Personal data processing policy pursuant to art. 13 of EU Regulation 2016/679 on the protection of personal data, GDPR
This information is provided to complete the information provided by means of the signs placed within the range of action of the video cameras relating to the video surveillance system present at the site of via Madonna del Riposo 34, 39057 Appiano sulla strada del vino (BZ province).
DATA CONTROLLER
The party responsible for decisions regarding the purposes, methods and security of personal data is
Nikolaus Bagnara S.p.A., located in via Madonna del Riposo 34, 39057 Appiano sulla strada del vino (BZ province)
The contact data of the Data Controller is as follows:
telephone: +39 0471 66 21 09
email: info_at_bagnara.net
PURPOSES OF THE PROCESSING
The video surveillance system is installed to ensure the security and protection of the company's assets, in order to prevent acts of vandalism and damage.
The video cameras cover the main entrance and the goods loading and unloading area.
The images are viewed in real time to ensure control of site access and are recorded in order to be able to reconstruct the dynamics of an event causing damage by acquiring evidence in the context of defensive controls.
The system is in operation 24/7 and the viewing angle of the cameras is set to exclude from the shooting areas those areas not relevant to the purposes for which they were installed
LEGAL BASIS FOR DATA PROCESSING
The legal basis of the processing is the legitimate interest of the Data Controller, pursuant to art. 6 para. 1 letter f) of the GDPR, for the protection of the company’s assets.
SCOPE OF DATA COMMUNICATION
The images are accessible to the Management and to formally authorised collaborators.
In relation to the occurrence of unlawful acts or acts committed for reasons related to the conduct of investigations, they are made available to the Legal Authorities or the Police.
The video surveillance system used is a closed loop.
DATA RETENTION PERIOD - HOW LONG WE STORE YOUR DATA
The images are normally stored for a period of 24 hours from the moment of filming. This period may be extended in case of special circumstances, which may require further time, for example holidays or offices closures, or to comply with specific requests made by the judicial or police authorities. Images are then automatically deleted from all media.
WHAT YOUR RIGHTS ARE AND HOW YOU CAN EXERCISE THEM
The Data Subject, if the limitations provided by law do not apply, has the following rights:
right of access: you may request that the personal data concerning you is made available to you.
right of deletion: you can request the deletion of your personal data: a) if the data is unlawfully processed; b) if it is no longer necessary in relation to the purposes for which it was collected or subsequently processed. The right of deletion may be denied when the data is necessary for defence in court or to fulfil a legal obligation.
right of limitation: you may obtain a limitation of processing in the event of unlawful processing, or to prevent its deletion if the data is necessary for the establishment, exercise or defence of a right in court.
In practice, the right to rectification and integration cannot be exercised, given the intrinsic nature of the data collected, as these are images collected in real time concerning an objective fact.
The exercise of rights is subject to the limits provided for by law: it is subject to some exceptions aimed at safeguarding the legitimate interest of the Data Controller. The request must specify the right that you intend to exercise and must indicate: the date and time when it was filmed, indications on the clothing worn or other items allowing identification, as well as the presence of other people. In the event that these indications are missing or insufficient to allow the retrieval of the images, you will be notified of the same. In the event of a positive identification, you will be informed of the date, time and place in which you can view the images concerning you.
You can exercise your rights by contacting the Data Controller at the addresses given in this policy. The Data Controller will verify that you are entitled to exercise the said right and you will be notified within 1 month, extensible for another two months in cases of particular complexity.
RIGHT TO LODGE A COMPLAINT WITH THE SUPERVISORY AUTHORITY
If you believe that the processing of your data by the Data Controller violates the legislation contained in the GDPR, you can lodge a complaint with the Supervisory Authority, the Personal Data Protection Authority, which can be contacted via the contact details shown on the site https://www.garanteprivacy.it