Privacy Policy for the Electronic Surveillance System Operated at Lívia Apartments - Lívia Holiday Home, Délibáb Apartment, Szömörce Guesthouse
1. Scope of Data Processed
The electronic surveillance system monitors movement at the entrance and the parking area of the guesthouse premises, capturing personal data in the form of video recordings. The guesthouse operates the camera system.
2. Purpose of Data Processing
The purpose of the surveillance and recording is to protect the lives, physical integrity, and property of individuals within the guesthouse area, as well as the guesthouse’s assets. Additionally, the goal is to prevent and detect unlawful acts, apprehend offenders, and use the recordings as evidence in legal proceedings.
3.Legal Basis for Data Processing
Individuals within the guesthouse premises are informed about the data processing carried out by the electronic surveillance system. Notices regarding the application of the surveillance system must be placed in visible and easily readable locations to inform other individuals wishing to enter the area. The consent of guests and other individuals not engaged in a work relationship with the guesthouse is considered voluntary and implied by their conduct. Those staying on the guesthouse premises accept that they may be recorded and that the recordings may be used according to the policy.
4. Duration of Data Processing
The video recordings are stored online for 30 days.
5. Scope of Authorization for Data Processing
Only the operators of the guesthouse are authorized to view the live footage transmitted by the cameras. Only the operators can review the recordings made and stored by the cameras. Only the operators can save the recordings made and stored by the cameras..
6. Data Security Measures
6.1. There is no monitor for viewing and reviewing the recordings. The recordings can only be viewed by the guesthouse operators through a phone application.
6.2. Monitoring and reviewing stored recordings can only be done for the purpose of detecting unlawful acts and initiating measures to stop them. No recordings can be made from the live footage transmitted by the cameras outside the central recording unit.
6.3. Access to stored recordings must be secure and only in a way that the data controller can be identified. The review of stored recordings and any copies made from them must be documented. If the justification for access ceases, access to the stored recordings must be terminated immediately.
6.4. The operating system runs from a dedicated hard drive in the recording device, and the recordings are stored on this hard drive only. No separate security copies are made of the recordings.
6.5. Upon detecting an unlawful act, the necessary legal procedures must be initiated immediately, and the recordings of the act must be preserved. The authority must be informed that a recording was made of the act. Data provision must be documented using the form specified in the data protection policy..
7. Placement of Cameras
There is one camera on the guesthouse premises, mounted on the front facade of the house facing the street. The camera's field of view covers the gate, parking area, and yard. No audio recording is made..
8. Rights of Data Subjects
8.1. A data subject is any identified or identifiable natural person based on any specific personal data (Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information, Section 3, Point 1).
8.2. A person whose right or legitimate interest is affected by the recording of video or other personal data can request within three days from the recording that the data not be destroyed or deleted by proving their right or legitimate interest. Upon request from a court or other authority, the recorded video and other personal data must be promptly sent to the court or authority. If no request for preservation is made within thirty days from the date of the request to prevent destruction, the recorded video and other personal data must be destroyed or deleted. The request must be submitted to the guesthouse manager.
8.3. The data subject may request information on the processing of their personal data, the correction of their personal data, and the deletion or blocking of their personal data, except for mandatory data processing.
8.4. The data subject may object to the processing of their personal data if the processing or transfer of the personal data is necessary solely for fulfilling the legal obligations of the data controller, enforcing the legitimate interests of the data controller, data recipient, or third party, except in cases of mandatory data processing; if the personal data is used or transferred for direct marketing, public opinion polling, or scientific research; and in other cases specified by law. The objection must be examined by the guesthouse manager as soon as possible, but within a maximum of 15 days, who will decide on the merits of the objection and inform the applicant in writing.
8.5. In case of a violation of their rights, the data subject may take legal action against the data controller. The court will act promptly. It is the responsibility of the data controller to prove that the data processing complies with legal requirements..
This policy takes effect on July 5, 2024.
Szigliget, July 5, 2024 Lívia Apartments