VIDEO SURVEILLANCE OPERATOR AND DATA CONTROLLER:

YST Group d.o.o., Litostrojska cesta 40, 1000 Ljubljana
email: hello@yoursoultime.si.

PURPOSE OF IMPLEMENTATION:

We carry out video surveillance for the purpose of protecting people and property and to ensure control of entry and exit.

INFORMATION RELATING TO THE IMPLEMENTATION OF VIDEO SURVEILLANCE:

• no further processing of video recordings takes place, nor are there any specific effects of processing,
• video recordings are not transferred to third countries,
• access to live footage is restricted to authorised persons of the controller,
• video recordings are retained for a maximum of 6 months,
• the legal basis for carrying out video surveillance, including the monitoring of live footage, is the legitimate interest of the controller in ensuring the safety of people and property.

Rights of individuals in relation to the processing of personal data

Individuals have a range of rights in relation to their personal data. YST Group d.o.o. verifies the identity of any individual requesting to exercise their rights before doing so. An individual may submit their request for access to YST Group d.o.o. at hello@yoursoultime.si or by post to: YST Group d.o.o., Litostrojska cesta 40, 1000 Ljubljana.

YST Group d.o.o. fulfils a legitimate request within 1 month; in cases of complexity or a high volume of requests, the fulfilment period may be extended by a further 2 months. YST Group d.o.o. will notify the individual of any such extension and the reasons for it.

a) Right of access to data: upon request, we inform the individual whether personal data relating to them is being processed and, where this is the case, we provide the following information:

• the types of personal data;
• the categories of recipients to whom the personal data has been or will be disclosed;
• retention periods;
• upon request, YST Group d.o.o. will prepare a copy of the personal data being processed and provide it to the individual.

c) Right to erasure (the "right to be forgotten"): An individual may request that their personal data be erased in the following cases:

• the personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
• the individual objects to the processing of personal data and there are no overriding legitimate grounds for the processing;
• the personal data has been processed unlawfully;
• the personal data must be erased to fulfil a legal obligation under EU or Slovenian law.

d) Right to restriction of processing: An individual may request that the processing of data relating to them be restricted when:

• the processing is unlawful but the individual does not wish the data to be erased,
• YST Group d.o.o. no longer needs the data for processing purposes, but the individual requires it for the establishment, exercise, or defence of legal claims,
• the individual has lodged an objection to the processing.

e) Right to data portability: An individual may request an export of their data. The data export will be prepared in a machine-readable format and may be collected by the individual at the registered office of YST Group d.o.o.

f) Right to object: An individual may object to the processing of their personal data by the controller in the context of video surveillance on the basis of legitimate interest.

Right to lodge a complaint regarding the processing of personal data

Any complaint relating to the processing of personal data may be sent by email to hello@yoursoultime.si or by post to: YST Group d.o.o., Litostrojska cesta 40, 1000 Ljubljana.

Every individual to whom personal data relates also has the right to lodge a complaint directly with the Information Commissioner, if they believe that the processing of personal data relating to them infringes applicable legislation.

Contact: Republic of Slovenia Information Commissioner, Dunajska cesta 22, 1000 Ljubljana. Phone: 01 230 97 30, Email: gp.ip@ip-rs.si, DPO for the Information Commissioner's Office: dpo@ip-rs.si.