1. Security companies: processors Personnel training Confidentiality
Physical security
Considerations
Office buildings, warehouses
Alarm
Access control
CCTV
Security companies: processors
Personnel training
Confidentiality
Maintenance
Legal basis
Legitimate interest
Legal obligation: 333 / 2003
Security controls
Reception (receptionist, access control)
Alarm
CCTV: perimeter security, common areas, parking places
Personal data
Employees
Visitors
Requirements
Notification – employees
Warning signs - visitors
Access register
Event register
Storage period
Disposal / destruction
Other aspects
Camera placement: visible, on common areas (not inside offices, toilets)
Video surveillance should not bring prejudice to rights and freedoms of individuals
Camera footage is PD although not associated with identification data, or do not contain person’s image (eg.: license plate number)

2. GDPR
March 2018