VIDEO SURVEILLANCE POLICY
Data Controller Identity and Contact Information
SIA “HQ CHIPPER PARTS”, Reg. No. 40103294542
Legal address: Palmu iela 18-15, Rīga, LV-1006, Latvia
Email: hr@chipperparts.lv
Phone: +371 20024771
Website: www.chipperparts.eu
(hereinafter – the Controller or Data Controller)
1.1. The Controller conducts video surveillance at the following addresses:
Baldones iela 1, Rīga, LV-1007 (Buildings No. 6, 7, 11, 23, 24)
Mēmeles iela 4 and 6, Bauska, Bauskas novads, LV-3901, Latvia
2.1. The purpose of video surveillance is the prevention or detection of criminal offenses related to property protection or vital interest protection of individuals, as well as to ensure production, technological process, and occupational safety.
2.2. The legal basis is Article 6(1)(f) of the EU General Data Protection Regulation (GDPR) 2016/679 – processing is necessary for the purposes of the legitimate interests pursued by the controller or a third party.
2.3. The legitimate interest includes preventing or detecting criminal or administrative offenses, protecting property and vital interests of individuals (life and health), and preventing threats to personnel or visitors (e.g., fire prevention).
2.4. Surveillance is also conducted to ensure production processes and occupational safety.
3.1. Surveillance is carried out both inside and outside buildings within the Controller’s territory.
3.2. Surveillance involves collecting video materials via cameras capturing objects, individuals, and events within the camera’s field of view.
3.3. Surveillance data includes visual recordings with location, date, and time.
3.4. Informative signs are placed in surveillance zones as required by GDPR and relevant laws.
3.5. Cameras are placed to cover only the necessary areas; no surveillance is conducted in private areas (e.g., restrooms, changing rooms).
3.6. The Controller uses stationary cameras that record video footage in designated areas.
4.1. The Controller recognizes the importance of privacy and implements technical and organizational measures to protect surveillance data.
4.2. Surveillance data is classified as restricted access information and is processed according to applicable laws and purposes.
4.3. Personal data includes:
person’s image (appearance, behavior)
recording location (room, camera position)
recording time (date, time, start/end of recording)
Sensitive personal data is not processed.
5.1. Access to video materials is restricted to the Chairman of the Board, Board Members, or Company Director.
5.2. Data may be disclosed upon official request to:
investigative authorities,
national security institutions,
prosecutors and courts,
state supervisory bodies,
insurance providers (for claim investigations),
external service providers (maintenance of surveillance systems).
5.3. In case of occupational accidents, data may be shared with safety specialists and investigation committee members.
5.4. Data may be shown (but not handed over) to relevant employees for production/technological process monitoring.
6.1. All persons within the field of view of surveillance cameras (e.g., visitors, employees).
7.1. Surveillance data is not transferred outside Latvia, the EU, or the EEA, nor to any international organization.
8.1. At Baldones iela 1, Rīga (buildings No. 6, 7, 11, 23, 24), footage is retained for a maximum of 10 days, depending on movement detection and storage capacity.
8.2. At Mēmeles iela 4 and 6, Bauska, footage is retained for up to 2 months, based on the same factors.
9.1. Individuals may request access to their data within 10 days of recording, by submitting a justified request identifying themselves and the requested data.
9.2. The Controller may provide screenshots with other individuals blurred and include a description, ensuring data minimization.
9.3. Individuals may only receive data where they are visible. Data featuring others will be redacted.
9.4. Access may be denied if the information is classified (e.g., national security, criminal law, state financial interests).
9.5. Individuals may request erasure of data if it is no longer necessary. If justified, the Controller will delete the data immediately.
10.1. If issues arise, individuals are encouraged to first contact the Controller directly.
10.2. Complaints may also be submitted to the Data State Inspectorate (Datu valsts inspekcija):
By mail or secure email
Or left at Blaumaņa iela 11/13, Rīga, 1st floor mailbox
Email: info@dvi.gov.lv
11.1. The Controller may update this policy as needed. Updates become effective upon publication at www.chipperparts.eu and are also available at the Controller’s administrative premises.
