This Privacy Statement provides detailed information about the processing of personal data that EVN Macedonia AD Skopje, as well as the companies in which it is the sole or majority shareholder (hereinafter referred to as the Controller), collects from you when you visit its business premises.
Why is personal data processed?
The Controller collects personal data through its video surveillance system for the following purposes:
-
To control access to the Controller’s premises and ensure the security of the premises, the safety of the Controller’s employees and visitors, and the protection of property and information located or stored on the premises;
-
To prevent, deter and, where necessary, investigate unauthorized physical access, including unauthorized access to secure and restricted areas, IT infrastructure or operational information; and
-
To prevent, detect and investigate the theft of equipment or assets belonging to the Controller, visitors or employees, or threats to the safety of personnel working on the premises (e.g. fire, physical assault, etc.).
The video surveillance system is not used for any other purpose, such as monitoring employees’ work performance or attendance. The video cameras are positioned so that they do not cover the surrounding public areas. The cameras are intended to provide a general overview of activities taking place in specific locations, rather than to identify individuals.
The video surveillance system is also not used as an investigative tool or to obtain evidence in internal investigations or disciplinary proceedings, unless a security incident related to the purpose for which the video surveillance system was established has occurred, and in accordance with the Law on Personal Data Protection. In exceptional circumstances, data may be transferred to investigative authorities as part of a formal disciplinary or criminal investigation.
Video surveillance cameras are installed in accordance with a previously prepared plan and are positioned and focused so that they record only individuals who access the business premises and buildings, including the associated property (building entrances and exits, building access points, the garage and the exterior area of the building).
What data does the Controller collect?
The Controller collects only video footage recorded by the cameras and does not make audio recordings.
Who is responsible for processing the data?
The Controller processes personal data and determines the purposes of processing exclusively in accordance with the Law on Personal Data Protection.
What is the legal basis for processing personal data through the video surveillance system?
The Controller uses video surveillance equipment for the following purposes:
-
To protect human life and health;
-
To protect property;
-
To protect the life and health of employees in view of the nature of their work; and
-
To ensure control over entry to and exit from official or business premises, exclusively for security purposes.
Therefore, the processing is lawful pursuant to Article 90 of the Law on Personal Data Protection.
At every entrance to the Controller’s premises, a clearly visible and prominently displayed video surveillance notice is provided. This notice enables data subjects to be informed that video surveillance is being carried out, identifies the Controller responsible for conducting the surveillance, and explains how they can obtain information about where and for how long recordings from the video surveillance system are stored.
Who can access my personal data?
Access to video recordings is restricted to authorized video surveillance personnel, namely employees of the Facilities and Logistics Management Department who have been granted authorization to access the live video surveillance system.
For certain premises, the same access privileges are also granted to authorized personnel of an engaged private security agency with which the Controller has signed a framework agreement.
Access to the digital device or storage medium on which video recordings are stored is restricted and protected through technical data security measures, including password-protected access, logging of every authorized employee access, and prior approval.
How can you access your data?
Any information regarding the processing of personal data can be obtained by submitting a written request to [email protected].
Modification of collected data
Modification of video surveillance recordings is not permitted.
Restriction of the processing of personal data
The processing of personal data may be restricted at any time by submitting a request to [email protected], if you contest the accuracy of your personal data or if the Controller no longer needs the data to perform its tasks.
Processing may also be restricted when the processing is unlawful and you oppose the deletion of the data. However, restriction is not possible in the case of an official investigation.
Deletion of personal data
You have the right to request the deletion of your personal data at any time by sending a request to [email protected], if you believe that the processing is unlawful.
Sharing personal data with third parties
Your data is retained by the Controller unless you request or consent to the Controller sharing it.
If your data is shared with third parties, you will be informed of the parties to whom it has been disclosed, the purpose of the disclosure, and the legal basis for it.
Right to object
Yes, you have the right to object to the processing of your personal data at any time by submitting a request to [email protected], where you have legitimate grounds relating to your particular situation.
The Controller will respond to your request within 15 days of the date on which it is submitted.
What can I do if there is a problem?
a) First step: Notify the Controller by email and request that appropriate action be taken.
b) Second step: If you do not receive a response from us or are dissatisfied with the response, contact our Data Protection Officer at [email protected].
c) At any time, you may submit a request or complaint to the Agency for Personal Data Protection at www.azlp.mk . The Agency will consider your request and take the necessary measures.
When does the processing of my personal data through the video surveillance system begin?
Processing begins when you visit the Controller’s premises.
Security of personal data
The Controller is committed to protecting your personal data. Accordingly, it uses security technologies and procedures to protect your personal data, primarily against unauthorized access, use or disclosure.
The data is stored on computer systems with restricted access in a controlled environment.
How long do we retain your data?
The Controller retains your personal data for 30 calendar days following your visit to our premises, after which all recorded video footage is automatically deleted.