Leeds Beckett University - City Campus,
Woodhouse Lane,
LS1 3HE
Privacy Notice for CCTV
This is the privacy notice for Security Services and their use of CCTV cameras and/or surveillance systems at Leeds Beckett University.
The CCTV system operates across the university’s academic, administrative and residential sites.
We, Leeds Beckett University, respect your privacy and are committed to protecting your personal data.
This privacy notice provides information on how we will look after your personal data when you use our service and tells you about your privacy rights and how the law protects you.
Security Services are a service based in Leeds Beckett University (LBU) and LBU is the data controller for the information you provide. Details of your rights under UK data protection legislation, including details of LBU’s Data Protection Officer, your rights as a data subject, and your right to complain to the Information Commissioner’s Office are available in LBU's privacy notice.
If you have any questions or concerns about participation within Security Services and how your personal data will be collected and managed, please contact security@leedsbeckett.ac.uk.
Personal data means any information about an individual from which that person can be identified.
We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:
- Identity Data includes your name, title, student or staff identity, date of birth and gender and copies of identity documentation
- Images includes CCTV and surveillance, film and photography. The security department collects and temporarily stores CCTV images obtained in the form of video images or still images for a maximum 30 days. This supports overall crime prevention and safety on campus
We also collect, use and share aggregated data for any purpose. Aggregated Data could be derived from your personal data but is not considered personal data in law as this data will not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing one of our services.
Most of the personal information we process is provided to us directly by you for one of the following reasons:
- The prevention, reduction, detection and investigation of crime and other incidents
- To assist with health and safety of staff, students and visitors
- To prevent and respond effectively to all forms of harassment and public disorder
- To assist in formal investigation of suspected breaches of university regulations by staff or students
- The monitoring and enforcement of traffic related matters
The CCTV system will be used to monitor the university’s building and campuses to identify incidents which require a response. Any response should be proportionate to the incident being witnessed.
The majority of our cameras are fixed and there are signs clearly displayed at all entrances to buildings at each location. The university does not operate any covert CCTV.
We also receive personal information indirectly, from the following sources in the following scenarios:
- Schedule 2 part 1 (2) forms received from the police
We have set out below, in a table format, a description of all the ways we plan to use your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.
Note that we may process your personal data for more than one lawful basis depending on the specific purpose for which we are using your data. Please contact us if you need details about the specific legal basis, we are relying on to process your personal data where more than one basis has been set out in the table below.
| Purpose / activity | Type of data | Lawful basis for processing including basis of legitimate interest |
|
To assist in providing a safe and secure environment for the benefit of persons using the university estate in creating a safer community. |
Identity Images |
Article 6 (1d) Processing is necessary in order to protect the vital interests of the data subject or another natural person. Article 6 (1f) Processing is necessary for the purpose of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedom of the data subject which require protection of personal data, in particular where the data subject is a child. |
|
To assist with police investigations. |
Identity Images |
Article 6 (1d) Processing is necessary in order to protect the vital interests of the data subject or another natural person. Article 6 (1f) Processing is necessary for the purpose of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedom of the data subject which require protection of personal data, in particular where the data subject is a child. |
Information will be shared with third parties only, when necessary, as part of the provision of our services to you and/or we have a legal or regulatory requirement to do so. It may also take place in accordance with other UK legislation including the Regulation of Investigatory Powers Act 2000 and the Human Rights Act 1998. We anticipate that we will share information with the following third parties for the following purposes:
- Emergency services, including Fire, NHS, Police
- UK Police forces, Ministry of Defence and Military Police
- Statutory authorities with powers to prosecute, (HMRC, Councils, Trading Standards, Environmental Health etc.)
- Solicitors or their legal representatives in either criminal or civil proceedings
- Individuals representing themselves in judicial proceedings
- Other agencies according to their purpose or legal status (i.e., Insurance companies)
Images may be disclosed to the police even if the system that captured the image was not set up under the operational requirement for prevention and detection of crime, if failure to disclose would compromise a criminal enquiry, the apprehension or prosecution of offenders.
Images will not be share with the media for entertainment purposes or placed on the internet or any social media sites. Images will only be released to the media in liaison with the police or other enforcement agency for the purpose of identifying offenders and in no circumstances without permission of Head of Security or Information Governance. If there is any doubt with any application the request will be forwarded to Information Governance for their consideration.
We do not anticipate the transfer personal data outside of the United Kingdom/European Economic Area (EEA). In the event that such transfer is required we shall only do so with adequate legal protections in place.
The footage will be held for 30 days after the initial collection date on our CCTV system. After this period the footage will be permanently deleted unless there is a legal requirement to retain and/or a legitimate reason e.g., police investigation or insurance purposes. At the end of a retention period, your personal data will be deleted securely and safely.
Your personal data will be retained in accordance with the retention periods set out in our Records Retention Schedule (for no more than 30 days ) and is recorded in the university Information Asset Register.
The university recognises and respects individual rights under the UK General Data Protection Regulation (GDPR). For further information please see our overarching Privacy Notice which explains your privacy rights.
Please see our overarching Privacy Notice for information on how to complain.
We keep our privacy notices under regular review. This privacy notice was last updated on June 2023.
Related links
Please see the University Policy page that includes all the current LBU Privacy notices within which you will find the Student Suicide Prevention – Information sharing statement.
