At Mint Cafe, we are committed to protecting your data and privacy and complying with relevant legislation and codes of practice while we carry out our work.
This notice sets out Mint Cafe's data processing practices, which will govern the processing of data that you provide to us and which we may obtain about you from other sources.
If you have any queries about this notice please contact Mint Cafe, 9 Bakers Walk, Sawbridgeworth, Hertfordshire. CM21 9QE or email email@example.com or telephone us on 01279 600516. The Officer with responsibility for Data Protection is Vernon Lacey.
How do we collect data?
We obtain personal data from you via our CCTV recording system within and outside of The Mint Cafe in Sawbridgeworth
What data do we collect?
Visual CCTV video (CCTV Audio is not collected)
We will only collect personal data to the extent that it is required for the specific purpose of UK law enforcement. CCTV signs are clearly displayed both inside and outside of the Mint Cafe in Sawbridgeworth..
How do we use this data?
Data processing will only take place where we are permitted to do so by the relevant data protection or privacy legislation or where consent is required under the relevant legislation, and such consent has been provided.
We will not share your data with other organisations.
We may also need to disclose your data if required to do so by law, where we are enforcing our legal rights.
How do we protect personal data?
We have in place appropriate procedures and technologies to maintain the security of all personal data from the point of collection to the point of destruction. Personal data will only be transferred to a data processor if it agrees to comply with those procedures and policies, or if it puts in place adequate measures itself.
Our CCTV system is designed to maintain the highest level of security to keep personal data private and secure in the cloud:
AES encryption protects your information. This is the same encryption method that financial institutions use to safeguard user data. AES-128 bit encryption and Transport Layer Security (TLS) ensure that our camera videos are secure during data transmission.
Our CCTV manufacturer passed the Safe Harbor certification and meets strict European Union privacy requirements.
Authentication over a secure HTTPS connection
Card payment details are not retained by Mint Cafe.
We require our data/payment processors to conform to PCI DSS standards for data security.
We also take appropriate measures to ensure that the data disclosed to us is kept secure, accurate and up to date and kept only for so long as is necessary for the purposes for which it is used. We will take all reasonable steps to destroy or suppress, or erase from our systems, all data which is no longer required.
We will not transfer your data to countries or jurisdictions outside the EEA.
You have the right to ask for a copy of the data we hold about you and to have any inaccuracies in your data corrected. In order to provide you with a copy of CCTV files we may require additional information from you in order to retrieve the requested data. Examples of additional information include:
Date & Time of the video recording being requested
Your name & contact details
We shall also comply with any additional rights given to data subjects under new or modified legislation.
If you have any queries or complaints about the way we process your personal data, please contact us using the details above. Alternatively, you may contact the Information Commissioner’s Office at https://ico.org.uk/
We reserve the right to amend this privacy notice from time to time. If we do so, we will post notice of the changes on our website and/or advise you of them by email. By continuing to use our website or services after any notification, you will be deemed to have accepted such changes.
Updated: February 2020