PRINCIPLES FOR THE PROCESSING OF PERSONAL DATA BY THE CAMERA SYSTEM
Administrator of personal data and contact information
The administrator of personal data obtained by the camera system is Nemocnice Mariánské Lázně s.r.o., U Nemocnice 91/3, 353 01 marianske Lázně, ID 26376709 (hereinafter referred to as "the hospital").
Purpose and legal basis of processing
We process personal data through a camera system with recording to the extent of the likeness captured on the camera recording, for the following purposes:
- ensuring the safety of all persons in the hospital area....
- protection of hospital visitors and against other threats to safety as a result of criminal activity, risky behavior, accidents and other risks threatening the physical safety of persons,
- protection of the property of the hospital ..., as well as the property of visitors and suppliers, especially against damage caused by criminal activity and vandalism.
The legal basis for the processing is the legitimate interest of the hospital ... in the sense of Article 6 paragraph 1 letter f) GDPR, consisting in the protection of the above-mentioned protected values and interests.
Description of the camera system and recording time
The camera system within the hospital consists of a total of 10 cameras located on the hospital premises. The cameras record the external areas of the facility, handling areas, entrance doors, waiting rooms, etc. The cameras do not record areas intended for medical procedures or private actions in which your intimate zone may be violated.
The entire monitored area is marked with a camera pictogram at each entrance.
The cameras capture the image in color and continuously. Personal data contained in camera recordings is stored on the recording device for a period of 10 days, which is the time required to detect and investigate any incident. After this time, these records are deleted by overwriting in a loop.
Sharing and transfer of personal data (recipients of personal data)
Recordings from the camera system may be shared with third parties:
- by external legal representatives bound by confidentiality obligations to protect our legitimate interests,
- by law enforcement authorities, courts or administrative authorities in accordance with our legal obligations.
Data security
Adequate technical and organizational measures, internal controls and information security processes are in place in accordance with best practice corresponding to the possible imminent risk to data subjects. The state of technological development is taken into account in order to protect personal data against accidental loss, destruction, changes, unauthorized disclosure or access. All accesses by authorized persons to camera recordings are allowed only in justified cases and are always properly logged.
These measures include taking reasonable steps to ensure the accountability of relevant employees who have access to personal data and employee training.