Privacy policy of video surveillance in the store

This notification is part of the Privacy Policy of the controller Koleks d.o.o., and in connection with data processing through video surveillance in the controller's stores. The privacy policy is available at www.shoes.hr.

Identity and contact information of the data controller
Koleks d.o.o., Nodilova 7, Zagreb, koleks@koleks.hr

Purpose and basis for processing
Video surveillance in the controller's store refers to the collection and further processing of personal data that includes the creation of a recording that forms or is intended to form part of a storage system.
The processing of personal data through video surveillance is carried out only and exclusively for the purpose that is necessary and justified for the protection of persons and property in the store of the processor.
Video surveillance covers only the premises and parts of the premises of the processing manager's store, the surveillance of which is necessary to achieve the stated purpose.

Recipients or categories of recipients of personal data, if any
The data collected on the basis of video surveillance (recordings) are available only to the controller and (specify the company that manages the video surveillance system for you) which manages the video surveillance system on behalf of the controller (processor), and is not forwarded to other persons. The processing manager ensures that only the responsible persons of the processing manager, i.e. the processor and/or the person authorized by them, have the right to view the recordings collected by video surveillance.

Storage period
Recordings are kept for a maximum of 6 months, unless another law prescribes a longer storage period or if they are evidence in court, administrative, arbitration or other equivalent proceedings.

Rights of respondents
The respondent has the right to receive from the data controller a confirmation as to whether personal data relating to him or her are being processed. If such personal data is processed, he has the right to access personal data (Right of access), but provided that there are no restrictions from Art. 15. paragraph 4., art. 11. paragraph 2 and art. 12 of the GDPR. Information on the purpose of processing, categories of personal data to recipients, and storage period are already contained in this notice.
The respondent has the right to delete personal data relating to him if the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; or the subject objects to the processing.
The data subject has the right to file an objection in relation to his or her particular situation, in which case the data controller may no longer process personal data, unless the data controller proves that there are compelling legitimate reasons for the processing that go beyond the interests, rights and freedoms of the data subject or for the purpose of establishing, achieving or defense of legal claims.
Respondents can exercise their rights through the contact specified in this notification, and they can also contact the supervisory body (Agency for the Protection of Personal Data).