Information on video surveillance - Netherlands

Name and Contact Details of the Controller:
B&B Hotels Netherlands B.V.
Pieter Lieftinckweg 10
1505 HX Zaandam
Tel: +31 75 631 9061
Email: amsterdam-zaandam@hotelbb.com

Contact Details of the Data Protection Officer:
Email: privacy-netherlands@hotelbb.com

Purposes and Legal Basis of Data Processing:
Monitoring compliance with house rules and investigating criminal offenses. The legal basis is Article 6 (1) (f) of the GDPR.

Legitimate Interest:
Protection of property, preservation of evidence in criminal offenses, particularly burglary, theft, and vandalism.

Storage Period or Criteria for Determining the Period:
Recordings are automatically deleted after 72 hours. A longer storage period will only occur if it is necessary to enforce legal claims or to prosecute criminal offenses in a specific individual case.

Recipient of the Data:
As a rule, no data transfer takes place. Data is only passed on to law enforcement authorities if this is necessary to enforce legal claims or to prosecute criminal offenses in a specific individual case.

The data is not transferred to a third country or to an international organization.

Information on the Rights of the Data Subjects:
The data subject has the right to obtain confirmation from the controller as to whether personal data concerning him or her is being processed; if this is the case, he or she has the right to information about this personal data and to the information listed in detail in Article 15 of the GDPR.

The data subject has the right to request that the controller immediately rectify inaccurate personal data concerning him or her and, if necessary, to have incomplete personal data completed (Article 16 of the GDPR).

The data subject has the right to request that the controller immediately erase the personal data concerning him or her if one of the reasons listed in detail in Article 17 of the GDPR applies, for example, if the data is no longer necessary for the purposes for which it was collected (right to erasure).

The data subject has the right to request that the controller restrict processing if one of the conditions of Article 18 of the GDPR is met, for example, if the data subject has objected to the processing, for the duration of the controller's assessment.

The data subject has the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her. The controller shall then no longer process the personal data unless he can demonstrate compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject, or the processing serves to assert, exercise, or defend legal claims (Art. 21 of the GDPR).

Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with the Dutch Data Protection Authority if the data subject considers that the processing of personal data concerning him or her infringes the GDPR.