This Privacy Notice explains how the Royal Gibraltar Police (RGP) uses your personal data (information) when processed via Closed Circuit Television (CCTV) for both law enforcement and non-crime purposes and your rights in relation to that processing.
Personal data is any data that can be used to identify a living individual, on its own or in combination with other available information. Processing means anything we do with the data including collecting, storing, and sharing.
The Commissioner of the Royal Gibraltar Police is the controller for any personal data processed by the RGP. There are many ways you can contact the RGP, including by phone, emai and post. Please see our contact details below:
c/o Royal Gibraltar Police
New Mole House
Rosia Road
Gibraltar
GX11 1AA
Tel (+350) 20072500
Email: generalenquiries@royalgib.police.gi
If you want to contact the office of the Data Protection Officer regarding the processing of your personal data or the operation of the CCTV network, you may do using the contact details below:
c/o Data Protection Officer
Information Management & Vetting Unit
Royal Gibraltar Police
New Mole House
Rosia Road
Gibraltar
GX11 1AA
Tel (+350) 20072500
Email: generalenquiries@royalgib.police.gi
Theinformation collected by CCTV will only be used for one oo more of the following purposes and all use of CCTV is carried out in a manner that is necessary and proportionate to the polciing purposes:
CCTV recordings may capture:
Some more sensitive information, known as special category data, may also be processed passively if the footage collected reveals an indivisual's ethnic or racial prigin, or data concerning their health (for instance, if they have a visible disability). CCTV systems used by the RGP do not record audio, unless explicitly stated for specific environments where this is necessary and proportionate (e.g. certain custody-related systems). Where audio recording is in operation, signage will be displayed, where reasonably practicable.
Personal data is processed in accordance with:
CCTV is deployed in and around police buildings, custody areas, behicles, and public spaces where policing activities occur. Clear signage is displayed where reasonably practicable.
The RGP ensures that any disclosure of personal data obtained through CCTV is carried out lawfully, fairly and in accordance with the Data Protection Act 2004 and applicable regulations.
Personal data will only be shared where it is necessary and proportionate for a specific policing or legal purpose. Disclosures are considered on a case-by-case basis, ensuring that only the minimum amount of information required is provided.
CCTV footage may be shared, where lawful and necessary with:
The RGP will also disclose information where required to do so by law, court order or other legal obligation.
Where CCTV footage contains personal data relating to individuals who are not relevant to the purpose for which the footage is being disclosed (e.g. third parties) the RGP will take appropriate steps to protect that data. This may include redaction, blurring, muting of audio, or otherwise limitign the information shared to what is necessary and proportionate for law enforcement or legal proceedings.
Where personal data is transferred outside of Gibraltar, appropriate safeguards will be implemented to ensure that the data continues to be protected in accordance with applicable data protection laws.
The RGP retains data in line with the RGP's retention policy and in accordance with Management of Police Information (MoPI) policy, taking into account the type, content and sensitivity of the data, related records, the purposes for which your personal data was processed and any legal or business requirements.
Personal data will be retained for as long as necessary for the particular purpose or purposes for which it is held.
Under the Data Protection Act 2004 you have a number of rights that you can exercise in relation to the data we process about you. Under certain circumstances, by law you have the right to:
Right to be Informed
The RGP has an obligation to tell you how we obtain your personal information and describe how it will be used, retained, stored and who we may share it with.
Right of Access
You can request access to your personal data (Subjext Access Request) This enables you to recieve a copy of the personal information we hold about you and check that we are lawfully processing it and that is it accurate.
Right to Rectification
This enables you to have any incomplete or inaccurate information we hold about you corrected.
Right to Erasure
This enables you to ask us to delete or remove personal information where there is no lawful reason for us to continue to process it.
Right to Restricted Processing
This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.
Some rights may be restricted where disclosure would prejudice:
Note that requests for CCTV footage may be handled under the Gibraltar GDPR or Part 3 of the Data Protection Act 2004, depending on the purpose of the request. Where footage contains third party personal data, the RGP may need to apply redactions or may not be able to disclose certain material if an exemption applies.
Further information about these rights can be found within the Data Protection Act 2004.
To exercise any of these rights please contact the RGP's Information Management & Vetting Unit (IMVU) at datarequests@royalgib.police.gi
You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, wea re allowed under the law to charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we can refuse to comply with the request in such circumstances.
The RGP sometimes need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to recieve it.
The RGP tries to meet the highest standards when processing personal data. We take complaints very seriously. If you have any concerns about the way that we have handled your personal data please bring it to our attention via email to: dpo@royalgib.police.gi
You also have the right to make a complaint to the Gibraltar Regulatory Authority (the "GRA") if you believe your personal data has been prcoessed unlawfully or in a way that does not comply with applicable data protection legislation. You can contact the GRA at privacy@gra.gi
Our full privacy information, including other policing techniques, is available at: Royal Gibraltar Police - Privacy Policy
This Privacy Notice is a live document and will be kept under regular review and updated, as required.