Privacy Notice Regarding Personal Data Collected Through the Video Surveillance Systems of “Murphy M” EOOD
1.
Who Is Responsible for the Video Surveillance System?
The video surveillance system is implemented and operated by “Murphy M” EOOD, UIC 175136385, with its registered office at 3 Graf Ignatiev St., 1st floor, Sofia. The company acts as the data controller of personal data collected through the surveillance system installed at Murphy Salons.
2.
How to Contact Us?
MURPHYSTYLE-Grafa
Address: Sofia, 57 Patriarh Evtimii boulevard Sofia, 3 Graf Ignatiev St., 1st floor
T: +359 (2) 981 27 48; M: +359 (0) 887 427 192
MURPHYSTYLE-Patriarha
Address: Sofia, 57 Patriarh Evtimii boulevard гр. София, бул. „Патриарх Евтимий“ 57
T: +359 (2) 887 428 326; M: +359 (0) 887 428 326
3.
Why Is This Document Published?
This Privacy Notice provides information to data subjects regarding the purposes, legal grounds, and methods of processing personal data collected via video surveillance, as well as information about the rights of individuals to exercise control over such processing.
4.
Who Is This Notice Intended For?
This notice is for anyone whose personal data is processed through video surveillance, including:
- Employees of the Company;
- Clients;
- External visitors – partners and/or their employees, couriers, etc.
5.
Where Is Surveillance Conducted?
Cameras are installed in common areas, including rooms where hairdressing, manicure, and pedicure services are provided.
There is no surveillance in the cosmetic and massage rooms, rest area, or restrooms.
All cameras operate continuously, 24/7. The video quality generally enables the identification of individuals within the camera range.
6.
What Personal Data Is Processed?
The system records visual data such as facial features, hair color, height, identifiable marks, behavior (e.g., gait), and other information detectable through physical observation, along with time, date, and location.
The cameras are fixed and do not track movement or allow close-up views.
No audio is recorded.
7.
Legal Basis for Processing
Data is processed only where a legal basis exists. In this case, the processing is based on the legitimate interests of the controller: Ensuring the safety of individuals within Murphy salons;Protecting company property; Preventing unauthorized access; Improving service quality and work efficiency.
8.
Purpose of Data Processing
Surveillance is conducted to:
- Ensure safety and security of individuals on premises;
- Protect company property;
- Prevent and detect unauthorized access;
- Enhance service quality;
- Improve operational efficiency.
Data is processed only for the purposes for which it was collected.
No automated decision-making or profiling is conducted. Intelligent surveillance technologies are not used. Data is not linked to other systems, nor is hidden surveillance conducted.
9.
Source of Data
The data originates from individuals physically present at the Murphy salons under surveillance
10.
Retention Period
Recordings are stored for up to 7 days.
Longer retention is permitted only in justified cases (e.g., crime investigation requiring disclosure to authorities).
11.
Access to Recordings
Access is restricted to the Managing Director and designated staff.
Recordings may be disclosed to competent authorities if a violation or crime is suspected.
If equipment is damaged, the system provider may access data strictly for technical reasons.
Data is not transferred to third countries or international organizations.
12.
Data Security
“Murphy M” EOOD applies physical, technical, and organizational security measures in compliance with applicable EU and national regulations, as outlined in its Video Surveillance Policy.
13.
Your Rights
You may request: Access to your data; Correction of inaccurate data; Deletion of data (if unlawfully processed or no longer needed); Restriction of processing (e.g., pending verification);
Objection to processing on grounds related to your situation.
Please note recordings are stored for only 7 days— after that, your rights may no longer be exercisable.
You have the right to file a complaint with the Commission for Personal Data Protection, address: 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia https://www.cpdp.bg/ or request protection of your rights from the court.
To exercise your rights or request our legitimate interest assessment, contact: [email protected].
A request form is available at reception. Your full name and address must be provided. We may request additional verification such as a photo for identification. Signed electronic submissions must include a qualified electronic signature unless you are an employee.
Responses are provided within 1 calendar month, extendable by up to 2 more months if justified. You will be notified accordingly.
English 
Български