Information on personal data processing in the video monitoring system at Base Group Sp. z o.o.
Who decides on the purposes and means of personal data processing in the monitoring system?
The processing of personal data from security footage is controlled by Base Group Sp. z o.o. with its registered office at 29 Spacerowa Street in Koszwały (83-020), VAT ID 5832141328. In any matters related to the processing of personal data, please contact our Data Protection Officer at firstname.lastname@example.org.
For what purpose do we process personal data in visual monitoring and for how long?
We use monitoring to ensure the safety of people and security. Data processing for the aforementioned purposes is the legitimate interest pursued by the Controller. Data is processed pursuant to Article 6(1)(f) REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as GDPR). Security footage is stored for 14 days.
Who has access to data from the monitoring system?
Access to data is enabled only to authorized employees of the Controller as well as the security staff and the system servicemen. We do not transfer data to third countries or international organizations.
What rights can be asserted by any person whose image has been recorded in security footage?
Any person may request the Controller to exercise the rights under Article 15 – 22 of the GDPR, i.e. the right to access, rectify, delete and limit the processing of their personal data. It is also possible to object to the processing of one’s personal data in a legitimate interest or complain to the supervisory body (the President of the Personal Data Protection Office) if the data subject believes that their data is being processed in breach of applicable law.
Requests referred to above should be sent to email@example.com.
The Controller responds to requests within one month of their receipt, and if the request requires complex action – within next two months. To receive a response, the person that has made the request must confirm their identity.
The Controller may refuse the exercise of the rights referred to above if the restrictions on their exercise arise from applicable law, or the exercise thereof is impossible due to technical or technological limitations beyond the control of Base Group Sp. z o.o.