Information on the processing of personal data by the video surveillance system (CCTV)
Controller of personal data (“Controller”) | ROCHE s.r.o., ID No.: 49617052, , entered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 13202. | Controller’s registered address: Sokolovská 685/136f, Karlín, 186 00 Praha 8. |
Processing of personal data | Processing by a video surveillance system with recording | Location and number of cameras: At the entrances to the Controller premises (8 cameras in total) |
Data Protection Officer (“DPO”) | Společnost FairData Professionals a.s. | Telephone: +420 220 382 111 Email: [email protected] |
Purpose of processing personal data | Personal data are processed for the following purposes: - increasing the protection of property (theft, burglary, vandalism), - increasing the safety of persons (assault, robbery, theft, other physical harm), - protection of the life and health of entering persons / the Controller’s employees, - obtaining evidence for the competent authorities (courts and the Police of the Czech Republic in the case of criminal offences, municipal authorities in the case of misdemeanour proceedings), - obtaining material for resolving insurance claims with the insurance company. | |
Legal basis for processing personal data | The processing is necessary for the protection of the Controller’s legitimate interests pursuant to Article 6(1)(f) of the GDPR. | |
Scope of processed personal data | Image recordings of persons captured by the video surveillance system in the Controller’s monitored premises. | |
Recipients of personal data | Recipients of personal data may be: - law enforcement authorities in the event of an extraordinary incident - authorities conducting misdemeanour proceedings in the event of an extraordinary incident, - insurance companies in the event of resolving an insurance claim, - data subjects in the event of their request for access (only footage in which these persons appear; other parts are anonymised). | |
Transfer to a third country or international organisation | The Controller does not transfer personal data to third countries or international organizations. An exceptional transfer of data to third countries may only occur when using the secured cloud storage of the camera system operator. In such a case, the data are protected in accordance with the requirements of the GDPR, and the transfer is substantiated by Standard Contractual Clauses (SCC). | |
Rights of the data subject | In connection with the processing of your personal data, you have the following rights: - Right of access to personal data: Ensured on the basis of a request by the data subject to the extent of the data processed about them. Image recordings are provided to data subjects in a standard machine-readable format. - Right to erasure of personal data: Given the retention period, the data subject has the right to request the erasure of data in which they are depicted, provided the recording does not capture any of the extraordinary incidents listed above. The request for erasure of personal data will be processed no later than 30 days from receipt. - Right to restriction of processing: The data subject may lodge an objection to the processing with the Controller, and for the period until it is verified that the Controller’s legitimate interests do not override the legitimate interests of the data subjects, the Controller will restrict the processing of personal data to their storage. If the data subject needs the personal data for the establishment, exercise or defence of legal claims, the Controller will retain the data subject’s personal data at their request even after the purpose of processing has ceased or after the retention period of camera recordings has expired. - Right to object: The data subject has the right to object, e.g., via the DPO’s e-mail indicated in the header of this information. - Right to lodge a complaint with a supervisory authority: Any data subject (if they believe that the GDPR has been violated) has the right to lodge a complaint with the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, tel. +420 234 665 111, email: [email protected]. - Right to rectification of personal data – Given the nature of the personal data being processed (video recording), the right to rectification does not apply. Unauthorised interference with camera recordings is addressed through technical and organisational measures. | |
Automated decision-making including profiling | The Controller will not carry out automated decision-making, including profiling. | |
Retention period of recordings | Corresponds to the purpose of the given processing and has been determined in accordance with the principle of data minimisation. | |