Last updated

april 10, 2025

CCTV Privacy Notice
—Stockholm Office

1. Introduction

1.1. Instabee Group AB and its subsidiaries and affiliates within the Instabee Group ("Instabee", "we", or "us") are committed to respecting and protecting your privacy. Our goal is to be clear about what personal data we collect and how we use and protect it in accordance with applicable laws and regulations. 

1.2. In this privacy notice, we explain how Instabee, acting as the data controller, may process personal data as a result of our use of closed-circuit television (“CCTV”) system located within Instabee’s Stockholm office located at Hälsingegatan 40, 113 43 Stockholm, Sweden (“Instabee Stockholm Office”). To the avoidance of doubt, this privacy notice shall only apply to Instabee Stockholm Office in which Instabee, as the data controller, conducts its business and shall not apply to other Instabee offices in which Instabee operates. Instabee Stockholm Office will have signs for you to easily recognize the circumstances of the surveillance before entering the monitored area, including the information that Instabee is the data controller.

2. What Personal Data Do We Process and From Where Have We Obtained It?

2.1. Instabee collects stills and moving footage of you and/or your belongings, e.g. any objects you may carry, when entering into a monitored space within the Instabee Stockholm Office through our CCTV systems.  No audio recordings will be collected through the CCTV systems.

2.2. Our CCTV systems are in operation 24 hours a day and 365 days a year.

2.3. The following categories of data subjects (“you”) may be subject to the processing included in this privacy notice:

  • Instabee’s staff and employees working at and/or otherwise visiting the  Instabee Stockholm Office;

  • Any other person entering the Instabee Stockholm Office. .

3. For What Purpose Do We Process Your Personal Data?

3.1. We use the CCTV footage and process your personal data only for the following purposes:

  • To deter and if necessary, investigate, unauthorised physical access to the Instabee Stockholm Office; 

  • To deter and investigate theft/damage of equipment or assets owned by Instabee, Instabee’s staff/employees or visitors as well as threats to their safety (e.g. fire, physical assault)

  • To investigate suspicion of breach of Instabee’s Office policy and Addendum to our Alcohol & Drug policy HQ

NOTE: The CCTV system is not used for any other purpose, such as to monitor the work of employees or their attendance.

4. What Are the Legal Basis Associated With Each Of the Above Processing Activities?

4.1. We perform above processing based on a so-called balancing of interest. Thus, we have assessed that above processing is necessary for the purposes of the legitimate interests pursued by us.

5. How Long Do We Keep Your Personal Data?

5.1. The CCTV footage will be kept for up to 7 days.

5.2. The aforementioned retention period may be extended so the video surveillance images related to an incident can be kept for settling the procedures related to said incident. In such a case, the recordings are kept on another secured medium and are accessible only to persons authorised in this context. 

6. Recipients of Your Personal Data

6.1. Instabee applies strict policies around the access of the CCTV footage. Only a few employees selected on a need-to-know basis have access to the footage. In some cases, it is necessary for us to share the CCTV footage and the personal data included therein with other parties. Instabee does this to achieve the purposes set forth in this privacy notice. For example, we may need to share your personal data with other companies within the Instabee Group. 

6.2.  Instabee may also share the CCTV footage and the personal data included therein with an authority or other party in an investigation of suspected crime or other irregularities, if we are required to disclose information under law, regulation or government order, to establish, enforce or defend legal claims, or if we otherwise have a legitimate interest.

7. Your Rights in Connection With Our Processing

7.1. Pursuant to applicable data protection legislation, you have certain rights in relation to us.. These are set out in general below:

  • Right of access (register transcript) – a right to information about our processing of your personal data and access to it.

  • Right to object – a right to object to our personal data processing about you if it takes place based on a legitimate interest.

  • Right to erasure – a right to have your personal data erased under certain circumstances unless the data is necessary for a particular purpose or there is another legal ground for the processing. 

  • Right to restriction of processing – a right to request that personal data processing is restricted, e.g., if you contest the accuracy of the data. Our access to the data is restricted while the accuracy of the data is investigated.

7.2. Some of the rights above are only applicable in certain situations. If you want to exercise any of these rights, or get more information, please contact us via the contact details below in section 8.2 (under the heading "Contact details to the Data Controller and the Data Protection Officer"). Kindly note that the processing described in this privacy notice does not include automated decision-making. You always have the right to file a complaint about how we process your personal data to the Swedish supervisory authority. For more information see theirwebsite.

8. Contact Details of the Data Controller and the Data Protection Officer

8.1. Instabee Holding AB is the data controller in respect of the processing of personal data described in this privacy notice. 

8.2. You will below the contact details of Instabee Holding AB, as well as the ones of our Data Protection Officer (DPO):

Instabee Group AB -  Org. No: 559396-6236

Adress: Hälsingegatan 40, 113 43 Stockholm, Sweden Alströmergatan 39, 112 47 Stockholm, Sweden

Contact details for DPO: dpo@Instabee.com

9. Updates and Questions

9.1. We will keep this privacy notice under regular review, continuously updating it when deemed necessary. If significant changes are made, and if such a change requires a notice or consent under applicable law, you will be notified of this or given the opportunity to issue your consent (if necessary). 

9.2. Any questions regarding this Whistleblowing Privacy Notice, please contact the DPO (dpo@Instabee.com).