Information on the processing of personal data in connection with the operation of the CCTV system
In accordance with the Regulation of the European Parliament and the Council (EU) 2016/679 on the protection of natural persons in connection with the processing of personal data and the instruction of data subjects (hereinafter referred to as the "GDPR regulation"), we inform you that our company UNICA Prague s.r.o., with its registered office Office Park Nové Butovice - building C, Bucharova 2657/12, 158 00 Prague 13, ID number: 052 87 031, entered in the commercial register kept at the Municipal Court in Prague, file number C 261259, as the administrator of personal data (hereinafter referred to as the "administrator" or also "we") processes your personal data and about the rights and obligations associated with it.
The premises in and around our medical facility in the Office Park Nové Butovice building - Building C at the address Bucharova 2657/12, 158 00 Prague 13, are monitored by a camera system with a recording device with continuous operation, which takes an image recording.
Personal data manager
The administrator of your personal data is our company UNICA Prague s.r.o., with headquarters in Office Park Nové Butovice - building C, Bucharova 2657/12, 158 00 Prague 13, IČO: 052 87 031, registered in the commercial register kept at the Municipal Court in Prague, file mark C 261259.
In connection with the processing of personal data, you can contact us through our personal data protection officer, appointed by the company LAWYA, s.r.o., with registered office at Březinova 746/29, Žabovřesky, 616 00 Brno, IČO: 023 22 021, through the contact person Mgr. Ivany Šilhánková, silhankova@lawya.cz, +420 770 606 082, or via the following contact details: IVF-Praha@unica.cz.
The purpose of personal data processing
We operate the camera system for the purpose of protecting the life and health of people on the company's premises and protecting our company's property as well as the property of third parties on the company's premises. The purpose of operating camera systems is also to protect the information system, which mainly contains sensitive personal data of clients, patients and other entities.
Your personal data will be processed for purposes other than those listed only if this processing is compatible with the above-mentioned purposes (for example, the use of records to defend legal claims or the transfer of records to the investigation of misdemeanors or crimes by public authorities).
Legal basis for personal data processing
The legal basis for the processing of your personal data is within the meaning of Article 6 paragraph 1 letter f) GDPR, to the extent necessary to protect the legitimate interests of the administrator and persons present in the administrator's building. The administrator's legitimate interest lies in the protection of the company's equipment, objects and property values and data processed by the company.
The processing of your data is permissible here, if the protection of your interests, fundamental rights and freedoms does not prevail over the legitimate interest of the administrator. The administrator has taken the necessary technical and organizational measures to balance the interests of the administrator and data subjects and to ensure the protection of privacy and personal data of the subjects. These measures include in particular: setting up a camera system, automatic deletion of recordings from cameras after a set period of time, absence of automatic person recognition functions, transparent informing of subjects about the operation of the camera system, restriction of access to recordings from cameras, etc.
Categories of personal data
Personal data is processed within the scope of the camera footage, i.e. a video recording of the movement of people in the vicinity of the installed cameras is processed. The camera system is installed in the publicly accessible internal premises of the administrator, on the outer shell of the administrator's building, as well as at the entrances and entrances to the administrator's buildings. The camera system does not record public communications. Camera systems are not installed in any private spaces such as dressing rooms or toilets.
Recipients of personal data and transfer of personal data to third countries
The personal data administrator will transfer your personal data to other entities (the so-called recipients of personal data) only in the event of an event for which personal data is collected (e.g. damage to the administrator's property or unauthorized entry into the administrator's premises, etc.) . For this purpose, the administrator transfers personal data captured by the camera system to public authorities, especially to law enforcement authorities or authorities dealing with offences. We do not transfer your personal data to third countries outside the European Union.
How long do we keep your personal data?
The recording taken by the camera system is automatically erased by a time loop, with a maximum retention time of 72 hours. In the event that an event occurs for which personal data is collected (e.g. damage to the administrator's property or unauthorized entry into the administrator's premises, etc.), the records will be kept for as long as necessary.
What are your rights when processing personal data?
Your rights to the protection of personal data are regulated in Chapter III (Article 12 et seq.) of the European General Data Protection Regulation (GDPR). Under these provisions, you have the following rights:
The right to access personal data with the administrator under the conditions set out in Article 15 of the GDPR;
the right to correct personal data under the conditions set out in Article 16 GDPR;
The right to erasure of personal data ("right to be forgotten") under the conditions set out in Article 17 of the GDPR;
The right to restrict the processing of personal data under the conditions set out in Article 18 GDPR;
The right to object to the processing of personal data (specifically processing carried out in the public interest or on the basis of the controller's legitimate interest) under the conditions set out in Article 21 GDPR;.
The right to file a complaint with the supervisory authority, while the competent supervisory authority for the protection of personal data in the Czech Republic is the Office for the Protection of Personal Data, with headquarters in Pplk. Sochora 27, 170 00 Prague 7, phone +420 234 665 111, e-mail: posta@uoou.cz.
How can individual rights be exercised?
In all matters related to the processing of your personal data, whether it is a question, exercising a right, filing a complaint or anything else, you can contact the personal data protection officer, which is the company LAWYA, s.r.o., with registered office Březinova 746/29, Žabovřesky , 616 00 Brno, IČO: 023 22 021, through the contact person Mgr. Ivany Šilhánková, silhankova@lawya.cz, +420 770 606 082, or to the contact details listed in the header of this document.
We will process your request without undue delay, but within one month at the most. In exceptional cases, especially due to the complexity of your request, we are entitled to extend this period by another two months. Of course, we will inform you about such a possible extension and its justification.