INFORMATION NOTICE ON THE PROCESSING OF DATA THROUGH VIDEO SURVEILLANCE SYSTEMS
pursuant to Article 13 of EU Regulation 679/2016
Introduction
In compliance with the regulations established to protect the processing of personal data – Legislative Decree No. 196/2003 as amended by Legislative Decree No. 101/2018, EU Regulation 679/2016, and the General Provision of the Personal Data Protection Authority dated 08/04/2010 – CARCANO EGIDIO & C. S.R.L.
informs that surveillance equipment has been installed at its premises located in Paderno Dugnano (MI), Viale Bagatti Valsecchi No. 11.
Appropriate signage alerts users in transit about the presence of cameras.
Access to the areas under surveillance involves the collection, recording, storage, and, in general, the use of the images of the individuals concerned.
Failure to provide personal data for this type of processing will result in the inability to grant the individual access to the company premises of CARCANO EGIDIO & C. SRL.
Purpose and Legal Basis for Processing
The personal data collected and processed through the video surveillance system consists of images of individuals and objects located within the coverage area of these systems.
According to the authorization of the National Labor Inspectorate – Metropolitan Area of Milan No. 0066703 of 24.10.2024:
➢ The cameras inside the company premises will only operate outside working hours;
➢ The external system, on the other hand, records long-range images of the external access points to the company area and operates 24 hours a day.
The cameras are positioned around the company perimeter to monitor the access from the street, the courtyard, the parking area, and areas adjacent to the material storage and other common areas. This data is processed exclusively for the purpose of protecting people and property from possible assaults, thefts, robberies, damages, and acts of vandalism.
The legal basis for the processing is the legitimate interest of the company in safeguarding people and assets, preventing the commission of crimes or identifying the responsibilities (Article 6, paragraph 1, letter F, GDPR).
Processing Methods
Data collection is carried out in compliance with the principles of lawfulness, relevance, completeness, and non-excessiveness in relation to the purposes for which it is processed, and always in accordance with legal provisions.
The images are collected with the assistance of IT and telematic tools designed to store and manage the data while ensuring its security and safeguarding the maximum privacy of the individuals involved. The images are recorded and stored for 24 hours or for 72 hours during weekends or longer periods in the case of extended company closure, public holidays, summer holidays, or for longer periods upon specific order of the judicial or law enforcement authorities.
Categories of Entities to Whom Data May Be Disclosed or Who May Become Aware of It as Data Processors or Appointed Personnel
The collected and recorded images will be processed in compliance with the current regulations and, in any case, exclusively by the company’s employees or external collaborators acting as Data Processors or external Data Controllers for the video surveillance system, as well as by the Data Controller.
The collected and recorded images may be disclosed to the Security Institute and may be communicated to public authorities or institutions in cases required by law or when it is necessary to carry out specific orders from the Judicial Authority or Law Enforcement.
Rights of the Data Subject
Under the current regulations, the data subject has the right to:
➢ Know: a) the origin of personal data, b) the purposes and methods of processing, c) the logic applied when processing is carried out with the help of electronic tools, d) the identification details of the Data Controller, the Data Processors, or the categories of persons to whom personal data may be disclosed or who may become aware of it;
➢ Obtain, without delay, from the Data Controller or Data Processor: a) the deletion, anonymization, or blocking of data processed unlawfully, including data that no longer needs to be stored in relation to the purposes for which it was collected or further processed; b) confirmation that the operations referred to in letter a) have been brought to the attention of those to whom the data was disclosed or disseminated, except when such notification is impossible or involves disproportionate effort compared to the protected right;
➢ Object, in whole or in part, for legitimate reasons, to the processing of personal data concerning them, even if related to the purpose of the collection.
Data Controller and Processors
The rights can be exercised by submitting a request directly to the Data Controller (CARCANO EGIDIO & C. SRL) and the Data Processor, identified as Mr. Michele Pavesi and Mr. Martino Pavesi
Requests can be sent by email to info@carcanoegidio.it or via certified email (PEC) to carcano@pec.carcanoegidio.it.
Paderno Dugnano, 02/12/2024 CARCANO EGIDIO & C. S.R.L.
