This information is made to suppliers, customers, guests in any capacity present in the headquarters of the Owners, pursuant to art. 13 GDPR 679/16 - "European Regulation on the protection of personal data". Since the recording of images also concerns the employees of these third parties, suppliers, customers and guests in general are required to inform their employees before they enter the premises of the Owners, on the content of this notice.
Identity of the Data Controller
The data controller is Falegnameria F.lli Alberto & C. snc, based in Fraz. Le Pont 2, 11015 La Salle (AO) in the person of the legal representative pro tempore. The Data Controller guarantees the security, confidentiality and protection of the personal data in its possession at any stage of the processing process.
Source of data
The personal data processed are those provided by the person concerned during transit in the areas of shooting and consist of images that show it.The images collected are treated in full compliance with the principles of legality, necessity, proportionality and purpose and the requirements set by the Measure on video surveillance - 8 April 2010 (Official Gazette no. 99 of 29 April 2010), promoted by the Data Protection Supervisor.The images collected are not related to any other type of data or information concerning workers and their activities, even only indirectly.
Purpose of the processing
The above images are used to carry out checks, controls and verifications in case of situations or behaviors that undermine the security or integrity of the company’s assets such as theft, burglary, tampering, sabotage, damage, vandalism, illegal access.
Legal basis of processing
The data recorded for the purposes indicated are processed for the legitimate interest of the Controller in a context of balancing interests.
The system parameters, operating times, shooting areas, angles, focal lengths and shooting depths have been configured so that the processing of images takes place in a way which respects fundamental rights and freedoms, and the dignity of all natural persons entering the site.
Recipients of the data
The personal data processed by the Controller are not disseminated, or given knowledge of it to undetermined subjects, in any possible form, including that of their provision or simple consultation. They may, instead, be communicated to the employees of the Data Controller, external collaborators appointed as Processors or authorised for processing as operating under the authority of the Data Controller.
They may also be communicated, to the extent strictly necessary, to those parties that for the purpose of processing your requests must provide goods or perform services on behalf of the Data Controller. Finally, they may be communicated to the subjects entitled to access them under the provisions of laws, regulations and Community regulations.
In particular, based on the roles and duties performed, employees have been entitled to process your personal data within their own limits and in accordance with the instructions given to them by the Controller.
External entities operating under the authority of the Data Controller have also been duly authorised on the basis of the type of service provided, the processing carried out and the nature of the data processed. The external subjects to whom the Data Controller has entrusted a processing of personal data have been designated as Data Processors.
Transfer of data
In no case does the Data Controller transfer personal data to third countries or international organizations. However, reserves the possibility of using cloud services; in which case, the service providers will be selected from those who provide adequate guarantees, as provided for by art. 46 GDPR 679/16.
Data retention
The Data Controller stores and processes personal data for the time necessary to fulfill the purposes indicated. In this case, the data is kept for 48 hours (or 72 hours in case of weekends and holidays) after registration and then overwritten, unless it is established that there is damage for which a longer storage period is appropriate and necessary.
Withdrawal of consent
With reference to art. 7 of GDPR 679/16, the data subject may revoke any consent given at any time. The processing of data subject to this information is not based on the consent of the data subject.
Refusal to provide data
Submission to the system is a condition for accessing certain areas of the site (e.g., parking). However, those concerned may avoid transit in the areas of recovery.
Proposal of complaint
The data subject has the right to lodge a complaint with the supervisory authority of the country in which he or she resides.
Automated decision making
In no case, with respect to the processing indicated below, the Data Controller carries out processing that consists of automated decision-making processes on the data of natural persons.
The Data Controller
Falegnameria F.lli Alberto & C. snc
(The Legal Representative)
