CCTV Surveillance Cameras Policy for the Valletta Cultural Agency
Scope
The Valletta Cultural Agency deals with personal data by means of CCTV camera/s and abides by this policy with regards to the data processed by this means.
Background Information
The data controller is the CEO, Valletta Cultural Agency.
The data protection officer representing the CEO, Valletta Cultural Agency may be contacted as follows:
Â
ADDRESS
VALLETTA CULTURAL AGENCY
Exchange Buildings – Republic Street
Valletta VLT 1117 – Malta
 Telephone
(+356) 21242018
Data subjects will have a right of access to data being processed as per Chapter III (Article 15) of the General Data Protection Regulation. (Please refer to section relating to Access, below). Data subjects are also hereby informed of their right to lodge a complaint with the Information and Data Protection Commissioner.
The Information and Data Protection Commissioner may be contacted as follows:
ADDRESS
Information and Data Protection Commissioner
Level 2, Airways House
High Street
Sliema SLM 1549
Malta
Telephone
(+356) 2328 7100
Â
Â
Location & Purpose
CCTV surveillance is installed in the Valletta Cultural Agency’s premises, i.e
Â
The Valletta Cultural Agency Main Offices
2 outdoor cameras, located outside of the main Valletta Cultural Agency office door
1 indoor camera located at Reception
1 indoor camera located at the Production department
1 indoor camera located on mezzanine floor near the HR department
Ta’ Liesse Stores at Valletta
1 outdoor camera, located outside of the main store door
3 indoor cameras
Â
Valletta Design Cluster
Ground Floor
6 outdoor cameras, located outside on Bull Street, Valletta
5 outdoor cameras, located outside on Charles Street, Valletta
2 outdoor cameras on St. Christopher Street overlooking the emergency gates
2 cameras overlooking Courtyard tables
1 camera overlooking the top half of the Courtyard leading to the Vertical Wall
6 cameras on Bull Street side internal corridor leading to the Coworking Space
1 camera facing the Coworking space Kitchenette
1 camera above Reception
1 camera inside the Cleaner’s room
1 camera near the back entrance Charles Street side/back door of Teaching Kitchen
1 camera in the main Electrical Distribution Board room on Charles Street side
Â
Makerspace (Ground Floor)
4 cameras in the Makerspace main rooms
1 camera in the Makerspace small room where the distribution boards are located
Â
Kitchens (Ground Floor)
4 cameras are in the main Industrial kitchen on Bull Street side
2 cameras are in the main Teaching Kitchen on Charles Street side
1 camera located in the back room of the Teaching Kitchen, leading to the Pantry
Â
Elevated Ground Floor Cameras
2 cameras on the Charles Street elevated ground floor corridor leading to meeting rooms
Â
First Floor Cameras
4 cameras on the outdoor Emergency Glass Corridor Bull Street side
4 cameras on the outdoor Emergency Glass Corridor Charles Street side
Â
Garden
8 Cameras overlooking various parts of the Roof Garden
1 camera located just outside Meeting Room 6 overlooking the passageway
Â
Residency Space Roof (Apartment 30, Bull Street)
2 cameras located on the Roof of apartment 30 which overlook the VRFs (outdoor AC units)
Â
Affixed notices are placed in prominent and easily visible places within the monitored area. The purposes of surveillance is to ensure security is safeguarded, to monitor property damage and to record any incidence of theft. Relevant footage will not be used for any other purpose other than the one intended.
In view of Chapter II (Article 5) of the GDPR, the Data Controller justifies the use of a CCTV Surveillance Camera system for the above-mentioned purpose. The recognisable images captured by the cameras will be processed adequately, and in a relevant manner and shall be necessary in relation to the purposes of the processing as per Chapter II Article 6 of the GDPR.
Access to Footage & Data
Access to the CCTV footage is restricted to authorised personnel only. The Data Controller shall authorise further access to footage if so required when relevant to the purpose/s specified above.
Any criminal activity caught on camera will be disclosed to law enforcement authorities after filing a Police report.
The Valletta Cultural Agency undertakes to comply with a strict security policy vis-a-vis the access to recorded images. Any internal access to visual images by the Valletta Cultural Agency or any disclosure of such images further to a request by a law enforcement authority or by the data subject shall be logged and kept as evidence.
Right of Access
Any individual whose personal data is held by the Valletta Cultural Agency, in the form of CCTV recording, can request access to that recording. The Data Controller is obliged to provide access to the footage without disclosing the identity of third parties.
If an individual is not satisfied with the reply as provided or with the manner of access that has been granted, the matter may be referred to the Information and Data Protection Commissioner who will investigate the case and ascertain that the right of access is properly granted.
Right of access request shall be made in writing and addressed to the Controller.
Personal data is retained for 7 days. This period is the necessary period for which the data was obtained. After the lapse of this period, images are automatically deleted and subsequently overwritten by new images. If data is extracted in relation to unacceptable behaviour leading to a criminal investigation it will be held for the period required to satisfy said legal claims, and securely erased after such activities are exhausted.
Conclusion
This policy provides the reasons and means of processing through the use of a CCTV Surveillance System within the Valletta Cultural Agency whilst ensuring that the rights of the data subjects are not infringed, by processing personal data adequately, not more than necessary and making sure that data is not kept for a period longer than necessary in conformity with Data Protection Legislation.
Date: 07/08/2026
