CCTV Privacy Notice
This privacy notice explains what personal information is collected, what it is used for and who it is provided to. The notice also describes why we require your data, and the legal basis on which we do this. This privacy notice relates to our CCTV system.
It provides additional information that specifically relates to this particular service, and should be read together with our Corporate privacy notice https://www.allerdale.gov.uk/en/privacy-policy/ which provides more detail.
Allerdale Borough Council is registered as a Data Controller with the Information Commissioner's Office (ICO). Our registration number is Z5680850.
What personal information does this service use?
The CCTV system (located in council offices and the multi-storey car park in Workington) captures images of people and vehicles in and around where a camera is located. All of our cameras are fixed and there are signs clearly displayed at each location. The council does not operate any covert CCTV.
What is your information used for?
We use your personal data for the following reasons:
- deter crime, improve public safety and enhance the general public perception of safety
- assist in the prevention and reduction of anti-social behaviour
- assist in the tracking and apprehension of persons who are suspected of having committed a criminal offence
- to assist the Council in its enforcement and regulatory functions
- deterring violent or aggressive behaviour towards council staff
- car park management
- protecting council property and assets
- assisting in grievances, formal complaints and investigations.
Legal basis for using your information
Under the General Data Protection Regulations (GDPR) the legal basis for processing is:
- Article 6(1)(e) - processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority
- Article 9(2)(e) - processing relates to personal data which is manifestly made public by the data subject.
Where has your personal information come from?
The images are captured because you are present in the area which is covered by the CCTV system.
Who will we share your personal information with?
Your personal data may be shared securely with the following, where it is both necessary and appropriate to do so:
- representatives of the person or company whose personal data we are processing
- other Allerdale Borough Council departments
- insurance companies
- ombudsman and regulatory authorities
- courts and tribunals
- police forces
- regulatory bodies
- prosecuting authorities.
Your information will not be disclosed to any other organisations, except where we are required and allowed to by law.
How long will we keep your information?
Images captured by CCTV will not be kept for longer than 28 days. However, on occasions there may be a need to keep images for longer, for example where a crime is being investigated. Further information is available in our Corporate Retention Schedule.
Transferring your data outside the UK or European Union
We will not transfer the personal data you have provided outside of the UK or European Union, unless this is permitted in accordance with the Data Protection Act 2018.
Automated decision making
We will not use the personal data you provide to make any automated decisions.
Your rights as a data subject
The law gives you specific rights over your information. These rights are:
- to be informed of our use of information about you
- of access to information about you
- rectify information about you that is inaccurate
- to have your information erased (the ‘right to be forgotten’)
- to restrict how we use information about you
- to move your information to a new service provider
- to object to how we use information about you
- not to have decisions made about you on the basis of automated decision making
- to object to direct marketing
- to complain about anything the council does with your information (please see the ‘Complaints’ section below).
Some of the rights listed above apply only in certain situations, and some have a limited effect. Your rights are explained further in the in the Individuals’ Rights section of our website.
Changes to this privacy notice
This notice is kept under regular review to make sure it is up to date and accurate.
Data Protection Officer (DPO)
The Council is required by law to have a DPO. The DPO has a number of duties, including:
- monitoring the Council’s compliance with data protection law
- providing advice and guidance on data protection
- acting as the point of contact for data subjects
- co-operating and consulting with the Information Commissioner’s Office (see ‘Complaints’ below).
Our DPO makes sure we respect your rights and follow the law. If you have any concerns or questions about how we look after your personal information, please email the Data Protection Officer at firstname.lastname@example.org
If we have been unable to resolve your complaint, you can also refer the matter to the Information Commissioner’s Office (ICO). The ICO is the UK's independent body set up to uphold information rights, and they can investigate and adjudicate on any data protection related concerns you raise with them. They can be contacted via the methods below:
Telephone: 0303 123 1113
Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF