Last updated: 18 June 2026
1. Introduction
This privacy notice sets out how we will handle your personal data when you are caught by the CCTV systems in use at our Barcelona office.
2. Who is responsible for processing my personal data?
Revolut Bank UAB, Sucursal en España (referred to as “Revolut”, “we” or “us” throughout this notice) is the organisation responsible for collecting and using your personal data for the purposes set out in this notice.
Revolut is a Spanish branch of Revolut UAB, having its registered address at C/ Príncipe de Vergara 132, 4°, 28002, Madrid, España.
3. What personal data do you collect about me?
The personal data we collect about you could include:
- Static and moving images of you;
- Location data (inferred from position of camera); and
- Date and time of recordings.
4. How do you use my personal data?
As a controller, we need to have a legal basis to process your personal data for any purpose under data protection laws. The purposes for which we use your personal data and the corresponding lawful bases for this are set out in the table below.
What we use your personal data for | Our legal basis for using your personal data |
For security purposes (ensure the security of the premises, assets, and employees) namely to prevent and detect crime. | Performance of a task carried out in the public interest (Article 6(1)(e) of the GDPR). |
To comply with legal obligations and assist with the investigation of any allegations or complaints and to establish, exercise, or defend against legal claims. | Compliance with a legal obligation (Article 6(1)(c) of the GDPR). |
5. Do you share my personal data with anyone else?
We may share your personal data with the following third parties:
- Other members of the Revolut group to the extent necessary to to handle data protection rights requests arising from this processing.
- Our CCTV service providers.
- Spanish Law Enforcement Forces and Agencies as well as law enforcement authorities and governmental authorities, where necessary to comply with laws or if we have CCTV recordings which they require access to for the purpose of investigating crimes.
6. How long will you keep my personal data for?
We will retain your personal data for as long as necessary to achieve the relevant purposes for which we process it or to comply with our legal obligations. When it comes to CCTV recordings in particular, these will be stored for a maximum period of one (1) month (unless they need to be preserved for investigation of any detected infringement or unlawful act or evidentiary purposes), following which they will be deleted.
7. Additional information
Please refer to the relevant sections of our Customer Privacy Notice for more information about:
- your rights as a data subject;
- international transfers of your personal data outside the UK or EEA (as applicable); and
- how we protect your personal data.
If you have questions or concerns about how we use your personal data and/or wish to exercise any of your data subject rights, you can contact our Data Protection Officer at dpo@revolut.com. If you consider that your request has not been adequately addressed, you can also lodge a complaint with the Spanish Data Protection Agency (AEPD).
8. Updates
We may update this privacy notice from time to time. Any changes will be posted on this page.