Processing of personal data - GDPR

Newsletters, press releases and invitations

The personal data (name, address and e-mail) that is stored in connection with subscriptions to Ports of Stockholm's newsletters, issues of press releases and invitations to events is saved only for the period that you choose to be a recipient. When you cancel these services (opt-out) your personal data is deleted.

Ports of Stockholm stores your personal data in accordance with the legal requirements for public interest.

Access and authorisations for port facilities and properties

Personal data (name, address, telephone number, e-mail, personal ID number etc.) that you submit in connection with applications for access and authorisations for port facilities and properties are saved for the period you have access and authorisation.

Certain information may be retained, as the processing of personal data is founded on legal obligations.

Forms, permits, e-mails received etc.

Personal data (name, e-mail, telephone number etc.) that you submit in connection with other matters, such as permit processing, e-mails received and business matters are saved for the duration necessary for administration.

The legal requirements for this type of information may be contractual agreements, public interest and provision of consent.

Freedom of information

Ports of Stockholm is a municipal company, which means that received information is processed according to freedom of information principles.

Right to request access to information

If Ports of Stockholm has information about you on record you have the right to:

• view the information about you.

• have erroneous information corrected.

• request that your information is restricted.

• have information deleted.

Body-worn camera – handling of personal data

At all passenger terminals where there are taxi attendants, Ports of Stockholm employees can be equipped with body-worn cameras. You as a traveler/visitor can therefore meet them in connection with the port. The body-worn cameras are worn on a high-visibility vest and record moving images and sound.

The cameras help to increase the safety and security of travelers and employees. The cameras are used partly for crime prevention purposes as cameras can have a calming effect, and partly so that the employee can record events that are perceived as threatening. The recorded material may also constitute evidence in connection with a police report.

When the camera is activated, it continuously records images and sound. The cameras have a so-called circular memory. This means that all material that is older than 15 seconds is automatically deleted. If recording is activated by a taxi driver in a threatening situation, for example, everything recorded is saved until the camera is turned off, including the 15 seconds that the camera recorded just before the recording started. When you travel on a ship that operates in the ports of Ports of Stockholm, or are in the port area, this means that we may collect the following personal data about you:

• Moving image

• Audio

Stockholms Hamn AB (Ports of Stockholm) is the data controller for the processing of this personal data.

Legal basis

Since the body-worn cameras are manually controlled by the employee wearing the camera, the Camera Surveillance Act does not apply. However, Ports of Stockholm always processes personal data in accordance with the requirements of other data protection legislation. All processing of personal data must have a legal basis in accordance with the Data Protection Regulation and the Data Protection Act.

We process your personal data (collection, storage, review and sharing) with reference to the legitimate interests of Ports of Stockholm. We assess that Ports of Stockholm's ability to reduce the risk of employees and passengers being exposed to crime - as well as Ports of Stockholm's ability to document and review recorded material in order to hand over evidence to the police when reporting a crime, in light of the restrictions and security measures applied - outweighs the data subject's interest in protecting their privacy.

Ports of Stockholm also has a legal obligation to share personal data with the police and other authorities in certain cases, for example when the police have initiated a preliminary investigation.

Storage and disposal

The material recorded after manual activation is saved in encrypted format on protected devices and is automatically deleted after 5 days. Material that will constitute evidence is saved for up to 30 days. After transfer to the police, the material is deleted immediately.

Technical and organizational security measures

Ports of Stockholm have taken several measures to minimize and protect personal data processed as a result of Ports of Stockholm's use of body-worn cameras:

• Minimize recording by having employees only activate the camera in situations that are perceived as threatening, for example.

• Minimize storage of recorded material by automated deletion at short time intervals.

• Implement data minimization by narrowing the scope of recording.

• Protect recorded material with technical measures and by strongly limiting access to a few people with special knowledge and authorization.

• Provide training and clear instructions to everyone who handles cameras, software and recorded material.

Sharing of personal data

In accordance with what has been explained above, personal data may be shared with, among others, the police or other authorities.

Personal data may also be processed in exceptional cases by Ports of Stockholm's supplier of maintenance and technical support for the camera and its software. They work under the supervision of Ports of Stockholm staff for limited purposes and do not have general access to the recorded material.

Transfer of personal data outside the EU/EEA

All of Ports of Stockholm's personal data processing regarding camera surveillance takes place within the EU/EEA.

Your rights

You have certain rights under data protection legislation, such as the right to access your personal data, deletion and data portability.

If you wish to exercise your rights, you are welcome to contact Ports of Stockholm via dataskydd@stockholmshamnar.se.

Questions and comments

Ports of Stockholm has appointed a data protection officer, DSO, who ensures that Ports of Stockholm handles your personal data in a lawful, correct and transparent manner. If you have a matter you would like to address to the data protection officer, email dataskydd@stockholmshamnar.se and mark the email with DSO.

If you believe that Ports of Stockholm's processing of your personal data is not in accordance with data protection legislation, please contact us, see above. You also have the right to complain to the Swedish Authority for Privacy Protection, most easily via IMY.se.

Updating of this information

This information may be updated. The latest version is always published here.

General camera surveillance

Ports of Stockholm, the data controller, carries out camera surveillance in order to effectively maintain safety and security in the port facilities and properties covered by the Security Act and the Port and Maritime Security Act. This means that the legal basis for camera surveillance is a legal obligation. Camera surveillance is carried out solely by recording images. Technical and organizational security measures have been taken to handle personal data securely.

Sharing of personal data

Personal data may be shared with, among others, the police or other authorities for the purpose of investigating crimes.

Personal data may also, in exceptional cases, be processed by Ports of Stockholm's supplier of maintenance and technical support for the camera and its software. They work under the supervision of Ports of Stockholm's staff for limited purposes and do not have general access to the recorded material.

Storage period

Ports of Stockholm stores material from camera surveillance that is deleted within one month. Under special circumstances and related to specific cases, such data may be stored for a longer period to the extent necessary to be able to maintain and investigate deviations within the framework of maritime security, port security and the operations' civil protection objects.

Camera signs are placed at all areas that are monitored. These contain a reference to where information can be found on how Ports of Stockholm processes personal data (GDPR).

Transfer of personal data outside the EU/EEA

All of Ports of Stockholm's personal data processing regarding camera surveillance takes place within the EU/EEA.

Your rights

You have certain rights under data protection legislation, such as the right to access your personal data, deletion and data portability.

If you wish to exercise your rights, you are welcome to contact Ports of Stockholm via dataskydd@stockholmshamnar.se

Questions and comments

Ports of Stockholm has appointed a data protection officer, DSO, who ensures that Ports of Stockholm processes your personal data in a lawful, correct and transparent manner. If you have a matter you would like to address to the Data Protection Officer, please email dataskydd@stockholmshamnar.se, marking the email with DSO.

If you believe that Ports of Stockholm's processing of your personal data is not in accordance with data protection legislation, please contact us, see above. You also have the right to complain to the Swedish Authority for Privacy Protection, most easily via IMY.se.

Updating of this information

This information may be updated. The latest version is always published here.

Contact

Stockholms Hamn AB and Kapellskärs Hamn AB are personal data controllers for the processing of personal data.

Data Protection Officer, Tel. +46(0)768-50 42 98 or dataskydd@stockholmshamnar.se