Information on the processing of personal data in relation to personal data of persons using P+R car parks, obtained as part of video monitoring with the use of cameras installed in the areas of these P+R car parks

Bearing in mind the provisions of Article 13 (1) and (2) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as “GDPR”, we set out below the information and rules for processing your personal data.

  1. The Data Controller, i.e. the entity which decides how your personal data will be used, is the Public Transport Authority in Kraków (hereinafter referred to as: ZTP) with its registered office at 1 Wielopole St., 31-072 Kraków, phone number: 12 616 86 00, e-mail address: [email protected], Electronic Mail Box address: /ZTPK/SkrytkaESP.
  2. In all matters concerning the processing of personal data by the ZTP, you can contact the Data Protection Officer appointed for this purpose, e-mail address: [email protected], by letter to the address of the ZTP headquarters indicated above or in person at the ZTP headquarters.
  3. Personal data may be processed in order to ensure the necessary security conditions, consider complaints, conduct correspondence on the functioning of P+R car parks, protect the Data Controller’s property, public property and property of people using P+R car parks, as well as optimize the functioning of P+R car parks.
  4. In terms of video monitoring, data are recorded on storage media with the use of cameras installed in the P+R car parks. The Data Controller has defined and implemented the conditions and technical requirements at the stage of their recording, archiving recordings on storage media, as well as sharing.
  5. Your data will be processed for purposes related to:
    • ensuring the required safety conditions for persons, including the Data Controllers own employees;
    • considering complaints, grievances or conducting correspondence regarding the functioning of communication, considering applications, providing explanations;
    • protection of the Data Controllers property and public property;
    • pursuing claims;
    • protection of vehicles and people using P+R car parks;
    • obtaining information on the technical condition of infrastructure;
    • optimization of the functioning of P+R car parks.
  6. ZTP processes the following data:
    • identification data (e.g. name/names, surname, PESEL number);
    • address and contact details (e.g. correspondence address,  Electronic Mail Box (ESP) address, phone number, e-mail address – if given);
    • health condition (if required in connection with the case);
    • vehicle registration number;
    • image;
    • other personal data held by the Data Controller provided by data subjects.
  7. You have the right to access your data and the right to rectify or supplement it, request its removal or limit its processing, in cases provided for by law.
  8. In order to exercise the rights mentioned above, you should address your request to the following e-mail address: [email protected], in writing to the address of the ZTP registered office, via the Electronic Mail Box: /ZTPK/SkrytkaESP or submit it in person at the ZTP headquarters. Before we can exercise your rights, we will need to confirm your identity in a manner individually tailored to the request.
  9. If you consider that the processing of your personal data by ZTP violates the provisions of the GDPR, you have the right to lodge a complaint with the President of the Office for Personal Data Protection, 1A Moniuszki St., 00-014 Warsaw.
  10. The recipients of your personal data are or may be entities, in particular:
    • servicing ZTP equipment through which personal data are processed;
    • providing and maintaining software used for the processing of data of which ZTP is the Controller;
    • providing advisory and control services commissioned by ZTP (e.g. auditing companies, certifying companies);
    • courier companies through which correspondence may be carried out;
    • those processing data for the purpose of legal representation, e.g. law firms.
  11. Your data may also be made available to public authorities or entities entitled to obtain data on the basis of applicable law, e.g. courts, law enforcement agencies or state institutions, when they make a request, based on an appropriate legal basis.
  12. Your personal data will not be transferred to countries outside the European Economic Area and will not be transferred to international organisations.
  13. ZTP will not use automated decision-making, including profiling, against you.
  14. Your personal data recorded with the help of video monitoring are stored for 14 to 90 days. A purpose-driven entitlement allows data to be collected by:
    • 90 days, while technical limitations for some of the recording devices limit this time to 14 days, which implies an administrative priority requirement during the operation of these devices, or
    • until the completion of activities related to recorded events of which the passenger or third party is a participant.
  15. If the recording constitutes evidence in court or administrative proceedings, then the data will be stored until the final conclusion of these proceedings.
  16. In the case of other processing purposes, your data will be stored for archival purposes (this is an obligation resulting from the Act on the National Archival Resource and Archives) in accordance with the Unified Material List of Administrator’s Files, specifying the storage periods of individual categories of files (e.g. accounting documents, complaints).