Information about the Processing of Personal Data
Legacy s.r.o., identification number: 26482142, main office in V celnici 1031/4, Nové Město, 110 00 Prague 1, contact person: Jana Čepičková, e-mail: jana@muzeumkomunismu.cz (hereinafter the “Controller”), processes the personal data of persons recorded with a video surveillance system in keeping with valid Czech legislation, especially Act No. 110/2019, Coll., on personal data processing, as amended, and Regulation (EU) 2016/679 of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR).
This document contains basic information about how we process your personal data.
- The purpose for which the Controller processes personal data and the legitimation of this processing
Video surveillance systems are used to secure and protect the property of the Controller and other persons and entities from theft and destruction, as well as to preventively protect the Controller’s employees and its property from other forms of illegal or criminal activities (pickpocketing, vandalism, etc.).
All these purposes are in the legitimate interest of the Controller as defined in Article 6, Paragraph 1(f) of the GDPR. Thus, the processing of these data is in keeping with the law. The legitimate interests mainly include the proper fulfillment of all contractual obligations, the proper fulfillment of all legal responsibilities, and the safeguarding of the Controller’s business activities and property.
- Personal data that the Controller processes and the duration of the processing
The processed data are data from the video surveillance system, which consist in video recordings used to identify physical persons but only in association with certain activities (see above) and in exactly determined locations. The Controller will not process data related to people’s names or identification data, nor will it process sensitive data or descriptive data.
Surveillance camera footage is kept for a maximum of 14 days. After this period, personal data are erased. If there is suspicion that a crime has been committed, the Controller will keep relevant recordings in accordance with instructions provided by criminal justice officials.
- The transfer of personal data
Surveillance camera footage is not transferred to any other party by the Controller; it is used only for internal control by the Controller. Only the director (the contact person) of the Controller has access to the footage.
The only exception is a situation in which it is suspected that a crime has been committed, in which case the Controller is obliged to transfer the recordings to criminal justice officials, or other public or government authorities dealing with legal offences. The scope of provided personal data is limited to data essential for the needs of such authorities.
Personal data will not be transferred to countries outside of the European Union or the European Economic Area, or to any international organization.
- Rights of data subjects
In the context of personal data collection, every data subject has the rights listed below. You may exercise these rights by contacting the Controller via the above-listed contacts, by either sending an e-mail to the above-listed e-mail address or in written form delivered to the address of the Controller. Your requests will always be thoroughly assessed and settled in keeping with the relevant provisions of the GDPR. In case you do not agree with the settlement of your demands and requests, you have the right to file a complaint with the Office for Personal Data Protection.
In connection with the processing of your personal data, you have the right to access your personal data, the right to information about processed personal data, the right to completing or rectifying inaccurate personal data, the right to erasure, the right to data portability, the right to restrict data processing, and the right to object to data processing.