A woman with her back to the camera delivers a speech to three other females

Privacy notice for CCTV

Privacy notice for CCTV

This Privacy Notice provides essential information about how Buckinghamshire New University (BNU or the University) handles your personal data and the rights you have in relation to how we use your data.

BNU is a registered data controller and is responsible for looking after the personal data that you provide to us. We are committed to complying with the data protection principles set out in the Data Protection Act 2018 in a clear and transparent way.

If you have any concerns with regards to the way your personal data is being processed or have a query with regard to this Notice, please contact the Data Protection Officer at dpofficer@bnu.ac.uk

This privacy notice explains when and why we collect personal information about you, if you appear on a University CCTV device and how we will use this information including the ways we might share this with others. It also explains how we keep your information secure and the rights you have in relation to the information we hold about you.

BNU conducts the following types of recording:

  • Fixed camera CCTV around all 3 teaching campuses.
  • Fixed camera CCTV at the Missenden Abbey Conference Centre.
  • Fixed camera CCTV at the university managed halls of residence.

CCTV will not normally be used for routine workforce monitoring or for covert monitoring; however, the University reserves the right to use CCTV for overt and/or covert monitoring in exceptional circumstances, as part of a specific investigation (such as to prevent or detect criminal activity or equivalent malpractice), with approval from an appropriate member of the University Executive Team.

We collect and use your information for the following purposes.

Purpose 1: to provide a safe environment in which to study and work

We will use CCTV images to help ensure that the University is a safe environment for students, staff, visitors and members of the public and to help reduce the fear of crime.

Purpose 2: for the prevention and detection of crime

We will use CCTV images to assist law enforcement agencies in their official capacity including the identification, apprehension, and prosecution of offenders. This includes the protection of university buildings, vehicles and other assets from damage, disruption, vandalism and other crime.

Purpose 3: to assist with investigations into potential breaches of University regulations.

We may use CCTV images to assist investigations into potential breaches of University regulations and/or actions which may result in disciplinary proceedings against students or staff.

Purpose 4: to improve communications and our operational response.

We will use CCTV to help improve communications and the operational response of security patrols in and around the areas where CCTV operates.

To process your personal data, the University must have a basis in data protection law. We will broadly rely on:

Public Task Article 6(1)(e). BNU will process your personal data in order to carry out our tasks in the public interest in our capacity as a Higher Education Institution to achieve the following purposes

· Purpose 1: to provide a safe environment for students, staff, visitors and members of the public.

· Purpose 2: for the prevention and detection of crime.

· Purpose 3: to assist with investigations into potential breaches of University regulations.

· Purpose 4: to improve communications and our operational response.

Special Category Data

Data in CCTV images may include special category data. Our legal reasons for processing special category data is for reasons of substantial public interest, specifically for the purposes of the prevention or detection of an unlawful act Article 9(2)(g).

The University collects and processes recorded images through the use of our CCTV system. Images including vehicles and individuals are captured at a level of definition considered to be necessary for the intended purpose.

The CCTV system captures images of people and their activity, which may include special categories of personal data, as defined by UK General Data Protection Regulation. This may include personal data pertaining to an individual’s racial or ethnic origin, data concerning health or data concerning sex life or sexual orientation of an individual. The information may also include details relating to the commission of offences.

CCTV cameras are located at various locations across the campuses, halls of residence and the Missenden Abbey Conference Centre. They monitor activity 24 hours a day, every day of the year.

Camera sites and locations are determined appropriately and, in order to respect privacy, wherever practicable cameras are restricted to monitor only those areas which are intended to be monitored, excluding views of areas that are not of interest. Cameras are not sited to focus on private residential areas. Where cameras unavoidably overlook residential areas, privacy screens will be fitted.

Your data will, or may be shared with the following recipients:

Disclosure to Details 

Law enforcement agencies

(including Ministry of Defence and Military Police)

We may disclose data about you for the purposes of the prevention and detection of crime.
Statutory authorities with powers to prosecuteThis includes HM Revenue and Customs, the Health and Safety Executive, Councils, UK Visa and Immigration Services.
Insurance companies and solicitors Where they make a lawful request for CCTV footage for the purposes of investigating insurance claims involving their insured parties or other legal claims, such as personal injury claims, relating to their clients where this has occurred within the boundaries of the University.
Individuals representing themselves in judicial proceedingsWe may disclose CCTV images to claimants, defendants or accused person in criminal proceedings.
Relevant organisation such as health care agencies or the emergency services We may disclose CCTV images for safeguarding or public protection reasons.

Footage from CCTV camera will be held for 30 days from the date of recording following which it will be automatically overwritten or deleted unless there is a legal requirement to retain and/or a legitimate reason e.g. police investigation or insurance purposes.

Where CCTV captures evidence in relation to an incident, this data is copied from the live system and stored by the University until no longer needed, when it is securely deleted.

The following rights apply to the personal data collected in this notice. Please contact dpofficer@bnu.ac.uk if you wish to exercise your rights:

  • Right of access to confirmation of processing and copies of your personal data
  • Right to complain to the Information Commissioner’s Office about how we handle your data.

If you have any concerns with regards to the way your personal data is being processed or have a query about this Notice, you can contact the Data Protection Officer directly by email dpofficer@bnu.ac.uk or by post.

Data Protection Officer

Buckinghamshire New University

Queen Alexandra Road

High Wycombe

Buckinghamshire HP11 2JZ

 

If you remain unhappy with any aspect of the way your personal data is being processed then we ask that you discuss this with us first, however if you remain dissatisfied then you have the right to complain to the Information Commissioners Office:

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire SK9 5AF

 

https://ico.org.uk

BNU is registered as a controller with the Information Commissioner’s Office. Our registration number is: Z772474X

This privacy notice will be reviewed on an annual basis or revised more frequently if necessary. 

This notice was last reviewed on 16 August 2023.