SHBC CCTV privacy notice
Introduction
This privacy notice explains how Surrey Heath Borough Council (SHBC) uses your data when captured on CCTV, ANPR and BWV.
SHBC has CCTV in operation at various sites, including; Camberley Town Centre, Council offices, Car Parks and other Council owned premises. Some SHBC staff within the Car Parking and Corporate Enforcement services wear Body Worn Camera (BWV). CCTV and BWV will capture images in real time wherever the cameras are pointed and activated. These cameras may capture footage of you whilst you are within the location of the camera or when you enter a car park via number plate recognition (ANPR). Cameras have been situated both inside and outside of buildings. There are signs in place to inform you where cameras are in use. BWV recordings will not commence until the operative has issued a verbal warning of their intention to turn on the BWV.
Who will be using your data?
SHBC are the data controller for the data collected by the Council managed CCTV, ANPR and BWV systems.
Woking Borough Council (WBC) manage the CCTV in our Town Centre, we are joint data controllers for the data processed through the collection of recording via CCTV in this area.
What personal data do we record?
- static and moving images of people
- vehicle registration numbers
- location data
- criminal activity data
Purposes for which we use your data?
- for the interest of safety of members of the public, employees, service users and visitors to the sites
- to detect, prevent or reduce the incidence of crime
- to prevent and respond effectively to all forms of possible harassment and disorder
- to reduce the fear of crime
- to create a safer environment
- to provide emergency services assistance
- for the defence of the council or its employees with regards to legal or insurance claims
What lawful basis allow us to use your data in this way?
Our legal basis for processing your personal data is:
- that it is necessary to meet a legal obligation
- that it is necessary to perform tasks in the public interest
- that we have a legitimate interest in processing this information
Our basis for processing special category persona data is:
- there is a substantial public interest in processing this information, for the purposes of detecting and preventing crime
The lawful basis for holding and processing the data comes under:
- Section 163 of the Criminal Justice and Public Order Act 1994
- Crime and Disorder Act 1998
- Protection of Freedoms Act 2012
- In certain Circumstances - Regulation of Investigatory Powers Act
Who may we share your data with?
Sometimes we need to share your information with others. We will only do this when it is completely necessary, or if we are required to do so by law;
- The police may ask us to provide footage to assist with any criminal damage or criminal investigations.
- We may be asked for footage by insurance companies should there be an incident involving car accidents or damage to cars parked on council premises.
- A member of the public may ask for images of themselves under very strict Data Protection or Freedom of Information conditions.
CCTV footage will only be processed internally by council staff at SHBC or WBC who are authorised to do so and any other departments where there is a legitimate and lawful reason for their involvement.
How long is your data kept for?
CCTV images are kept for 28 days. Images may be retained for longer if they are required for an investigation into crime.
How we handle data security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to control rooms to those employees whose role it is to manage CCTV.
Transferring data outside of the EEA?
We do not transfer your personal data outside of the European Economic Area.
What rights do you have over this use of your data?
- to be informed about how we use your data
- to access a copy of your data that we process
- to restrict our processing of your personal data
- to object to the use of your data
- to have your personal data erased
- to request that we transfer your information to you or another organisation
Some of these rights are subject to exceptions. Please refer to the SHBC Privacy notice for further details.
Contact the Data Protection Officer:
If you have any concerns about how the council is using your data, you can contact the council's Data Protection Officer by writing to:
data.protection@surreyheath.gov.uk (link sends email)
Or
Data Protection Officer
Surrey Heath Borough Council
Surrey Heath House
Knoll Road
Camberley
GU15 3HD
Contact details of the Information Commissioners’ Office:
If you are unhappy with how your data has been processed by the council or you feel your data protection rights have been breached, you have the right to complain to the Information Commissioner's Office at:
Wycliffe House
Water Lane
Wilmslow
SK9 5AF