GDPR Compliance Factsheet

GDPR Compliance Factsheet

Product Name: Crane Safety AI (CSAI)

Version: Version 26 SP 1

Supplier: Event Gates

Purpose: Machine safety event detection and video logging

Last Updated: 07-Jul-2025

1. Product Overview

This product uses AI-powered object detection to monitor defined zones for human presence during machine operation. Event-triggered video footage is recorded to support workplace safety and incident investigation.

2. Types of Data Processed

Data Category	Description
Video footage	Recorded only when an event (e.g., person detected) occurs
Event metadata	Timestamp, camera ID, event type
System logs	Local access logs (if enabled)

Note: No continuous surveillance, facial recognition, or identity tracking is performed by default.

3. Data Storage and Access

• All data is stored locally on the edge device.
• The system has no built-in internet connectivity.
• Access is restricted via local user management (configurable by the end user).
• Retention period is automatically calculated based on the storage space left and automatically deletes old recordings.
• A new configurable retention period setting will be released soon.

4. Supplier’s Role

Event Gates acts as a technology provider. We are not a data controller under GDPR in the context of your specific deployment. We are a data processor because we may have access to system and camera views during installation and later maintenance.

We support GDPR compliance by:

• Designing the system with privacy by design and by default (Article 25 GDPR)
• Offering customizable settings for data minimization and retention
• Providing this compliance factsheet to support your internal documentation (e.g., DPIA, privacy notices)

5. Customer’s Responsibilities under GDPR

As the entity deploying and operating the system, you are the data controller. You are responsible for:

✅ Determining the lawful basis for processing (e.g., legitimate interest for workplace safety)

✅ Informing affected individuals (e.g., employees, contractors)

✅ Defining and enforcing retention periods

✅ Conducting a Data Protection Impact Assessment (DPIA) where required

✅ Handling access requests from data subjects if applicable

6. Privacy Features

Feature	Description
Limited retention period	Recordings will be deleted based on local storage space
Local-only storage	No data sent to the cloud or external systems
User-based access control	Limit who can view/export footage
On-device privacy blurring	Optional anonymization of detected individuals

7. Disclaimers

The blur feature is based on AI detection and may not identify all individuals in all scenarios (e.g., occlusions, low visibility). Therefore, customers should not rely solely on this feature to achieve full anonymization and must treat video recordings as personal data unless otherwise verified.

8. Contact

For technical or data protection-related questions regarding the product contact us at https://osticket.eventgates.com