Video surviellance privacy notice
This privacy notice explains the kind of personal data ALKALOID AD Skopje (hereinunder: Controller) collects on you when visiting the official/business premises and how the Controller uses this data.
Why do we collect/process personal data?
The Controller collects data through the video surveillance system for the following reasons/purposes:
To control access to the premises (building, entrance, facilities) and to ensure the security of the premises, the safety of Controller's staff and visitors, as well as property and information located or stored on the premises;
To prevent, deter, and if necessary, investigate unauthorised physical access, including unauthorised access to secure and protected facilities, IT infrastructure, or operational information; and
To prevent, detect and investigate destruction and theft of equipment, assets, and products owned by the Controller, visitors, or staff, or threats to the safety of personnel working at the premises (e.g., injury at work, fire, physical assault).
The video surveillance system is not used for any other purpose, such as to monitor the work of employees or their attendance. The positioning of the video cameras is such that they do not cover the surrounding public space. The cameras are aimed to give a general overview of what is happening in certain places but not to recognize persons.
The system is also not used as an investigative tool or to obtain evidence in internal investigations or disciplinary procedures unless a security incident is involved, which the video surveillance is installed for, under the Law on Data Protection. (In exceptional circumstances, we may transfer the data to investigatory bodies in the framework of a formal disciplinary or criminal investigation).
The video surveillance cameras are installed at all sites/premises owned by the Controller and are placed and so focused that they film only people who access the official/business premises/facilities, including property.
The video surveillance system covers the following area:
Perimeter fence around the Company’s site (property)
Entrances at the perimeter fence,
Secured entrances to sites,
Entrances to premises,
Internal roads,
Internal parking lots,
Facilities in premises for production or storage of specific products, including narcotic products,
Facilities in premises where information technology, telecommunications, or other power equipment is installed,
Facilities in premises for archiving/storage of documents,
Facilities in premises for storage of particularly valuable spare parts and equipment,
What kind of data does the Controller collect?
The Controller collects just images caught on camera and does not record voice.
Who is responsible for the data processing?
The Controller is an entity that processes personal data and determines the objectives of this processing operation, solely in compliance with the Law on Personal Data Protection. Moreover, the Head of General Services Kjire Kocev is the contact person and responsible person for this operation.
What is the legal basis for this processing of personal data through the video surveillance system?
The Controller uses video-surveillance equipment for (list one or more of the listed purposes):
Protection of the life and health of people;
Protection of property;
Protection of the life and health of employees due to the nature of operation; or
Entry and exit control to/from official or business premises.
Therefore, the processing is lawful under Article 90 of the Law on Personal Data Protection.
In addition, at the entrance of ALKALOID AD Skopje, there is a visible and clearly posted notice about the video surveillance that allows data subjects to learn about the video surveillance, the name of the Controller performing video surveillance, and how they can obtain information about where and for how long the recordings of the video surveillance system are stored.
Who can see my personal data?
Only a person authorised for video surveillance can access the recordings (such as Controller’s employees in the security and IT&T departments). Access to the digital device or hard disc recorder is limited and protected by technical data security measures (a password and recording of any log or action from the staff members or authorised persons). The data, i.e., video recordings, cannot be accessed without the authorisation of the CEO of ALKALOID AD Skopje.
How to control your data?
You can send a request by email to dpo@alkaloid.com.mk or by post to the following address: Alkaloid AD Skopje, Blvd. Aleksandar Makedonski 12, 1000 Skopje, to the attention of the Personal Data Protection Officer.
Can I access my data?
You have the right to access your data at any time and free of charge by sending a request by post to: Alkaloid AD Skopje, Blvd. Aleksandar Makedonski 12, 1000 Skopje, to the attention of the Personal Data Protection Officer or by email to: dpo@alkaloid.com.mk.
Can I modify my data?
Modifying the video surveillance footage is not allowed.
Can I request restriction to the processing of my data?
You have the right to restrict the processing of your data at any time by sending a request by post to: Alkaloid AD Skopje, Blvd. Aleksandar Makedonski 12, 1000 Skopje, to the attention of the Personal Data Protection Officer or by email to: dpo@alkaloid.com.mк, when you contest the accuracy of your personal data or when the Controller no longer needs the data for completing its tasks. You can also block the processing activity when the operation is unlawful, and you oppose the erasure of the data. However, blocking is not possible in case of an official investigation.
Can I delete my data?
You have the right to delete your data at any time by sending a request by post to: Alkaloid AD Skopje, Blvd. Aleksandar Makedonski 12, 1000 Skopje, to the attention of the Personal Data Protection Officer or by email to: dpo@alkaloid.com.mk, when the processing activity is unlawful.
Do you share my personal data with other persons?
We keep your data inside the Controller unless you ask us or give us your permission to share it. If we share your data with third parties, you will be notified to whom your personal data has been disclosed, for what purpose, and on what legal grounds.
Do I have the right to object?
Yes, you have the right to object at any time by sending a request by post to Alkaloid AD Skopje, Blvd. Aleksandar Makedonski 12, 1000 Skopje to the attention of the Personal Data Protection Officer or by email to: dpo@alkaloid.com.mk, when you have legitimate reasons relating to your particular situation. The Controller will address your requests within 15 days from the receipt of the request.
What can I do in the event of a problem?
a) The first step is to notify the Controller by sending an email to kicev@alkaloid.com.mk and ask us to take action.
The second step is, if you obtain no reply from us or if you are not satisfied with it, to contact our data protection officer at dpo@alkaloid.com.mk.
At any time, you can file a complaint with the Personal Data Protection Agency at www.azlp.mk, which will process your request and adopt the necessary measures.
When will you start the processing of my personal data through the video surveillance system?
The processing operation starts when you visit the Controller sites, premises, and facilities.
Security of personal data
The Controller is committed to protecting the security of your personal data. Therefore, we use security technologies and procedures to protect your personal data from unauthorised access, use or disclosure. We keep your data on computer systems that are limited access and just in a controlled environment.
How long do we keep your data?
The Controller will keep your personal data for up to 30 (thirty) calendar days after visiting our premises. After that period, any video surveillance recorded footage is automatically deleted.