Privacy policy for the collection of images by surveillance cameras at ICHEC
Version of 25/03/2021
Person responsible for the processing: The economic department of the Haute Ecole ICHEC - ECAM - ISFSC asbl, hereinafter referred to as "ICHEC", whose registered office is Boulevard Brand Whitlock 6, 1150 Brussels, and whose Data Protection Officer (DPO) is Jacques Folon (dpo@ichec.be).
ICHEC is committed to respecting the privacy of individuals encountered in the course of its activities.
This Privacy Policy (hereinafter the Policy) describes how we manage the Personal Data we collect through the use of surveillance cameras. We process your personal data in accordance with all applicable data protection regulations.
By entering the ICHEC premises, you acknowledge and agree to the terms of the Policy and to the processing and transfer of Personal Data that will be carried out in accordance with the Policy.
The Personal Data we collect are:
Images captured by video surveillance cameras. (The cameras only record images; sound is not recorded)
We use this Personal Information to:
- Protect people and property,
- Record offences and identify their perpetrators.
The legal bases for the processing are as follows:
- For staff members:
Processing is necessary for the performance of a contract to which the data subject is a party or for the performance of pre-contractual measures taken at the request of the data subject.
- For any other person:
The consent of the data subject:
The Camera Law of 21/03/2007, stipulates in its article 8: "The fact of entering a place where a pictogram indicates the existence of surveillance by camera shall be deemed to be prior authorization".
If we were to process Personal Data for purposes other than those set out in this article, we will provide you with information on this new purpose and any other necessary information before starting the new processing.
We do not use decision-making techniques based on automated processing that produce legal effects concerning the data subject or significantly affect him/her.
ICHEC may make Personal Data accessible to the following persons and entities:
- A representative of the law enforcement authorities, upon their order,
- The insurance company, concerned with the coverage of the risk, only as evidence of a claim,
- The judiciary in connection with a crime,
- Government authorities and third parties involved in legal proceedings or under a legal obligation,
- External third party service providers such as insurance companies, surveyors, computer systems service providers, support, hosting, printing service providers and other similar third party vendors and sub-contracted service providers who assist us in carrying out our business,
- Other third parties with whom we may share Personal Data as part of an actual or proposed reorganization, merger, sale, joint venture, assignment, portfolio transfer or other transaction relating to all or part of our business.
ICHEC does not transfer data outside the EU.
ICHEC takes appropriate technical and organizational measures that comply with applicable privacy and data protection laws. If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of any Personal Data you may have with us may have been compromised), please notify us immediately.
When ICHEC provides Personal Data to a service provider, the service provider will be carefully screened and must use appropriate measures to ensure the confidentiality and security of the Personal Data.
ICHEC takes reasonable steps to ensure that the Personal Data processed is reliable for its intended use, and as accurate and complete as necessary to carry out the purposes described in this Policy.
Duration of retention of Data Subjects' data:
Unless ordered by law enforcement agencies and unless the images can contribute to the detection and elucidation of an offence, the images captured will be kept for a maximum period of one month. The destruction of images older than one month will be carried out automatically by the video surveillance system.
You have the right to access, rectify, object to the use of, or request the deletion, limitation or portability of your Personal Data on certain bases. Please contact us at RGPD@ichec.be with a copy of the front of your ID card as proof of your identity, with any requests or if you have any questions or concerns about the way we handle your Personal Data. Please note that certain Personal Data may be exempt from the rights of access, rectification, erasure, restriction, objection, or portability under the GDPR or Belgian Privacy Laws.
We review the rules contained in this Policy regularly and reserve the right to make changes at any time to take account of changes in our business and legal requirements.
If you are not satisfied with the way we process your Personal Data and you feel that contacting us will not resolve the problem, the applicable Privacy Laws provide you with the right to complain to the competent supervisory authority: https://www.dataprotectionauthority.be/citizen.