Full disclosure pursuant to Art. 13 of EU Regulation No. 679/2016 (GDPR) for video surveillance
1. In compliance with current legislation on the protection of personal data, the company Là di Moret SRL informs you that it acquires personal data relating to video-recorded images.
To this end, it provides the following clarifications pursuant to Article 13 of EU Regulation No. 2016/679:
a) Identity and contact details of the Data Controller:
The Data Controller is the Company Là di Moret SRL, also with respect to the processing carried out by the Wellness Centre called “Blu Moret” with registered office in Via Viale Tricesimo, 276 in Udine Tel: 0432 545096, Fax 0432 545096, Email: firstname.lastname@example.org where the data processing is carried out and where the interested party may exercise his/her rights as per Art. 15 to 22 of the GDPR.
b) Contact details of the Data Protection Officer:
The Data Controller is not one of the entities for which the appointment of a Data Protection Officer pursuant to Articles 37, 38 and 39 GDPR is mandatory.
c) and d) Purposes and legal basis of processing and indication of the legitimate interests pursued by the controller or third parties:
The use of video surveillance is carried out to ensure the safety of persons and property, to guarantee the integrity of the company’s assets and to prevent unlawful acts against the owner or third parties.
The legal basis for legitimate data processing is the pursuit of a justifiable interest on the part of the data controller within the meaning of Art. 6(f) of EU Regulation No. 679/2016 and the Garante’s Measure on video surveillance dated 08.04.2010.
e) Recipients or categories of recipients of personal data:
Data may be communicated to:
– Persons in charge of processing pursuant to Art. 29 of the Regulation;
– Data Processors pursuant to Article 28 of the Regulations;
– Law Enforcement
f) Transfer of data abroad:
No transfer abroad is envisaged as part of this processing.
2. In addition to the information referred to in paragraph 1, at the time when the personal data is obtained, the Controller shall provide the Data Subject with the following further information necessary to ensure fair and transparent processing:
a) Retention period or criteria used to establish the period:
The data is kept for 24 hours after recording.
b) Right of access to personal data, rectification, erasure, portability, restriction or opposition to processing by the Data Subject:
The Data Subject may exercise the rights set out in Articles 15 to 22 of the GDPR; in particular, the right of access (Article 15) allows the Data Subject to obtain confirmation as to whether or not data is being processed and, if so, to access it.
c) Right to withdraw consent to data processing:
Consent is not required for this processing. Reference is made to points c) and d) of paragraph 1 above.
d) Right to lodge a complaint
The Data Subject has the right to lodge a complaint with the Supervisory Authority against the processing of data relating to him or her if it does not comply with the GDPR.
e) Nature of conferment and consequences of refusal:
Reference is made to the contents of the aforementioned point c) paragraph2.
f) Processing pursuant to Art. 22 paragraph1 and 4 (automated decision-making process), logic used and expected consequences for the data subject:
In implementing the processing purposes set out therein, the Data Controller does not carry out any automated decision-making processes pursuant to Art. 22 paragraphs 1 and 4.