Information on personal data processing - Camera system
A camera system is installed in the internal and outdoor areas of the Czech University of Life Sciences (hereinafter “CZU” or the “data administrator”) premises, for the purpose of protecting the property of CZU and protection of life and health of persons in the monitored area. The monitored areas are always properly and clearly marked. The cameras operate in continuous mode. By entering the campus of the Czech University of Life Sciences you express your consent to being recorded by the camera system. In this context, CZU, as a personal data administrator, also processes your personal data. As part of the camera system, CZU can process the following personal data: gender, your likeness and approximate age.
This information document on personal data rights and obligations with regard to the processing of personal data has been prepared in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on free movement of this data, and repealing Directive 95/46/EC (GDPR), and in accordance with Act No. 110/2019 on the Processing of Personal Data. This document contains basic information about the processing of personal data in the form of camera recordings by the CZU data administrator.
1. Personal data administrator
The personal data administrator is a subject that determines the purposes and resources for processing of personal data. The personal data controller collects, processes and stores personal data for the determined purpose. We fundamentally manage your personal data from the camera system within our organization. Data is transferred outside our organization only if it is directly stipulated by a legal regulation, in particular to protect our organization (transfer to law enforcement authorities), or with your consent.
The administrator of personal data captured by camera recordings is the Czech University of Life Sciences Prague, Kamýcká 129, Prague 6 - Suchdol, 16500, Company ID No.: 60460709, Tax ID No.: CZ60460709, data box ID: 3hdj9cb (hereinafter CZU).
Contact information:
tel.: +420 224 384 023
e-mail: bezpecnost@czu.cz
DPO: dpo@czu.cz
2. Purpose of processing personal data
The reason for processing your personal data is the protection of CZU property and protection of life and health of persons in the monitored area. Both of these purposes are legitimate interests of the CZU pursuant to Article 6, paragraph 1, letter f), GDPR. Personal data is therefore lawfully collected.
3. Personal data and its processing
Personal data processed by CZU are video recordings from the cameras installed on the premises and in CZU Prague and UFE Kostelec nad Černými lesy buildings.
3.1. Processing period
Records are kept for 7 days and are then automatically deleted. The period for storing personal data is proportionate to the purpose of their processing. Where a criminal offense is suspected, relevant records shall be kept in accordance with the instructions of law enforcement authorities.
3.2. Personal data recipients
- data subject who requests information about the processed data
- insurance company that needs a recording to deal with an incident
- Police of the Czech Republic, which needs a recording to deal with an incident
Recipients in third countries are not planned.
4. Your rights
In relation to processing of personal data, the legal order entrusts to you a number of your rights that you may exercise. You may exercise your rights toward the personal data controller via CZU data box 3hdj9cb, by e-mail to the address of the representative: dpo@czu.cz, or by personally making a submission to the representative, see https://gdpr.czu.cz. In this regard, we must inform you that before processing the request, CZU is obliged to verify the identity of the applicant.
The personal data controller will reply to your sent request free of charge within one month. In the event of a manifest inadequacy of the sent request (e.g. due to repetition) or due to its unjustified nature, the personal data controller shall be entitled to charge a reasonable fee covering the administrative costs associated with providing the requested information and processing the sent request. If necessary, taking into account the complexity and number of requests sent, the controller shall be entitled to extend the time limit by two months. The data controller is obliged to immediately inform the data subject of the extension (including the reasons for it).
4.1. Right to information on the processing of your personal data
The personal data administrator shall be obliged to inform you about which personal data the administrator processes about you. If the personal data administrator processes personal data about you, the personal data administrator shall be obliged to provide you with information about the purpose of personal data processing, which personal data about you is processed, for how long your personal data is processed, or to whom your personal data is transferred. If you find out that your personal data is inaccurate or incomplete, you have the right to request that the data administrator supplement or correct the data. However, this is not technically possible in connection with the operation of camera recordings, it will therefore not be possible to grant such a request.
If the data administrator wants to process your personal data for a purpose other than that for which the data was obtained, the data controller will ask for your consent, or you will be provided with information by the data administrator about a different purpose of processing. In connection with the processing of your personal data, you have the right to request that some of your personal data be marked that you wish not to be processed further for a certain period of time. If processing is limited, data may only be processed with your consent, or for the purpose of determining, exercising or defending legal claims, for the protection of the rights of another natural person or legal entity, or for important public interest reasons. Please note that the applicability of the right to limit processing is limited in relation to camera recordings, in particular by their short-term processing.
4.2. Right to access personal data
On the basis of a sent request, the data administrator will provide you with a copy of processed personal data about you, provided that this act does not adversely affect the rights and freedoms of others. The data administrator is entitled to charge a reasonable fee for this copy, especially if provided repeatedly to you.
4.3. Right to have your personal data deleted (right to be forgotten)
In certain specified cases, you have the right to have your personal data deleted, for example, if the processed data is no longer needed for the above purposes. Personal data is deleted automatically after a specified time. We generally delete your personal data when we no longer need it and have no legal reason to process it. The camera recording will be deleted after the exercising of your right, unless there is a significant legitimate interest on our part consisting mainly of the determination, exercising or defence of legal claims.
4.4. Right to object
If you suspect that the administrator is processing personal data in violation of legal regulations, you have the right to ask the administrator for an explanation or to remedy the condition.
4.5. Right to file a complaint with the Office for Personal Data Protection
With your suggestion or complaint regarding personal data processing, you can contact the supervisory authority at any time - Office for Personal Data Protection, registered office: Pplk. Sochora 27, 170 00 Prague 7, (https://www.uoou.cz).