CCTV Privacy Notice

Introduction

Revell Research Systems Limited (the Company, we, us, our) is providing you with this information in order to comply with the Data Protection Act 2018 and the General Data Protection Regulation 2016 (GDPR), which require us to tell you what we do with your personal information.

This notice relates to the personal data that is processed by us when you visit any of our facilities that operate CCTV.

Who is collecting this personal data?

Revell Research Systems Limited is collecting this data as the Data Controller.

Revell Research Systems Limited is registered with the Information Commissioner in the United Kingdom as a data controller under number Z186392X.

Who are we sharing your Personal Data with?

We may share your personal data processed under this notice with the following third parties:-

• The courts and those involved in legal proceedings and non-contentious matters, including solicitors and barristers
• Police and law enforcement agencies
• Our subsidiaries, our ultimate holding company and all its subsidiaries
• Emergency services
• Private and other investigators
• Landlord and other tenants of shared buildings
• Security contractors
• CCTV maintenance contractors
• Agents acting on our behalf
• Service providers (including associates)
• Victims of crime
• Injured parties in accidents or other safety incidents

We will not sell or rent your data to third parties. We will not share it with third parties for marketing purposes.

Why are we collecting and what will we do with Your Personal Data?

We are collecting personal data in order to prevent and detect crime, assure public safety, ensure the security of our premises and the health and safety of those using them including yourself. This may involve sharing your details with any landlord or tenant in the buildings we occupy. We may also share your details with security contactors patrolling buildings and ensuring the safety of those in them. We may need to share your details with the police or emergency services in the event of an emergency or security incident. We may also occasionally use video footage to monitor our staff and associates.

We collect personal data in the form of video footage about you when you visit us and come into the vision of our security cameras. This data gives details of where you are in our buildings and records the time and date of the video capture. Some installations may also record sound.

We may process this data for the purpose of the proper administration of our business and in communicating with you as well as maintaining backups.

We may share data with the courts and associated professionals in establishing, exercising or defending our legal rights. We may share data in reporting crime to or in co-operating with the police and law enforcement agencies.

What is the legal basis for processing?

Our lawful purposes are Legal Obligation, Vital Interests and Legitimate Interest.

• legal obligation - the Company may be require from time-to-time to comply with requests from the Courts or law enforcement agencies.
• vital interests - the Company may share personal data to protect your's or another's vital interests in an emergency.
• legitimate interest - the Company has a legitimate interest to ensure public safety, protect its property, deter criminal activity, detect and prevent crime, apprehend and to properly administer its business and back up its data.

These lawful purposes are detailed in Article 6 of the General Data Protection Regulation (GDPR):-

• processing is necessary for compliance with a legal obligation to which the controller is subject (Article 6(1)(c)).
• processing is necessary in order to protect the vital interests of the data subject or of another natural person (Article 6(1)(d)).
• processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child (Article 6(1)(f)).

How are we collecting this information?

We collect personal data about you under this notice through the use of CCTV equipment.

Please note that our Usage Log Privacy Notice | Revell Research Systems Prize also is likely to apply to you as our systems record electronic interactions between us.

What information are we collecting?

We collect the following personal information when recording CCTV footage:-

• still and moving images
• location
• date, time and duration of footage
• audio

Who can see your information within the Company?

Only authorised directors, staff and associates may access your data.

How long is your information kept?

We will only keep your information for as long as necessary. The retention period is either dictated by law or our legitimate requirements. Once your information is no longer needed it will be securely and confidentially destroyed.

We typically retain personal data relating to CCTV footage for one calendar month. we retain footage that is requested to support an investigation for the duration of the investigation plus one clear calendar month after it concludes.

How secure is your information?

We take stringent steps to keep your information secure. You can read more about our approach to security at www.rrs.co.uk/security.

Who keeps your information updated?

You are responsible for keeping your personal details up-to-date. Please advise the Company of any changes.

Will your information be used for any automated decision making?

No.

Our Privacy Statement

You can access the Company's Privacy Statement at www.rrs.co.uk/privacy. This statement provides you with more information about how we address data protection and privacy as well as informing you of your rights.

Other Privacy Notices

You are likely to interact with us in more than one way, so our other privacy notices may apply to you in different scenarios. We are open and transparent about how we use your personal data. You can find all of our Privacy Notices at www.rrs.co.uk/privacy.

Changes to this Notice

We may change this privacy notice at any time. Any changes to this privacy notice will apply to you and your data immediately. If these changes affect how your personal data is processed, the Company will take reasonable steps to make sure you know.

Further Information