1 Introduction

This information concerns Gernandt & Danielsson Advokatbyrå KB’s (”Gernandt & Danielsson”) camera surveillance at its office, located at Hamngatan 2, Stockholm.

The General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the Swedish Camera Surveillance Act (2018:1200) govern how camera surveillance may be used in Sweden.

Your privacy is important to us at Gernandt & Danielsson and we are committed to protecting personal data about you that is processed by the firm.

Gernandt & Danielsson Advokatbyrå AB, registration number 969695-3703, is the controller of personal data for the processing of personal data described below. This means that we are responsible for ensuring that the personal data is processed correctly and in accordance with applicable legislation.

2 What personal data do we process and what is the purpose of the processing of personal data?

Gernandt & Danielsson has installed CCTV at its office, and this involves recording video footage. The cameras face all entrance doors and emergency exits and are activated only in connection with entry and exit. To the extent a person in the video footage is identifiable, the video footage constitutes personal data about them.

The purpose of the camera surveillance is to prevent and investigate crime for the purpose of increasing the safety of Gernandt & Danielsson’s employees and visitors, as well as to protect the firm’s property.

3 What is the legal basis for our processing?

The legal basis for the processing of personal data in connection with the camera surveillance is that the processing is necessary for purposes which involve our legitimate interest in preventing and investigating crimes, with the aim of identifying and managing risks and thereby increasing the safety of employees and visitors, as well as ensuring client confidentiality and protecting Gernandt & Danielsson’s property. We have made the determination that Gernandt & Danielsson’s interest in processing personal data for the purposes stated above outweigh the invasion of privacy of a person who is recorded.

4 Who has access to the personal data we process?

We have taken appropriate technical and organisational security measures to protect the personal data we process from, among other things, unauthorised access and unauthorised use.

Only a small number of authorised persons at Gernandt & Danielsson have access to the recorded material. Review of video footage takes place only in accordance with the purposes stated above.

Gernandt & Danielsson will not disclose personal data to any third party other than the police or other law enforcement authority, where doing so is necessary to investigate, prevent or detect criminal activity. Disclosure may also be made to a municipality or other public authority that is responsible for rescue services, if the material is necessary to prevent a threatened accident or to reduce the effects of an accident that has already occurred.

5 How long is personal data saved?

The main rule is that recorded material is saved for three (3) days, after which it is erased automatically.

However, when specific material is required to take measures against a person who has been recorded, for example when preparing a police report, the material may be saved for as long as is necessary to take these measures but shall be erased immediately thereafter.

6 What are the rights of a person whose personal data we process?

You have the right to know what personal data we process about you. You also have the right to ask Gernandt & Danielsson to erase your personal data. You also have the right to object to specific processing of personal data and to request that the processing of personal data be restricted.

If you are dissatisfied with how Gernandt & Danielsson processes your personal data, you may file a complaint to the Integritetsskyddsmyndigheten, https://www.imy.se, which is the supervisory authority in Sweden. You can also contact the supervisory authority in the country where you live or work.

7 Contact

Please contact us at GDPR@gda.se or the address below if you wish to exercise any of your rights or if you have questions or comments concerning our processing of personal data.

Gernandt & Danielsson Advokatbyrå KB

Att. GDPR

Box 5747

114 87 Stockholm

+ 46 8 670 66 00

www.gda.se

* * *