Privacy Notice

PRIVACY NOTICE REGARDING THE USE OF SECURITY CAMERAS

The public limited company VALDEK (hereinafter referred to as ‘Valdek’, ‘we’, or ‘us’) uses security cameras on its premises. This privacy notice provides an overview of how Valdek processes your personal data when you enter the field of view of our security cameras, what your data protection rights are, and how you can exercise your rights.

We process your personal data in the manner described in this privacy notice and in accordance with applicable legislation, including the General Data Protection Regulation (Regulation (EU) 2016/679, hereinafter referred to as ‘the GDPR’) of the European Union. We process your personal data lawfully, fairly, transparently, and only when we have a legal basis for doing so.

1. CONTROLLER

The controller is a natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data, i.e. the grounds for and manner of processing.

The controller of personal data described in the privacy notice is the public limited company VALDEK, registry code 10088533, address Väljaotsa tee 1, Valkse village, Lääne-Harju rural municipality, Harju County, Estonia.

If you have any questions regarding the processing of your personal data or if you wish to exercise your rights as a data subject, please contact us by email at silja@valdek.ee.

2. TYPE OF PERSONAL DATA AND THE PURPOSE AND LEGAL BASIS OF DATA PROCESSING

If you enter the field of view of our security cameras, we will process your image. We record your image using technical measures (cameras).

We process your image for the following purposes: (i) monitoring the proper functioning of production equipment; (ii) protecting the life and health of persons; (iii) protecting property; (iv) detecting offences; (v) resolving legal disputes.

The legal basis for processing is our legitimate interest in (i) monitoring whether production equipment is functioning properly, as well as preventing downtime and interruptions in the production process; (ii) preventing and detecting situations that may endanger the life and health of our employees and other persons visiting our territory; (iii) protecting our property and that of our employees and other persons visiting the premises; (iv) detecting, identifying, and documenting offences; (v) resolving legal disputes, including protecting our rights by establishing, exercising, or defending legal claims. You can review the assessment of legitimate interest by contacting us at the email address provided in clause 1.

3. RECIPIENTS AND TRANSMISSION OF PERSONAL DATA

Only the management of Valdek has access to the camera recordings.

We may disclose your personal data to law enforcement and supervisory authorities, including to comply with legal obligations, requests from law enforcement or supervisory authorities, or to establish, exercise, or defend legal claims.

In addition, we may disclose your personal data to the provider of security camera maintenance services and our legal advisor.

We process your personal data within the European Economic Area, so we do not transmit your personal data outside the European Economic Area.

4. STORAGE OF PERSONAL DATA

We retain camera recordings for up to 30 days from the date your image was captured.

After the expiry of the personal data retention period or when we no longer need the relevant personal data for the purposes of processing, we will delete the recordings, unless the longer storage of personal data is necessary to comply with a legal obligation or requirement or to resolve a legal dispute.

5. RIGHTS OF THE DATA SUBJECT

As a data subject, you have the following data protection rights, subject to the limitations set out in applicable legislation:

the right to access your personal data and obtain a copy of the camera recording in which you are visible;
the right to request the rectification of personal data if we hold inaccurate personal data about you;
the right to request the erasure of personal data, e.g. if we no longer need the personal data for the purpose for which it was collected or if the personal data has been collected unlawfully. We are not required to erase personal data if we are required by law to retain personal data or if the retention of personal data is necessary to establish, exercise, or defend legal claims;
the right to request the restriction of processing of personal data, e.g. if you contest the accuracy of personal data or the processing of personal data is unlawful, but you do not request the erasure of personal data, or you need personal data to establish, exercise, or defend legal claims;
the right to object to the processing of personal data, e.g. if such processing is based on our legitimate interest. However, we have the right to continue processing the data if we process it for compelling legitimate grounds that outweigh your interests, rights, and freedoms, or for the purpose of establishing, exercising, or defending legal claims;
the right to lodge a complaint with a supervisory authority. In Estonia, the supervisory authority is the Data Protection Inspectorate (aki.ee, info@aki.ee).

If you wish to exercise your rights as a data subject, please contact us at the email address provided in clause 1.

6. AMENDING THE NOTICE

We may amend or supplement this notice from time to time to accurately reflect the processing of your personal data.