GDPR

Information on the processing of personal data - Camera system

Information on the processing of personal data

(Article 13 GDPR)

Identification of the controller:

Pink Spa s. r. o.

Hrachová 12E, Bratislava - Ružinov district 821 05

Company ID (IČO): 52 552 161, registered at the District Court Bratislava I, Commercial Register, insert no.: 139559/B

Controller contacts: pinkspa.sk@gmail.com

(hereinafter the "Controller")

Purpose and legal basis of the processing of personal data:

The purpose of processing personal data is the Controller's interest in the security of the company premises and the protection of life, health and property in accordance with Section 13(1)(f) of the Personal Data Protection Act (ZOOU), or Article 6(1)(f) GDPR, which also includes checking measures related to the collection of personal data.

Legitimate interests of the controller:

The processing of personal data is necessary to protect the legitimate interests of the Controller or of third parties, specifically to protect life, health and property, to prevent antisocial behaviour, and for the purposes of protecting public order and security, detecting crime and breaches of security.

By means of camera surveillance, the Controller ensures the protection and security of the Controller's premises. The camera recording also serves the purpose of enforcing legal liability in misdemeanour, criminal, court and similar proceedings.

We process the following personal data:

Video recordings of natural persons and expressions of a personal nature of natural persons present in the monitored premises.

Recipients:

Where necessary to fulfil legal grounds or to exercise the rights of the Controller or of third parties, personal data will be provided to: law enforcement authorities, state authorities, courts, court officers and attorneys. Your personal data will not be transferred abroad outside the European Union.

Retention period:

If no incident occurs that justifies retaining personal data for misdemeanour, criminal, court or similar proceedings, the personal data (recordings) are automatically deleted 4 days after they were created.

Rights of the data subject:

Where the conditions laid down by law are met, under Section 19 et seq. of the ZOOU, or Articles 15 to 22 GDPR, you have the following rights: the right to information, access to personal data, rectification, erasure, restriction of processing and portability of personal data. You also have the right to object to processing carried out on the basis of Section 13(1)(f) of the ZOOU, or Article 6(1)(f) GDPR.

Right to lodge a complaint with a supervisory authority:

If you believe that your personal data are not being processed in accordance with the law, you may lodge a complaint with the supervisory authority, which is: the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava, Slovak Republic.

If you have your habitual residence or place of work in a member state of the European Union other than the Slovak Republic, you may also lodge your complaint with the supervisory authority in that other member state.

The processing of your personal data does not involve automated decision-making, including profiling.