View source for GDPR Compliance Factsheet

= GDPR Compliance Factsheet =
'''Product Name''': Crane Safety AI (CSAI)

'''Version''': Version 26 SP 1

'''Supplier''': Event Gates

'''Purpose''': Machine safety event detection and video logging

'''Last Updated''': 07-Jul-2025

=== 1. Product Overview ===
This product uses AI-powered object detection to monitor defined zones for human presence during machine operation. Event-triggered video footage is recorded to support workplace safety and incident investigation.

=== 2. Types of Data Processed ===
{| class="wikitable"
|'''Data Category'''
|'''Description'''
|- style="background-color:#ffffff;"
|Video footage
|Recorded only when an event (e.g., person detected) occurs
|- style="background-color:#ffffff;"
|Event metadata
|Timestamp, camera ID, event type
|- style="background-color:#ffffff;"
|System logs
|Local access logs (if enabled)
|}
'''Note''': No continuous surveillance, facial recognition, or identity tracking is performed by default.

=== 3. Data Storage and Access ===
* All data is stored '''locally''' on the edge device.
* The system has '''no built-in internet connectivity'''.
* '''Access is restricted''' via local user management (configurable by the end user).
* R'''etention period''' is automatically calculated based on the storage space left and '''automatically deletes''' old recordings.
* A new configurable retention period setting will be released soon. 

=== 4. Supplier’s Role ===
Event Gates acts as a '''technology provider'''. We are '''not a data controller''' under GDPR in the context of your specific deployment. We are a data processor because we may have access to system and camera views during installation and later maintenance.

We support GDPR compliance by:

* Designing the system with '''privacy by design and by default''' (Article 25 GDPR)
* Offering '''customizable settings''' for data minimization and retention
* Providing this compliance factsheet to support your internal documentation (e.g., DPIA, privacy notices<ref>Such as sample internal privacy notice</ref>)

=== 5. Customer’s Responsibilities under GDPR ===
As the entity deploying and operating the system, '''you are the data controller'''. You are responsible for:

✅ Determining the lawful basis for processing (e.g., legitimate interest for workplace safety)

✅ Informing affected individuals (e.g., employees, contractors)

✅ Defining and enforcing retention periods

✅ Conducting a '''Data Protection Impact Assessment (DPIA)''' where required

✅ Handling access requests from data subjects if applicable

=== 6. Privacy Features ===
{| class="wikitable"
|'''Feature'''
|'''Description'''
|- style="background-color:#ffffff;"
|Limited retention period
|Recordings will be deleted based on local storage space
|- style="background-color:#ffffff;"
|Local-only storage
|No data sent to the cloud or external systems
|- style="background-color:#ffffff;"
|User-based access control
|Limit who can view/export footage
|- style="background-color:#ffffff;"
|On-device privacy blurring
|Optional anonymization of detected individuals
|}

=== 7. Disclaimers ===
The blur feature is based on AI detection and may not identify all individuals in all scenarios (e.g., occlusions, low visibility). Therefore, customers should not rely solely on this feature to achieve full anonymization and must treat video recordings as personal data unless otherwise verified.

=== 8. Contact ===
For technical or data protection-related questions regarding the product contact us at https://osticket.eventgates.com

== Notes ==
[[Category:Privacy]]