Introduction
This Privacy Notice tells you what to expect when BMIT Technologies plc (BMIT) collects and process personal information about you, in this case, static or moving imagery via CCTV systems as you pass in front and through the BMIT premises located in Handaq, Qormi and Smart City Malta. BMIT is committed to protecting your personal information, safety and security when you use BMIT services. We are legally obliged to use your information in line with all applicable laws concerning the protection of personal data, including the General Data Protection Regulation (GDPR).
What information we process about you?
When you pass by or through BMIT’s premises, we collect and process static or moving imagery only through our CCTV systems.
How will BMIT use the information it collects about me?
BMIT may use CCTV imagery for several purposes including but not limited to the following:
• Ensuring the safety of all staff, customers, suppliers, stakeholders and assets of the company.
• Ensuring compliance with PCI-DSS and ISO 27001 standards.
• Investigate, enforce, institute or defend legal or insurance claims or as evidence to support any formal follow-up to BMIT incidents.
• In response to a Data Subject Access Request.
Legal Basis
The legal basis for collecting and processing CCTV imagery are our legitimate interests to do so, for security purposes and for the purposes of complying with applicable PCI-DSS and ISO 27001 standards. If you are a customer, we may have contractual ground to do so as well based on the contract concluded with you.
Recipients
CCTV imagery may be handled and used by the following recipients to maintain a safe, secure, and efficient operation:
• BMIT personnel on a need to know basis.
• Police, Security Services and other law enforcement authorities or government bodies, agencies or authorities, as may be necessary in terms of applicable laws.
• Other BMIT service providers for maintenance purposes, which typically, is not envisaged.
We will keep your information within BMIT, except where disclosure is required by law, for example to government bodies or law enforcement agencies.
How long will BMIT keep the information?
Under normal circumstances CCTV footage is retained for 90 calendar days after which point it will be deleted, unless there is a specific reason requiring retention of such footage, such as, to institute or defend legal proceedings.
CCTV imagery is retained in a secure environment and is only accessible to authorised personnel on a need to access basis.
What rights do I have over my personal data?
Under the General Data Protection Regulation, you will have the right to, where appropriate:
• Access your personal data by making a Data Subject Access Request
• Rectification, erasure or restriction of your information
• Object to the processing of your information
To exercise your rights, please fill-in the required form found here or send an email to gdpr@bmit.com.mt or call on (+356) 2258 8200. You may also write to BMIT’s Data Protection Officer at the address SCM02 Floor 2, Smart City Malta, Kalkara Malta or email dpo@bmit.com.mt
What if I find your response unsatisfactory?
If you still feel that your personal data has not been handled appropriately according to the law, you can contact the Office of the Information and Data Protection Commissioner (IDPC) located in Sliema and you have a right to file a complaint with them. The IDPC may be contacted at the details below:
Office of the Information and Data Protection Commissioner
Floor 2, Airways House, Triq Il-Kbira, Tas-Sliema SLM 1549, Malta
idpc.info@idpc.org.mt
Changes to this Privacy Notice
We will keep this Privacy Notice under regular review, and we will place any updates here. At the start of this Privacy Notice we will tell you when it was last updated.
« Privacy Policy
