Data Controller

   TRATTORIA LEONIDA Vicolo Alemagna, 2 - 40125 Bologna BO

VAT No. 03697340374 - +39 051 239742

info@trattorialeonida.com - https://www.trattorialeonida.com

Data Protection Officer (DPO)

Not appointed

Processed Personal Data - Processing Methods

To protect the company's assets, surveillance systems are operational in the access areas to the company and within the company perimeter, duly signalled before their respective range of action by means of specific signs, as provided for in the General Provision on Video Surveillance by the Privacy Guarantor of April 8, 2010, and in EDPB guidelines 3/2019 (European Data Protection Board). Therefore, the Company will process the images displayed and/or recorded through the surveillance systems of individuals accessing its premises or passing in the immediate vicinity of our facilities. The cameras do not capture public areas but only relevant areas. The cameras are operational 24/7. The images are not accessible from the outside.

Data Recipients

Data may be communicated to subjects acting as data controllers, such as supervisory and control authorities and any public entity authorised to request data, such as the judiciary and/or public security authority.

Purpose of the Processing

Surveillance activities aimed at:

Protection of the company's assets;

Organisational and productive needs.

Legal Basis of the Processing

The surveillance activity is based on pursuing the legitimate interest (Article 6, paragraph 1 letter f), of the GDPR in carrying out the processing for the purposes indicated in this notice.

Data Retention Period

72 hours from the moment the images are detected. After this period, the images will be completely deleted by overwriting with new images.
 

Provision of Data

Refusal to provide data will result in the impossibility of allowing the data subject access to the data controller's premises. Access to the monitored areas involves the collection, recording, storage, and, in general, the use of images of the data subjects.

Authorised Data Processors

Data may be processed, on behalf of the data controller, by individuals designated as authorised to process, if internal, or data processors according to Art.28, such as companies providing control and surveillance services and companies providing surveillance system maintenance services. Data may be processed for the purposes mentioned above by authorised processors who have received appropriate operational instructions.

Data Subject Rights - Complaint to the Supervisory Authority

By contacting the Company via email at info@trattorialeonida.com, data subjects can exclusively exercise the following rights depending on the type of processing: request access to the images from the data controller. Data subjects may also file a complaint with the competent Supervisory Authority at the address urp@gpdp.it. The right to update or integrate, as well as the right to rectify under Article 16 GDPR, is not concretely exercisable due to the intrinsic nature of the processed data (real-time collected images concerning an objective fact). The right to data portability under Article 20 GDPR is not exercisable as the processing is carried out in pursuit of a legitimate interest of the controller. The data subject may request to view the images in which they believe they have been captured by presenting or attaching suitable identification documents to the request. The response to an access request cannot include any data relating to third parties, unless the breakdown of the processed data or the deprivation of some elements renders the personal data concerning the data subject incomprehensible. Once the aforementioned retention periods have elapsed, it will be impossible to fulfil the access request.

Bologna, Monday, Tuesday, April 9, 2024 - Rev. 1.0