We keep the CCTV Privacy Notice under review. It was last reviewed and updated in July 2023.
City of York Council is a registered data controller and will collect and use CCTV information in accordance with the data protection articles within UK General Data Protection Regulations and the Data Protection Act 2018.
Gough & Kelly Security Ltd. is an Information Commissioner's Office (ICO) registered data controller (Z1585966) and a National Security Inspectorate (NSI) Gold approved company contracted to the council to manage CCTV operations. The NSI is recognised as the leading certification body for the security and fire protection sectors in the UK.
Gough & Kelly
Unit 2, Railsfield Mount
Bramley
Leeds
LS13 3AX
Telephone: 0344 8807100
Email: enquiry@gough-kelly.co.uk
This privacy notice outlines what you can expect when City of York Council collects your information from a CCTV system.
If you have any questions about this Privacy Notice contact the council’s Data Protection Officer.
View the privacy information for all of the City of York Council (CYC).
- personal data
- using personal data
- sharing personal data
- retaining personal data
- further processing of personal data
- your rights relating to personal data
Personal data
CCTV data held about you includes:
- recorded CCTV Images
See further details about how we define personal data and non-personal data.
Using personal data
We process CCTV data in order to:
- monitor safety
- prevent and deter crime
- assist in traffic management
- provide evidence for court proceedings
- assist in the overall management of the city of York
Sharing personal data
The following organisations have access to your data for the purposes set out in this privacy notice:
- Gough & Kelly Security Ltd
- SIA Licensed CCTV Operators
- CYC Traffic Management Team
Any access has to be authorised by a director or nominated person and data may only be released in accordance with the principles of GDPR, DPA 2018 and the guidance from the ICO and Surveillance Camera Commissioner.
Personal data held will only be accessed on a business ‘need-to-know’ basis.
Gough & Kelly Security Ltd. can disclose certain personal data to external bodies. At all times, the amount of information disclosed and the manner in which it is disclosed will be in accordance with the provisions and obligations of GDPR legislation and DPA 2018.
We process requests for disclosure of personal information on a case-by-case basis and this is evidenced by the request for information disclosure form and the data request log.
Before sharing information we will ensure that:
- Data Protection Impact Assessments are completed as necessary to assess any risks or potential negative effects of the sharing
- Privacy Notices are up to date to inform people about sharing, where necessary
- Technical safeguards such as encryption and access controls are in place to keep information secure
Sharing data under Data Protection legislation
We may be required or permitted, under data protection legislation, to disclose your personal data without your explicit consent, for example if we have a legal obligation to do so, such as for:
- law enforcement
- fraud investigations
- regulation and licensing
- criminal prosecutions
- court proceedings.
Retaining personal data
We will keep your personal data only as long as is necessary to conclude the purpose(s) for which it was collected.
CCTV data will be held and then automatically overwritten after 31 days.
At the end of the retention period, we may pass any relevant information to the City Archives where it is required or appropriate to do so.
Further processing of personal data
If we wish to use your personal data for a new purpose, not covered by this Privacy Notice, then we'll provide you with a new notice.
The new notice will:
- explain this new use before we start the processing
- set out the relevant purposes and processing conditions
Where and whenever necessary, we'll seek your consent to the new processing, if we start to use your personal data for a purpose not mentioned in this Privacy Notice.
Your rights relating to personal data
When we collect your personal data we'll tell you how we are going to use it. Where we process your personal data, you have a number of rights under data protection law.
If you require further information about how your personal data will be held and processed by the CCTV or Security department, or if you wish to make a complaint about any data protection matter, contact the Council’s Customer Complaints and Feedback team on telephone: 01904 554145, or email: information.governance@york.gov.uk.
See further details of your rights relating to personal data.