Privacy Policy CCTV

1. Controller & Data Protection Officer

Controller:
Leica Geosystems AG
Heinrich-Wild-Strasse 201
9435 Heerbrugg
Switzerland

Data Protection Officer:
Division Privacy Officer, Heinrich-Wild-Strasse 201, 9435 Heerbrugg
privacy.geo@hexagon.com

2. Location

Leica Geosystems AG uses security cameras, in particular for security reasons, to continuously monitor its entry and exit gates, goods delivery areas, bicycle parking spaces, and other sensitive areas. This video surveillance is used on our company premises in Heerbrugg at the following locations:

• Entry and Exit gates
• Delivery / Receiving area
• Turning area
• Warehouse
• Bicycle racks

Signs indicate the areas under video surveillance and are positioned so that individuals are informed about the surveillance before entering the monitored area. Only our private premises are monitored.

3. Categories of Person al Data Processed

Video surveillance is carried out by recording video and image data, which may also be stored as image extracts (still frames) if required. The cameras are continuously switched on and record video and image data without audio. Leica Geosystems AG processes video and image data of persons who are present in the monitored areas.

4. Data Subjects

All persons who enter the designated areas may be captured by the video surveillance.

5. Legal Basis and Purpose

The legal basis for the processing is our legitimate interest. Video surveillance is carried out for the following purposes:

• Protection of property
• Ensuring safety (including employee and customer safety)
• Prevention of criminal offenses
• Preservation of evidence

6. Categories of Recipients

The video and image data are not transferred to third parties.

Exceptions apply where there is a legal obligation to disclose data (e.g., to courts or security authorities) or where disclosure is necessary to lawyers, insurers, or other bodies for the purpose of enforcing legal claims.

7. Retention period

Leica Geosystems AG processes and stores personal data collected through video surveillance for as long as necessary for the purposes stated in section 5. As a rule, video and image data are deleted after 14 days. Footage is reviewed only in specific cases where an incident occurs within the scope of the stated purposes.

8. Your rights

You have the right to know which of your personal data we process.

You have the right to access your personal data and to receive a copy of such data.

You have the right to have inaccurate personal data relating to you corrected.

In some cases, you may request that we delete your personal data.

You also have the right to object to certain types of processing of your personal data and to request restriction of the processing of your personal data. Restricting or deleting your personal data may mean that Hexagon cannot meet its obligations towards you.

You also have the right to request data portability, meaning that your personal data is provided in a machine-readable format and transmitted to another controller.

Hexagon may not always be obliged to comply with a request for deletion, restriction, objection, or data portability. Additional circumstances - such as the exercise of the right to freedom of expression and information, compliance with a legal obligation, or processing necessary for the establishment, exercise, or defense of legal claims - may justify further processing by Hexagon.

Hexagon will assess whether your request is justified and will inform you of Hexagon’s decision and reasoning.

If you have provided us with your consent to process your personal data, you may withdraw your consent at any time and without providing reasons. If you withdraw your consent, certain personal data (only to the extent strictly necessary) will be stored on our “Do not contact” list.

Our privacy team, led by the Division Privacy Officer, supports you with any data protection-related questions, concerns, comments, or complaints.

You can exercise your rights and contact our privacy team by sending an email to:

privacy.geo@hexagon.com

You also have the right to lodge a complaint with the competent data protection supervisory authority, where applicable under the relevant laws, e.g., in the countries of the European Economic Area (EEA).

The contact details of the data protection supervisory authorities in the EEA can be found here (https://www.edpb.europa.eu/about-edpb/about-edpb/members_en).

Contact details of the Swiss Federal Data Protection and Information Commissioner (FDPIC):

Federal Data Protection and Information Commissioner (FDPIC)
Feldeggweg 1
CH - 3003 Bern

Telephone: +41 (0)58 462 43 95
Fax: +41 (0)58 465 99 96

https://www.edoeb.admin.ch/edoeb/en/home/adresse.html