NOTICE ON THE PROCESSING OF PERSONAL DATA THROUGH VIDEO SURVEILLANCE
(Pursuant to Article 13 of EU Regulation 2016/679 - GDPR)
1. Data Controller The Data Controller is Boutique Vittorio Citro, with registered office at Via Sasso 1, Roccapiemonte (SA). Contact e-mail: amministrazione@vittoriocitro.it Telephone: 08119723599
2. Purposes and Legal Basis The video surveillance system is installed exclusively for security purposes, to protect company assets and prevent theft or vandalism. The legal basis legitimising the processing is the legitimate interest of the Data Controller (Article 6, paragraph 1, point f of the GDPR) in protecting its business, property and the people present inside the premises.
3. Processing Methods The cameras record exclusively the internal and external areas near the shop windows and entrances, as necessary for the stated purpose. No audio recording or listening is active. The images are recorded and stored on local memory devices, protected by technical and organisational security measures to prevent unauthorised access.
4. Retention Period Recorded images are retained for a maximum period of 72 hours. At the end of this period, the images are automatically overwritten and irreversibly deleted, without prejudice to any requests from the Judicial Authority.
5. Data Recipients The images may be viewed only by the Data Controller. In the event of offences, the images may be handed over to the Police or the Judicial Authority. The data will not be disclosed or transferred abroad in any way.
6. Data Subject Rights Pursuant to Articles 15-22 of the GDPR, the data subject (the customer or employee recorded) has the right to request from the Data Controller:
-
Access to the images concerning them (if still retained);
-
Deletion of those images (the right to be forgotten);
-
Restriction of processing. To exercise these rights, the contacts indicated in point 1 may be used. Please note that, given the intrinsic nature of the images, the right to rectification does not apply. The data subject also has the right to lodge a complaint with the Italian Data Protection Authority.