1. Video Surveillance Controller

Maksim poslovno središče Hudinja, d.o.o.
Address: Mariborska cesta 162, 3000 Celje, Slovenia
Email: info@maksimhudinja.si
Telephone: 031 390 452, 03 / 426 32 31

The controller is responsible for the lawful operation of video surveillance and for the protection of personal data processed within the video surveillance system.

2. Contact Details of the Data Protection Officer

Attorney Kaja Dosedla, Šentjur
Email: odvetnica.dosedla@siol.net
Telephone: 041 981 610

3. Purpose of Video Surveillance

Video surveillance is carried out for the following purposes:

• protecting people and property,
• preventing vandalism, theft and other security incidents,
• monitoring entry to and exit from the site and buildings,
• ensuring the safe operation of the warehouse site and reconstructing events in the event of an incident.

Video surveillance is not intended to monitor individuals’ behaviour or employees’ work performance.

4. Legal Basis for Processing

Processing is based on the controller’s legitimate interests under Article 6(1)(f) of the GDPR for the purposes of protecting people and property and ensuring the security of the premises.

5. Scope and Locations of Video Surveillance

Video surveillance is carried out in the following areas:

• indoor areas,
• warehouse premises,
• the main and other entrances to and exits from the buildings and the site.

Video surveillance is not carried out in areas where individuals have a reasonable expectation of privacy.

6. Types of Personal Data Processed

• video recordings of individuals,
• timestamps,
• other circumstances enabling identification, such as movement patterns or silhouettes,
• vehicle registration plates if they enter the camera’s field of view.

Audio is not recorded.

7. Retention of Recordings

Recordings are retained for a maximum of one month, unless they are required for the establishment, exercise or defence of legal claims, including criminal, civil or insurance proceedings.

8. Recipients or Categories of Recipients of Personal Data

Access to recordings is granted exclusively to:

• authorised employees of the controller,
• contracted processors,
• competent public authorities upon a lawful request.

9. Rights of Individuals

In relation to the processing of their personal data, individuals have the following rights:

• the right of access to their personal data,
• the right to erasure where the conditions under the GDPR are met,
• the right to restriction of processing,
• the right to object to processing based on legitimate interests,
• the right to lodge a complaint with the Information Commissioner of the Republic of Slovenia.

10. Processors and Transfers of Personal Data Outside the EU

The controller may use contracted processors in connection with video surveillance.

Personal data is not transferred outside the EU/EEA.

11. Automated Decision-Making and Profiling

No automated decision-making or profiling takes place within the video surveillance system.

12. Additional Information About Processing

The controller maintains a record of processing activities and has prepared a Data Protection Impact Assessment (DPIA), which may be reviewed by the Information Commissioner upon request.

13. Video Surveillance Start Date

18 September 2025