Construction sites – GDPR rules
Data controller
DEMACO Construction s.r.o., ID: 091 14 998, registered seat at Klokočí 657/1, Soběšice, 644 00 Brno
Processing of personal data
processing by a camera system
| location | number of cameras |
|---|---|
| DMC ValMez Zašovská 850 757 01 Valašské Meziříčí | 1 |
| DMC Brno Královopolská Křižíkova 2989 612 00 Brno – Královo Pole | 2 |
| DMC Paskov U Terminálu 1018 739 21 Paskov | 2 |
Authorized persons of the controller
| contact details | |
| Jaroslav Kaizr, Tomáš Budař – managing directors | jaroslav.kaizr@demaco.cz, 727 878 987 tomas.budar@demaco.cz, 799 000 003 |
| Pavel Urbánek – project manager Valašské Meziříčí, Paskov | pavel.urbanek@demaco.cz, 725 153 754 |
| Petr Smejkal – project manager Brno | petr.smejkal@demaco.cz, 733 658 726 |
Purpose of personal data processing
Personal data are processed for the purpose of:
- enhancing the protection of property (theft, burglary, vandalism).
- enhancing the safety of individuals (assault, robbery, theft, other physical harm) = protection of life and health of individuals.
- prevention of emergenices.
- gathering evidence for the relevant authorities (courts and the Police of the Czech Republic in the case of criminal offenses, municipal authorities in the case of misdemeanors.
- gathering material for resolving insurance claims (with the relevant insurance company).
Legal basis for personal data processing
The processing is necessary for the protection of the legitimate interests of the controller or a third party.
Scope of processed personal data
Processing of images from the camera system.
Recipients of personal data
Law enforcement authorities in the case of an emergency, authorities responsible for administrative offense proceedings in the case of an emergency, insurance companies in the case of resolving an insurance claim, data subjects in the event of their request (only footage where these individuals appear, other parts are anonymized).
Transfer to a third country or international organization
The controller does not transfer personal data to third countries or international organizations.
Rights of the data subject
- Right of access to personal data (Article 15 GDPR)
Ensured upon request by the data subject regarding the data processed about them. Image records are provided to data subjects in an extended machine-readable format (png/jpeg). - Right to rectification of personal data (Article 16 GDPR)
Due to the nature of the processed personal data (image record), the right to rectification does not apply. Unauthorized access to the camera recordings is addressed through technical and organizational measures. - Right to erasure of personal data (Article 17 GDPR)
Due to the retention period, the data subject has the right to request the deletion of data in which they are depicted, provided that the recording does not capture an extraordinary event. Their request will be processed within 30 days of receipt. - Right to restriction of processing (Article 18 GDPR)
The data subject may raise an objection with the administrator against the processing, and for the duration of the verification that the legitimate interests of the administrator do not outweigh the legitimate interests of the data subjects, the administrator will restrict the processing of personal data to their storage. If the data subject needs personal data to establish, exercise, or defend legal claims, the administrator will retain the personal data of the data subject upon their request even after the purpose of processing or the retention period of camera recordings has expired. - Right to data portability (Article 20 GDPR)
This does not apply; portability to a new administrator is not meaningful. However, the data subject can exercise the right of access, whereby image records concerning them are provided in a machine-readable format (see above). - Right to object (Article 21 GDPR)
The data subject has the right to object, for example, through an email to the administrator provided in the header of this information. - Right to lodge a complaint with a supervisory authority (Article 77 GDPR)
Every data subject (if they believe there has been a violation of the General Regulation) has the right to lodge a complaint with the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7,
tel. +420 234 665 111,
e-mail: posta@uoou.gov.cz
Automated decision-making, including profiling
The controller will not engage in automated decision-making, including profiling.
