Penneys

CCTV and Bodycams Notice

Areas and persons marked with the camera symbol are equipped with video surveillance systems:

  • CCTV

  • Body Worn cameras with audio

DATA PROTECTION:

Data Controller – PRIMARK.

Primark has appointed Bird & Bird DPO Services SRL as Data Protection Officer (DPO). The DPO may be reached by using the following email: dataprotection@primark.com

LEGAL BASIS:

Art. 6 (1) (f) GDPR – Legitimate Interests of the Controller.

WHY WE PROCESS THE DATA:

Prevention, detection and clarification of criminal deeds and protection of persons and property.

In a small number of stores, we are trialling the use of overhead cameras to monitor customer behaviour at, and around, the Self-Checkout area. The captured imagery is used to generate aggregated statistical information, aimed at preventing stock loss and improving the efficiency of our Self-Checkout systems.

For more information on these interests, please contact Primark Data Protection (contact details above).

HOW LONG WE HOLD THE DATA:

Unless relevant to the defence or pursuit of a legal claim (or for related purposes), footage will not usually be retained for longer than 30 days.

WHO RECEIVES THE DATA:

Video surveillance systems are operated by third party security services on behalf of PRIMARK. In the event that the recordings constitute evidence of serious wrongdoing, recorded footage may be passed on to competent authorities, courts or other affected parties.

Relevant personal data remains within the United Kingdom and European Economic Area.

HOW YOUR DATA IS SECURED:

Our CCTV systems are operated in accordance with the highest standards of security and are subject to regular review and auditing. Access to our CCTV systems and footage is strictly managed.

YOUR RIGHTS:

You have the right to seek access to personal data relating to you that is processed by PRIMARK and, in some circumstances, the right to correct or delete this data and to restrict or object to the processing of your personal data.

The extent to which these rights exist in any particular case is defined by law (Art. 12 GDPR).

DATA PROTECTION AUTHORITY:

You also have the right to lodge a complaint with the competent data protection authority. In Ireland this is the Office of the Data Protection Commission:

Contact the DPC: https://www.dataprotection.ie/en/contact/how-contact-us

NO AUTOMATED DECISION MAKING:

Video recordings are not used for automated decision-making or biometric evaluation.