This CCTV Data Privacy Notice explains how and why M&G Luxembourg S.A, its branches and subsidiary (M&G International Investments AG), collects and uses CCTV personal data within its premises.
Please read it carefully as it contains important information and provides details about your rights in relation to your personal data.
Personal data collected and used under this CCTV Data Privacy Notice shall be processed lawfully and in accordance with applicable data protection laws, including EU GDPR, the Swiss New Federal Act on Data Protection and/or UK General Data Protection Regulation. The personal data we collect is only used for the purposes set out in this CCTV Data Privacy Notice.
M&G and how to contact us
The Management Company, its branches and subsidiary (together “M&G”) are controllers of the personal data of persons with whom we come into contact and other parties in the course of our business activities and interactions with others. ‘We’, ‘us’ and ‘our’ means M&G.
You can contact us at any time at the following address
M&G Luxembourg SA
16, Boulevard Royal
L-2449
Luxembourg
or email Privacy.Team@MandG.com
How and where we collect personal data about you?
We collect personal data about you from CCTV footage captured by our security cameras when you are present within our premises, whether you are a M&G Employee, a Visitor or any other individual present on our premises.
What personal data we collect about you?
We process the following personal data about you obtained from the CCTV footage sources set out in the How and where we collect your personal data section above.
We directly process CCTV footage i.e. image, video footage,
How we use your personal data?
We process your personal data for the following reasons:
Where it is necessary for our compliance with a UK, EEA, EU member state or Swiss law:
- To prevent fraud and other related crimes.
- To comply with regulatory requirements to ensure compliance with industry standards.
Where it is in our legitimate interests:
- To prevent and detect crime in our premises i.e. theft, vandalism or violent behaviour.
- To protect our property i.e. buildings or equipment from damage or theft.
- To comply with health and safety regulations i.e. monitor workplace safety through evacuation protocols.
- To enhance security measures i.e. monitoring access points, respond to security breaches and improve emergency response.
- To assist in the investigation of incidents.
To whom we disclose your personal data
Access to CCTV footage is restricted to authorized personnel only. This may include security staff, management, and other individuals who require access for legitimate purposes.
For the reasons set out in the How we use your personal data section above, we share your personal data with:
- Other companies within the wider M&G plc Group, including subsidiaries or affiliates for the purposes of managing our internal security processes
- Third party service providers that support the M&G plc Group with providing CCTV security services and systems to support our security protocols.
- Data Protection Supervisory Authorities.
- Prosecuting authorities and courts, and/or other relevant third parties connected with legal proceedings or claims i.e. Police may request access to CCTV footage to support their investigation process. And,
- Third parties where we are required to do so by law.
The recipients set out above may be based in the UK, European Economic Area (EEA) or in countries outside the EEA.
Transfers of your personal data outside of the UK and EEA
Your personal data may be transferred outside of the UK and EEA from time to time to members or businesses within the M&G plc Group, trusted service providers and other third parties. These other countries have different, and sometimes lower, standards of data protection than those in the UK and EEA. Where we do transfer your personal data outside the UK and/or EEA, we will ensure that we do so on the basis of adequacy or otherwise appropriate standard contractual clauses as approved by the European Commission. From time to time we may need to rely on a derogation to transfer your personal data to the extent permitted by law.
We require third parties to keep your personal data confidential and secure. We will ensure that suitable protection is maintained at all times by ensuring that appropriate safeguards are in place.
But where we are required by law to disclose, we may not always have control over the terms under which we are required to share your personal data. We will make sure that any disclosure is lawful.
You can contact us for further information regarding data transfers within the M&G plc Group using the contact details at the top of the page.
Retaining your personal data
Unless a longer period limitation is permitted by law, we keep personal data for the minimum time required by us to perform our obligations.
Your rights in respect of personal data
You have certain rights to:
- Access your personal data and request a copy
- Request deletion of your personal data (in limited circumstances)and
- Request transfer of your personal data to you or another organisation where possible
You can exercise these rights at any time by contacting us - see the M&G and how to contact us section above.
Security Measures
We implement appropriate technical and organizational measures to protect CCTV data from unauthorized access, alteration, or disclosure. These measures include secure storage, access controls and maintenance of our CCTV system.
Making a data protection complaint
If you have any concerns about the use of your personal data, or the way we handle your requests relating to your rights, please let us know - see the M&G and how to contact us section above.
You can also complain to your relevant data protection authority, the National Commission for Data Protection of Luxembourg (CNPD): www.cnpd.public.lu, the UK Information Commissioners Office, www.ico.org.uk, the Federal Data Protection and Information Commissioner (FDPIC): https://www.edoeb.admin.ch or to the data protection authority in the EU member state where you live or work or where the alleged data protection breach occurred.
M&G Luxembourg S.A. is authorised in Luxembourg by the Commission de Surveillance du Secteur Financier (CSSF). The company’s registered office is 16, boulevard Royal, L-2449, Luxembourg.
Changes to the notice
We may update this CCTV Data Privacy Notice from time to time. Any changes will be communicated through appropriate channels and will be effective upon posting.