Privacy notice – CCTV on Council own premises
The purpose of this privacy notice, is to describe the personal data that the CCTV systems within the Council’s own premises may collect, why it is needed, the legal basis and how it may be used by the Council. It sets out how individuals may interact with the Council in relation to the use of their personal data and outlines the rights of individuals in relation to the processing of their personal data.
The council also has a privacy statement which is a general document about how we approach data protection as an organisation and is available on the council’s website https://www.clarecoco.ie/info/privacy-statement/ or on request from this council. The Council also has a CCTV and Other Surveillance Technologies Policy published on www.clarecoco.ie.
The identity and the contact details of the controller:
Contact number: (065) 6821616
The contact details of the data protection officer:
Contact number: (065) 6846405
Closed Circuit Television (CCTV) is used by Clare County Council for a number of purposes. This use may involve the recording of personal data of individuals. The Council is obliged to protect such personal data in accordance with the Data Protection Act 2018 and the provisions contained in the General Data Protection Regulation (GDPR). The Council’s CCTV systems within our own premises process data in order to:
- Enable safety and security on Council premises.
- Safeguard persons and property located on Clare County Council premises.
- Enable safe places of work for employees and all visitors to Council premises.
The legal basis for Clare County Council’s use of CCTV systems to process personal data consists of any one or more of the following:
- Article 6(1) (c) GDPR. The processing is necessary for compliance with a legal obligation to which Clare County Council is subject; e.g. Health, Safety & Welfare at Work Acts.
- Article 6(1) (e) GDPR The processing is necessary for the performance of a task carried out in the public interest or in the exercise of an official authority vested in Clare County Council; e.g. Health, Safety & Welfare at Work Acts and the Occupier’s Liability Act 2005
- Article 6(1) (f) GDPR. The processing is necessary for the purposes of the legitimate interests pursued by Clare County Council e.g. in protecting its property, assets and goods and maintaining the safety of persons using its buildings and environs.
Personal data processed by Clare County Council’s CCTV systems within our own premises consists of the following:
- Images of individuals and images of activities carried out by individuals;
- Images of number plates of vehicles.
Very limited personnel within the Council are authorised to access CCTV footage for the system within their own service area. Accessing recorded footage must be authorised formally on each occasion it occurs. The Council may, to fulfil statutory or regulatory obligations, from time to time, have to share personal data recorded by CCTV systems on the Council’s premises with other organisations or entities in limited circumstances that are permitted by law. In this activity, the data may be shared with the following recipients:
- An Garda Síochána, IPB Insurances (Clare County Council's insurance provider) and legal representatives that may be engaged by the Council, the Health and Safety Authority.
- In addition, in some instances, the Council uses the services of a third party (data processor), to install, maintain, repair, service or monitor the CCTV system.
- All requests for access to CCTV footage shall be processed in accordance with the Data Protection Act 2018 and the GDPR and the Council’s CCTV and data access request policies and procedures, details of which are published on the Council’s website www.clarecoco.ie.
Data recorded on CCTV systems shall be kept for no longer than is considered necessary. It will not be retained by Clare County Council beyond a maximum of 28 days, except in circumstances where the data is required for evidential purposes and/or legal proceedings, in which case it will be retained longer than 28 days.
- Right of access by the data subject
- Right to rectification
- Right to erasure (‘right to be forgotten’)
- Right to restriction of processing
- Right to data portability
- Right to object and automated individual decision-making
If you are not satisfied with a decision on your request to exercise your data rights or for another reason relating to the processing of your personal data, you have the right to make a complaint to the Data Protection Commission. The Data Protection Commission website http://www.dataprotection.ie/ has further details and the forms that are required to be completed if you wish to raise a concern or make a complaint.
Contact number: (01) 7650100 or 1800437737
Data Protection Commission,
Page last reviewed: 08/08/23Back to top