Art. 13 of the General Data Protection Regulation (GDPR) (EU Regulation 2016/679
Video surveillance provision of 8.04.2010
Guidelines 3/2019 EDPB (European Data Protection Board)
To complete the information provided to the Subjects by the signs displayed in the premises and spaces belonging to this Company, where video surveillance systems are in operation, we inform You about the processing of Your personal data which will be carried out for the purposes specified below. The processing will take place in a lawful manner, in accordance with the aforementioned European Regulation, in compliance with the fundamental principles including those of confidentiality, relevance and non-excess and, in general, the fundamental rights and freedoms of the data subject.
Controller
The controller is Gruppo Ibleo Trasporti s.r.l., S.P. 10 Km. 5,100 - Ragusa - VAT number 01484800881
Purpose of the processing for which the data is intended
The use of cameras is aimed at protecting the safety of company staff and visitors, as well as protecting the assets and the capital of the company from possible assaults, thefts, robberies or vandalism and the possible defense of company rights in judicial office. The legal basis of the processing is the legitimate interest of the Controller. The access or passage of the data subjects at the entrances, premises and spaces pertaining to the company necessarily involves taking pictures that may concern them.
Methods of data processing
Recordings are made in digital format, within the entire 24-hour period. These data are collected, lawfully and correctly, for the purpose indicated above and are processed using manual, IT and telematic tools with reasonings strictly related to the purpose itself in order to guarantee the security and confidentiality of the data. The images collected are recorded and stored for 24 hours, except for the longer term that may be necessary to fulfill specific requests from the Authorities in relation to ongoing investigative activities. At the end of the expected retention period, the recorded images are deleted from the relative electronic, computer or magnetic media.
The recorded images will in no case be disseminated and can only be processed by personnel specifically appointed by the company or by external companies who, as external data processors, collaborate in the maintenance of the systems.
Exercise of the rights provided by EU Regulation 2016/679
You can, at any time, exercise the following rights, if applicable:
- Right of access by the data subject (art. 15 of the GDPR)
- Right to rectification (art. 16 of the GDPR)
- Right to erasure (art. 17 of the GDPR)
- Right to restriction of processing (art. 18 of the GDPR)
- Right to data portability (art. 20 of the GDPR)
- Right to object to processing (art. 21 of the GDPR)
To exercise the rights indicated, You can send the Controller the "Form for the exercise of personal data protection rights" available at the Reception, on the website www.gruppoibleo.it/?lang=en or on the website of the Italian Data Protection Authority (www.garanteprivacy.it/home_en).
If You believe that the processing of Your personal data carried out by us takes place in violation of the provisions of the E.U. Regulation 2016/679, it is Your right to lodge a complaint with the Italian Data Protection Authority, which can be contacted via the website www.garanteprivacy.it/home_en.