We use CCTV at WASA to protect persons (i.e. customers, employees and guests), ensure safety and make sure that the internal rules of procedure are followed. The controller of personal data is AS WASA.

Security cameras are set up in buildings and rooms in such a way that entrances, corridors, shared areas and the car park are within the surveillance area. As a result, customers and other visitors present in these areas will also remain within the surveillance area and on video recordings.

Below is a description of the main conditions of use of the video cameras:

Legal basis for the use of cameras – legitimate interest.

Brief description of the surveillance system – digital without sound recording capability.

Persons to whom the recordings may be sent – the Police and Border Guard Board, the Data Protection Inspectorate and the authorities and persons required by law.

Administrators and kitchen staff have access to the surveillance system, while the CEO has access to the recordings.

How long are the recordings retained – the recordings are retained for two (2) weeks, after which the video system will automatically start overwriting them. In the event of a security incident, the recording related to the incident will be retained until the incident is resolved.

Time of surveillance – 24 hours a day.

Type of surveillance – in real time with recording and viewing of recordings.

What is being done to protect the data collected by the surveillance system – recordings are stored on a virtual server, accessible only to the company’s CEO with personal user IDs and passwords.

How can a person view the data collected about them – if you would like to view the data collected about you, please send a written request to the e-mail address of the company’s CEO angelika@wasahotels.ee .When viewing the data, you must keep in mind that we only retain the recordings for two (2) weeks and that, in order to protect the rights and interests of other recorded persons, we must make them unrecognisable in the video, so we do not provide access to recordings immediately. However, the limit of two (2) weeks does not apply to the data the viewing of which is requested, i.e. if the request is submitted at the time when the data are there, they will be retained.

Anyone about whom data are collected has the right to lodge complaints not only with the data collector but also with the respective supervisory authorities.

In addition to the right to view the recordings, a person also has the right to exercise all other rights of the data subject provided for in Regulation (EU) 2016/679 of the European Parliament and of the Council. The rights of the data subject are also described in the privacy policy of AS WASA and the legal analyses underlying the data collection.

In order to exercise your rights, please contact the CEO of AS WASA at angelika@wasahotels.ee.

The analysis of relying on legitimate interest and security is available here.