Video Surveillance
Information on Video Surveillance
Dear employees of Nox Medical ehf, dear visitors of the Nox Medical ehf buildings,
We would like to inform you that the entrance area of the Nox Medical ehf premises in Katrínartúni 2, 105 Reykjavík, Iceland is monitored by a video surveillance system. These video recordings are purely internal in nature and serve the safety of the company premises and operational processes. Employees and visitors entering and leaving the office buildings are recorded.
Information on data protection
Name and contact details of the data controller
Nox Medical ehf, Katrínartúni 2, 105 Reykjavík, Iceland, is responsible for processing your personal data as part of video surveillance mentioned above. For further information please contact info@noxmedical.com.
You can also contact our data protection officer directly at dataprotection.nox@v-formation.gmbh or at our postal address with the addition “Data protection officer / DPO”.
Purpose and legal basis of video surveillance
Video surveillance is used to protect the company premises, administrative buildings and the persons present there from any dangers. The legal basis is Article 6 para. 1 letter f GDPR.
Legitimate interests pursued
The legitimate interests in carrying out video surveillance lie in averting dangers to life and limb of employees and visitors as well as all persons who are in the building and on the company premises. In addition, the monitoring of the security of the buildings serves to protect the property of the company.
Recipients of your data
The data obtained, in particular camera images, will only be viewed internally and by employees of Nox Medical ehf and, if necessary, processed. These will generally not be passed on to third parties. If criminal offences are committed, they may be passed on to legally authorised bodies such as the police. Nox Medical ehf may use a security service provider to carry out video surveillance.
Duration of storage of personal data
The video recordings are stored for a maximum storage period is 30 days, and 90 days in case of an actual threat or violation of the safety of the premises.
Your rights as a data subject
As a data subject, you have the following rights within the statutory limits:
Right to information (Article 15 GDPR)
You have a right to obtain information about the personal data concerning you that is processed by us.
Right to rectification (Article 16 GDPR)
You have the right to request that we immediately correct inaccurate data and complete incomplete data, provided that the legal requirements are met.
Right to erasure (Article 17 GDPR)
You have the right to request the erasure of your personal data, provided that the legal requirements are met and in particular if (1) your data is no longer necessary for the purposes stated in this privacy notice, (2) you have withdrawn your consent and there is no other legal basis for the processing, (3) your data has been processed unlawfully or (4) you have objected to the processing of your data and there are no overriding legitimate grounds for the processing.
Right to restriction of processing (Article 18 GDPR)
You have the right to request that we restrict the processing of personal data concerning you, in particular if you dispute the accuracy of the data or if the processing of your data is unlawful and you request restriction instead of erasure.
Right to data portability (Article 20 GDPR)
If your data is processed on the basis of a contract or on the basis of your consent, you have the right to receive your data in a structured, commonly used and machine-readable format or to have your data transferred to another controller, provided that the legal requirements for this are met.
Right to object (Article 21 GDPR)
You have the right to object to the processing of your data at any time on grounds relating to your particular situation, insofar as the legal basis for our processing of your data is the maintenance of our legitimate interests or the legitimate interests of a third party pursuant to Article 6 (1) (f) GDPR. If you exercise your right to object, we will stop processing your data unless we can demonstrate compelling legitimate grounds for continuing the processing which override your interests, rights and freedoms, or the processing is for the purpose of asserting, exercising or defending legal claims.
Right of withdrawal (Article 7 para. 3 GDPR)
If we process your data on the basis of your consent, you have the right to withdraw this consent at any time with effect for the future. This does not affect the lawfulness of the processing until the time of the withdrawal.
Right to lodge a complaint with a supervisory authority (Article 77 GDPR)
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data concerning you infringes the GDPR. You may exercise this right with a supervisory authority in the member state of your ordinary residence, place of work or place of the alleged infringement or with the supervisory authority responsible for us. The supervisory authority responsible for us is the Icelandic data protection authority – Persónuvernd, Rauðarárstígur 10, 105 Reykjavík, Iceland.
To exercise your rights as a data subject, please contact us using the contact details under “Information about the Controller of the data processing”.