We created this privacy notice in May 2022 and will keep it under regular review. It describes what we do with your information from the council’s CCTV system at The Guildhall.
When we use your personal data, the council complies with data protection legislation and is the registered ‘Controller’. Our data protection notification is registered with the Information Commissioner’s Office (ICO) – reference Z5809563.
Gough & Kelly Security Ltd is an ICO registered data controller (Z1585966) and an NSI Gold approved company contracted to the council to manage CCTV operations.
The National Security Inspectorate (NSI) is recognised as the leading certification body for the security and fire protection sectors in the UK.
Gough & Kelly can be contacted at:
Unit 2, Railsfield Mount
Telephone: 0344 8807100
The council owns the Guildhall and will continue to use parts of the building for democratic and civic ceremonies throughout the year. York Science Park Limited (YSPL), part of University of York, have a long lease for management of the Guildhall (excluding new restaurant).
More information on the future of the Guildhall is available on the council's website.
- information we will collect
- how we will use information about you
- who has access to your data for the purposes set out in this privacy notice
- sharing your personal information
- how long we will keep your personal information
- further processing
- your rights
Information we will collect
We will collect and record images from the CCTV system that is in and around the Guildhall.
How we will use information about you
The council processes CCTV data to:
- monitor safety
- prevent and deter crime
- provide evidential material for court proceedings
- assist in the overall management of the Guildhall
We will protect it and make sure nobody has access to it who shouldn’t and store it securely.
Who has access to your data for the purposes set out in this privacy notice
- Security Industry Authority (SIA) Licensed CCTV Operators with Gough & Kelly Security Ltd
Any access to the recorded images must be authorised by the appropriate manager and will only be released in accordance with:
- the principles of UK GDPR, DPA 2018
- the guidance from the Information Commission’s Office
- the guidance from the Biometric and Surveillance Camera Commissioner.
Sharing your personal information
The council and Gough & Kelly Security Ltd may be required or permitted, under data protection legislation, to disclose your personal data without your explicit consent. E.g, if we have a legal obligation to do so, such as law enforcement, fraud or tax investigations, regulation and licensing, criminal prosecutions and court proceedings.
How long we will keep your personal information
The council only keeps information for as long as is necessary.
Personal information collected using CCTV will only be kept for 31 calendar days, then it will be automatically overwritten using a secure process.
If we wish to use your personal data for a new purpose, not covered by this Privacy Notice, then we will provide you with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions.
Where and whenever necessary, we will seek your prior consent to the new processing, if we start to use your personal data for a purpose not mentioned in this Privacy Notice.
To find out about your rights under data protection law, you can go to the Information Commissioners Office website.
If you have any questions about this privacy notice, want to exercise your rights, or if you have a complaint about how your information has been used, please contact us at e-mail: firstname.lastname@example.org or telephone: 01904 554145. Alternatively, you can write to the Data Protection Officer, City of York Council, West Offices, Station Rise, York, YO1 6GA.
You can also find details about access to CCTV footage online.