CELLEBRITE GMBH

(“the Company”)
Use of Closed-Circuit Television Cameras for Security Purposes
Notice and Policy

1.        Overview

1.1.         The purpose of this Notice and Policy is to fully disclose and update the Company’s employees and visitors on the use of CCTV systems for security purposes in the workplace and on the Company’s premises. This Notice and Policy details the purpose for which the cameras are installed and operated, the location of the cameras, and the scope of use of the data retained by the cameras.

1.2.         If you are an employee, independent contractor or intern of the Company, this CCTV Notice and Policy supplements your Workforce Privacy Notice. If you are a visitor to the Company’s premises, this CCTV Notice and Policy supplements our Privacy Notice for Visitors, accessible at: https://cellebrite.com/en/privacy-notice-for-visitors-2/ . For more detailed information on how the Company may process, transfer and protect personal data, as well as your rights regarding your personal data, please refer to the applicable notice.

2.        Purpose and Scope of Use

2.1.         The purpose of installing the CCTV systems in the workplace and on the Company’s premises is to increase the safety of the employees, visitors, and the Company, both with respect to risks of physical injury and theft or damage to personal belongings and Company property, and in addition for the purpose of meeting the requirements of law enforcement and/or competent authorities according to applicable laws and/or regulations.

2.2.         The cameras are in operation 24/7.

2.3.         The Company will retain the video recordings of the cameras. Such video recordings may include personally identifiable information of any person in the workplace or on the Company’s premises, including the Company’s employees and visitors, such as pictures and videos of recognizable physical features.

2.4.         The Company may use such video recordings for the purpose stated above and may transfer any such data to its parent company, subsidiaries, affiliates, contractors or law enforcement authorities, for this purpose alone. The stored data may be transferred to jurisdictions outside of your country, including jurisdictions that may not offer the same level of protection for personal information as granted under the laws of your country.

2.5.         In no event will the collected data be used for any purpose not mentioned in this Notice and Policy. Specifically, the stored data will not be used to make any personal decisions with respect to any of the Company’s employees or visitors (unless such individual jeopardizes the safety and security of the other employees, visitors, or the Company).

3.        Location of Cameras

3.1.         The Company respects the privacy of its employees and visitors. Accordingly, the cameras will only be located in the common areas of the workplace and other public areas (such as the entrance, reception, corridors, sensitive areas intended to protect the Company’s information systems, etc.). The cameras will not be located, nor will they videotape the personal work areas or other personal areas (such as rest areas, toilets, dressing rooms, etc.).

3.2.         The cameras are not intended to focus on employees or visitors directly, nor to track them, even when they contain information about individuals in their daily routine.

3.3.         The camera areas shall be marked with appropriate signage, notifying employees and visitors about the cameras. Please inform your direct manager at the Company or a Company representative if you notice an area without appropriate signage.

3.4.         The exact location of the cameras is attached and detailed in Exhibit A of this Notice and Policy.

4.        Data Retention

4.1.         The data collected from the cameras shall only be retained for a period necessary to fulfill the purpose stated in this Notice and Policy and in no event for a time period exceeding 5 days, except where the data collected reveals a violation of the Company’s policies or of any applicable law and/or regulations, in which case the data shall be retained for as long as required, at the Company’s sole discretion.

4.2.         The Company shall take reasonable measures to secure the collected data and shall only allow access to such data on a need-to-know basis in order to fulfill the purpose stated in this Notice and Policy.

5.        Questions and Privacy Concerns

Should any of the Company’s employees or visitors have a concern with respect to the processing of his or her personal data, questions regarding the location of the cameras and the scope of use of the collected data, or wish to exercise the applicable personal data rights, he or she may contact our Data Protection Officer at Privacy@Cellebrite.com.

The Company will publish any changes or amendments to its policy with respect to the use of the CCTV systems.

Exhibit A

Location of Cameras

Building	Floor	Coverage	Location
New Munich office	3	Office Main Entrance	1 camera – Office Entrance
		Office Rear Exit door	1 camera – Office Rear Exit
		Office entrance to offices area	1 camera – entrance to offices area
		CAS Room	1 camera – inside LTP room (server)
		IT Room	1 camera – inside IT room (server)