Privacy Policy

Updated September 26, 2025

XMReality AB operates a camera surveillance system at its office premises for security and crime prevention purposes. This notice provides you with information about this processing in accordance with the General Data Protection Regulation (GDPR).

• Data Controller: XMReality AB, Sankt Larsgatan 32A, info@xmreality.com.
• Purpose of Processing: To protect company, employee, and customer assets from theft, vandalism, and unauthorized access, and to provide evidence to law enforcement in the event of a crime. We also process this data to comply with security requirements under our ISO 27001 certification and customer agreements.
• Legal Basis for Processing: The processing is based on our legitimate interests ($Article 6(1)(f)$ GDPR) to secure our premises and fulfill our legal and contractual obligations. We have conducted a formal assessment and concluded that our interest outweighs the privacy interest of any individual recorded by the system.
• How the System Operates: No surveillance of employees or visitors occurs during normal business hours. 
• Data Storage: Recorded footage is stored only while alarm events are investigated, unless it is required as evidence for a police investigation.
• Disclosure of Data: We do not share this data with any third parties, with the sole exception of providing evidence of a crime to the Swedish Police Authority or other competent law enforcement agencies upon a lawful request.
• Your Rights: As a data subject, you have certain rights under the GDPR. These include the right to request access to your personal data, the right to request erasure ('the right to be forgotten'), and the right to object to processing. Please note that these rights may be limited in this context, particularly where data is being retained for a criminal investigation.
• Complaints: You have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) if you believe your data protection rights have been violated. You can find their contact information at www.imy.se.