How DSB protects your privacy with CCTV surveillance

What is CCTV surveillance and why does DSB use it?

CCTV surveillance is the use of video cameras to monitor and record activities in public or private areas. DSB conducts CCTV surveillance of its areas, including on trains, at stations and kiosks, to increase the safety and security of its customers and employees, as well as to prevent and solve criminal activities. CCTV surveillance helps DSB to deter and detect vandalism, theft, assault, and other offenses that may harm its passengers, staff, or property. It also helps DSB to provide evidence and assistance to public authorities, such as the police, in case of any incidents or accidents.

How does DSB process your personal data in CCTV surveillance?

DSB processes ordinary personal data in the form of video recordings from its areas, which may include information about potential criminal offenses. DSB only processes your personal data for the purpose of enhancing the safety and security for customers and employees, preventing crimes, and solving criminal acts. DSB does not use your personal data for any other purposes, such as marketing or profiling. DSB respects your privacy and follows the principles of data minimization, accuracy, storage limitation, integrity, and confidentiality.

What is the legal basis for DSB's CCTV surveillance?

DSB's CCTV surveillance is regulated by the General Data Protection Regulation (GDPR) and the Danish TV Surveillance Act (TV-overvågningsloven). The legal basis for DSB's CCTV surveillance is Article 6(1)(e) of the GDPR, which allows the processing of personal data when it is necessary for the performance of a task carried out in the public interest or in the exercise of official authority. In addition, DSB may process personal data relating to criminal convictions and offenses under Article 10 of the GDPR, when it is authorized by the Danish TV Surveillance Act or other relevant laws.

Who can access your personal data and for how long?

DSB may disclose recordings from CCTV surveillance to public authorities, including the police, in connection with potential criminal incidents; also, to the Danish Civil Aviation and Railway Authority (Trafikstyrelsen) and the Accident Investigation Board (Havarikommissionen) related to safety incidents.

DSB only discloses your personal data when it is necessary and proportionate, and in accordance with the applicable laws and regulations. DSB does not transfer your personal data to any third countries or international organizations. DSB stores your personal data for no longer than 30 days unless it is required to retain it for longer periods by law or by a specific request from a public authority. Recordings that need to be handed over to the aforementioned authorities will not be deleted until they have been delivered to the relevant authority.

What are your rights regarding your personal data?

You have the right to access, rectify, erase, restrict, or object to the processing of your personal data by DSB, subject to certain conditions and limitations. You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet) if you believe that DSB has violated your rights or the data protection laws. You can read more about your rights and how to exercise them in DSB's general privacy policy, which is available on its website or at its customer service centers.