Image

European Privacy Seal for Privacy Protector

Image

Disclaimer:

This register is kept with the utmost care. However, EuroPriSe does NOT guarantee the accuracy of information found on the Site. Your reliance on information found on the Site is at your own risk. For more information please go to EuroPriSe Terms & Conditions.

Product/Version

Privacy Protector Version 3.1.0

Software module for integration in a video management system

View the 2017 Privacy Protector Certificate 

Version of Certification Criteria

01/2017

Cert. No.

EP-P-NCGQXN

Validity

12/10/2017 until 31/10/2019

Recertification 01/10/2015

Recertification 24/09/2013

Recertification 08/09/2011

Initial Certification 11/08/2009

Public report

Re2017: Privacy Protector Short Public Report (PDF) Image 

Re2015: Privacy Protector Short Public Report (PDF) Image 

Re2013: Privacy Protector Short Public Report (PDF) Image

Re2011: Privacy Protector Short Public Report (PDF) Image

Initial2009: Privacy Protector Short Public Report (PDF) Image

Initial2009: Privacy Protector Kurzgutachten (PDF) Image

Manufacturer/Provider

KiwiSecurity Software GmbH
Guglgasse 15
1110 Vienna
Austria

BEST

The usage of the Privacy Protector supports the principle of proportionality and the usage of the least invasive technology with regard to video surveillance in an effective way by anonymisation of video data and data minimization.

ATTENTION:

The legitimacy of the video surveillance system needs to be evaluated separately on a case by case basis by the operator of the video surveillance system. The circumstances of a certain video surveillance system need to be taken into account to ensure the success of the application and its legitimate use. Therefore installation and configuration have to be carried out by especially trained personnel.

Summary

KiwiSecurity's Privacy Protector is a software module for integration in a video management system and provides very effective algorithms for anonymisation of video data.

Details

Recertification 10/2017

Since the last recertification in 2015, no privacy-relevant changes have been made to the ToE. A planned feature to save and load background models has not been implemented yet and thus has not been covered by the current recertification.

The recertification is based on EuroPriSe's "GDPR ready" criteria catalog for IT-products and IT-based services. The legal and technical evaluation demonstrated that the ToE complies with all applicable requirements of this new criteria catalog.

Apart from this there have been no legal or technical changes that would impact the evaluation results of the Privacy Protector compared to the re-evaluation in 2015.

Note: Privacy Protector has previously been branded as "KiwiVision Privacy Protector".

Recertification 10/2015

Since the last recertification in 2013, the following new functionalities have been implemented:

  • option to enable an outdoor mode to better accommodate outdoor lighting conditions, 
  • option to enable a perspective grid to better accommodate small and large objects respectively, and
  • three new obfuscation methods (Icon, Image, Blur).

These new functionalities still preserve the privacy enhancing features of the Privacy Protector.

Apart from this there have been no legal or technical changes that would impact the evaluation results of the Privacy Protector compared to the re-evaluation in 2013.

Recertification 09/2013

The Privacy Protector now has a new feature to compensate quick light changes in surveillance area by using several different background models. This enables a better quality for the video feed while still preserving the privacy enhancing features of the Privacy Protector.

Apart from this there have been no legal or technical changes that would impact the evaluation results of the Privacy Protector compared to the re-evaluation in 2011.

Recertification 09/2011

Since the certification in 08/2009, Privacy Protector (v1.0) has not been modified.

In 2010, Austria introduced specific legal requirements for a legitimate implementation of video surveillance systems (§ 50a ff. DSG 2000). This is reflected in the current version of the Privacy Protector user manual.

Enhancements of the EuroPriSe Criteria since the initial certification had to be considered: According to the current version of the EuroPriSe Criteria, requirement 1.2.2.2 (privacy statement) is applicable if the manufacturer of an IT product runs a website
and markets the product via the website. Consequently, the evaluation covered a check of the privacy statement that is provided at http://kiwi-security.com/. The evaluation proved that the privacy statement is in line with EU data protection law.

Initial Certification 08/2009

The purpose of the Privacy Protector is to anonymise video data (by obfuscating persons or objects in the video) from surveillance cameras and storage devices in real-time. It also provides the possibility to define fixed obfuscated or non-obfuscated regions. To ensure a smooth functioning of the Privacy Protector, the surveillance system needs to use static surveillance cameras without automatic zoom. In case of moving cameras it is to be noted, that the Privacy Protector will obfuscate the entire scene until the new background has been learned by the software. Potential areas of operation are from highly frequented public spaces (airports, railway stations, etc.) to even working places.

Depending on the area of operation and technical settings chosen for the surveillance system, access for monitoring personnel can be restricted to obfuscated video data. Access to the non-obfuscated video data can be reserved to specially authorised users (supervisors, etc.).

In practice, the Privacy Protector will operate between the video signal of surveillance cameras and the picture displayed on the monitor or the storage device. Furthermore it can be used to obfuscate video data retrieved from a storage device. This results in displaying just obfuscated video data, with the monitored persons not identifiable.

Technical Evaluator

mksult GmbH
Mag. Andreas Krisch
Kirchberggasse 7/5
1070 Vienna
Austria
akrisch@mksult.at

Legal Evaluator

Dr. Thomas Strohmaier
Boschstraße 55/21
1190 Vienna
Austria
thomas.strohmaier@chello.at

Formerly Certified Versions

Recertification v3.0.0 in 10/2015

Recertification v2.3.0 in 09/2013

Recertification v1.0 in 09/2011

Initial Certification of v1.0 in 08/2009

Recertification: 10/2017

KiwiSecurity Software GmbH proved that its IT product "Privacy Protector" facilitates its privacy compliant use. Privacy Protector is a software module for integration in a video management system which provides very effective algorithms for anonymisation of video data. Users of Privacy Protector are controllers in respect of the processing of personal data that results from the use of the video surveillance system in which the Privacy Protector is integrated. They are provided with guidance on how to comply with EU data protection law in a specific section of the user manual as well as in a dedicated privacy leaflet and can be sure to act in compliance with EU data protection law if they follow this guidance.

German Press Release (12.08.2009)  Image

© 2008 - 2019 | EuroPriSe GmbH - European Privacy Seal | Handelsregister-Nr. (Commercial Register No.): Bonn HRB 20387

No responsibility for the accuracy of the information. Contact | Privacy Notice | Imprint

Product/Version

REISSWOLF f.i.t.

v1.5; service function as provided in 05/2018

Qualification: IT product and IT-based service (processor service)

View the REISSWOLF f.i.t. certificate

Version of Certification Criteria

11/2011

Cert. No.

EP-S-X5TSCN

Validity

24/05/2018 - 31/05/2020

Monitoring

01/2019

09/2019

Public Report

f.i.t. Short Public Report Image Image 

Manufacturer/Provider

REISSWOLF Systems GmbH

Im Heegen 13
22113 Oststeinbek
Germany

BEST

Access policies can be used to restrict system usage to specific times of the day and/or IP addresses to reduce the attack vector for third-party access. A user session is controlled by means of a cross-tab synchronised session countdown.

ATTENTION

Regarding the processing of personal data on third persons by means of f.i.t., it must be highlighted that the (usually) corporate users of the service qualify as controllers whereas REISSWOLF Systems GmbH acts as a processor on behalf of the users. Customers are advised that the legitimate use of the service may require the collection of the data subject's consent and/or declaration of release from confidentiality.

SUMMARY

REISSWOLF f. i. t. is a web-based archiving system for data storage and access. It serves the purpose of uploading, storing, managing and exchanging data in the sense of a document management system. f.i.t. is a web application that can be used with common internet browsers. 

DETAILS

REISSWOLF f. i. t. is primarily designed for commercial use. It is distributed by REISSWOLF Systems GmbH and operated as Software as a Service (SaaS) in a data center in Germany.

The ToE includes

  • The web-based service REISSWOLF f.i.t. (for details, please cf. the short public report)

It does not include

  • REISSWOLF f.i.t. mobile app
  • REISSWOLF f.i.t. hotfolder
  • Office module
  • Teamviewer
  • Other alternative interfaces to clients

Technical + Legal Evaluator

Ann-Karina Wrede
Innungsstraße 7
21244 Buchholz
Germany

Initial Certification: 05/2018

REISSWOLF f.i.t. provides a web-based service that enables companies to upload, store, manage and exchange data in the sense of a document management system. Users of the service are controllers in respect of personal data on third persons that is processed by means of f.i.t.. The service is designed in a way that facilitates the users' compliance with EU data protection law.

Image

Disclaimer:

This register is kept with the utmost care. However, EuroPriSe does NOT guarantee the accuracy of information found on the Site. Your reliance on information found on the Site is at your own risk.

Image

European Privacy Seal for REISSWOLF f.i.t.