This notice explains how Oxford Sciences Innovation plc (“OSI”, “us” or “we”) collects and uses personal data obtained from our CCTV systems. OSI is the data controller in respect of the personal data we collect, and we are committed to protecting and respecting your privacy. “Personal data” is information which relates to an identified or identifiable living individual.
What personal data is collected through CCTV and why?
The CCTV cameras at OSI’s offices collect personal data in the form of images of individuals who are present at the OSI offices. OSI is a controller of this personal data which is processed by OSI’s IT supplier for health, safety and security management purposes. For example, if any unauthorised person were to access the OSI office and commit a crime (i.e. theft of personal goods), the CCTV images could assist in identifying the perpetrator. Separately, if there was a health and safety incident, such as an employee or visitor slipping in the office and injuring themselves, the CCTV images could assist in identifying the cause of the accident
OSI does not use personal data collected through its CCTV systems for the purposes of generally monitoring employees or other individuals present at the office, monitoring productivity or other similar activities.
Storage, security and retention of your data
We work with our IT provider to implement appropriate technical and organisational measures to protect the personal information collected through OSI’s CCTV systems against accidental or unlawful destruction, loss, change or damage. All personal information of this nature is stored on secure servers.
We store the personal information collected through our CCTV systems for our own purposes for no longer than necessary for the purposes set out and in accordance with our legal obligations and legitimate business interests. In most cases, personal data obtained and held through OSI’s CCTV systems will be held for a period of two weeks, after which it will be deleted. There will be certain circumstances in which this data may be held for longer, such as if it is required as part of a police investigation or if there has been a health and safety incident.
If you are a resident of the European Union, you have rights in respect of personal data that organisations, including OSI, holds about you.
You have a right to access the personal information we hold about you, rectify any inaccurate personal information and update any incomplete personal information. You also have the right to request that we delete your personal information if you believe that we no longer need to process your information for the purposes for which it was provided or we are not using your information in a lawful manner.
If you wish to exercise one of these rights, please contact us using the contact details at the end of this policy.
You also have the right to lodge a complaint to your national data protection authority. Further information about how to contact your local data protection authority is available at http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.
If you have any questions or concerns about how OSI has used your personal data, as a first step you should contact OSI via the email address firstname.lastname@example.org or by writing to us at:
FAO: Kate O’Brien
Oxford Sciences Innovation PLC
King Charles House
Park End Street
Changes to this notice
We reserve the right to modify or amend this Notice at any time and will always post the revised Notice on our website.