CCTV surveillance at Junibacken

1. GENERAL
1.1 CCTV surveillance at selected locations within Junibacken’s premises at Galärvarvsvägen 8 in Stockholm is carried out for the purpose of preventing, deterring, detecting and investigating crime, as well as increasing safety and security at the selected locations for employees, contractors and visitors.

2. DATA CONTROLLER AND CONTACT DETAILS
2.1 Sagolekhuset Junibacken AB, 556462-6298 (“Junibacken”), is the data controller for the processing of personal data carried out in connection with CCTV surveillance at Junibacken.

2.2 Junibacken can be contacted by post at Sagolekhuset Junibacken AB, Attn: Dataskydd Galärvarvsvägen 8, SE-115 21 Stockholm, Sweden, or by e-mail at dataskydd@Junibacken.se.

3. PURPOSE AND LEGAL BASIS FOR CCTV SURVEILLANCE
3.1 The legal basis for Junibackens processing of personal data through CCTV surveillance is legitimate interest, following a balancing of interests between the protection of the personal privacy of Junibackens visitors, employees and contractors, and the possibility, through CCTV surveillance at selected locations, to prevent, deter, detect and investigate crime and to increase safety and security at the selected locations for employees, contractors and visitors in Junibackens premises at Galärvarvsvägen 8 in Stockholm.

3.2 The persons who may be recorded by the cameras used for CCTV surveillance include Junibackens employees and contractors as well as a large number of visitors to Sagolekhuset Junibacken, many of whom are minors. In the balancing of interests regarding the CCTV surveillance, consideration has been given to visitors’ interest in privacy when visiting Junibackens premises for leisure purposes, as well as employees’ and contractors’ interest in privacy when performing their work during working hours.

3.3 The CCTV surveillance is carried out for the purpose of preventing, deterring, detecting and investigating crime and increasing safety and security at the selected locations for employees, contractors and visitors in Junibackens premises at Galärvarvsvägen 8 in Stockholm. The premises have been exposed to criminal activity and there is a threat level against the premises and the persons present there. In light of the potential risk that employees, contractors and visitors may be subjected to crime, the current threat level against the premises and the persons present there, and the fact that only certain parts of Sagolekhuset Junibackens premises are subject to CCTV surveillance, there is a legitimate interest in the CCTV surveillance carried out in Sagolekhuset Junibackens premises at Galärvarvsvägen 8 in Stockholm.

4. PURPOSE OF THE CCTV SURVEILLANCE
4.1 CCTV surveillance at selected locations within Junibackens premises at Galärvarvsvägen 8 in Stockholm is carried out for the purpose of preventing, deterring, detecting and investigating crime, as well as increasing safety and security at the selected locations for employees, contractors and visitors.

4.2 No automated decision-making will be carried out on the basis of the recorded material.

5. PROCESSING OF PERSONAL DATA
5.1 Securitas Direct Sverige AB carries out the CCTV surveillance in Junibackens premises on behalf of JUNIBACKEN and acts as Junibackens data processor. In the event of a burglary or other incident, recorded material may also be processed by security guards and/or the police for the purpose of preventing danger/crime and investigating what has occurred. Access to recorded material is password-protected with multi-factor authentication (MFA) and is logged.

6. RECORDING AND STORAGE
6.1 Recorded material is deleted after seven (7) days.

6.2 No automated decision-making will be carried out on the basis of the recorded material.

7. RIGHTS OF THE DATA SUBJECT, ERASURE, RECTIFICATION, ETC.
7.1 The data subject whose personal data are processed has the right, in accordance with applicable data protection legislation, to request from JUNIBACKEN access to, rectification or erasure of personal data, or restriction of processing of personal data concerning the data subject.

7.2 Requests for access, rectification or erasure shall be sent to Junibacken by e-mail to dataskydd@junibacken.se.

7.3 A person making a request for access to, rectification or erasure of personal data must be able to identify themselves. If there are reasons to doubt the identity of the person making such a request, JUNIBACKEN is entitled to request additional information from that person in order to avoid disclosure of personal data to the wrong person. Junibacken may only collect such additional personal data as are necessary for identification.

7.4 Complaints regarding Junibackens processing of personal data may be submitted to Junibacken by e-mail at dataskydd@junibacken.se or to IMY (the Swedish Authority for Privacy Protection).