CCTV privacy notice

The close circuit television cameras (“CCTV”) have been set up an part of undertakings of the Evolution group and this privacy notice contains information about how we carry out your personal data processing obtained through the CCTV devices.

This is an up-to-date version of the CCTV privacy notice. With this we reserve the right to make changes unilaterally to this privacy notice. For this reason, we are inviting you to re-read this privacy notice from time to time to be aware of the current information on the personal data processing.

The language of this privacy notice is English. Upon your request on e-mail:  we will provide you this CCTV privacy notice in the national language of the country or your location where data processing through video surveillance takes place, if we are obliged to do so according to statutory requirement.


In this section is information available about where to apply in case of any questions you may have. CCTV warning signs have been placed in each of the Evolution group locations with warnings regarding video surveillance in operation and with identity of each undertaking of the Evolution group and contact information about where to apply in case of any questions.

In any case, if you have any questions, requests or objections related to video surveillance performed by each undertaking of the Evolution group, please e-mail us on:

Personal data processing purposes and legal basis

Our CCTV system is located on the walls of the buildings to monitor the entrances to our premises/offices (applicable depending on jurisdiction), including at the emergency exits, at the areas considered as publicly accessible such as stairwells, corridors and vestibules, gyms and others (except in areas expected to have privacy, for example, bathrooms, changing rooms, rest rooms). In areas mentioned above we perform video surveillance keeping video recordings for the following purposes:

Who we may disclose personal data

We take all necessary measures to ensure that your personal data are not disclosed to any third party without any legal basis.

To fulfil our personal data processing purpose, your personal data can be disclosed to following recipients:

Transfer of personal data outside the EU/EEA

Your personal data may be transferred outside the EU/EEA only within the Evolution group. If we do so, you can expect a similar degree of protection in respect of your personal data as in EU.

How long we store personal data

We will retain your personal data obtained through video surveillance devices for the period necessary to fulfil our processing purpose.

We have taken into account our needs to fulfil our legitimate interests and statutory requirements applicable to our business activity in determining period of retention in our data repositories of your personal data acquired through video surveillance devices.

Generally, we may retain your personal data for no longer period than 2 (two) months due to necessity to identify or investigate later detected incident as well as depending on type of area surveilled) and requirements of national regulation of actual location of video surveillance.

In case of infringement or other misconduct, dispute, or any legal proceedings, we will keep the video recording in question till expiration of possible challenging period of the settled case, usually not longer than 2 (two) years after the settlement.

Your data subject rights

You have right to request access to your personal data in our possession, request the rectification, erasure, restriction of processing, object to processing as well as rights to data portability following cases and in accordance with a procedure prescribed by General Data Protection Regulation (GDPR).

Your requests regarding your data subjects rights you can exercise by contacting to us via e-mail:

We will evaluate your request and our possibilities to carry out your personal identification and execute your request and depending of current circumstances we keep the rights to request additional information from you or data for your identification and to clarify details necessary for exercising your request with aim to ensure safety of your personal data, no-disclosure to the third party and possibility to provide to you an adequate reply.

With this we are asking you to take into account the fact that it may be impossible to exercise some of your data subject rights laid down in GDPR related to personal data processing through video surveillance devices, for example, to modify your image captured in video recordings, to erase video footage before expiration our determined retention period of the video recordings, to object against such processing entering in surveillance area of the surveillance cameras. Therefore, we do not grant that we will be able always satisfy your request on exercising your data subject rights.

Your rights to lodge the complaint to supervisory authority

In case of any question, objection or complainant related to the personal data processing through video surveillance devices we are calling you preliminary refer to us.

However, if you consider, that we infringe your data subject rights, you always have rights to lodge your complaint to the relevant supervisory authority.

List of national supervisory authorities can be found here:

Why and how we obtain your personal data

We obtain your personal data with circuit television cameras devices when you enter surveilled areas. Your personal data is necessary to fulfil our determined processing purposes. If you would like not to provide your personal data to us, you won’t be able to get into our premises or surrounded area. For that reason, it may constitute real obstacles to exercise some rights you may have or fulfil particular obligations applicable to you.

Automated decisions

We do not use personal data obtained through video surveillance devices to make automated decisions, including profiling.

Processing of your personal data for other purpose

We do not intend further processing of your personal data obtained through video surveillance devices for other purpose incompatible with the original purpose.

Updated 24 March 2021.

back to top