Information Notice Concerning Video Surveillance

Last updated 05December 2023

Language: BG / EN

We are committed to protecting the privacy of your personal information. In this document, described by your rights, contact the protection of personal data that we process through surveillance.

If you have any questions or comments about how you manage and process your personal data or want to manage any of your rights listed below, you can contact us via the following email address: DE-DLITSOODDataPrivacy@kpmg.de.

Who is your data controller?

KPMG IT Service OOD, UIC 203572873 (hereinafter referred to as KPMG ITS, the Company or “us”)

Who is the supervisory body?

The supervisory body regarding the processing of personal data by KPMG ITS is the Commission for Personal Data Protection of the Republic of Bulgaria, e-mail address: kzld@cpdp.bg, website: https://www.cpdp.bg/.

Whose personal data do we collect and process?

Through video surveillance, we collect data on anyone who, for any reason, is in the Company’s offices, including our employees, customers, partners, guests, and other visitors.

What personal data do we collect?

The personal data that we collect and process is an image of the persons who access/enter / try to enter the premises of KPMG ITS.

Why do we carry out video surveillance?

The objectives of the video surveillance are:

• providing control of the access to the premises of the Company
• ensuring the security and protection of the premises of the Company and its property, as well as the information processed and stored by it;
• ensuring the security and safety of the Company’s employees and other persons who are on the territory of the Company.

Legal basis for processing?

The legal basis for processing your personal data through video surveillance is the legitimate interest of KPMG ITS to guarantee its fundamental rights by ensuring security and safety of its premises and persons who work there or for any other reason are on the territory of the Company.

How long do we store your personal data?

The data shall be destroyed no later than 60 days from their creation, except in the cases when they contain data for a prepared or committed crime or other violation of the public order. In these cases, the records are handed over to the law enforcement authorities.

Who will we share your personal information with?

We share and disclose your personal information collected through video surveillance only to KPMG ITS employees who need access to your personal data in order to perform their functions fully, e.g., those responsible for physical and information security and the legal representatives of KPMG ITS. All named persons are obliged to keep your data secret concerning their further disclosure.

KPMG ITS may entrust the processing of your personal information to an external organization providing services constituting private security activities. In this case, the security company, which processes personal data on behalf of KPMG ITS, will also have access to your data. In this regard, KPMG ITS guarantees the security and lawful processing of your data.

Recordings from the security cameras can be provided to the law enforcement agencies (police, prosecutor’s office), in accordance with the requirements of the Bulgarian legislation.

What are your rights in connection with the processing of personal data?

The General Data Protection Regulation, known as the GDPR, provides You with a set of rights that you can manage in relation to the processing of your personal data.

If you wish to exercise any of your rights, you can do so through contacting us by email, sending to the following email address: DE-DLITSOODDataPrivacy@kpmg.com, by mail / courier to the Company’s address or in person by submitting a prescription request. You can use this template for your convenience.

Your rights

Right to information: You have the right to receive relevant information about the processing of your data, which is the purpose of this Information Communication. However, you can contact us at any time for further information or clarification on whether and how KPMG ITS processes your personal data.

Right of access: You have the right to receive free information about the nature, volume, and manner in which we use your personal data, as well as to receive a copy of this information.

Right of erasure: You may request the deletion of your personal data and we are obliged to delete them without undue delay unless the processing is carried out in accordance with applicable law or other reasons require the retention of data.

Right to restrict processing: if you consider processing to be illegal, you have the right to ask us to restrict their active processing until we resolve the issue of the lawfulness of the processing we carry out.

Right to object: You can object to the processing carried out by KPMG ITS at any time on grounds related to the specific processing situation.

Right of appeal to the supervisory authority: If you believe that your rights in relation to the protection of personal data and their security have been violated, you have the right to contact the Bulgarian Commission for Personal Data Protection.