Regulations on the Use of CCTV Monitoring at Mazan Surgery Clinic in Katowice

§ 1

  1. These Regulations define the rules governing the operation of the CCTV monitoring system at Mazan Surgery Clinic in Katowice, including the locations of installed cameras on and around the company’s premises, the principles of recording and storing data, the methods of securing such data, as well as the conditions under which the collected data concerning events may be disclosed.
  2. The administrator of the CCTV monitoring system is Zbigniew Mazan, conducting business activity under the name Mazan Surgery Clinic.
  3. Recordings from the CCTV monitoring cameras constitute a set of personal data, the administrator of which is Zbigniew Mazan, conducting business activity under the name Mazan Surgery Clinic. The processing of this data set is subject to the provisions of the GDPR (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC — General Data Protection Regulation) and to the applicable national provisions on the protection of personal data.
  4. The area subject to CCTV monitoring is clearly marked by means of information boards and stickers.

§ 2

  1. The purpose of the CCTV monitoring system (pursuant to Article 6(1)(f) of the GDPR — the legitimate interest of the Data Controller, and Article 222 of the Polish Labour Code) is to:
    • ensure and enhance the safety of users of the company’s premises (with particular emphasis on employees and other persons present on the premises);
    • limit improper behaviour, acts of hooliganism, and other undesirable conduct posing a threat to the health and safety of users;
    • clarify conflict situations;
    • identify perpetrators of improper acts (damage to property, theft, etc.);
    • restrict access to the company’s premises by unauthorised and unwanted persons;
    • eliminate acts of vandalism;
    • exercise supervision and control by the data controller;
    • ensure the confidentiality of information of a sensitive nature.
  2. You have the right to request from the data controller access to your personal data, as well as the right to rectification, erasure, or restriction of processing.
  3. You have the right to lodge a complaint with the supervisory authority: the President of the Personal Data Protection Office (Poland).

§ 3

  1. CCTV monitoring operates on a 24-hour basis.
  2. Only video (visual image) from the monitoring cameras is recorded and stored on a physical medium. Audio (sound) is not recorded.

§ 4

The CCTV monitoring system consists of:

  • cameras installed inside and outside the building, recording colour images at a resolution enabling the identification of persons;
  • recording devices and software that record and store images on a physical medium and allow playback (so-called recorders);
  • software enabling live viewing of camera images and playback of recorded footage.

§ 5

The person responsible for the operation and proper functioning of the CCTV monitoring system is Zbigniew Mazan, conducting business activity under the name Mazan Surgery Clinic. Authorised persons have access to:

  • live camera feeds;
  • the recording device;
  • recorded CCTV footage.

§ 6

  1. The software used to record and store images is installed on a recorder that captures footage from the cameras and is located in a locked room. Access to this room is limited to authorised persons only. The recorder is additionally protected by a login and password.
  2. CCTV recordings may be made available with the consent of the data controller to:
    • employees of the data controller, within the scope of activities performed during internal proceedings aimed at clarifying circumstances such as improper behaviour, acts of hooliganism, conflict situations, or identifying perpetrators of improper acts (damage to property, theft, etc.) occurring on the company’s premises;
    • competent authorities (including the Police, Public Prosecutor’s Office, and Courts), insofar as required for the performance of their statutory duties.
  3. Recordings are made available on an electronic medium, such as a CD/DVD, and are transferred against written acknowledgment of receipt.
  4. The retention period for recordings is a maximum of three (3) months. After this period, the recordings are automatically deleted by being overwritten with new recordings.
  5. Persons who have access to images recorded by the CCTV monitoring system are aware of their responsibility for the protection of personal data and hold appropriate authorisation issued by the personal data controller.