← Biometrics House

Camera System

Information on the processing of personal data through the camera system operated by Biometrics House, s. r. o. — second layer under the GDPR. This is a courtesy translation; the Slovak version is authoritative (Kamerový systém).

Building and premises Interior of the Biometrics House building and the premises Premises Exterior, car parks and outdoor zones of the premises

Document 1 of 2

Information on the Processing of Personal Data through the Camera System — Biometrics House Building and Premises

Applies to the interior of the building and to the premises.

1. Identity and Contact Details of the Controller

Company name:
Biometrics House, s. r. o.
Legal form:
limited liability company
Registered seat:
Jurská 14621/19, 831 02 Bratislava
Company ID (IČO):
47 946 628
E-mail for personal data protection matters:
[email protected]

2. Description of the Monitored Area — Building

The following areas of the BIOMETRICS HOUSE building are monitored by the camera system:

3. Description of the Monitored Area — Premises

The following areas of the premises are monitored by the camera system:

The cameras are directed exclusively at the car parks and the land of the building's premises.

The public pavement and neighbouring land are not subject to intentional monitoring. If part of the public pavement appears within a camera's field of view due to the continuous transition between public and private space, the Controller has implemented technical measures to minimise such capture.

4. Purpose of the Processing and Legal Basis — Monitoring of the Building

The camera system in the building serves exclusively the following purposes:

Legal basis for the processing: the legitimate interest of the Controller under Article 6(1)(f) GDPR.

The legitimate interest of the Controller consists in:

In relation to employees, the Controller expressly states: the camera system in the building does not serve to monitor the performance or working conduct of employees. Employees are informed about the monitoring separately as part of employment documentation.

The camera system in the building is not used for marketing purposes, for profiling individuals, or for any other purpose beyond those stated above.

5. Purpose of the Processing and Legal Basis — Monitoring of the Premises

The camera system on the premises serves exclusively the following purposes:

Legal basis for the processing: the legitimate interest of the Controller under Article 6(1)(f) GDPR.

The legitimate interest of the Controller consists in the protection of private property and the equipment of the premises, as well as in the protection of the physical safety of individuals present there. The aim is to protect the aesthetic and functional elements of the premises (gazebos, benches, pond) against intentional damage (vandalism). The legitimate interest arises from the need to maintain the premises in their original and safe condition for their visitors. Furthermore, given that the premises are visited by the public, the Controller pursues an interest in enhancing the protection of the life and health of individuals present on the land.

The camera system on the premises is not used for marketing purposes, for profiling individuals, or for any other purpose beyond those stated above.

6. Recipients of Personal Data

Access to camera system recordings may be granted to:

The recordings are not disclosed to any other third parties, nor are they made public.

7. Transfer of Personal Data to Third Countries

Camera system recordings are not transferred outside the territory of the European Union or the European Economic Area. All recordings are stored and processed exclusively on servers and devices located within the EU/EEA.

8. Retention Period of the Recordings

Camera system recordings are automatically deleted after 72 hours (3 days) from the time they were made.

If, during the retention period of a camera recording, an event occurs that may give rise to a need to protect the rights and legitimate interests of the Controller or of other persons, the relevant camera recording may be retained for the period necessary for the establishment, exercise, enforcement or defence of legal claims, or for compliance with statutory obligations, until the definitive conclusion of the related proceedings or the expiry of the applicable time limits.

9. Rights of Data Subjects

As a data subject, you have the following rights in relation to the processing of your personal data through the camera system:

Right of access (Article 15 GDPR)

You have the right to request confirmation from the Controller as to whether your personal data is being processed and, if so, to obtain access to that data.

Right to erasure — the right to be forgotten (Article 17 GDPR)

You have the right to request the erasure of your personal data if it is no longer necessary for the purpose for which it was recorded, or if the processing is unlawful.

Right to object (Article 21 GDPR)

Since the legal basis for the processing is the legitimate interest of the Controller, you have the right to object at any time to the processing of your personal data on grounds relating to your particular situation. The Controller is obliged to assess your objection and to cease the processing unless it demonstrates compelling legitimate grounds which override your interests, rights and freedoms.

Right to restriction of processing (Article 18 GDPR)

You have the right to request the restriction of the processing of your personal data, for example while your objection is being assessed or in the event of doubts as to the lawfulness of the processing.

Right to lodge a complaint with a supervisory authority (Article 77 GDPR)

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the supervisory authority: Office for Personal Data Protection of the Slovak Republic, Galvaniho Business Centrum II, Galvaniho 7/B, Bratislava, Slovak Republic.
www.dataprotection.gov.sk
Proceedings on the protection of personal data

10. Security of the Processing

The Controller has adopted appropriate technical and organisational measures to protect the recordings against unauthorised access, loss, alteration or destruction, including:

11. Automated Decision-Making and Profiling

The camera system is not used for automated individual decision-making, including profiling, within the meaning of Article 22 GDPR. The recordings serve exclusively the purposes set out in this information.

12. Updates to This Information

The Controller may update this information in the event of a change in the purpose or scope of the processing, or in other relevant circumstances.

Date of issue / last update: 1 June 2026

Document 2 of 2

Information on the Processing of Personal Data through the Camera System — Premises of the Biometrics House Building

Applies to the exterior, car parks and outdoor zones of the premises.

1. Identity and Contact Details of the Controller

Company name:
Biometrics House, s. r. o.
Legal form:
limited liability company
Registered seat:
Jurská 14621/19, 831 02 Bratislava
Company ID (IČO):
47 946 628
E-mail for personal data protection matters:
[email protected]

2. Description of the Monitored Area — Premises

The following areas of the premises are monitored by the camera system:

The cameras are directed exclusively at the car parks and the land of the building's premises.

The public pavement and neighbouring land are not subject to intentional monitoring. If part of the public pavement appears within a camera's field of view due to the continuous transition between public and private space, the Controller has implemented technical measures to minimise such capture.

3. Purpose of the Processing and Legal Basis — Monitoring of the Premises

The camera system on the premises serves exclusively the following purposes:

Legal basis for the processing: the legitimate interest of the Controller under Article 6(1)(f) GDPR.

The legitimate interest of the Controller consists in the protection of private property and the equipment of the premises, as well as in the protection of the physical safety of individuals present there. The aim is to protect the aesthetic and functional elements of the premises (gazebos, benches, pond) against intentional damage (vandalism). The legitimate interest arises from the need to maintain the premises in their original and safe condition for their visitors. Furthermore, given that the premises are visited by the public, the Controller pursues an interest in enhancing the protection of the life and health of individuals present on the land.

The camera system on the premises is not used for marketing purposes, for profiling individuals, or for any other purpose beyond those stated above.

4. Recipients of Personal Data

Access to camera system recordings may be granted to:

The recordings are not disclosed to any other third parties, nor are they made public.

5. Transfer of Personal Data to Third Countries

Camera system recordings are not transferred outside the territory of the European Union or the European Economic Area. All recordings are stored and processed exclusively on servers and devices located within the EU/EEA.

6. Retention Period of the Recordings

Camera system recordings are automatically deleted after 72 hours (3 days) from the time they were made.

If, during the retention period of a camera recording, an event occurs that may give rise to a need to protect the rights and legitimate interests of the Controller or of other persons, the relevant camera recording may be retained for the period necessary for the establishment, exercise, enforcement or defence of legal claims, or for compliance with statutory obligations, until the definitive conclusion of the related proceedings or the expiry of the applicable time limits.

7. Rights of Data Subjects

As a data subject, you have the following rights in relation to the processing of your personal data through the camera system:

Right of access (Article 15 GDPR)

You have the right to request confirmation from the Controller as to whether your personal data is being processed and, if so, to obtain access to that data.

Right to erasure — the right to be forgotten (Article 17 GDPR)

You have the right to request the erasure of your personal data if it is no longer necessary for the purpose for which it was recorded, or if the processing is unlawful.

Right to object (Article 21 GDPR)

Since the legal basis for the processing is the legitimate interest of the Controller, you have the right to object at any time to the processing of your personal data on grounds relating to your particular situation. The Controller is obliged to assess your objection and to cease the processing unless it demonstrates compelling legitimate grounds which override your interests, rights and freedoms.

Right to restriction of processing (Article 18 GDPR)

You have the right to request the restriction of the processing of your personal data, for example while your objection is being assessed or in the event of doubts as to the lawfulness of the processing.

Right to lodge a complaint with a supervisory authority (Article 77 GDPR)

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the supervisory authority: Office for Personal Data Protection of the Slovak Republic, Galvaniho Business Centrum II, Galvaniho 7/B, Bratislava, Slovak Republic.
www.dataprotection.gov.sk
Proceedings on the protection of personal data

8. Security of the Processing

The Controller has adopted appropriate technical and organisational measures to protect the recordings against unauthorised access, loss, alteration or destruction, including:

9. Automated Decision-Making and Profiling

The camera system is not used for automated individual decision-making, including profiling, within the meaning of Article 22 GDPR. The recordings serve exclusively the purposes set out in this information.

10. Updates to This Information

The Controller may update this information in the event of a change in the purpose or scope of the processing, or in other relevant circumstances.

Date of issue / last update: 1 June 2026

Privacy Policy — information on how we process personal data on our website and in other situations.

Company name:
Biometrics House, s. r. o.
Registered seat:
Jurská 14621/19, 831 02 Bratislava – mestská časť Nové Mesto
Company ID (IČO):
47 946 628
VAT ID (IČ DPH):
SK2024154550
Commercial register:
Obchodný register Mestského súdu Bratislava III, oddiel Sro, vložka č. 166048/B
Supervisory authority:
Slovenská obchodná inšpekcia (SOI), Inšpektorát SOI pre Bratislavský kraj, Bajkalská 21/A, P. O. BOX č. 5, 820 07 Bratislava