CCTV Monitoring Information – GDPR

1. The controller of your personal data is BART Sp. z o.o., with its registered office at Sulnowo 53G, 86-100 Świecie, Poland.
2. The Controller has appointed a Data Protection Coordinator, who can be contacted via email at rodo@bart-packaging.pl, by phone at +48 (52) 380 09 50, or in writing to the Controller’s registered address.
3. Your personal data will be processed based on the legitimate interest of the Controller (Article 6(1)(f) of the GDPR), which includes ensuring the safety of employees, protecting property, controlling production, or maintaining the confidentiality of information, the disclosure of which could harm the Controller.
4. The video surveillance system covers the facilities and premises of Plant Z1 (Sulnowo 53G), Plant Z2 (ul. Falista), the office building, and the surrounding areas. The list of locations under surveillance includes:
   1. Office building staircase
   2. Parking area in front of the office building
   3. Reception
   4. Laboratory
   5. Die repair station
   6. Mechanics’ workshop
   7. Z1 production and warehouse halls
   8. Z1 maneuvering yard near loading docks
   9. Corridor
   10. Baler room
   11. Ink mixing room
   12. Warehouse
   13. Security/shipping area
   14. Maneuvering areas
   15. Truck (TIR) parking lot
   16. Production and warehouse hall [Z2-01]
   17. Production and warehouse hall [Z2-02]
   18. Production and warehouse hall [Z2-03]
   19. Production and warehouse hall [Z2-04]

The monitoring system also covers the sidewalks and parts of streets adjacent to the buildings of Plants Z1 and Z2. It does not cover sanitary facilities, locker rooms, canteens, or smoking areas.

5. Data from the video surveillance system may only be disclosed to authorized public authorities, in particular law enforcement agencies and courts. Personal data may also be shared with the security service provider and the company responsible for installation and maintenance of the video surveillance system.
6. Data will be stored for a period of 10 to 30 days from the date of recording. After this period, the data will be automatically overwritten. The exact retention period depends on the number of recorded incidents and the storage capacity of the recording device.
7. If the recordings constitute evidence in legal proceedings or the Controller becomes aware that they may serve as evidence (e.g. in court, pre-trial, administrative, or disciplinary proceedings), the retention period shall be extended until the final conclusion of such proceedings. After this period, the data will be destroyed, unless the recordings are preserved in accordance with separate legal regulations.
8. You have the right to request access to your personal data, request its deletion or restriction of processing. Access rights may be restricted in justified cases, such as the protection of personal data of other individuals appearing in the recordings or in connection with the pursuit of claims or the conduct of proceedings by authorized bodies.
9. You have the right to object, on grounds relating to your particular situation, to the processing of your personal data where it is based on the legitimate interests of the Controller (Article 6(1)(f) of the GDPR).
10. You have the right to lodge a complaint with the supervisory authority responsible for personal data protection if you believe that the processing of your personal data violates Regulation (EU) 2016/679 (GDPR). In Poland, the competent authority is the President of the Personal Data Protection Office (PUODO).
11. The provision of your personal data is voluntary, but necessary for entering and remaining on the premises covered by the video surveillance system.