1. Here at SIA "Tirdzniecības centrs "DOLE"", a company registered in the Republic of Latvia with registration number 40003434873, we believe that CCTV un citām uzraudzības sistēmām ir likumīga loma, lai palīdzētu saglabāt drošu un neapdraudētu vidi visiem mūsu darbiniekiem un apmeklētājiem. Tomēr mēs atzīstam, ka tas var radīt bažas par ietekmi uz indivīdiem un viņu privātumu.  Šī politika ir paredzēta risināt šādas bažas.  Novērošanas sistēmu reģistrētie attēli ir personas dati, kas jāapstrādā saskaņā ar datu aizsardzības likumiem.  Mēs apņemamies izpildīt savas likumiskās saistības un nodrošināt, ka darbinieku likumiskās tiesības, kas saistītas ar viņu personas datiem, tiek atzītas un ievērotas.
2. This policy is intended to assist staff in complying with their own legal obligations when working with personal data. In certain circumstances, misuse of information generated by CCTV or other surveillance systems could constitute a criminal offence.
3. The Data Controller – the entity responsible for determining the means and purposes for processing - is SIA "Tirdzniecības centrs "DOLE"", a company registered in the Republic of Latvia with registration number 40003434873.
4. Any queries regarding this policy or the processing of personal data as described herein should be addressed to the controller’s Data Protection Representative, who may be reached at [email protected].

1. For the purposes of this policy, the following terms have the following meanings:

CCTV: fiksētas un kupolveida kameras, kas veidotas, lai iegūtu un ierakstītu indivīdu un īpašuma attēlus.

Dati: informācija, kas tiek glabāta elektroniski vai atsevišķās papīra formāta iesniegšanas sistēmās. Kas attiecas uz CCTV, tas parasti nozīmē video attēlus. Tas var ietvert arī statiskos attēlus, piemēram, drukātus ekrānuzņēmumus.

Datu subjekti: visas personas, par kurām mūsu CCTV (vai citas uzraudzības sistēmas) darbības rezultātā mums ir iegūta personiska informācija.

Personas dati: dati, kas saistīti ar cilvēku, ko var identificēt no šiem datiem (vai citi mūsu rīcībā esoši dati). Tas ietver identificējamo personu video attēlus.

Datu pārvaldnieki: cilvēki vai organizācijas, kas nosaka veidu, kādā tiek apstrādāti personas dati. Viņi ir atbildīgi par ierastās kārtības un politikas izveidošanu, lai nodrošinātu likumu ievērošanu. Mēs esam datu pārzinis visiem mūsu uzņēmumā izmantotajiem personas datiem, kas tiek izmantoti komerciāliem nolūkiem.

Datu lietotāji: mūsu darbinieki, kuru darbs ietver personas datu apstrādi. Tas ietver tos darbiniekus, kuru pienākums ir strādāt ar CCTV un ar citām uzraudzības sistēmās, lai fiksētu, uzraudzītu, glabātu, izgūtu un dzēstu attēlus. Datu lietotājiem jāaizsargā dati, ko tie apstrādā saskaņā ar šo politiku un mūsu Datu aizsardzības politiku.

Datu apstrādātājs: jebkura persona vai organizācija, kas nav datu lietotājs (vai cits datu pārvaldnieka darbinieks), kas apstrādā datus mūsu vārdā un saskaņā ar mūsu norādījumiem (piemēram piegādātājs, kurš apstrādā datus mūsu vārdā).

Apstrāde: jebkura darbība, kas ietver datu izmantošanu. Apstrāde ietver datu iegūšanu, reģistrēšanu vai turēšanu, vai jebkādas darbības attiecībā uz datiem, tajā skaitā datu organizēšanu, labošanu, izgūšanu, lietošanu, izpaušanu, vai iznīcināšanu. Apstrāde ietver arī personas datu nosūtīšanu trešajām personām.

Uzraudzības sistēmas: jebkuras ierīces vai sistēmas, kas paredzētas, lai uzraudzītu vai ierakstītu personu attēlus vai informāciju, kas saistīta ar personām. Termins ietver CCTV sistēmas, kā arī jebkuru tehnoloģiju, ko nākotnē var ieviest, piemēram, automātiska numura zīmes atpazīstamība (ANZA), korpusa nolietotās kameras, nesankcionētas aeorālās sistēmas un jebkuras citas sistēmas, kas atklāj identificējamo personu informāciju vai informāciju, kas attiecas uz identificējamām personām.

1. SIA “Tirdzniecības centrā “DOLE”” (Pārzinis) šobrīd tiek izmantotas CCTV kameras, lai apskatītu un reģistrētu personas mūsu telpās un ap tām. Šī politika apraksta, kāpēc mēs izmantojam CCTV, kā mēs izmantosim CCTV un kā mēs apstrādāsim CCTV kameru reģistrētos datus, lai nodrošinātu, ka mēs rīkojamies atbilstoši datu aizsardzības tiesību aktiem un labai praksei. Šī politika arī skaidro, kā sagatavot cilvēka piekļuves pieprasījumu attiecībā uz CCTV izveidotajiem personas datiem.
2. Mēs atzīstam, ka mūsu pārvaldībā esošā informācija par cilvēkiem ir pakļauta datu aizsardzības tiesību aktiem. Personu attēli, kas ir ierakstīti, izmantojot CCTV kameras darbavietā, ir personas dati un tādēļ uz tiem attiecas tiesību akti. Mēs apņemamies izpildīt visas mūsu tiesiskās saistības un cenšamies ievērot labas prakses ieteikumus no Datu Valsts Inspekcijas (DVI), kā datu aizsardzības uzraudzības iestādes Latvijā.
3. This policy covers all employees, directors, officers, consultants, contractors, freelancers, volunteers, attendees, interns, casual workers, zero hours workers and agency workers and also visiting members of the public.
4. This policy will be regularly reviewed to ensure that it meets legal requirements, relevant guidance published by the DVI and industry standards.

1. Datu aizsardzības speciālistam ir vispārējs pienākums nodrošināt atbilstību attiecīgajiem tiesību aktiem un šīs politikas efektīvai darbībai. Vadība ikdienā ir atbildīga par to, kāda informācija tiek fiksēta, kā tā tiks izmantota un kam tā var tikt izpausta, kā arī tā ir atbildīga par informācijas deleģēšanu juridiskajam pārstāvim.  Darbinieki ikdienā ir atbildīgi par CCTV cameras and the storage of the data recorded is the responsibility of Property Manager.
2. Responsibility for keeping this policy up to date has been delegated to the Data Protection Officer.

1. We currently use CCTV around our sites as outlined below. We believe that such use is necessary for legitimate business purposes, including:

1. to prevent crime and protect buildings and assets from damage, disruption, vandalism and other crime;
2. for the personal safety of staff, visitors and other members of the public and to act as a deterrent against crime;
3. to support law enforcement bodies in the prevention, detection and prosecution of crime;
4. to assist in the effective resolution of disputes which arise in the course of disciplinary or grievance proceedings; and
5. to assist in the defence of any civil litigation, including employment tribunal proceedings.

1. CCTV monitors “DOLE” property, located on Riga, Maskavas Street 357, LV-1063 and owned by SIA "Tirdzniecības centrs "DOLE"". The goods loading area, common use areas, such as halls and corridors available to the general public, as well as the immediate vicinity of the said property are being monitored for the purpose of preventing crime. Tenants of the said property may have their own CCTV systems inside their shops, and in such case the tenants are considered the data controller and are solely responsible for processing any personal data collected by the use of their own CCTV systems
2. Camera locations are chosen to minimise viewing of spaces not relevant to the legitimate purpose of the monitoring. As far as practically possible, CCTV cameras will not focus on toilets, changing rooms, or other areas where there is a reasonable expectation of privacy.
3. Surveillance systems will not be used to record sound.
4. Images are monitored only by authorised personnel.
5. Staff using surveillance systems will be given appropriate training to ensure they understand and observe the legal requirements related to the processing of relevant data.

1. Where CCTV cameras are placed, we will ensure that signs are displayed at the entrance of the surveillance zone to alert individuals that their image may be recorded. Such signs will contain details of the organisation operating the system, the purpose for using the surveillance system and an outline of data subject rights, where to find the CCTV policy and who to contact for further information.
2. Live feeds from CCTV cameras will only be monitored where this is reasonably necessary, for example to protect health and safety.
3. We will ensure that live feeds from cameras and recorded images are only viewed by approved members of staff whose role requires them to have access to such data. Recorded images will only be viewed in designated, secure offices.

1. In order to ensure that the rights of individuals recorded by the CCTV system are protected, we will ensure that data gathered from CCTV cameras is stored in a way that maintains its integrity and security. This may include encrypting the data, where it is possible to do so.
2. SIA "Tirdzniecības centrs "DOLE"" has engaged a security service company Akciju sabiedrība "G4S Latvia", registration number 40103058465, as a data processor to process CCTV data on our behalf, as well as to service and maintain our CCTV We will ensure reasonable contractual safeguards are in place to protect the security and integrity of the data.

1. CCTV system will be stored digitally. Data from CCTV cameras will not be retained indefinitely but will be permanently deleted once there is no reason to retain the recorded information. Generally, recorded images will be kept for no longer than fourteen (14) days. We will maintain a comprehensive log of when data is deleted.
2. 9.2 At the end of their useful life, all images stored in whatever format will be erased permanently and securely. Any physical matter such as tapes or discs will be disposed of as confidential waste. Any still photographs and hard copy prints will be disposed of as confidential waste.

1. Prior to introducing any new surveillance system, including placing a new CCTV camera in any workplace location, we will carefully consider if they are appropriate by carrying out a privacy impact assessment (PIA).
2. No surveillance cameras will be placed in areas where there is an expectation of privacy unless, in very exceptional circumstances, it is judged by us to be necessary to deal with very serious concerns.

1. We will ensure that ongoing use of existing CCTV cameras on our premises is reviewed periodically to ensure that their sue remains necessary and appropriate, and that any surveillance system is continuing to address the needs that justified its introduction.

1. We may share data with other group companies and other associated companies or organisations, for example shared services partners, where we consider that this is reasonably necessary for any of the legitimate purposes set out above in paragraph 5.1.
2. No images from our CCTV cameras will be disclosed to any other third party, without express permission being given a Member of the Management Board Edgars Zarins, who is also the Data Protection Officer. Data will not normally be released unless satisfactory evidence that it is required for legal proceedings or under a court order has been produced.
3. In other appropriate circumstances, we may allow law enforcement agencies to view or remove CCTV footage where this is required in the detection or prosecution of a crime.
4. 12.4 We will maintain a record of all disclosures of CCTV footage.
5. No images from CCTV will ever be posted online or disclosed to the media.

1. Data subjects may make a request for disclosure of their personal data and this may include CCTV images (data subject access request).. A data subject access request is subject to the statutory conditions from time to time in place and should be made in writing.
2. In addition to the data subjects’ right of access to the footage, data subjects may also make a request for erasure, or object to the processing of their personal data.
3. In order for us to locate the relevant footage, any requests for copies of recorded CCTV images must include the date and time of the recording, the location where the footage was captured and, if necessary, information identifying the individual.
4. We reserve the right to obscure images of third parties when disclosing CCTV data as part of a subject access request, where we consider it necessary to do so.

1. If any member of staff has questions about this policy or any concerns about our use of CCTV then they should contact the Data Protection Representative: [email protected] or +371 2601 7552 in the first instance. Data subjects also have the right to lodge a complaint with the DVI, as the data protection supervisory authority in Latvia, should they deem it necessary to do so.