Video surveillance

Video surveillance at the AGH University of Krakow (hereinafter referred to as AGH University) has been introduced to ensure the safety of the members of the academic community and other persons, to protect university property, and to maintain the secrecy of information, the disclosure of which could expose the AGH University to damage. The AGH University video surveillance is a specific surveillance of its premises and the area around the university facilities in the form of technical means for recording images using cameras.

Version 0.11.2
Release date 3.10.2022

Fulfilling the obligation to provide information pursuant to Article 13(1) and (2) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) [Official Journal of the EU L.2016.119.1 of May 4, 2016], hereinafter referred to as: GDPR, we inform you that:

1. The Controller of your personal data is the AGH University (the Controller).
2. The contact details of the Data Protection Officer are as follows: e-mail: iodo(at)agh.edu.pl, phone: 12 617 53 25;
3. The monitoring system consists of cameras, the installations connected to them, and an image recording device that records this image in the form of an electronic film. The monitoring system neither records sound nor processes biometric data;
4. Your personal data will be processed by the Controller in order to guarantee the safety of the academic community and other persons, to protect university property, to guarantee the safety of information, the disclosure of which could expose the Controller to damage, and to secure the data in case of possible claims. The AGH University video surveillance is the Controller’s specific surveillance of the premises and the area around the university facilities in the form of technical means for recording images using cameras;
5. The legal basis for the processing of personal data in relation to video surveillance:
   a)Article 222 of the Labor Code Act of June 26, 1974 (i.e.: Journal of Laws of 2020, item 1320, as amended) – regarding the Controller’s employees;
   b) Article 50(1) of the Act of July 20, 2018. Law on Higher Education and Science (Journal of Laws Item 1668, as amended);
   c) Article 3(2) of the Act of August 22, 1997 on the Protection of Persons and Property (Journal of Laws 2021, item 1995, as amended);
6. Recipients of your personal data may be:
   a) Entities to which the Controller is obliged to provide data under applicable laws,
   b) Entities providing services to the Controller to the extent necessary for the purposes in connection with which your personal data are processed,
7. Your personal data may be transferred to state authorities, legal protection authorities (Police, Prosecutor's Office, Court), or local authorities in connection with legal proceedings;
8. Your personal data will not be transferred to third countries or international organizations;
9. Your personal data shall be processed only for the time necessary to achieve the purposes of personal data processing, i.e. for a period not longer than 3 months. If a recording becomes a piece of evidence in any legal proceedings or the Controller was informed that they may become a piece of evidence in a court proceeding, the period shall be extended until the legal conclusion of the proceedings, in each case, however, no longer than the applicable statute of limitations for civil and criminal claims. After that, the recordings obtained through video surveillance shall be destroyed;
10. You have the right to request from the Controller access to your data, as well as the right to rectify your data, the right to erase your data, the right to restrict the processing of your data, the right to object to the processing thereof in the cases and under the conditions specified in the GDPR;
11. You have the right to submit a complaint with a supervisory authority – the President of the Office for Personal Data Protection pursuant to Article 77 of the GDPR (...every data subject shall have the right to lodge a complaint with a supervisory authority, (…) if the data subject considers that the processing of personal data relating to him or her infringes this Regulation);
12. Your personal data shall not be subject to automated decision-making processes, including profiling;
13. Persons outside the academic community who do not want their image to be recorded by the video surveillance should not enter the premises belonging to the Controller.