Information about Mannheimer Swartling's processing of personal data – CCTV

Mannheimer Swartling cares about privacy and protecting the personal data processed by the firm.

This information concerns use of CCTV at some of the firm's offices in Sweden. The General Data Protection Regulation (GDPR) and the Camera Surveillance Act (2018:1200) govern use of CCTV in Sweden.

What personal data do we process and what is the purpose of our data processing?

Mannheimer Swartling has installed CCTV equipment at some of its offices in Sweden. This involves recording of video footage. If a person whose image is recorded is identifiable, the recording constitutes personal data about that person. The purpose of using CCTV is to prevent and investigate crime, thereby enhancing security for Mannheimer Swartling's staff and visitors, and protecting the firm's property. Video footage is examined only to the extent necessary to achieve these purposes.

Signs are clearly displayed wherever CCTV is in operation.

What is the legal basis for our processing?

The legal basis for the processing of personal data in conjunction with CCTV is that the processing is necessary for purposes concerning our legitimate interest in preventing and investigating crime. We consider that Mannheimer Swartling's interest in processing personal data for these purposes outweighs any invasion of privacy to which a person whose image is recorded is subject.

Who has access to the personal data that we process?

We have taken appropriate technical and organisational measures to protect the personal data that we process from unauthorised access, among other things.

Only a few authorised persons at Mannheimer Swartling have access to CCTV footage. Mannheimer Swartling will not disclose personal data to any third parties other than the police or other law enforcement agencies engaged in investigating crime.

How long do we keep the personal data?

The basic rule is that CCTV footage is saved for 30 days, after which it is automatically recorded over. However, when specific video footage is required to take action against a person who has been filmed to achieve the purpose of the recording, the footage may be saved for as long as necessary to take that action, but must be deleted immediately afterwards.

What are the rights of a data subject whose personal data is processed by us?

Mannheimer Swartling Advokatbyrå AB, Reg. No. 556399-4499, having the address Norrlandsgatan 21, SE-111 87 Stockholm, is the controller of the personal data processing as described above. This means that we are responsible for ensuring that the personal data are processed correctly and in accordance with applicable data protection laws.

Data subjects have the right to know what personal data we process about them. A data subject also has the right to request that Mannheimer Swartling erase those personal data. In addition, data subjects have the right to object to specific processing of personal data and request that processing of personal data be restricted.

Anyone who has objections to, or comments on, the way we process personal data has the right to contact or file a complaint with the Swedish Data Inspection Board (Datainspektionen), which is the supervisory authority for our processing of personal data.

If you have any questions or complaints about how we process personal data or wish to exercise any of your rights as set out above, you are welcome to contact us by email at dataprotection@msa.se or by post to the address above.