Legal basis for the processing of your personal data:
The providing and processing of your personal data is necessary to fulfil the legitimate interests of the Prague Public Transit Company (DPP)
The legal basis for the processing in this case is:
Personal Data Processed
A visual record (recording) of the physical appearance (face and body) of passengers and other persons transiting designated areas of the below-ground and surface properties of the Prague Public Transit Company (DPP).
Your personal data is being processed in order to do the following:
The processed personal data shall never be used to interfere with the personal privacy of passengers or the employees of the Prague Public Transit Company (DPP) for reasons other than those set out above. The Prague Public Transit Company (DPP) commits to making sure that any processing of these records for purposes other than those noted above will not take place and recognizes and acknowledges that any such actions would be in direct violation of the provisions of Article 5, Section 1(b) of the General Data Protection Regulation (GDPR) and the provisions of Section 316 of Act No. 262/2006 Coll., the Labor Code.
Recipients or categories of recipients of Personal Data
Personal data may be passed on to third parties (recipients) as required and only for the purposes referenced above. In particular, this will apply to the Railway Inspectorate, bodies active in criminal proceedings and state administrative bodies.
For how long will the company be storing my personal data and what is the criteria being used to determine this period?
Your personal data will be processed for the time necessary to fulfill the purpose of the processing. The Prague Public Transit Company (DPP) will delete personal data as soon as the purpose for which the personal data was processed ceases to exist.
We process your personal data for the period of time, which is determined to be necessary on the basis of the following criteria:
Camera recordings for which there is no other reason to save them except to protect the rights of parties involved in some type of legal claim, are only retained for a period of 1 week. After this time, they are automatically deleted.
Personal data is processed electronically. Personal data is not made available to anyone, except for the recipients listed above and only on the basis of a legal obligation.