Data subject information policy (GDPR) - camera system

Operator of the camera system – the company Včelco s.r.o. is responsible for the processing of personal data according to Regulation 2016/679 of the European Parliament and of the Council of the EU on the protection of natural persons in the processing of personal data and on the free movement of such data, which repeals Directive 95/46/EC (hereinafter referred to as GDPR). Our data protection rules are in accordance with the applicable law on the protection of personal data.

1. The administrator of personal data – the operator is the company that determines the purpose and means of processing personal data:
  Company name: Včelco s.r.o.
  Address: Továrenská 10A, 919 04 Smolenice
  ID: 36783455
  TIN: 2022385035
  VAT number: SK2022385035
2. Affected person – natural persons located in the monitored premises
3. List of personal data processed by the operator: ordinary personal data – image records of natural persons and manifestations of the personal nature of natural persons located in the monitored premises.
4. Purposes of personal data processing (personal data must not be further processed in a way that is not compatible with these purposes): protection of company property or health of persons located in monitored premises, detection of crime
5. The legal basis for the provision of this data is according to Article 6 para. 1 letter f) of the aforementioned GDPR Regulation (legitimate interest of the operator) and Article 6, paragraph 1 letter c) of the aforementioned GDPR Regulation (fulfilment of legal obligations)
6. The company has appointed a person responsible for compliance with the protection of personal data (in case of questions, you can contact him at the email address: zodpovednaosoba@iqideas.sk)
7. Period of storage of personal data – the aforementioned personal data are stored for 15 days, after which they are automatically deleted
8. Intermediaries – our business partners, who may have access to your personal data, also comply with the rules of personal data protection and we have concluded a contract with them on the processing of personal data (the list of intermediaries is available on request at the e-mail address responsible@iqideas.sk): zodpovednaosoba@iqideas.sk):
  - administrative IT services
  - administration and maintenance of the camera system
9. Personal data will only be provided to public institutions such as administrative authorities, courts or law enforcement authorities to the extent permitted by law.
10. Data protection at the operator: we take technical and organizational security measures to protect your data as widely as possible from unwanted access. Only authorized persons of the operator who are instructed in the processing and protection of this personal data have access to the relevant camera recordings.
11. Personal data is processed within the member states of the European Union and the European Economic Area. Processing of personal data in the territory of a third country can only take place with the consent of the operator and subject to the fulfillment of special conditions set out in the GDPR regulation.
12. Proper processing of your personal data is for Včelco s.r.o. important and their protection is a matter of course. You can exercise the following rights when processing personal data:
  - Right of access to data: You have the right to confirm whether or not personal data is being processed and, if so, you have access to information about the processing, the categories of personal data concerned, the recipients or categories of recipients, the retention period of the personal data, as well as the right to information about your rights, about the right to file a complaint with the Office for Personal Data Protection, information about the source of personal data, information about whether automated decision-making and profiling is taking place, information and guarantees in the event of the transfer of personal data to a third country or international organization. You have the right to provide copies of processed personal data, as long as this act does not have adverse consequences on the rights of other natural persons.
  - Right to rectification: you have the right to have your incorrect personal data rectified without undue delay
  - Right to erasure: you are entitled to request that your personal data be deleted without undue delay, if the conditions set out in the GDPR are met (you have the right to erasure in particular if your personal data are no longer necessary for the purposes for which they were processed, or if the personal data was processed illegally. The right to erasure does not apply, in particular, if the processing of personal data is necessary to demonstrate, exercise or defend the legal claims of the operator or third parties),
  - The right to restrict processing: in the cases specified in the GDPR (e.g. if you challenge the correctness of personal data or the processing is not in accordance with legal regulations or we no longer need the personal data for the specified purposes, but you need them to prove, exercise or defend legal claims) you have the right to request that we restrict their processing
  - Right to object: if the processing of personal data carried out on a legal basis is a legitimate interest under the GDPR, you have the right to object to such processing. We may not process this data further, unless it demonstrates necessary legitimate reasons for processing that outweigh your interests, rights and freedoms, or reasons for proving, exercising or defending our legal claims or those of third parties.
13. You have the right to file a complaint with the Office for the Protection of Personal Data of the Slovak Republic or with another competent supervisory authority, especially if it assumes that there has been a violation of the processing of personal data.

Contact to exercise the affected rights: if you contact us by e-mail to the address responsible zodpovednaosoba@iqideas.sk or by post to the address Továrenská 10A, 919 04 Smolenice, we will save the data you have provided (your e-mail address or your name , surname and your phone number) to answer your questions or to process your request. The data will be deleted if they are no longer necessary for the purpose of processing, or we will limit their processing if there are legal obligations to keep them. We will provide you with statements and any information about the measures taken as soon as possible, but within one month at the latest. If necessary and taking into account the complexity and number of requests, we can extend this period to two months. We will inform you about the extension, including the reasons.