CCTV Privacy Notice
pursuant to Regulation (EU) 2016/679 (“GDPR”)
Pursuant to Article 13
Data controller
TRATTORIA LEONIDA Vicolo Alemagna, 2 - 40125 Bologna BO
VAT No. 03697340374 - +39 051 239742
info@trattorialeonida.com - https://www.trattorialeonida.com
Data Protection Officer (DPO)
Not appointed
Personal data processed - Processing methods
To protect the company’s assets, video surveillance systems operate in the areas around the company’s entrances and within its premises. Appropriate signs are displayed before entering the area covered by the cameras, in accordance with the Italian Data Protection Authority’s General Provision on Video Surveillance of 8 April 2010 and EDPB Guidelines 3/2019 (European Data Protection Board). The Company will therefore process images viewed and/or recorded by its video surveillance systems of anyone entering its premises or passing in the immediate vicinity of its buildings. The cameras do not record public areas, only areas belonging to the company. The cameras operate 24 hours a day, 7 days a week. Images cannot be accessed externally.
Recipients of the data
Data may be disclosed to entities acting as data controllers, including supervisory and regulatory authorities and any public body legally entitled to request the data, such as judicial and/or public security authorities.
Purpose of processing
Video surveillance for the following purposes:
protection of company property;
organizational and production requirements.
Legal basis for processing
Video surveillance is carried out on the basis of legitimate interests (Article 6(1)(f) of the GDPR) for the purposes set out in this notice.
Data Retention Period
72 hours from the time the images are captured. After this period, the images will be completely erased as new images overwrite them.
Providing personal data
Failure to provide the data will make it impossible for the data subject to access the data controller's premises. Entering areas under video surveillance entails the collection, recording, storage and, in general, use of images of data subjects.
Authorized persons processing the data
Data may be processed on behalf of the controller by individuals designated as authorized persons if they are employees, or by data processors under Art. 28, such as companies providing security and surveillance services and companies maintaining the video surveillance system. Data may be processed for the purposes set out above by authorized persons who have received appropriate operating instructions.
Data subject rights - Complaints to the supervisory authority
By contacting the Company by email at info@trattorialeonida.com, data subjects may exercise only the following rights, depending on the type of processing: request access to their images from the controller. Data subjects may also lodge a complaint with the competent supervisory authority at urp@gpdp.it. The right to update or supplement data, as well as the right to rectification under Art. 16 GDPR, cannot in practice be exercised given the inherent nature of the data processed (images captured in real time relating to an objective fact). The right to data portability under Art. 20 GDPR cannot be exercised because processing is carried out in pursuit of the controller's legitimate interest. Data subjects may request to view images in which they believe they have been recorded by presenting or attaching suitable proof of identity to their request. A response to an access request may not include data relating to third parties, unless separating the data processed or removing certain elements would make the personal data relating to the data subject incomprehensible. Once the retention periods set out above have expired, it will be impossible to fulfil an access request.
Bologna Monday Tuesday 9 April 2024– Rev. 1.0
