Location and number of cameras within the facilities managed by Prague City Tourism, a.s., are as follows: Petřín Tower (8 units) New Mill Water Tower (6 units) Old Town Bridge Tower (19 units) Old Town Hall (3 units) Tourist Information Centre Můstek (2 units) Administrative headquarters of Prague City Tourism, a.s. (6 units) The controller is Prague City Tourism a.s. with registered office at Žatecká 110/2, 110 00 Prague 1 – Staré Město, ID No. 07312890, contact e-mail: gdpr@prague.eu purpose of records processing The personal data of employees and visitors to the premises are processed for the following purposes: to increase the protection of property (theft, burglary, vandalism), to increase the safety of persons (assault, robbery, theft, other physical harm) = protection of life and health of persons, prevention of emergencies, obtaining evidence for the relevant responsible authorities (courts and the Police of the Czech Republic in the case of criminal offences, municipal authorities in the case of misdemeanours), obtaining material for the settlement of insurance claims (with the relevant insurance company). The scope of processing is the processing of images from the camera system. The legal basis is the processing that is necessary to protect the legitimate interests of the controller or a third party. recipients of personal data Law enforcement authorities in the event of an extraordinary incident Authorities involved in offence proceedings in the event of an extraordinary incident Insurance companies in the event of an insurance claim Data subjects, in the event of their request (only footage where these persons are present, other parts are anonymized). There is no further transfer of personal data for the purpose of further processing; the data are not transferred to third countries or to any international organizations. data retention period The retention period for camera recordings is 7 to 30 days. In the event of an extraordinary incident, the relevant record will be kept for the necessary period of time (investigation period, period of judicial or administrative proceedings, period of handling the claim, etc.). rights of data subjects Right of access to personal data (Article 15 GDPR) – Ensured upon request of the data subject within the scope of the data processed about them. Right to rectification of personal data (Article 16 GDPR) – Due to the nature of the personal data processed (video recording), the right to rectification does not apply. Right to erasure of personal data (Article 17 GDPR) – The data subject has the right to request the erasure of the personal data on which they are depicted, except where the record shows an incident that is being dealt with by law enforcement or administrative authorities or an insurance company. Right to restriction of processing (Article 18 GDPR) – The data subject may object to the controller to the processing, and until it is verified that the legitimate interests of the controller do not override the legitimate interests of the data subjects, the controller shall restrict the processing of the personal data to the storage thereof. Right to data portability (Article 20 GDPR) – Not applicable. Right to object (Art. 21 GDPR) – The data subject has the right to object, for example, by sending an e-mail to the controller indicated in the header of this information. Right to lodge a complaint with the supervisory authority (Article 77 GDPR) – Any data subject (if they believe that there has been a breach of the General Regulation) has the right to lodge a complaint with the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, tel. +420 234 665 111, e-mail: posta@uoou.gov.cz. The controller will not carry out automated decision-making, including profiling.
