做厙輦⑹

Privacy notice - 做厙輦⑹ London office, including closed-circuit television (CCTV)

This privacy notice covers the personal data we process for managing and running our London office. This includes CCTV, which captures video footage of individuals inside the building.

Our contact details

Please contact 做厙輦⑹ if you wish to make a request or if you have a general enquiry.

Name: Royal College of Paediatrics and Child Health (做厙輦⑹)
Address: 5-11 Theobalds Road, London, WC1X 8SH
Phone: number +44 (0)20 7092 6000
Email: Data Protection Officer (for privacy/data protection enquiries only): information.governance@rcpch.ac.uk

General enquiries can be sent via our contact form or contact the relevant team directly.

EEA and Swiss Representative

For EEA residents and Swiss Residents, DataRep, is our designated point of contact for individuals and supervisory authorities in the EEA and Switzerland. For information on the DataRep for your country is on this page.

What information do we collect about you?

If you make a room booking with us, we use your personal data to administer that room booking, which includes support with audiovisual equipment and catering where applicable. If you enter our building, we will use your personal data where necessary to control access to the building and to meet our health and safety obligations to ensure a safe and secure environment within our building (in the legitimate interest of the college and public interest to keep everyone safe).

CCTV

Closed-circuit television (CCTV) is in use within the College building for crime prevention and staff safety purposes. The system does not use facial recognition and no audio is recorded, only moving images during office opening hours. Occasionally the audio may be temporarily turned on if necessary to deal with an incident, but it will not be recorded. 

The recordings capture video footage of individuals inside the building which is defined as personal data (any information about a living individual which allows them to be identified) under UK data protection legislation. 

Why do we collect this information?

  • "Contract" (where necessary to perform a contract with you, or with the view to entering into a contract with you)
  • "Legal obligation" and "Legal claims or judicial acts" (to comply with the Health & Safety at Work Act 1974)
  • "Public Interest" - where necessary to protect our visitors and staff
  • "Vital interest"- where necessary to protect someone's life

If you make a room booking with us, we will use your personal data where necessary to provide services to you, including any catering, audio visual and additional requests (as part of our contract with you).

If you enter our building, we will use your personal data where necessary to ensure the security and safety of individuals within the building (where necessary to meet our legal obligations, in the vital interest of someone, or it is necessary in the public interest). This may include emergency situations, such as to check who is in the building in the case of fire, evacuation or criminal activity, or dealing with a health and safety incident. 

We may also use your personal and special category data, where you have provided this to us, to support accessibility (to comply with the Equality Act 2010).

If you are involved in an accident or incident onsite that is reported, we may also process your personal and special category data to support us in dealing with the incident - to ensure everyone is safe (public interest or vital interest), as well as so that we can meet our legal obligations under the Health and Safety at Work Act 1974 and respond to any future legal claims. 

CCTV

Data protection law requires that we have one or more of the following lawful bases to process your information:

  • Vital Interest where the processing is necessary to protect someones life.
  • Legitimate Interest where we have assessed that the benefits of us processing your data are legitimate and not outweighed by your interests or legal rights. 

We collect and process your personal data for the following purposes: 

  • To ensure the 做厙輦⑹ meets the requirement of addressing staff safety and crime prevention in the legitimate interest of the College (UK GDPR Article 6(f))
  • In some circumstances, the processing is necessary in the vital interest of an individual (UK GDPR Article 6(d)). 

Where special category data is processed, such as indication of physical and/or mental health conditions and ethnicity captured on the image, we process as necessary for the substantial public interest for the prevention or detection of an unlawful act where there is a substantial public interest (to prevent further criminal acts) under Article 9(2)(g) of the UK GDPR and Schedule 1, Part 2 (10) of the Data Protection Act 2018. 

We do not use your personal data to make automated decisions or undertake profiling about you.

Who might we share your information with?

CCTV

We put security measures in place to ensure that your information is securely stored. CCTV is used in line with the Colleges Physical Security Policy, current UK data protection legislation and the ICOs guidance for surveillance cameras and personal information. Your personal data will not be transferred outside of the UK.

Access to the data is restricted to authorised members of 做厙輦⑹ staff, although footage may be shared when required by other bodies, such as the police or emergency services, in line with our third party disclosure procedure to other bodies. Any footage extracted from the system will be restricted as appropriate, shortened to only the relevant section and either exported as footage or printed as specific stills.

CCTV footage will only be shared where there is a recognised legitimate interest, vital interest or public interest or substantial public interest where there is special category data (for example suspicion of criminal activity or a safeguarding concern). 

How long do we hold your information for?

We keep access control records for 30 days. We keep records relating to room bookings for 7 years. Records relating to health and safety incidents are retained for either 7 years or 40 years, dependent on the nature of the incident. 

CCTV

We will retain CCTV recordings for up to 60 days before it is automatically overwritten in line with our retention schedule, unless we need to retain them for law enforcement purposes or another legal obligation. The retention will depend on the purpose for which it is being retained and will be extracted and stored separately in a restricted area, and deleted when no longer required.

Understanding your data rights

To help you understand more about the information in this and all our privacy notices, see our page, Understanding GDPR and your data rights. This explains common words and phrases used in our privacy notices, describes our use of artificial intelligence (AI) and details the rights you have in relation to the processing of your personal data under UK General Data Protection Regulation (UK GDPR).

How to contact us or complain

If you are unhappy with how we are using your personal data, you should contact us in the first instance so that we can understand and try to resolve your concern. If we can't resolve the issue you have the right to complain to the Information Commissioners Office (ICO). The ICO is the UK's independent body set up to uphold information rights. 

The ICOs address: Information Commissioners Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

ICO helpline number: 0303 123 1113

If you have any questions about our privacy policy, the information we hold about you or you wish to make a complaint, please send an email to: information.governance@rcpch.ac.uk 

Changes to this privacy notice

We keep our privacy policy under review, and we will place any updates on this web page. This privacy policy was last updated on 1 April 2026.