In Geneva, corporate video surveillance is admissible if it pursues a specific purpose, remains proportionate and is not used to specifically monitor the behavior of employees. Video surveillance and access control meet different, but complementary, needs: badges or codes determine who can enter each area, while cameras document an incident and the alarm signals an intrusion or an anomaly. It is therefore preferable to define the role of each device and to protect the private sphere, rather than multiplying equipment without a clear objective. This article presents the principles of the data protection law (FADP), precautions for informing staff and limiting the scope of cameras, as well as ways to coordinate these systems in a Geneva SME.
Key Points
- Define access rights by person, zone and time slot to limit entries to the needs of each function.
- Combine access alerts with useful images to better understand an incident, without filming more than necessary.
- Before commissioning, inform employees and clearly explain the purpose of the device.
- Focus the cameras on the spaces concerned and plan a retention period adapted to the incidents to be documented.
- Coordinate badges, video surveillance and alarm according to the risks specific to your premises and your activity.
Table of contents
Why install an access control system?
Access control reserves entry to authorized people and to areas useful for their function. Associated with video surveillance, it allows you to view live images or review a recording after an incident. In a Geneva SME, a camera can cover the entrance to the repository, while access rights reserve the archives for authorized personnel. Each piece of equipment must meet a defined need.
Alert-triggered recordings
An alert can trigger a video sequence when a deactivated badge is presented or a person attempts to enter a prohibited area. The manager can then compare the time of the attempt to the corresponding image, instead of going through long hours of recording. In a fiduciary, for example, an alert at the archives door helps to target the analysis of the event.
Define the situations that warrant notification, such as movement in a closed room. Too frequent alerts make monitoring less readable and risk distracting attention from important events.
Security and retention period of images
Limit viewing to those responsible for handling incidents and protect recordings from unauthorized access. In the workplace, images should generally be deleted within 24 to 72 hours. Configure their automatic overwriting after the defined duration, then log consultations and extractions useful for analyzing an incident.
Choose a retention period consistent with the purpose of the monitoring. In a less frequented room, the analysis of an incident may take more time, but this alone does not justify keeping the images longer. Instead, provide a procedure to extract the relevant sequence when an event is reported.
Live allows you to check the cause of an alarm, while recording helps you understand what happened. Remote access should be limited to authorized individuals. In a small business, the manager can thus examine a trigger without looking at the cameras continuously. Images can deter and document an event, but they are no substitute for protected doors or clearly defined access rights.
The choice between a wired, wireless or IP system depends on the premises, existing cabling and how the images will be viewed. Wired is suitable where cables can be laid; wireless can limit work in already furnished offices; an IP camera transmits images via the computer network. Installation cost depends on cameras, doors, cabling, storage and integrations. It is established after a quote request.
Can we integrate video surveillance and alarm into access control?
Yes, these devices can work together or separately, depending on the premises and the risks to be covered. Access control manages authorizations, cameras document certain passages and the alarm signals a defined event. To choose a configuration, first identify sensitive doors, authorized people and situations that require a reaction. In an SME, the main entrance can be used to manage visitors, while a separate drive protects the storage room. This distribution avoids granting the same rights everywhere and makes it easier to explain the function of each piece of equipment to employees.
An autonomous system can be based on a code, a badge or biometrics, used separately or combined. A code keypad is suitable for shared access, while a badge allows you to assign authorization to a person. A biometric reader relies on a physical characteristic to manage access. The choice depends on the uses, the people concerned and the level of control sought. To welcome a supplier, for example, the company can provide limited access to reception rather than to the offices. Distinguish rights by person, zone or category of users, then plan to update them in the event of a change in function.
Visual identification of people using a badge can supplement reader information. Presenting an inactivated badge can automatically trigger registration. An attempt to access a prohibited area can also serve as a trigger. When analyzing an event, the manager compares the time of the event to the relevant images. These elements help verify whether a person has come to the door, without automatically concluding that the badge holder was present. A camera focused on the entrance can also help distinguish an expected visitor from an unusual passage, without filming activities in the offices.
Before connecting the equipment, describe the expected responses. An access denied alert may require verification, while an alarm may signal an intrusion: the two events do not necessarily call for the same intervention. Verify that the readers, cameras and notifications correspond to the affected doors. You can also install access control alone, then add other devices if needs change. This approach is suitable for an SME that wants to start by securing a specific area. It facilitates a readable configuration, with clear responsibilities for permissions, images and alert processing.
Integration with alarm and access control systems
To integrate cameras, badges, readers and access control, associate each piece of equipment with a specific door and event. This method makes it possible to coordinate alerts without confusing intrusion, access denied and emergency.
Installation of alarm and video surveillance systems
Start by identifying existing equipment, monitored access and areas to protect. An intruder alarm can use magnetic contacts on doors and windows, motion detectors or glass break detectors. Cameras cover useful passages, while access control manages the doors concerned. For example, an SME can distinguish the entrance to the offices from access to its technical room. The documentation specifies the transfer points and alarm transmission routes. It helps managers understand which equipment is reporting an event and where the information is being sent.
Remote monitoring
Remote monitoring transmits alerts to the people responsible for processing them. A notification may indicate an unauthorized access attempt, an access event, or a violation of a defined rule. When an alarm is triggered, the camera can help verify the cause by displaying images in real time. Specify who receives each notification, who can view images, and what procedure to follow. In a company whose office is closed in the evening, this distribution prevents several employees from responding to the same signal without coordination. An integrated supervision station can also make it possible to block access to a site in a few seconds in the event of a crisis.
Integration of cameras and readers
Connect readers to corresponding doors, then associate cameras with events that require visual verification. For example, using an inactivated badge on a door can trigger a recording. The access log and associated image then help reconstruct the passage and examine the rights involved. Access control can also integrate with fire and intruder alarms to manage emergency situations. Before commissioning, test each scenario separately: access accepted, attempt refused, intrusion reported or fire alarm. Then check that the notification reaches the correct manager and that access reacts as expected. This method makes the operation understandable for the teams and facilitates adjustments when the organization of the premises changes.
Many video surveillance systems can be combined with existing alarm systems or access controls. The alarm installation can be connected to a reception center chosen by the customer.
Blur filters and privacy protection
In Switzerland, cameras must serve a defined purpose and only film the necessary spaces. Blurring can hide out-of-scope areas, such as a nearby window or workstation visible from the entrance. Before installation, specify what each camera should document, then adjust its field of view and privacy masks.
The processing of video surveillance images must respect the principles of proportionality, good faith and transparency. A reception camera can document entries, but should not follow employees in their daily tasks. Article 26, paragraph 1 of OLT 3 prohibits systems intended to monitor the behavior of workers in a targeted manner. In the workplace, video surveillance is in principle only possible if the goal cannot be achieved by a less invasive measure.
Surveillance cameras do not replace appropriate security measures for lone workers. To protect a person who closes an office alone, first define an alert procedure and the internal contacts to be notified. If a camera is considered, limit its scope to relevant areas and the stated purpose. Avoid allowing it to continuously film a workstation or to be used to assess the employee's pace.
To prevent unauthorized access, combine limited access rights with a camera focused on the entrance to a protected area. In a fiduciary, for example, the archives can be reserved for authorized people, while the camera films the threshold, not the documents consulted. At the entrance to each monitored area, a sign must indicate the data controller. Inform employees before commissioning.
Biometric data, such as a face or a fingerprint, makes identification more direct, but raises particular protection issues. Facial recognition may misidentify and the device may collect more information than necessary; favor a badge or a code when these meet the need. Biometrics is not an automatic authorization to monitor employees. A hidden camera contravenes the principle of good faith provided for in Article 6, paragraph 2 of the FADP.
Restrict access to images to those handling an incident and set a limited retention period. Employees can request access to data that concerns them according to article 25 of the FADP. They may also request, under the conditions provided, the prohibition of processing or communication, as well as rectification or erasure according to Article 32, paragraphs 2 to 4. These rules help to secure the premises without making surveillance a method of personnel management.
Complementarity between video surveillance and access control
A video surveillance and access control solution includes cameras, readers, identifiers and authorization rules. The alarm can complete the package by signaling an intrusion or a defined event. The configuration depends on the doors, the protected areas and the people who must act in the event of an alert.
The three devices intervene at different stages. Access control determines whether a badge, code or other authorization allows entry. The camera documents a visual event, while the alarm signals an expected situation, such as the opening of a protected door. For an SME, this distinction clarifies responsibilities: employees manage authorizations, and the person responsible for security handles alerts.
In practice, analyze an incident by bringing together useful information. An alert signals an access attempt, the reader log indicates whether the authorization was accepted and the camera allows you to observe the passage. These elements can help understand if a door was left open or if a credential was used without authorization. Define in advance who can view this data and for what reason.
Visitors require a different procedure than employees. In a medical practice, for example, reception can manage arrivals, while separate rights protect staff areas. A camera can cover the access concerned without filming the consultations. The system works best when the rules are simple to apply and explained to employees.
For a company spread over several buildings, online access control facilitates centralized management of rights. Authorizations can be modified according to the zones concerned, rather than door by door in each building. However, cameras and alarms must serve a specific function on each site. A computer room, a public entrance and a storage room do not have the same needs.
Before installation, establish a map of access and events to be processed. Indicate the doors concerned, the authorized people, the expected alerts and those responsible for monitoring them. Then test a concrete scenario, for example a badge refused at a door, then verify that the notification and associated image are useful. Adjust the configuration if the alert does not allow clear action to be taken.
The complementarity of the systems does not justify filming each space or keeping all the data without limit. Reduce the camera field to useful passages and limit access to recordings. This approach makes it possible to bring the analysis of an event closer to access rights, while adapting the system to the premises and the tasks of employees.
Flux Group SARL: Flux ICT
Flux Group SARL supports SMEs who wish to integrate video surveillance and access control into their IT environment. Its cybersecurity expertise helps address risks related to access and connected systems, while IT support addresses infrastructure operational needs. This support is useful when preparing a project, reviewing access to premises or integrating with existing equipment. The needs are studied according to your organization and the systems concerned. To discuss your situation and define the next step, contact Flux Group SARL in Geneva, Meyrin, Vernier, Eaux-Vives, Cologny, Grand-Lancy or Petit-Lancy.
Prepare for the next stage of your project
Before defining a configuration, transform your needs into concrete instructions. Note the accesses concerned, the people responsible for authorizations and the procedure to follow when an alert occurs. For a video surveillance and access control project, this preparation helps to distinguish security needs from uses that unnecessarily infringe on the private sphere.
You can also designate an internal referent to coordinate employee feedback and record decisions. This person will be able to clarify priorities, such as protecting an entrance or managing visitors, then monitor adjustments after go-live. A progressive approach allows the system to be evaluated based on real situations in your premises.
A well-defined scope provides a useful starting point and makes subsequent decisions easier.
Frequently asked questions
How long can I keep video recordings and when is surveillance allowed?
In the workplace, recordings must generally be deleted within 24 to 72 hours. Longer retention requires justification linked to the purpose, for example a specific incident to be documented. Surveillance must pursue a specific aim and remain proportionate. Inform employees before commissioning and avoid using images to track their behavior.
Which areas can I monitor and which Swiss rules apply?
Focus cameras on necessary areas, such as an entrance or storage area, and avoid workstations, neighboring spaces, and public places without permission. The data protection law (FADP), OLT 3 and the Code of Obligations govern in particular data processing and surveillance at work. To film a public place, check with the municipality for possible authorization.
Are mobile video surveillance systems possible?
Yes, mobile cameras can be used for a temporary mission, for example on a construction site or during an event. Set the duration and monitored area as needed, then remove the device at the end of the mission. To monitor a construction site at night, cameras must not be controlled remotely during the day.
Can the system alert in real time and integrate with existing security?
Yes, an alert can signal an unauthorized access attempt and trigger video recording. Cameras can also be associated with an alarm or access control already in place. For example, an SMEs can receive a notification when a deactivated badge is used. Define who receives the alert and what action to take to avoid unresolved notifications.
How much does it cost to install a video surveillance and access control system in Switzerland?
Cost depends on cameras, doors, cabling, storage and integrations. It is established after a quote request.
Article by
Delyan TZONEV
Passionate entrepreneur and manager, I am CEO of Flux Group and Hype Swiss. I support companies in their digital transformation thanks to innovative solutions in IT, telecommunications and software development. My goal is to design high-performance technologies that simplify the daily lives of businesses and support their growth.
Disclaimer
The articles published on the Flux Group blog aim to share our expertise, our field experience and best practices in IT, cybersecurity, cloud, telecommunications and digital transformation of SMEs.
We strive to provide reliable, up-to-date and relevant information at the time of publication. However, technologies, regulations and service offerings are evolving rapidly. The published content is therefore provided for informational purposes and does not constitute personalized, legal, tax, financial or technical advice.
Each company has specific needs, we recommend that you seek professional support before making a decision or implementing a solution presented in our articles.
The opinions, recommendations and comparisons published on this blog reflect our analysis and experience. When we talk about partners or publishers such as Microsoft, Swisscom or Infomaniak, our objective is to present the solutions objectively, highlighting their advantages as well as their limitations depending on the different contexts of use.
Flux Group cannot be held responsible for any direct or indirect consequences resulting from the use of the information published on this blog. Links to external sites are provided to complete the information; their content is the responsibility of their respective publishers.
© Flux Group – All rights reserved.
Our services
If you wish to be supported in the choice, deployment or optimization of your IT solutions, the Flux Group experts are at your disposal. We support SMEs in Geneva, Switzerland and Pays de Gex in their Microsoft 365, cybersecurity, cloud, telecommunications, managed IT services and IT infrastructure projects.
Questions fréquentes
How long can I keep video recordings and when is surveillance allowed?
In the workplace, recordings must generally be deleted within 24 to 72 hours. Longer retention requires justification linked to the purpose, for example a specific incident to be documented. Surveillance must pursue a specific aim and remain proportionate. Inform employees before commissioning and avoid using images to track their behavior.
Which areas can I monitor and which Swiss rules apply?
Focus cameras on necessary areas, such as an entrance or storage area, and avoid workstations, neighboring spaces, and public places without permission. The data protection law (FADP), OLT 3 and the Code of Obligations govern in particular data processing and surveillance at work. To film a public place, check with the municipality for possible authorization.
Are mobile video surveillance systems possible?
Yes, mobile cameras can be used for a temporary mission, for example on a construction site or during an event. Set the duration and monitored area as needed, then remove the device at the end of the mission. To monitor a construction site at night, cameras must not be controlled remotely during the day.
Can the system alert in real time and integrate with existing security?
Yes, an alert can signal an unauthorized access attempt and trigger video recording. Cameras can also be associated with an alarm or access control already in place. For example, an SMEs can receive a notification when a deactivated badge is used. Define who receives the alert and what action to take to avoid unresolved notifications.
How much does it cost to install a video surveillance and access control system in Switzerland?
Cost depends on cameras, doors, cabling, storage and integrations. It is established after a quote request.
Besoin d'un accompagnement IT à Genève ?
Parlons de votre infrastructure, de votre sécurité ou de votre téléphonie. Sans engagement.
Contacter Flux Group