Information on personal data processing
Information on personal data processing with regard to data subjects pursuant to § 19 and § 20 of Act No 18/2018 Coll., on the protection of personal data and amending certain acts (hereinafter referred to as the ‘Act’) and Articles 13 and 14 of Regulation (EC) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to personal data processing and on the free movement of such data (hereinafter referred to as the ‘GDPR’)
The purpose of this information is to provide you with information about which personal data we process, how we treat such personal data, for which purposes we use the data, to whom we can provide it, where you can obtain information concerning your personal data and exercise your rights within the personal data processing.
Identification and contact details:
- The purpose of personal data processing and legal basis of processing
The purpose of personal data processing is: monitoring the premises through a camera system for the purposes of security, crime detection, protection of property and health
Personal data is processed on the basis of: the legitimate interest of the Data Controller or a third party in accordance with § 13(1)(f) of the Act and Article 6(1)(f) of the GDPR
- Identification of the processed personal data of data subjects
The data subjects whose personal data is processed are: persons moving in the monitored area
Scope of processed personal data: recording from a camera system capturing the data subject.
- Identification of recipients, categories of recipients
The Data Controller may provide personal data to the authorised entities such as institutions and organisations, authorised by a specific law, or contractors (especially data processors) who have undertaken to accept reasonable guarantees to maintain processed personal data protection as follows:
| Police force to the extent necessary to clarify a misdemeanour or criminal offense | § 76a of the Police Force Act |
| Other authorised entity | general binding law in accordance with § 13(1)(c) of Act No 18/2018 Coll., on personal data protection and amending certain other acts |
- Transfer of personal data to a third country/an international organisation
Transfer to the third countries or to the international organisations is not carried out.
- Identification of the source from which personal data was collected
Directly from the data subject (by moving in the monitored area)
- Term of keeping the personal data
The Data Controller processes personal data for a period of 7 days from the date of their creation; in special cases it processes them for the time necessary to fulfil the purpose (providing camera recordings to law enforcement authorities or conducting misdemeanour or disciplinary proceedings).
- Profiling
The Data Controller does not process personal data by profiling or similar manners based on automated individual decision-making.
- The data subject’s rights
The data subject has the right to request access to the data processed data from the Data Controller, and also the right to personal data rectification, the right to erase or restrict personal data processing, the right to object to personal data processing, the right to ineffectiveness of automated individual decision-making, including profiling, the right to personal data portability, as well as the right to bring proceedings to the supervisory authority. If the Data Controller processes personal data with the data subject’s consent, the data subject has the right to withdraw their consent to personal data processing at any time. Withdrawal of the consent does not affect the lawfulness of personal data processing based on consent prior to its withdrawal. The data subject can exercise their rights by sending an email to gdpr@baronka.sk or in writing to the Data Controller’s address.
- Obligation to provide personal data
Personal data processing is carried out in accordance with the Act, to protect the legitimate interests of the Data Controller and the third party. The data subject decides on the provision of their personal data by their movement in the monitored areas. In case of movement in the monitored area, the data subject is automatically recorded on camera, without the possibility of deciding on the processing/non-processing of their personal data.