Processing of personal data in SmarPosti camera surveillance register is the responsibility of SmartPosti.
Purpose and legal basis of personal data processing SmartPosti processes data in the camera surveillance register in order to:
Ensure the personal safety of employees;
Protect property;
Supervise the appropriate operation of the production process;
Prevent and investigate incidents that compromise safety, property and the production process;
Prevent and investigate apparent work-related risks and threats;
Prevent and investigate property crime;
Ensure an employee’s interests and rights at the employee’s request (requires an agreement).
In respect of the parcel lockers, data is also processed for the purpose of controlling proper use, as well as for preventing and investigating cases of vandalism and fraud. The processing of data is based on the legitimate interests of SmartPosti.
Data processed in the camera surveillance register and its retention The camera surveillance register consists of digital image recordings of surveillance cameras. In addition to the image itself, the register contains information about the monitored area or parcel locker where the camera is located, as well as the date and time of the events recorded in the image. Camera surveillance recordings are retained for as long as is necessary for the purpose of use of personal data. The retention time varies depending on the technical solution, but will not exceed three months from the date of creating the image, unless a longer time is required for the purpose of use of the register in a particular case.
Regular sources of data The data in the register originates from camera surveillance systems of SmartPosti.
Disclosure of data Due to the technical implementation of the processing of data, some data may be physically situated on external subcontractors’ servers or hardware, where they are processed through a technical interface. Personal data is not transferred outside the European Union or the European Economic Area.
Data protection principles Access to digital records is restricted. Images or video recordings are only processed by persons who are responsible for the operation and/or maintenance of the equipment and those whose work involves the processing of records.
Rights of the data subject The data subject has the right to obtain information about the processing of his or her personal data and to know whether his or her personal data is being processed. In addition, the data subject has the right to access and receive a copy of his or her personal data undergoing processing, and to demand rectification of inaccurate or incorrect data and completion of the data. The data subject may request erasure or transfer of personal data or, in certain situations, request restriction of processing or object to the processing of personal data on grounds relating to his or her particular personal situation. When the processing is based on consent, the consent may be withdrawn at any time.
Make a data request You can submit a data request regarding the information stored about you in SmartPosti’s data registers. To exercise your rights, you can contact SmartPosti at any time by email at klienditeenindus@smartposti.com. Before ensuring the exercise of your rights, we have the right to request proof of your identity.
Processing the data request We process your data request without undue delay and will respond within one month of receiving the request. Responses to requests submitted by post will be delivered as a registered letter to the address listed in SmartPosti’s address register. You are entitled to receive your personal data free of charge. If your inquiry is about something other than a formal data request, you can receive faster assistance through our Customer Service | SmartPosti .
If the data subject considers that the processing of personal data concerning him or her infringes data protection legislation, the data subject has the right to lodge a complaint with a supervisory authority, in particular in the Member State where the data subject has his or her habitual residence or place of work or where the alleged breach of the GDPR has occurred (in Estonia, the State Data Inspectorate). Further information is available on the website of the Data State Inspectorate: www.aki.ee.
Controller SmartPosti OÜ (business ID: 10891224) Street address: Harju maakond, Rae vald, Lehmja küla, Loomäe tee 13, 75306 Data Protection Officer: klienditeenindus@smartposti.com