Introduction
This CCTV Policy outlines the principles and guidelines governing the use of Closed Circuit Television (CCTV) systems within the premises of RReMC’s workshop. This policy aims to ensure compliance with the General Data Protection Regulation (GDPR) and protect the privacy and rights of individuals.
1. Purpose of CCTV
The CCTV system is installed to enhance the security and safety of the workshop premises, safeguarding both users and property. The footage may be used for monitoring, crime prevention, and investigations related to the workshop’s operations and policy adherence.
2. Data Controller and Data Protection Officer (DPO)
RReMC is the Data Controller responsible for the CCTV system. The DPO can be contacted using the form below this policy.
3. Lawful Basis for Processing
The lawful basis for processing personal data through CCTV is the legitimate interest of RReMC in ensuring the safety and security of its premises and workshop users.
4. Types of Data Collected
The CCTV system may capture images, videos, and audio recordings. This data may include personal data such as images of individuals, vehicle registration numbers, and other information relevant to the security of the workshop.
5. Data Storage and Retention
Recordings will be stored securely and retained for a limited period, not exceeding [180] days, unless there is a specific need for extended retention (e.g., ongoing investigations or legal proceedings).
6. Access and Disclosure
Access to CCTV footage is restricted to authorized personnel who require it for security and safety purposes. Disclosure of footage to third parties will only occur if required by law or for the legitimate interests of RReMC.
7. Individual Rights
Individuals have the right to request access to their personal data captured by the CCTV system. Requests should be made in writing to the DPO, and the information will be provided within one month, in accordance with GDPR. We reserve the right to charge an appropriate fee should the request incur significant time to action.
8. Security Measures
RReMC will implement appropriate technical and organizational measures to ensure the security and integrity of the CCTV data, protecting it from unauthorized access, disclosure, alteration, or destruction.
9. Notification
Signage will be prominently displayed at the workshop entrance to inform individuals that CCTV surveillance is in operation. Contact details for the DPO will be provided for privacy-related inquiries.
10. Policy Review
This CCTV Policy will be reviewed annually to ensure its continued relevance and compliance with data protection regulations.
Last Review: 1st March 2024