Why is personal data collected and processed?
The Controller collects personal data through the video surveillance system for the following reasons:
-to control access to the facility (building, entrance, premises..) and to ensure the security of the facility, the safety of the Controller’s employees and visitors, as well as of property and information located or stored on the premises;
-to prevent, deter and if necessary, investigate unauthorized physical access and to prevent, detect and investigate theft of equipment or assets owned by the Controller, visitors or employees, or
-threats to the safety of personnel working on the premises (for example: fire, physical attack).
The video surveillance system is not used for any other purpose, such as to monitor the work of employees or their presence. The video cameras are installed in such a way that they do not cover the surrounding public space. The cameras are intended to provide a general overview of what is happening in certain places. The video surveillance system is also not used as an investigative tool or to obtain evidence in internal investigations or disciplinary proceedings, unless it is a security incident for which video surveillance has been established in accordance with the Law on the Protection of Personal Data. In exceptional circumstances, the data may be transferred to the investigative authorities within the framework of a formal disciplinary or criminal investigation. The video surveillance cameras are installed and positioned and focused in such a way that only persons who will access the official/business premises (facilities), including the property – the yard and the parking lot, are recorded.
What data does the Controller collect?
The Controller collects only images captured by the cameras, and no audio recording is made. The controller is the entity that processes personal data and determines the purposes of processing, solely in accordance with the Law on Personal Data Protection. Nikola Simonov, an employee of the controller, is the contact person and the person responsible for video surveillance.
What is the legal basis for processing personal data through the video surveillance system?
The processing is lawful in accordance with Article 90 of the Law on Personal Data Protection. At the entrance to EXPANDA DOOEL there is a visible and clearly displayed notice about video surveillance that allows personal data subjects to familiarize themselves with the performance of video surveillance, as well as the name of the controller who performs video surveillance and the manner in which information can be obtained about where and for how long the recordings from the video surveillance system are stored.
The controller uses video surveillance equipment for:
-protection of property;
-protection of the life and health of employees due to the nature of the work;
-ensuring control over entry and exit from official or business premises.
Who can see my personal data?
The video recordings can only be accessed by authorized persons for video surveillance. The data, i.e. the video recordings, cannot be accessed without authorization from the authorized person – the company manager.
How to control your data?
You can send a request to the following email address: info@expanda.com.mk
Can I access my data?
You have the right to access your data at any time and free of charge, by sending a request to EXPANDA DOOEL Skopje.
Can I change my data?
It is not allowed to change the video recording for video surveillance.
Can I request a restriction of the processing of my data?
You have the right to restrict the processing of your personal data at any time by sending a request when you contest the accuracy of your personal data or when the Controller no longer needs the data to perform its tasks.
Can I delete my data?
You have the right to delete your data at any time by sending a request to the Controller where the processing is unlawful.
Are my personal data shared with other persons?
Your data are stored by the Controller unless you ask the Controller or give your consent for them to be shared. In case of sharing your data with third parties, you will be informed to whom they have been disclosed, for what purpose and on what legal basis.
Do I have the right to object?
Yes, you have the right to object and to object to the processing at any time by sending a request where you have legitimate reasons relating to your particular situation. The Controller will act on your request within 15 days from the date of submission of the request.
What can I do in case of a problem?
a) The first step is to notify the Controller by sending an e-mail and request that he take action.
b) You can submit a request to the Personal Data Protection Agency www.azlp.mk at any time, which will act on your request and adopt the necessary measures.
When will the processing of my personal data through the video surveillance system begin?
The processing begins at the moment you visit the Controller’s premises. The Controller is committed to protecting your personal data. Therefore, it uses security technologies and procedures that protect your personal data primarily from unauthorized access, use or disclosure. We store your data on computer systems with limited access and in a controlled environment. The Controller will store your personal data for 30 calendar days after your visit to our premises, after which all recorded videos are automatically deleted.
This privacy statement is an integral part of the Regulation on the manner of performing video surveillance.