INFORMATION ON THE IMPLEMENTATION OF VIDEO SURVEILLANCE IN THE COMPANY AMOMONT D.O.O.
1. Controller’s contact details
AMOMONT d.o.o., Miklavška cesta 53a, Hoče
Phone: 08 205 60 90
E-mail: office@amomont.si
Personal Data Protection Officer: Attorney Teja Godec (godec@op-lg.si)
2. Purposes for which personal data are processed
The processing of personal data using a video surveillance system is carried out for the purpose of:
– ensuring the protection of property and the safety of people;
– ensuring the protection of movable property and equipment,
– ensuring the security of work premises and the control of entry into the facility.
3. Legal basis for the processing of personal data:
Article 6(1)(f) of the General Data Protection Regulation in conjunction with Articles 76, 77 and 78 of the ZVOP-2.
4. Legitimate interests pursued by the controller:
By processing, the controller pursues the legitimate interest of the controller, i.e. ensuring an optimal level of protection of people and property, as well as the security of work premises and the control of entry into the facility.
The controller conducted an assessment of the necessity of the establishment and concluded that video surveillance is required for the protection of the operator’s assets, people, and business secrets, as well as those of third parties. This objective cannot be achieved by less restrictive means. Personal data processing is required to achieve the controller’s legitimate interest and will significantly contribute to the achievement of the purpose for which video surveillance is carried out. The legitimate interest of the controller is not overridden by the interests or fundamental rights and freedoms of data subjects.
5. Storage period:
To achieve the goal of video surveillance, a minimum storage time of the recordings is determined, which is seven days after creation. Videos are kept for a maximum of 45 days after they are created, unless a shorter period is specified in the Company’s Rules on the Protection of Personal Data or the Rules on the Implementation of Video Surveillance or the applicable legislation. After the expiration of this period, the Controller shall ensure the permanent deletion of the recordings.
Storage of copies of parts of recordings made and used for the purpose of asserting, exercising, or defending legal claims shall be kept for as long as those purposes are not fulfilled, until the procedures under which the legal claims are asserted, carried out, or defended are completed, and, in the absence of such procedures, for no more than the time limit for such claims to expire.
6. Users or categories of users of personal data:
The controller may transfer personal data obtained in the framework of video surveillance:
- to processors of personal data who act only according to the documented instructions of the controller,
- to other persons, if there is an appropriate legal basis for doing so,
- to the police, if this is legally permissible and necessary for the exercise of their powers.
7. Information on the specific effects of processing, in particular further processing:
Except when the recordings are used as evidence in all cases where a deviant event occurs (e.g., damage to a person or thing) and the recordings are used to assert, exercise, or defend legal claims in connection with such an event, the personal data controller will process the recordings exclusively for the primary purpose – the purpose for which the video surveillance was established.
8. Unusual further processing:
Data transfers to a third country:
The controller does not transfer personal data related to the implementation of video surveillance to a third country.
9. Rights of the individual:
The data subject shall have all the rights in relation to the processing of personal data as set out in the General Regulation and the ZVOP-2:
- the right to information and access to personal data,
- where applicable, the right to rectification, erasure, restriction of processing, portability, objection and the right not to be subject to a decision based solely on automated processing.
Each data subject has the right granted by the European legislator to request access to only the relevant part of his or her personal data. To that end, he or she must specify the request in such a way that it clearly indicates which room they were allegedly located in, on which date and during which period, as precisely defined as possible, as well as their reference photograph (or a description of their image, clothes, etc.), when submitting requirements. The controller shall provide access to personal data if it is possible to identify an individual without disproportionate effort and expense. The controller provides the individual with the requested copies free of charge, and in the case of repeated or unfounded requests, they may be charged the material costs of mediation.
The individual may address the request to the controller by post or e-mail address specified in point 1 (Contact details of the Controller).
If an individual believes that the controller has violated his or her rights in relation to personal data, he or she may file a complaint with the Information Commissioner (Information Commissioner, Dunajska cesta 22, 1000 Ljubljana, Slovenia, gp.ip@ip-rs.si).
10. Existence of automated decision-making/profiling:
Automated decision-making and/or profiling are not carried out.
