Summary
A new EU General Data Protection Regulation (GDPR) comes into effect on 25th May 2018. This new regulation changes the way that businesses and charities process personal data.
It will mean that Privacy notices will be more transparent, consumer rights will be increased and data breaches will have to be reported within 72 hours of becoming aware of them.
Consumers will have more control over how their personal data is stored and used with the ability to view their personal data held by an organisation, change that data and in certain cases, have that data deleted.
This CCTV policy explains what personal data the BAY Centre collects when using CCTV , how we store that data, how we use that data and how to view that data.
The CCTV system was initially set up by our Chairman, Mike Lang, with input from the Police.
>>Back to Top
Personal Data that we collect from CCTV
The BAY Centre collects personal data, namely images, from all people who enter into and exit from the main hallway.
The BAY Centre has one CCTV camera located in the main hallway which gives a view down the hallway.
There are no CCTV cameras in any of the BAY Centre rooms.
>>Back to Top
What is the Data used for?
The BAY Centre uses the CCTV data for the prevention and detection of crime, to identify health and safety problems and provide a safe and reassuring Centre for the community.
Only one person has access to the personal data. That is the Chairman, Mike Lang.
>>Back to Top
Where is the Data stored?
The CCTV images are kept on a password protected server in the Chairman’s office which is kept locked unless occupied.
>>Back to Top
How long is the Data kept?
The BAY Centre will retain the CCTV images for 14 days.
>>Back to Top
How to view the CCTV images.
If a person wishes to request a viewing of CCTV images of themselves, they can use the following -
1) Use the online forms on our website, www.bayc.uk, (see the ‘View your personal data', options in the GDPR menu on www.bayc.uk).
2) Download form (See the ‘GDPR Downloads’ option in the GDPR menu on www.bayc.uk ) that can be filled in then emailed to ‘[email protected]’ or posted to ‘Bookings, The BAY Centre, 1 Cassis Close, Burnham-on-Sea, Somerset, TA8 1NN’.
3) Request a form by writing to ‘Bookings, The BAY Centre, 1 Cassis Close, Burnham-on-Sea, Somerset, TA8 1NN’.
4) Write a letter to ‘ Bookings, The BAY Centre, 1 Cassis Close, Burnham-on-Sea, Somerset, TA8 1NN’ detailing whether you wish to view, change or delete your data.
>>Back to Top
Data Breaches
The BAY Centre will report any data breaches of the CCTV images to the relevant authorities within 72 hours of becoming aware of a data breach.
The BAY Centre will also inform the individuals whose CCTV Persona Data has been breached. We will also inform all other individuals that a CCTV Data Protection breach has occured.
The data breach will be reported to the ICO (Information Commissioner’s Office) which is the UK's independent body set up to uphold personal information rights.
>>Back to Top
3rd Party Processors
The BAY Centre may use the following third parties to process personal data -
• Police (or any other organisation with equivalent authority) who may wish to view the CCTV recordings to help in the detection of a crime.
>>Back to Top
Lawful Basis for processing CCTV images
Under the new Regulation, the BAY Centre needs a lawful basis (reason) to store and process the CCTV personal data. The BAY Centre uses the following lawful bases -
• Legitimate Interests. This basis is used for the processing of CCTV images for the prevention and detection of crime.
>>Back to Top
ICO
The ICO (Information Commissioner’s Office) is the UK's independent body set up to uphold personal information rights.
A person can report a concern to the ICO if they think there is a problem with the way the BAY Centre is handling their data.
The ICO webpage for reporting a concern can be found at https://ico.org.uk/concerns/
>>Back to Top
Data Controller and Processor
For the purpose of the new EU Data Protection Regulation, the BAY Centre is both a data controller and a data processor of the personal data.
The BAY Centre is a registered UK charity (registered charity number 304500)
whose registered office is -
1 Cassis Close,
Burnham-on-Sea,
Somerset
TA8 1NN
>>Back to Top
Change Log
March 2018
Document initially published. The policy is one of a series of policy documents that replace all previous policy documents that existed in a variety of different formats, some electronic, some paper and some verbal.
>>Back to Top
