PRIVACY NOTICE – VIDEO SURVEILLANCE (CCTV) IN VEHICLES


This Privacy Notice relates to the processing of personal data through video cameras (CCTV) installed in vehicles used by META MATE D.O.O., OIB: 22368472748, PUT VINIŠKOG MULA 7, VINIŠĆE.


1. DATA CONTROLLER

META MATE D.O.O., OIB: 22368472748, PUT VINIŠKOG MULA 7, VINIŠĆE

Contact: metamate.mm@metamatemm.com, +385923696573


2. DATA PROTECTION CONTACT

For questions regarding data processing and the exercise of data subject rights, you may contact: metamate.mm@metamatemm.com.


3. DESCRIPTION OF VIDEO SURVEILLANCE (CCTV)

[DESCRIPTION OF THE SYSTEM: The camera is installed in the center of the vehicle’s windshield and enables recording in three directions: in front of the vehicle, behind the vehicle, and inside the cabin (vehicle interior).

Video recordings are stored locally on a 64 GB SD card located inside the camera itself. Access to the recordings is possible by physically removing the SD card and reviewing its contents on a computer. Due to limited storage capacity, the SD card is regularly formatted every two days, thereby deleting previously stored recordings and enabling continuous recording of new content.

The camera has the technical capability to record audio together with video; however, this function is disabled in the device settings and only video is recorded.]


4. PURPOSES OF PROCESSING

* safety of drivers and passengers

* protection of property

* evidence in traffic accidents/incidents


5. LEGAL BASIS FOR PROCESSING

The processing is carried out for the purposes of the legitimate interests of the data controller related to the protection of persons and property, as well as for the possibility of proving traffic accidents/incidents. The data controller conducts a Legitimate Interest Assessment (LIA) and applies measures to reduce the impact on privacy (e.g. frame minimization, no audio recording, restricted access, short retention period).


6. CATEGORIES OF DATA SUBJECTS AND DATA

Data subjects: passengers, drivers, and third parties who may appear in the recordings.

Data: video recordings (images) of the vehicle interior and/or surroundings, date and time of recording, and other technical data necessary for the operation of the system (depending on the equipment).


7. STORAGE PERIOD (RETENTION PERIOD)

Recordings are stored on the memory card and are automatically deleted cyclically once the storage capacity is reached; typically after approximately 48 hours (cyclical deletion after storage capacity is reached; while inactive, until storage is full).

Exceptionally, relevant excerpts may be extracted and retained for a longer period only if necessary for resolving a reported incident or as evidence in legal proceedings, with restricted access.


8. RECIPIENTS / USERS OF THE DATA

Access to the recordings is granted only to authorized persons of the data controller when necessary (e.g. in the event of an incident or accident), including drivers, the Operations Manager, and the Human Resources Manager.

Recordings may be disclosed to competent authorities exclusively upon their lawful request (e.g. police, courts).


9. TRANSFER TO THIRD COUNTRIES / INTERNATIONAL ORGANIZATIONS

No transfers are carried out.


10. SECURITY AND ACCESS TO RECORDINGS

Technical and organizational protection measures are implemented (e.g. access control, authentication/passwords, physical control of storage media, access logs, procedures for extracting recordings, training of authorized persons).

The data controller keeps records of access to recordings.


11. RIGHTS OF DATA SUBJECTS

Data subjects have rights in accordance with the GDPR (depending on the conditions of applicability), including the right of access, the right to object, the right to restriction of processing, and others.

Requests may be submitted using the contact details provided in this Notice. In order to protect the rights of other persons appearing in the recordings, the data controller may apply additional measures (e.g. blurring) or restrict the provision of copies if this would unjustifiably interfere with the rights and freedoms of third parties.


12. RIGHT TO LODGE A COMPLAINT

If you believe that the processing of personal data is contrary to applicable regulations, you have the right to lodge a complaint with the competent supervisory authority in the Republic of Croatia (Croatian Personal Data Protection Agency – AZOP).


13. UPDATES

This Notice may be amended from time to time; the current version is published at:

https://metamatemm.com/cctv-taxi