 days from when the footage was collected. Then it is automatically erased, unless a specific piece of footage is actively processed and moved to another system for storage. 

The information may be retained for a longer period of time if determined necessary to protect the company’s contractual and legal rights, defend against potential claims, meet legal obligations, or for insurance purposes. 

6.Your Rights 

You have the following rights which you can, under certain circumstances, exercise in relation to our processing of your personal data.  

  • Right to be informed: You have the right to know what personal data is being collected about you, why it is being collected, and how it will be used.  
  • Right of access: You have the right to access your personal data and receive a copy of it.  
  • Right to rectification: You have the right to request that any inaccurate personal data about you is corrected. 
  • Right to erasure: You have the right to have your personal data erased under certain circumstances. 
  • Right to restrict processing: You have the right to request that the processing of your personal data be restricted under certain circumstances. 
  • Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another data controller.  
  • Right to object: You have the right to object to the processing of your personal data under certain circumstances. 
  • Rights related to automated decision making and profiling: You have the right to know when automated decision making and profiling is being used, and to object to it under certain circumstances. 

7. Your Right to Complain to Integritetsskyddsmyndigheten 

  • File a complaint to IMY 

If you believe that we have processed your personal data in violation of applicable laws and regulations, you also have the right to make a complaint to our Privacy Manager, who can be reached at the contact information listed under Section 9 below, or by filing a complaint with the competent supervisory authority. If you live in Sweden, you can find the right to complain to IMY here: 

 

  • Further Legal Information 

The Camera Surveillance Act 2018:1200: https://www.riksdagen.se/sv/dokument-lagar/dokument/svensk-forfattningssamling/kamerabevakningslag-20181200_sfs-2018-1200  

8.Changes to this privacy notice 

We may introduce changes or updates to this Privacy Notice from time to time. In such case, we will publish information on the changes or updates on our website. 

9.Contact Information 

If you want to exercise any of your rights or if you want any other information relating to how we process your data, please contact us using any of the channels below.  

Data Controller: J2 Sourcing AB
Email address: gdpr@j2sourcing.com
Address: Kantyxegatan 29, SE-21376, Malmö, Sweden 

DPO: Christian Zieger
E-mail address: christian.zieger@j2sourcing.com
Phone number: + 46 761802323