PRIVACY NOTICE CCTV
Halcyon Health Network Inc. (“Company”, “we”, “us”, or “our”), are the data controllers of personal information collected about you. This means that we are responsible for deciding how we hold and use personal information about you and that we are required to notify you of the information contained in this Notice. It is important that you read this Notice so that you are aware of how and why we are using your personal information and how we will treat it.
The Company is aware that images of recognizable individuals, such as staff and site visitors, captured by the CCTV system constitute ‘personal data’, use of which is governed by relevant data protection laws and issuances. The Company will ensure that its use of the CCTV system and the personal data that it captures complies with the law.
For the security purposes of Halcyon Health Network Inc., this building and its surrounding premises are monitored by Closed Circuit Television (CCTV) cameras that capture and record footage that determines your identity, actions, and whereabouts. The purposes include:
- To increase the personal safety of our staff and visitors to our sites;
- To assist in identifying, apprehending, and prosecuting any offenders on Company sites; and
- To protect the Company’s buildings and assets and those of its staff from intrusion, theft, vandalism, damage, or disruption.
The Company may also need to use this personal data in order to establish, exercise or defend against legal claims. Your footage may be retained for a minimum of 7 to 20 days and processed in other means if it is involved in or of use to a security matter. After the number of allotted days, the stored data will be automatically and securely overwritten.
By entering these premises, you consent to the capture, recording, and processing of all information directly and indirectly obtained by CCTV cameras. CCTV cameras are located at strategic points in our building. Signs are displayed prominently around the sites to inform staff and visitors that CCTV cameras are in operation. Said cameras are in operation 24 hours a day, 7 days a week and they will be monitored by the Company.
In addition, the CCTV system is regularly maintained in accordance with the manufacturer’s instructions.
We have put in place procedures to deal with any suspected personal data breach and will notify any affected individuals and/or the ICO where appropriate.
As a Data Subject, you may exercise your rights to your personal data, in accordance with the Data Privacy Act of 2012. For any concerns regarding your personal information, you may email dpo@halcyonmarine.com.ph
Access to recorded CCTV footage is restricted to a limited number of the Company’s staff as authorized by the Management. All requests for disclosure of CCTV footage must be submitted via these authorized individuals.
CCTV footage may only be accessed or disclosed to the extent necessary in order to deal with an incident which falls within the transparent, legitimate, and proportional purpose/s identified above, or in order to respond to a request made by an individual under the the pertinent and relevant laws. Otherwise, CCTV footage will not be accessed or used for any other purpose.
Furthermore, the requested CCTV footage will be viewed in a secure area and any access to, and any disclosures of recorded footage will be recorded in the CCTV log. This process will be overseen by the authorized personnel.
External disclosure of CCTV footage is not permitted other than to law enforcement agencies, or in order to comply with a court order. Lastly, CCTV footage will not be uploaded and distributed to the internet.
Your personal data shall be retained only for as long as necessary to fulfill the declared, specified, and legitimate purposes for which it was collected, or until the processing relevant to such purposes has been terminated. Specifically, data shall be kept with a reasonable period from the date of your last transaction or the termination of your account, unless:
Retention is necessary for the establishment, exercise, or defense of legal claims;
Retention is required for legitimate business purposes consistent with industry standards or as approved by the National Privacy Commission; or
You exercise your right to suspend, withdraw, or order the blocking, removal, or destruction of your personal data from our filing system, subject to legal and contractual limitations.