Based on Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR), Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information (Infotv.), Act CXXXIII of 2005 on the Rules of Personal and Property Protection and Private Investigation (Act on the Protection of Personal Data) and Act I of 2012 on the Labour Code

1. INTRODUCTION

The Red Corner Gentleman's Club has a CCTV surveillance system. The areas covered by the cameras cover the entire area of the business. For information on the location of the cameras and to determine the areas covered by the cameras, please contact redcorner777@gmail.com.

2. THE NAME OF THE CONTROLLER

Red Corner Gentleman's Club (hereinafter referred to as the "Company" or "Controller")
- headquarters: VII. District Rákóczi Út 36. Budapest 1072,
- e-mail address: redcorner777@gmail.com;
- website address: www.redcornerbudapest.hu

3. CONTACT DETAILS OF THE DATA PROTECTION OFFICER

Data Protection Officer: Red Corner Gentleman's Club

Direct contact: e-mail: redcorner777@gmail.com

4. THE PURPOSE OF THE PROCESSING

The purpose of the use of the surveillance system is to monitor the movements and actions of persons (Data Subjects) in the area subject to the surveillance, to protect life, limb and personal freedom, to protect the property owned or used by the Data Controller, to prevent and detect any unlawful acts affecting the Data Controller, including acts of breach of contract arising from an employment contract, and to provide evidence and enforce claims in official, judicial or other proceedings.

5. CATEGORIES OF PERSONAL DATA CONCERNED AND LEGAL BASIS FOR PROCESSING

The Data Controller shall ensure that only personal data that is necessary for the purpose of the processing and is adequate for the purpose of the processing is processed.

6. THE CATEGORIES OF PERSONAL DATA PROCESSED:

Portraits of those affected;

7. THE LEGAL BASIS FOR PROCESSING:

The legal basis for the processing is the legitimate interest of the Controller as defined in point 4 (Article 6(1)(f) GDPR). In this case, the data subject may object at any time to the processing of his or her personal data, in which case the Personal Data shall no longer be processed for this purpose, unless the Controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.

8. RECIPIENTS OF THE DATA, CATEGORIES OF RECIPIENTS

The Red Corner Gentleman's Club (District VII Rákóczi Út 36. Budapest 1072) (hereinafter referred to as the "Operator" of the monitoring system) acts as the data processor. The data may be transferred to authorities, courts (third parties) in the cases and under the conditions specified by law.

9. WHO HAS ACCESS

Recorded footage may be viewed in the case of suspected infringements (misdemeanours, offences or employee misconduct). The Data Controller's Head of Security, the managers exercising the powers of the employer and the persons specified in the Operator's data protection policy (the Managing Director and other persons authorised by him/her) are entitled to view the images. The Data Subject's right of access is regulated in point 12 of the Prospectus.

10. TRANSFERS OUTSIDE THE EUROPEAN UNION/EEA OR TO AN INTERNATIONAL ORGANISATION

No data is transferred outside the European Union/European Economic Area or to an international organisation.

11. DURATION OF DATA PROCESSING

If not used, the recorded image will be destroyed after a maximum of 10 calendar days from the date of recording.

12. THE RIGHTS OF THE PARTIES CONCERNED

The data subject has the following rights. In particular, the data subject may submit a request to exercise his or her rights to the Data Controller using the contact details set out in points 2 and 3.

a. Right to object

The data subject has the right to object at any time, on grounds relating to his or her particular situation, to the processing of his or her personal data on the basis of legitimate interest. In such a case, the Controller may no longer process the personal data, unless the Controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.

This does not affect the lawfulness of the processing carried out before the objection.

b. Right of access and information

The data subject shall have the right to obtain from the Controller information as to whether or not his or her personal data are being processed and, if such processing is taking place, the right to obtain access to the personal data and to the following information:

the Data Controller:
- what personal data; on what legal basis; for what purposes; for how long,
- and to whom, when, under which law, to which personal data the Data Controller has given access or to whom the Data Controller has transferred the personal data;
- what rights the data subject has (rectification, erasure, processing, restriction, objection)
- the right to lodge a complaint with a supervisory authority
- the source of the data, if it is not the data subject
- whether the Data Controller uses automated decision-making, including profiling, and, in such cases, information on the logic used, the significance of the processing and its likely consequences.

If the data subject requests a copy of the personal data, the controller will provide it by providing a storage medium (e.g. a thumb drive) containing the data.

c. Right to restriction of processing

The data subject shall have the right to obtain from the controller, at his or her request, the restriction of processing if.
- the data subject contests the accuracy of the personal data;
- the data processing is unlawful; and the data subject opposes the erasure of the data and requests instead the restriction of their use;
- the controllers no longer need the personal data for the purposes of the processing, but the data subject requires them for the establishment, exercise or defence of legal claims; or
- the data subject has objected to the processing.

d. Right to erasure

The data subject shall have the right to obtain from the controller the erasure of personal data relating to him or her without undue delay upon his or her request, and the controller shall be obliged to erase personal data relating to him or her without undue delay in the cases provided for in Article 17 of the GDPR (e.g. where the processing is unlawful or the purpose of the processing has been achieved or where an objection under point (a) has been effective).

13. RIGHT TO LEGAL REDRESS

If the data subject considers that the Data Controller has infringed the applicable data protection requirements in the processing of his or her personal data, the Data Controller may.
- have a legal remedy, a complaint to the National Authority for Data Protection and Freedom of Information

(Contact details of NAIH: address: 1125 Budapest Szilágyi Erzsébet fasor 22/c; postal address: 1530 Budapest, Pf.: 5,

phone: +36 (1) 391-1400 ; e-mail: ugyfelszolgalat@naih.hu; website: http://naih.hu)

- have the right to apply to the courts, which will rule on the matter out of turn, to protect their data,
- and, if you have suffered material or non-material damage as a result of a breach of the GDPR by the Company, to claim damages from the Company (Data Controller).

Red Corner Gentleman's Club
Data Controller