CCTV Notice

Introduction

Robinsons Supermarket Corporation, operating Shopwise values your privacy. This Privacy Notice provides information on our CCTV systems and how we process your personal data through these systems.

Personal Data Collected and Manner of Collection

When you enter our premises, our CCTV systems may record video of your activities. These recordings may include identifiable features such as your image, physical appearance, and voice, along with associated metadata (e.g., time, date, and location) captured automatically by cameras installed in common areas.

Purpose and Lawful Basis

We use CCTV systems for the following purposes:

• To help keep people safe and reduce the risk of crime;
• To protect our facilities, assets, and property;
• To assist in investigating security-related incidents;
• To support authorities in deterring and detecting crime, and in identifying and prosecuting offenders;
• To manage areas with high health and safety risks;
• To support operational needs such as resource allocation and management.

We process CCTV recordings under the Data Privacy Act of 2012 (DPA) based on legitimate interests and/or legal obligations. These purposes are necessary for security, safety, and operational management.

In certain situations, CCTV recordings may capture sensitive personal information, such as health-related data (e.g., injuries), or be used for legal claims. When this happens, processing is carried out based on lawful bases provided by the DPA, including:

• Compliance with legal obligations;
• Protection of lawful rights and interests; or
• Establishment, exercise, or defense of legal claims.

Retention Period

CCTV recordings are retained only for as long as necessary to fulfill the purposes stated in this notice. The standard retention period ranges from 14 to 30 days, depending on operational and locational requirements, unless a longer period is required for investigations, legal proceedings, or compliance with applicable laws. After the retention period has lapsed or the recordings are no longer needed, they are securely deleted or destroyed in accordance with our CCTV policy and the requirements of the DPA.

Third Party Transfer

We do not disclose CCTV recordings to third parties except when required by law or for lawful purposes, such as:

• Requests from law enforcement or government authorities in connection with investigations;
• Compliance with a court order or other legal process;
• Situations necessary to protect lawful rights and interests or to establish, exercise, or defend legal claims.

We do not release CCTV footage to the media or for entertainment purposes unless with the consent of the data subjects. Any disclosure is done securely and only to authorized recipients, in accordance with the DPA and issuances of the National Privacy Commission (NPC).

Data Subject Rights

Under the DPA, your rights as a data subject are as follows:

1. Right to be Informed
   
   You have the right to know whether your personal data is being processed, including the existence of CCTV systems and the purposes for which recordings are used.
   
   

2. Right to Access
   
   You have the right to request reasonable access to CCTV footage that contains your personal data, subject to verification and lawful limitations.
   
   Requests must include sufficient details (e.g., date, time, and location) and will require identity verification.
   
   

3. Right to Object
   
   You have the right to object to processing based on legitimate interest if your rights and freedoms outweigh such interest.
   
   

4. Right to Rectification
   
   You have the right to dispute inaccuracies and request corrections to your personal data.
   
   

5. Right to Erasure or Blocking
   
   You have the right to request deletion or suspension of your personal data when it is no longer necessary for the declared purpose or if processing is unlawful.
   
   

6. Right to Data Portability
   
   You have the right to obtain a copy of your personal data in a structured format or have it transmitted to another PIC, where applicable.
   
   We may charge a reasonable fee to cover administrative costs for providing a copy of the CCTV footage, in accordance with NPC guidelines.
   
   

7. Right to File a Complaint
   
   You have the right to file a complaint with the NPC if you believe that your data privacy rights have been violated in connection with the processing of your personal data through our CCTV systems.
   
   

8. Right to Damages
   
   You have the right to claim compensation for damages sustained due to inaccurate, unauthorized, or unlawful processing.
   
   

Updates or Changes to the CCTV Notice

We reserve the right to update or revise this CCTV notice at any time and as required by latest amendments to the DPA, its Implementing Rules and Regulations, issuances of the NPC, and/or when there are improvements and changes to the collection, processing, sharing or disclosure, retention, and disposal of your personal data. Previous versions of the privacy notice will be retained and provided to data subjects upon request.

How can you reach us?

For any questions, concerns, feedback on this privacy notice, or to exercise your data privacy rights, you may reach us through:

Data Protection Officer

Robinsons Supermarket
110 E. Rodriguez, Jr. Ave.
Bagumbayan, Quezon City
rscdataprivacyoffice@rsc.com.ph