Company data

IM, d.o.o.

Zgornji Brnik 400
4210 Brnik – Aerodrom

T: +386 (04) 53 55 100
E: info@im.si

VAT identification number: SI 68232845
Registration number: 6025498000
DUNS number: 500716671
Transaction account: SI56 0292 3030 0141 420, NLB d.d.

General information on Video Surveillance

Video surveillance controller: IM, d.o.o.,

Address: Zgornji Brnik 400, 4210 Brnik

Phone: +386 (04) 53 55 100

E-mail: info@im.si

Data Protection Officer: Lidija Kejžar

Phone: +386 (04) 53 55 322

Legal basis and purpose: Video surveillance within the business premises of IM, d.o.o. (in the company buildings and on the associated outdoor areas) is carried out on the basis of point (f) of Article 6(1) of the General Data Protection Regulation (EU), i.e. on the basis of the legitimate interests pursued by the controller. The legitimate interests and purposes for which the controller carries out video surveillance are the protection of people and property, the protection of the company’s trade secrets, and the effective control of entry to and exit from the company’s business premises.

Information on specific effects of processing and unusual further processing: Authorised persons may review recordings retrospectively in the event of detected irregularities that could lead or have led to a loss of company property or reduced safety of company employees, visitors or external contractors, or in the event of irregularities that are not in line with the adopted policy of IM, d.o.o.

By means of indoor and outdoor video cameras, the security service may monitor activities in real time and intervene physically in the event of detected irregularities that could lead or have led to a loss of company property or reduced safety of company employees, visitors or external contractors, or in the event of irregularities that are not in line with the adopted policy of IM, d.o.o.

Retention period: Video recordings are retained for between 14 days and up to 6 months, depending on the location, and are automatically deleted after that period.

Recipients of personal data collected through video surveillance: Personal data collected through video surveillance is not disclosed to third parties, except to the controller’s contractual processors who perform specific services on behalf and for the account of the controller (e.g. an authorised technical security company that directly operates and maintains the video surveillance system). The controller’s contractual processors process personal data solely in accordance with the contractual purpose and the controller’s instructions, applying appropriate technical and organisational measures for the protection of personal data.

Personal data collected through video surveillance is disclosed to competent state authorities, holders of public authority and other public law entities where such disclosure is required by applicable legislation or is necessary for compliance with a legal obligation of the controller.

Transfer of personal data to third countries: The controller does not intend to transfer personal data collected through video surveillance to third countries or international organisations.

Provision of personal data: The provision of personal data is not a statutory or contractual requirement, and the individual is not obliged to provide personal data. Personal data is obtained directly by capturing video footage upon entering the area under video surveillance. An individual who does not wish to be subject to video surveillance may refrain from entering the monitored area, where this is possible given the nature of the area and the circumstances.

Automated decision-making: The controller does not carry out automated decision-making (e.g. profiling) on the basis of personal data collected through video surveillance.

Rights of the individual: By submitting a written request to the controller’s postal or e-mail address, an individual may request access to, rectification, completion, restriction of processing or erasure of personal data, object to the processing of personal data concerning them, and request data portability.

An individual has the right to lodge a complaint with the Information Commissioner of the Republic of Slovenia if they believe that their personal data is being processed or stored in breach of the applicable personal data protection regulations.