Home / Services / Video surveillance
ServiceVideo surveillance
Having cameras is legal. Having them with no sign, no privacy notice, no retention period and no way of answering someone who asks for their footage is not. We bring your installation in line with the guidance of the Spanish Data Protection Agency.
Four things an inspector will look at
Information sign
Visible in the monitored area, before anyone enters, with the basic information about the processing and who to contact.
Full privacy notice
The detailed information, available to anyone who asks for it: purpose, legal basis, recipients and rights.
30 days maximum
Footage is kept for a maximum of 30 days, unless it has to be given to the police, courts or tribunals.
Rights handled
Knowing how to answer someone who asks to access their footage, to have it corrected or deleted, or who objects to the processing.
The video-surveillance sign
This is the sign that has to be displayed somewhere visible, before anyone enters the monitored area, with the controller's details and the basic information about the processing.
We set it up and fill it in during the adaptation, together with the privacy notice and the record of processing activities.
Processing of video-surveillance data
This is the full text of the processing, as anyone who is filmed must be able to read it.
For what purpose do we process your personal data?
We process the information provided by data subjects in order to guarantee the safety of people, property and premises through video-surveillance systems. If you do not provide your personal data, we will not be able to fulfil the purposes described.
No automated decisions will be taken on the basis of the data provided.
How long will we keep your data?
The data will be kept for a maximum of 30 days, unless it has to be disclosed to the State security forces and/or to courts and tribunals.
What is the legal basis for processing your data?
Task carried out in the public interest: processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller (GDPR, art. 6.1.e), as set out in the “Guide on the use of video cameras for security and other purposes” published by the Spanish Data Protection Agency.
Who will your data be disclosed to?
Where applicable, to the State security forces and to courts and tribunals, in order to provide the footage if an offence has been committed (legal requirement).
No international data transfers are envisaged.
What are your rights when you give us your data?
Anyone has the right to obtain confirmation as to whether or not the controller is processing personal data concerning them.
Data subjects have the right to access their personal data, to ask for inaccurate data to be corrected or, where appropriate, to ask for it to be erased when, among other reasons, the data is no longer necessary for the purposes for which it was collected. They also have the right to data portability.
In certain circumstances, data subjects may ask for the processing of their data to be restricted, in which case we will only keep it for the exercise or defence of claims.
In certain circumstances, and on grounds relating to their particular situation, data subjects may object to the processing of their data. In that case the controller will stop processing the data, except on compelling legitimate grounds, or for the exercise or defence of possible claims.
You may exercise your rights in practice by going to the premises or offices where the footage is recorded, or by sending a request to the controller's e-mail address.
Where commercial communications are sent on the basis of the controller's legitimate interest, the data subject may object to their data being processed for that purpose.
If you believe your data protection rights have been infringed, especially if you have not obtained satisfaction when exercising them, you may lodge a complaint with the competent data protection supervisory authority through its website: www.aepd.es.
How did we obtain your data?
The personal data comes from images recorded by security cameras. The categories of data processed are identification data.