Data privacy notice on video surveillance

I. Data Controller and Purpose of Processing
The data controller HOTEL PALACE PORTOROŽ d.o.o., Obala 45, 6320 Portorož - Portorose, implements video surveillance to monitor the access to and from business premises, as well as to ensure the safety of people and property.

II. Legal Basis for Data Processing
The legal basis for processing personal data is the legitimate interest of the data controller in accordance with Article 6(1)(f) of the GDPR, in connection with Articles 76, 77, and 78 of the Slovenian Personal Data Protection Act (ZVOP-2).
The data controller justifies the prevailing legitimate interest for the introduction of video surveillance, arguing that it is necessary, essential, and proportionate to achieve the purpose of protecting people and property. The video surveillance does not significantly interfere with individuals, who are informed about the processing and their rights.
Upon request, an individual can access the test of legitimate interest at our office or request it via the email address [email protected].

III. Types of Personal Data Processed
The personal data processed includes the individual’s image, location data, date and time of recording and vehicle licence plate number.

IV. Categories of Personal Data Recipients
The video surveillance service is provided by a contractor – a security services company with whom we have concluded a data processing agreement in accordance with Article 28 of the GDPR. Video surveillance camera recordings may also be shared with recipients who can demonstrate a legal basis for such processing and when it is in line with the purpose of processing (e.g., police, prosecution authorities for the purpose of criminal investigations).

V. Information on Transfers of Personal Data to a Third Country or International Organization
Personal data is not transferred to third countries.

VI. Special Impacts and Unusual Further Processing
Live activity is monitored.

VII. Retention Period
The video surveillance recordings are stored for 30 days.

VIII. Individual Rights
You may, with a written request submitted at our office or via email to [email protected], request access to the recordings in which you appear. You may also object to the processing, request the restriction of processing, or request the deletion of your data. To exercise your rights, you must specify the date and approximate time at which you were recorded. To confirm your identity, we may ask for additional information.

IX. Complaint
If you believe that your personal data is being processed in violation of the regulations governing the protection of personal data, you may file a complaint with the Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana, Slovenia (email: [email protected], phone: +386 (01) 230 97 30, website: www.ip-rs.si).