It can be concluded from the information provided that the company would not be legitimate to install the intended surveillance system as it would involve capturing images of the public road. In the event that the collection of images within the facilities managed is limited, in order to evaluate the suitability to the right of processing, this Authority should have a Memory, in the terms of Article 10 of the 1/2009 Instruction, which describes in detail the characteristics of the processing that is intended to be carried out, the necessary weighting is carried out in order to be able to apply the legal authorisation based on the legitimate interest (Art. 6.1.f) GDPR) and which allows the proportionality of the data being processed and the scope of the processing intended to be carried out, in addition to the other extremes required by Article 10 of the 1/2009 Instruction.