Information on privacy during video surveillance

This Privacy Statement explains the type of personal data that AHEMA DOO Skopje (hereinafter referred to as: Controller) collects from you when you visit the business premises and how the Controller uses the data.

1. Why do we collect (process) personal data?

The controller collects personal data through the video surveillance system for the following reasons (purposes):

• To control access to the facility and ensure the security of the facility, the safety of the Controller’s employees and visitors, as well as property and information located or stored in the premises;
• To prevent, deter and, if necessary, investigate unauthorized physical access, including unauthorized access to security and protected premises, IT infrastructure or operational information; and
• To prevent, detect and investigate theft of equipment or assets owned by the Controller, visitors or employees, or threats to the safety of personnel working on the premises (for example: fire, physical assault, etc.).

The video surveillance system is not used for any other purpose, such as to monitor the work of employees or their attendance. The video cameras are placed so that they do not cover the surrounding public space. The cameras are intended to give a general overview of what is happening in certain places, but not to recognize faces.

The video surveillance system is also not used as an investigative tool or to obtain evidence during internal investigations or disciplinary proceedings, unless it is a security incident for which the video surveillance was established in accordance with the Personal Data Protection Law. (In exceptional circumstances, the data may be transferred to investigative authorities within the framework of a formal disciplinary or criminal investigation.)

Video surveillance cameras are installed at the entrance of the facility and are positioned and focused so that they record only persons who will access the official/business premises (facilities), including the property.

The video surveillance system covers the entrance area and the exit area of the stores, the entrances in the building and the garage.

2. What type of data does the controller collect?

The controller collects only images captured on the cameras, there is no audio recording.

3. Who is responsible for data processing?

The Controller is an entity that performs the processing of personal data and that determines the purposes of processing, solely in accordance with the Personal Data Protection Law. In addition, the IT personnel are the contact persons responsible for video surveillance.

4. What is the legal basis for processing personal data through the video surveillance system?

The controller uses video surveillance equipment for:

• Protection of human life and health;
• Protection of property;
• Protection of the life and health of employees due to the nature of the work;
• Ensuring control of entry and exit from the official or business premises.

Therefore, the data processing is legal according to Article 90 of the Personal Data Protection Law.

In addition, at the entrance to AHEMA DOO SKOPJE, there is a visible and clearly displayed video surveillance notice, informing the subject to personal data collection about the video surveillance, the name of the controller performing video surveillance and the manner of obtaining information on where and how long the video surveillance system recordings are stored.

5. Who can access my personal data

Video recordings can only be accessed by authorized video surveillance personnel. Access to the digital device or the disk on which the video recordings are stored is limited, protected by the application of technical data security measures (such as password, record of every event or action by the employees or authorized persons). The data, i.e. the video recordings, cannot be accessed without prior authorization by AHEMA DOO SKOPJE.

6. Can I access my personal data?

You have the right to access your data at any time free of charge, by sending a request to AHEMA DOO SKOPJE, or via email to: info@ahema.com.mk

7. Can I change my data?

No editing of the video surveillance recording is allowed.

8. Can I request a restriction of the processing of my data?

You have the right to restrict the processing of your personal data at any time by sending a request to AHEMA DOO SKOPJE when you dispute the accuracy of your personal data, or when the Controller no longer needs your data to perform its tasks. You can also block the processing when the operation is illegal and you object to deleting the data. However, blocking is not possible in every case of an official investigation.

9. Can I delete my data?

You have the right to request your data to be deleted at any time by sending a request to AHEMA DOO SKOPJE when the processing is illegal.

10. Is my personal data shared with other people?

Your data is kept with the Controller unless you request from the Controller or give consent for it to be shared. In case of sharing your data with third parties, you will be notified to whom it was disclosed, for what purpose and on what legal basis.

11. Do I have the right to object?

Yes, you have the right to object and oppose the processing at any time by sending a request to AHEMA DOO SKOPJE if when you have legitimate reasons regarding your situation. The Controller will consider your request within 15 days from the day of submitting the request.

12. What can I do if a problem arises?

а) The first step is to notify the Controller by sending an email to info@ahema.com.mk

б) If you do not receive an answer from us or if you are not satisfied with it, the second step would be to contact our personal data protection officer

в) You can submit a request to the Personal Data Protection Agency www.azlp.mk at any time, which will act according to your request and take the necessary measures.

13. When will the processing of my personal data through the video surveillance system begin?

The processing begins the moment you visit the Controller’s premises.

14. Personal data security

The Controller is committed to protecting your personal data. Therefore, it uses security technologies and procedures that protect your personal data, primarily from unauthorized access, use or disclosure. We store your data on computer systems with limited access and in a controlled environment.

15. How long do you keep my data?

The Controller will store your personal data for 30 (thirty) calendar days after your visit to our premises, after which all recorded videos are automatically deleted.