INFORMATION ON THE PROCESSING OF PERSONAL DATA FOR VIDEO SURVEILLANCE

Dear Sir/Madam,

We wish to inform you that our company operates a video surveillance system whose notices are posted ** near the recording areas.

At *** purpose, as required by the law ******* *** the ****** of personal data (European Regulation 679/2016), ** we provide you with the following information.

  1. Data Controller *** *********** and Data Protection Officer.

The Data Controller, i.e. the entity responsible for decisions regarding the purposes, methods and security of personal data, is Ciancaleoni S.r.l. VAT IT00261620546, with its registered office at Via della Meccanica 2/4, – 06038 Spello (PG) – Tel. 0742/301626, emailinfo@ciancaleoni.com, represented by its current legal representative.

  1. Purposes, Legal Bases and Exemptions for Processing.

The personal data you provide and that are collected during your use of our website will be processed in accordance with the lawfulness requirements set forth below:

Purposes

(Why we process your data)

Legal Basis

(On which legal provision we process them.)

Consequences in case of refusal to process

(What happens if you refuse to provide your personal data and/or to authorize processing)

To fulfill the contract to which you are a party, or to provide you with pre-contractual information as requested.

Art. 6, Paragraph 1, Letter b) GDPR – Processing is necessary for the performance of a contract to which the data subject is a party or for taking pre-contractual measures at the data subject’s request.

Consent is not required; however, if you refuse to provide your personal data, it will not be possible to fulfill the contract or provide the requested information.

To inform you and keep you updated about our activities and initiatives that may be of interest to you.

Art. 6, Paragraph 1, Letter f) GDPR – Processing is necessary for the pursuit of the company’s legitimate interest in promoting and publicizing its activities and initiatives.

  1. Recipients and Categories of Processed Data.

The personal data you provide or that we acquire will be processed exclusively by duly authorized personnel or by designated data processors via our IT system.

We will not disseminate or disclose your data to third parties except as expressly and mandatorily provided by law (e.g. upon request by a Judicial Authority) or at your explicit request.

In addition to any other information you may choose to send us, we will process the following categories of data:

–          Identifying data (first name and last name)

–          Contact details (addresses, telephone numbers, e-mail).

  1. International Data Transfer

Your personal data are not transferred outside the European Union.

  1. Retention Period of Personal Data and Criteria Used

The records are automatically deleted after forty-eight hours, unless the right to restriction is exercised or retention is required for legal purposes.

  1. Data Subject Rights

Data subjects have the right to obtain from the Data Controller, where applicable, access to their personal data and the rectification or erasure thereof or the restriction of processing concerning them, or to object to processing (Articles 15 et seq. of the Regulation). The appropriate request must be submitted in writing, accompanied by an identification document, at the Data Controller’s contact points provided above.

  1. Right to Lodge a Complaint

If you believe that the processing of your personal data through our websites violates the Regulation, you have the right to lodge a complaint with the Supervisory Authority (Art. 77 of the Regulation) or to take legal action (Art. 79 of the Regulation).

  1. Collaboration

The protection of your data and compliance with legal principles, particularly the principle of transparency, are of primary importance to us; we would be grateful if you could help us by reporting any misunderstandings in this document or suggesting improvements by contacting the Data Controller as indicated.

1