Privacy Notice for Access Controls within Implenia Connect
Dear visitors, dear employees
Welcome to Connect! We would like to take this opportunity to inform you about the access controls in place, in particular the video surveillance (CCTV) in the building and assure you that we handle the recordings appropriately.
Integrity is a exceptional value for Implenia and part of our mission statement (Mission Statement Implenia - Implenia AG), so we have tried to present the following to you as clearly and transparently as possible. If, despite all our efforts, there are still any unclear points left, please do not hesitate to contact us.
1. What is this Privacy Notice about?
Understandably, Implenia has an interest in knowing which people (especially strangers) are in the building. For this purpose, several measures have been taken:
CCTV in the entrance areas CCTV are installed in all entrance areas (on each floor when accessing via elevators and staircases) in the Connect building and at the entrance to the terrace. During your visit, you will be recorded by the cameras (even if only briefly). The camera angles are set as precisely as possible, i.e., so that only the access doors are recorded and no other unnecessary areas. Furthermore, the images are only collected internally in the building (no data transfer) and can only be viewed after an internal approval process by the Legal and Compliance department.
An access badge for employees and contractors Employees in the Implenia Connect building have an access badge serving as their access authorisation for their respective area. Employees from other branches or contractors can obtain a "day badge" and these are unlocked for the necessary areas. This and the cameras ensure that only authorised individuals are always present in restricted areas within the company.
Besucherregistrierung With the use of a QR code, visitors have access to Microsoft Forms inquiry and must register there, specifying the person they are visiting
The purpose of the data processing is to prevent or document unauthorised access to Implenia's headquarters in order to protect the trade secrets, our employees and property.
CCTV:
Video files including time stamp
Badges:
First and last name
Entry and exit time
Visitor registration:
First and last name
Name of the company (not mandatory)
Telephone number
First and last name of the person visited
4. On what basis do we process your data?
The legal basis for this security measure is the prevailing interest of the responsible party pursuant to Article 31 (1) of the revised DSG, according to which the supervisor concluded that the access controls are reasonable. A data protection impact assessment pursuant to Article 22 rev. DSG was carried out for the CCTV surveillance.
5. Who do we disclose your data to
CCTV recorded data is only stored within Implenia's systems. To operate these, Implenia uses an IT provider with whom it has a contract ensuring data protection.
The badge generated data is stored centrally for the entire Ambassador House by an IT supplier with whom it has a contract ensuring data protection.
6. How long do we process your data?
Visitor registration data and day badges are stored for one week, CCTV data is deleted after five days. For technical reasons, badge data of anyone working in Connect is only deleted when the person leaves the company.
7. How do we protect your data?
We take appropriate security measures to maintain the confidentiality, integrity, and availability of your personal data, to protect it against unauthorised or unlawful processing and to protect against the risks of loss, unintentional alteration, unauthorised disclosure or access.
8. What rights do you have
Applicable data protection laws give you the right to object to the processing of your data under certain circumstances, in particular for processing activities based on legitimate interest. To help you control the processing of your personal data, you have the following rights in relation to our data processing:
the right to request information from us as to whether and what data of yours we process;
the right to have data corrected by us if it is inaccurate;
the right to request that we delete data;
the right to request that certain personal data is provided to you in a commonly used electronic format or have it transferred to another controlling instance;
the right to withdraw your consent where our processing is based on your consent;
the right to obtain, upon request, further information useful for the exercise of these rights.
You also have the right to file a complaint with the Swiss data protection supervisory authority.
