INFORMATION REGARDING THE PROTECTION OF PERSONAL DATA
Pursuant to Art. 13 D of Regulation 2016/679
Pursuant to Art. 13 of EU Regulation 2016/679, EIGENMANN & VERONELLI SPA, in its quality of Data Controller, in the person of its pro-tempore legal representative, informs the recorded data subjects about the purposes and methods of personal data processing, their sphere of communication and disclosure, as well as the nature of their conferral. And more specifically:
1. PURPOSES FOR PROCESSING
Personal data collected through video surveillance systems are processed and used directly for safety reasons in the workplace, integrity and protection of company assets.
2. METHODS
The processing of personal data takes place using optical instruments, operating 24 hours a day, with logic strictly related to the purposes themselves and, in any case, in order to guarantee the security and confidentiality of the data. The retention of the processed data will normally last 72 hours, with subsequent automatic cancellation, except for images proving offences which are kept for the period strictly necessary to contest such offences and define any dispute.
The storage of video footage will take place in protected and inaccessible places except for the personnel in charge. The storage unit is managed by authorized and properly trained personnel.
3. COMMUNICATION AND / OR DISSEMINATION
The data will not be disseminated, communicated, sold or exchanged with third parties, except for use in the event of offences perpetrated against the Data Controller. In this case the images will be made available to the competent judicial authority.
4. RIGHTS OF THE DATA SUBJECTS
Individuals shall be able to exercise their rights under art. 15 et seq. of EU Regulation 2016/679, by contacting the Data Controller EIGENMANN & VERONELLI SPA directly.
Data subjects have the right to obtain confirmation of the existence or not of their personal data, and receive an intelligible communication of these data, even if they have not yet been registered.
Individuals have the right to obtain the indication: a) of the origin of personal data; b) of the purposes and methods of the processing; c) of the logic applied in case of processing carried out with the aid of electronic instruments; d) of the identification data concerning the Data Controller, data processors and the designated representative; e) of the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as designated representative in the territory of the State, managers or appointees.
By contacting the Data Controller, the data subjects can:
• ask the Controller for access to images;
• object to processing;
• ask the restriction of data processing and / or cancellation where applicable.
Data subjects can also submit a complaint to the Personal Data Protection Authority.
With regard to the images recorded, the right to correct or amend data as outlined in art. 16 of EU Regulation 2016/679 does not apply due to the intrinsic nature of the data (images captured in real time regarding an objective fact). The right to data portability as set forth in art. 20 of EU Regulation 2016/679 does not apply as the processing is carried out to implement a legitimate interest of the controller.
Individuals who are recorded may request access to the images by providing a valid identification document with the request. Responses to access requests cannot include third-party data, unless the data can be broken down or have elements removed to render the personal data in question unrecognizable. Such access requests cannot be fulfilled once the aforementioned retention time has expired.
Individuals have the right to object, in whole or in part for legitimate reasons to the processing of their personal data, even if pertinent to the purpose of collection;
To exercise the rights provided for in Art. 15 et seq. of EU Regulation 2016/679, please write to privacy@eigver.it, for the attention of the Data Controller for the attention of the Data Controller or for the attention of the privacy contact.
5. DATA CONTROLLER AND PROCESSORS
The data controller is EIGENMANN & VERONELLI SPA with registered office at Via Della Mosa, 6 - 20017 Rho (Province of Milan).
The updated list of external processors, pursuant to Art. 28 of EU Regulation 2016/679, may be consulted by submitting a written request to the Data Controller referred to above.
6. RETENTION PERIOD
72 hours after the images are recorded. After this deadline, the images will be completely deleted with the overwriting of new images.
7. LEGAL BASIS
Pursuant to art. 6 of EU Regulation 2016/679 and to the general provisions on video surveillance dated 8th April 2010, the legal basis is the legitimate interest of the Data Controller to protect its assets and ensure workplace safety. The company has an agreement signed with the trade union representatives.
