Personal Data Protection

VIDEO-SURVEILLANCE DATA PROTECTION POLICY

Doosan Škoda Power a.s. (hereinafter also referred to as "Company Doosan" or "we", "us", etc.) hereby as the controller of personal data in accordance with the principle of transparency arising from Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as "GDPR"), informs you as a data subject about how Company Doosan processes your personal data obtained by video-surveillance systems (hereinafter also referred to as the "Data").
DATA CONTROLLER
The Company Doosan is a Data controller. Our registered office is located at Tylova 1/57, Jižní Předměstí, 301 00 Pilsen, the Czech Republic, Company ID No.: 49193864. We are registered in the Commercial Register maintained by the Regional Court in Pilsen under file No. B 2251. You may contact us by email at [email protected].
VIDEO-SURVEILLANCE SYSTEMS
The Company Doosan uses the following video-surveillance systems on the premises at its registered office:
• a video-surveillance system monitoring the perimeter and entrance areas of individual buildings, goods reception and dispatch areas and related surrounding handling, production and storage areas, outdoor parking areas, outdoor storage areas and access roads (hereinafter referred to as the "Security video-surveillance system") and
• video-surveillance systems monitoring the cutting process on machine tools in production facilities (hereinafter referred to as the "Production video-surveillance systems").
The data subjects are informed about the use of the video-surveillance systems by us via information signs located in the monitored areas. We do not carry out automated decision-making nor profiling based on the Data.
PURPOSES OF PROCESSING
We process Data obtained by the Security video-surveillance system for the following purposes:
• to increase protection of life and health of persons (assault, robbery, other physical harm, including prevention and proper investigation of accidents at work) and
• to increase protection of our property and information assets, to increase protection of property of our employees and visitors (theft, burglary, vandalism, traffic accidents), including obtaining evidence for law enforcement authorities and for the enforcement of insurance and other civil claims, with the possibility of using the Data as an additional source for identity verification in the event of security incidents.
The Production video-surveillance systems are not intended for recording video-images of individuals, monitoring or identifying individuals; they are installed solely for the purposes of improving the production processes, identifying manufacturing errors, identifying the causes of damage and accidents, and ensuring the effective repair of machines – remote analysis and servicing. The recording of images of individuals via the Production video-surveillance systems may only occur in exceptional cases, namely when the operator enters the camera's field of view during the cutting process of the machine.
LEGAL BASIS FOR PROCESSING
The processing of Data is necessary for the protection of our legitimate interests or legitimate interests of third parties (Article 6.1 (f) of the GDPR).
SCOPE OF DATA PROCESSED
We process Data to the extent of the video-image from the monitored areas and its recording (in the form of camera recordings, photographs or video files). No audio recording is made.
RETENTION PERIOD
The Data is stored for seven days and then automatically deleted unless it is to be used as evidence in a specific case. As evidence, the data is only stored for as long as is strictly necessary.
DATA RECIPIENTS
We will transfer the Data to public authorities (the Czech Police, public prosecutors, courts, etc.), either at their request or without their request if we believe that a criminal offence or other offence has been committed or damage has been caused and that the Data may serve as evidence to prove this. We may also transfer the Data to the relevant insurance company as part of an insurance claim investigation.
TRANSFER OF DATA ABROAD
We do not transfer Data to international organisations or third countries. A third country is understood to mean a country outside the European Union or the European Economic Area.
YOUR DATA SUBJECT RIGHTS
• Right of access to Data ( according to Article 15 of the GDPR)
Upon request, the data subject has the right to obtain from the Company Doosan information as to whether or not their Data is being processed.
• Right to rectification of Data (pursuant to Article 16 of the GDPR)
• Right to erasure of data (pursuant to Article 17 of the GDPR)
• Right to restriction of processing (pursuant to Article 18 of the GDPR)
• Right to data portability (pursuant to Article 20 of the GDPR)
• Right to object (pursuant to Article 21 of the GDPR)
The data subject has the right to object to the above-mentioned purposes of Data processing.
If you wish to make a request to exercise one or more of your rights set out above, you may send us an email to [email protected]. An email requesting the exercise of a particular right will not be construed as consent to the processing of your Data beyond what is required to process your request. This request should clearly state which right you wish to exercise and, if requested, the reasons for exercising it. The request should also be dated and signed. If reasonable doubt arises as to the identity of the applicant, we may request the provision of additional information necessary to confirm the identity of the data subject. If you use the contact form, the Company Doosan may ask you to confirm the request and provide proof of identity.

The Company Doosan will inform you immediately upon receipt of your request. The Company Doosan will process your request as soon as possible, but no later than thirty (30) days after receipt. This time limit may be extended by an additional two months if necessary and taking into account the complexity and number of requests.

If you have any complaint regarding the processing of your personal data by the Company Doosan, you can always contact the Company Doosan via the above email address. You are also entitled to lodge a complaint with the competent data protection authority or take legal action in court if you believe that your rights have been violated as a result of the processing of your Data.