CCTV surveillance policy

Purpose

The purpose of the CCTV surveillance is to prevent crime, such as burglary and vandalism, and to assist the police in investigating crime.

1.0 Surveillance areas and duty to provide information

At DTU, surveillance is primarily used in, but is not limited to, communal areas and the interior of large classrooms, and signs have been posted at entrances to the buildings. In case of exterior surveillance, the duty to provide clear information/signage is regarded as having been met by the cameras being visible. This CCTV surveillance policy is available at DTU’s website and via DTU’s intranet. 

1.1 Applicable rules

DTU complies with the rules laid down in the Danish Act on CCTV Surveillance (TV-overvågningsloven), the General Data Protection Regulation, and the Danish Data Protection Act (Databeskyttelsesloven). According to the rules in Article 14 of the General Data Protection Regulation, DTU has an obligation as data controller to provide information to the monitored persons as data subjects about their rights in connection with the processing of the data.
DTU records and processes surveillance footage with authority in Article 6(1)(e) of the General Data Protection Regulation.

1.2 Processing and storage

DTU treats surveillance footage as confidential. The surveillance footage will be processed and stored in the University’s monitoring software (Milestone) and only specially designated employees have access to the footage. Surveillance footage is stored by DTU for up to 30 days, i.e. the day on which the footage is recorded and for the subsequent 29 days. The surveillance footage is automatically erased by the system when it is 30 days old or when storage space has been exhausted and it is therefore overwritten by more recent surveillance footage. No backups are made of surveillance footage. 

If DTU receives a request for access to the surveillance footage in accordance with Article 15 of the General Data Protection Regulation and section 22 of the Danish Data Protection Act, the surveillance footage in question will only be erased when the request for access and a possible complaint have been processed. The surveillance footage will then be erased.

1.3 Disclosure of surveillance footage

Surveillance footage will not be disclosed to other parties unless DTU receives a request for disclosure of surveillance footage and such disclosure can be done in accordance with the rules laid down in section 4c of the Danish Act on CCTV Surveillance. 

According to the Danish Act on CCTV Surveillance, DTU may disclose surveillance footage if one of the following conditions has been met: 

  • The person shown in the surveillance footage has consented to this.
  • DTU has a statutory obligation to disclose the footage.
  • The police request the release of the footage for crime-solving purposes.

1.4 Data access

Persons whose movements have been recorded by a CCTV camera may contact DTU to receive a copy of the surveillance footage. In connection with such an inquiry, the University must, as a minimum, receive a copy of a public identification document with a picture— for example a copy of the person’s passport—as well as a timeframe (within 1 hour) in which the person is expected to appear in surveillance footage.

1.5 Rectification of data

If the data subject finds that inaccurate data have been registered, the data sub-ject may request the University to rectify the data. This means that the University will correct the data or note that the data are inaccurate and register the accurate data. The data subject is entitled to have the data controller disregard the data until it has been determined which data are accurate. Data subjects are also entitled to the University not using the data when they are no longer needed.

1.6 Data controller

DTU is the data controller.

1.7 Data Protection Officer

DTU has a Data Protection Officer whom data subjects can
contact if they have questions about the processing of the data about them. You can contact DTU’s Data Protection Officer at the address gdpr@dtu.dk 

1.8 Complaint to the police and to the Danish Data Protection Agency

Data subjects may lodge a complaint about the processing of the surveillance footage with the Danish Data Protection Agency by writing to dt@datatilsynet.dk.

Complaints about the installation of CCTV cameras can be lodged with the police.

1.9 Entry into force

This CCTV surveillance policy was approved by Director of Facilities Anders B. Møller on 19 January 2022