Legal

CCTV Privacy Notice

Aesthetic Therapy Clinic

Last Updated: June 2026

CCTV Operated on These Premises

This notice is provided in accordance with the GDPR, the Irish Data Protection Act 2018, and the Data Protection Commission’s guidance on CCTV.

Data Controller: Aesthetic Therapy Clinic

Address: Unit 5, Ballypheason House, Athlone Road, Roscommon Town, Co. Roscommon, F42 C982

Email: privacyaesthetictherapyclinic@gmail.com | Phone: (083) 371 5260

1. Who Operates the CCTV?

Aesthetic Therapy Clinic operates a closed-circuit television (CCTV) system on its premises. We are the Data Controller for all CCTV footage recorded on these premises.

2. Why Do We Use CCTV?

CCTV is used for the following legitimate purposes:

  • The safety and security of patients, staff, and visitors
  • Prevention and detection of theft, vandalism, or criminal activity
  • Protection of clinic premises, equipment, and assets
  • Supporting investigations into incidents or complaints that occur on the premises

We have assessed that the use of CCTV is proportionate to these security needs and is the least intrusive means of achieving them. CCTV cameras are not used for monitoring staff performance or attendance.

3. Legal Basis for Processing

We process CCTV footage under the following lawful bases under GDPR Article 6:

  • Article 6(1)(f) — Legitimate Interests: to protect the security of our premises, patients, and staff.
  • Article 6(1)(c) — Legal Obligation: to comply with health and safety obligations under Irish law.

A Legitimate Interests Assessment (LIA) has been conducted and is available on request.

4. Where Are Cameras Located?

Cameras are positioned in the following areas:

  • Reception and waiting area
  • Entrance and exit points (internal and external)
  • Corridor areas

CCTV cameras are NOT installed in treatment rooms, consultation rooms, changing areas, toilets, or any other areas where a reasonable expectation of privacy exists.

All camera positions are clearly indicated by signage at the entrance to monitored areas.

5. How Long Is Footage Retained?

CCTV footage is retained for a maximum of 30 days from the date of recording, unless:

  • The footage is required in connection with an ongoing security incident, complaint, or legal matter, in which case it may be retained until the matter is resolved
  • We are required by law or by An Garda Síochána to retain footage for longer

After the applicable retention period, footage is automatically overwritten or securely deleted.

6. Who Has Access to CCTV Footage?

Access to CCTV footage is strictly controlled and limited to:

  • Authorised clinic management and designated security staff
  • An Garda Síochána, where footage has been lawfully requested as part of a criminal investigation
  • Our legal advisors, where footage is required for legal proceedings
  • Our insurance providers, where footage is relevant to a claim

We do not share CCTV footage with any third party for commercial purposes. Footage is NEVER shared on social media or other public platforms.

7. Your Rights

You have the following rights in relation to CCTV footage in which you appear:

  • Right of Access (Subject Access Request) — You may request a copy of footage in which you appear. We will respond within one calendar month. We may need to blur or redact third parties before providing footage to protect their privacy.
  • Right to Erasure — You may request deletion of footage in which you appear, subject to the legitimate interests and legal obligations noted above.
  • Right to Object — You may object to CCTV processing on grounds relating to your particular situation.
  • Right to Complain — You may lodge a complaint with the Data Protection Commission of Ireland.

To exercise any of the above rights, please contact us in writing at privacyaesthetictherapyclinic@gmail.com or by post to the address below. Please include your name, contact details, and the date and approximate time of your visit to assist us in locating the relevant footage.

8. Data Security

CCTV footage is stored on a secure, password-protected digital recording system. Access is restricted to authorised personnel only. Physical access to recording equipment is secured. All footage is encrypted at rest where technically feasible.

9. Further Information

If you have questions about how we use CCTV or wish to exercise your rights, please contact us:

Contact the Data Controller

Aesthetic Therapy Clinic

Unit 5, Ballypheason House, Athlone Road, Roscommon Town, Co. Roscommon, F42 C982

Phone: (083) 371 5260

Email: privacyaesthetictherapyclinic@gmail.com

Data Protection Commission of Ireland

21 Fitzwilliam Square South, Dublin 2, D02 RD28

Phone: +353 (0)1 765 0100

Email: info@dataprotection.ie

Website: www.dataprotection.ie

The DPC provides guidance on CCTV at: www.dataprotection.ie