Camera Recordings from Properties of the Prague Public Transit Company (DPP)

Legal basis for the processing of your personal data:

The providing and processing of your personal data is necessary to fulfil the legitimate interests of the Prague Public Transit Company (DPP)

The legal basis for the processing in this case is:

  • keyword (title): legitimate interest.

Personal Data Processed

A visual record (recording) of the physical appearance (face and body) of passengers and other persons transiting designated areas of the below-ground and surface properties of the Prague Public Transit Company (DPP).

Your personal data is being processed in order to do the following:

  • acquisition and use of such records for the protection of property and other rights of the Prague Public Transit Company (DPP),
  • acquisition and use of such records for the protection of property and health of passengers and employees of the Prague Public Transit Company (DPP),
  • acquisition and use of such records for the prevention of vandalism and, at the same time, for the prevention of security risks related to the public transportation of persons in the transport systems of the Prague Public Transit Company (DPP),
  • acquisition and use of such records to ensure the proper functioning of the transport system (e.g. in the case of an emergency).

The processed personal data shall never be used to interfere with the personal privacy of passengers or the employees of the Prague Public Transit Company (DPP) for reasons other than those set out above. The Prague Public Transit Company (DPP) commits to making sure that any processing of these records for purposes other than those noted above will not take place and recognizes and acknowledges that any such actions would be in direct violation of the provisions of Article 5, Section 1(b) of the General Data Protection Regulation (GDPR) and the provisions of Section 316 of Act No. 262/2006 Coll., the Labor Code.

Recipients or categories of recipients of Personal Data

Personal data may be passed on to third parties (recipients) as required and only for the purposes referenced above. In particular, this will apply to the Railway Inspectorate, bodies active in criminal proceedings and state administrative bodies.

For how long will the company be storing my personal data and what is the criteria being used to determine this period?

Your personal data will be processed for the time necessary to fulfill the purpose of the processing. The Prague Public Transit Company (DPP) will delete personal data as soon as the purpose for which the personal data was processed ceases to exist.

We process your personal data for the period of time, which is determined to be necessary on the basis of the following criteria:

  • Legal claims of the Prague Public Transit Company (DPP) and third parties: We retain your personal data relevant to the processing of any claim by the Prague Public Transit Company (DPP) or a third party for as long as any claim can be prosecuted by the company and / or by the affected individual or for as long as required under the law. 
  • If your personal data (or camera recording) is needed as evidence in criminal proceedings, it does not fall under the provisions of the General Regulation on the Protection of Personal Data” (GDPR), but is governed by Directive No. 2016/680 of the European Parliament and of the Council and the above-referenced Act.
  • Litigation and other proceedings: Should the processing of your personal data be relevant to any proceedings in which Prague Public Transit Company (DPP) is a party (or intervener), the company will retain your personal data for the entire duration of these proceedings and for the period of any possible subsequent and ancillary proceedings.

Camera recordings for which there is no other reason to save them except to protect the rights of parties involved in some type of legal claim, are only retained for a period of 1 week. After this time, they are automatically deleted.

Processing Method

Personal data is processed electronically. Personal data is not made available to anyone, except for the recipients listed above and only on the basis of a legal obligation.