PRIVACY INFORMATION MODEL COLLECTED DATA THROUGH VIDEO SURVEILLANCE SYSTEMS
Disclosure pursuant to and for the purposes of art. 13-14, EU Reg. 2016/679 (European regulation on the protection of personal data)
We wish to inform you that the EU Reg. 2016/679 (“European regulation on the protection of personal data”) provides for the protection ofpeople and other subjects and respect for the processing of personal data.
Pursuant to articles 13 and 14, therefore, we provide you with the following information:
1. Purpose, legal basis of the processing for which the data are intended
For security reasons, surveillance cameras are installed outside and inside Agririfugio Molini and at the entrance to the Casa dell’Arco apartments in via San Fruttuoso 31 and 35 , inevitably, collect the personal data (image) of anyone who enters the visual range of the cameras, duly signaled by signs placed outside the action limit of the cameras. The function of the billboards is to warn the person concerned that, once the indicated limit has been exceeded, his image will be video-recorded.
The legal basis for the processing of personal data (images) is constituted by the express consent of the users, when, after having read
the warning signs, they have chosen to enter the visual range of the video cameras.
2. Processing methods
In relation to the indicated purposes, your data are subject to computerized processing. The processing operations are implemented in such a way as to guarantee the logical, physical security and confidentiality of your personal data.
3. Nature of personal data
Your images taken by surveillance cameras are processed, for the treatment of which you have given your consent by exceeding the limit indicated on the warning signs placed outside the visual range of the video surveillance.
4. Mandatory or optional nature of the provision
The provision of your personal data is mandatory in order to have access to the building in which the company of the Data Controller indicated in point 7) of this information is located.
5. Scope of communication and dissemination of data
Your data may be communicated to:
all subjects to whom the right to access such data is recognized by virtue of regulatory provisions; The Company Manager Mr. Andrea Leverone to the police and to all those natural and/or legal, public and/or private persons necessary for the completion of any complaints in the event of violations of a civil and criminal nature.
6. Method and duration of retention of personal data
The images are recorded and archived in the cloud and will be kept for a maximum registration limit of 7 days, after
which they are automatically deleted, or due to specific investigative requests from the Judicial Authority.
7. Identification details of the data controller
The data controller is:
The Garden of the Borgo soc. coop. Agricola ilgiardinodelborgo@pec.it
8. Rights of the interested
party 8.1 Art. 15 (right of access), 16 (right of rectification) of EU Reg. 2016/679
The interested party has the right to obtain from the data controller confirmation that a processing of personal data concerning him and in this case, to obtain access to personal data and the following information:
a) the purposes of the processing;
b) the categories of personal data in question;
c) the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if recipients from third countries or international organizations;
d) the envisaged retention period of the personal data or, if this is not possible, the criteria used to determine this period;
e) the existence of the right of the interested party to ask the data controller to rectify or cancel personal data or limit the processing of personal data concerning him or to oppose their treatment;
f) the right to lodge a complaint with a supervisory authority;
h) the existence of an automated decision-making process, including profiling and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of such processing for the data subject.
8.2 Right pursuant to art. 17 of EU Reg. 2016/679- right to cancellation (“right to be forgotten”)
The interested party has the right to obtain from the data controller the cancellation of personal data concerning him without unjustified delay and the data controller has the obligation to cancel personal data without unjustified delay, if one of the following reasons exists:
a) personal data are no longer necessary with respect to the purposes for which they were collected or otherwise processed;
b) the interested party revokes the consent on which the treatment is based in accordance with article 6, paragraph 1, letter a), or article 9, paragraph 2, letter a), and if there is no other legal basis for the treatment ;
c) the interested party opposes the treatment pursuant to article 21, paragraph 1, and there is no prevailing legitimate reason to proceed with the treatment, or he opposes the treatment pursuant to article 21, paragraph 2;
d) the personal data have been processed unlawfully;
e) personal data must be canceled to fulfill a legal obligation established by Union or Member State law to which the data controller is subject;
f) the personal data have been collected in relation to the offer of information society services pursuant to article 8, paragraph 1 of EU Reg. 2016/679.
8.3 Right pursuant to art. 18 Right to limitation of treatment
The interested party has the right to obtain from the data controller the limitation of treatment when one of the following hypotheses occurs:
a) the data subject disputes the accuracy of the personal data, for the period necessary for the data controller to verify the accuracy of such personal data;
b) the processing is unlawful and the interested party opposes the cancellation of personal data and instead requests that their use be limited;
c) although the data controller no longer needs it for processing purposes, personal data are necessary for the data subject to ascertain, exercise or defend a right in court;
d) the interested party has opposed the processing pursuant to article 21, paragraph 1, EU Regulation 2016/679 pending the verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.
8.4 Right pursuant to Article 20 Right to data portability
The data subject has the right to receive the personal data concerning him/her provided to a data controller in a structured format, commonly used and readable by an automatic device, and has the right to transmit such data to another data controller without impediments by the data controller.
9. Withdrawal of consent to processing
You have the right to withdraw consent to the processing of your personal data by sending an e-mail to one of the addresses indicated in point 7) of this information, accompanied by a photocopy of your identity document, with the following text: <<revocation of consent to the processing of all my personal data>>. At the end of this operation, your personal data will be removed from the archives as soon as possible.
If you wish to have more information on the processing of your personal data, or to exercise the rights referred to in point 8 above, you can send an e-mail to one of the aforementioned addresses. Before we can provide you, or change any information, we may need to verify your identity and answer some questions. An answer will be provided as soon as possible.