Video surveillance information

pursuant to Regulation (EU) 2016/679 (“GDPR”)
Pursuant to art. 13

Data controller

LEONIDA RESTAURANT Vicolo Alemagna, 2 - 40125 Bologna BO

PI 03697340374 - 39 051 239742

info@trattorialeonida.com - https://www.trattorialeonida.com



Data Protection Officer (DPO)

Not designated


Personal data processed - Processing methods

To protect company assets, video surveillance systems are in operation at company entrances and within the company perimeter. These systems are appropriately marked with appropriate signs before their coverage, in accordance with the General Provision on Video Surveillance of the Italian Data Protection Authority of 8 April 2010 and the EDPB (European Data Protection Board) Guidelines 3/2019. The Company will therefore process the images viewed and/or recorded by the video surveillance systems of people accessing its premises or passing in the immediate vicinity of our facilities. The cameras do not cover public areas, but only relevant areas. The cameras are operational 24/7. The images are not accessible from the outside.


Data recipients

The data may be disclosed to entities acting as data controllers, such as supervisory and control authorities and any public body authorized to request the data, such as judicial authorities and/or public security agencies.


Purpose of the processing

Video surveillance activities aimed at:

protection of company assets;

organizational and production needs.

Legal basis for processing

Video surveillance is based on the pursuit of the legitimate interest (Article 6, paragraph 1, letter f), of the GDPR, in carrying out processing for the purposes indicated in this notice.

Data retention period

72 hours after the images were taken. After this time, the images will be completely deleted and overwritten with new ones.

Data provision

Refusal to provide data will prevent the interested party from accessing the data controller's premises. Access to video-surveillance areas involves the collection, recording, storage, and, in general, use of the data subject's images.


Persons authorised to process data

The Data may be processed, on behalf of the Data Controller, by persons designated as authorized data processors, if internal, or data controllers pursuant to Article 28, such as companies providing monitoring and surveillance services and companies providing video surveillance system maintenance services. The data may be processed for the purposes indicated above by authorized data processors who have received adequate operating instructions.


Data subject rights - Complaint to the supervisory authority

By contacting the Company via email atinfo@trattorialeonida.com, data subjects may exercise the following rights exclusively depending on the type of processing: request access to the images from the data controller. Data subjects may also lodge a complaint with the competent supervisory authority aturp@gpdp.itThe right to update or supplement, as well as the right to rectification pursuant to Art. 16 of the GDPR, cannot be exercised given the intrinsic nature of the data processed (images collected in real time regarding an objective fact). The right to data portability pursuant to Art. 20 of the GDPR cannot be exercised as the processing is carried out in pursuit of a legitimate interest of the data controller. The data subject may request to view the images in which they believe they were captured by showing or attaching appropriate identification documents to the request. The response to an access request cannot include any data relating to third parties, unless the breakdown of the processed data or the removal of certain elements renders the personal data relating to the data subject incomprehensible. Once the retention periods indicated above have expired, it will be impossible to fulfill the access request.


Bologna Monday, April 9, 2024 – Rev. 1.0