PRIVACY NOTICE ON PERSONAL DATA PROCESSING THROUGH VIDEO SURVEILLANCE

(Pursuant to Art. 13 of EU Regulation 2016/679 - GDPR)

1. Data Controller The Data Controller is Boutique Vittorio Citro, located at Via Sasso 1, Roccapiemonte (SA). Contact email: amministrazione@vittoriocitro.it Phone: [INSERT PHONE NUMBER].

2. Purpose and Legal Basis The video surveillance system is installed solely for security purposes, to protect company assets and prevent theft or vandalism. The legal basis for processing is the legitimate interest of the Controller (Art. 6, par. 1, lett. f GDPR) to safeguard the business, its property, and individuals within the premises.

3. Processing Methods Cameras record exclusively the internal areas [and possibly external ones, e.g., the shop window – specify] necessary for the stated purpose. No audio recording or listening is active. Images are recorded and stored on local servers/devices, protected by technical and organizational security measures to prevent unauthorized access.

4. Retention Period Recorded images are kept for a maximum period of 24 hours [or specify up to 48/72 hours if justified, e.g., for holiday closures]. After this period, images are automatically overwritten and irreversibly deleted, except for any requests from Judicial Authorities.

5. Data Recipients Images may be viewed only by the Data Controller and expressly authorized personnel (e.g., security staff or IT technicians for system maintenance, bound by confidentiality). In case of crimes, images may be handed over to Law Enforcement or Judicial Authorities. Data will not be disseminated or transferred abroad in any way.

6. Rights of the Data Subject Pursuant to Arts. 15-22 GDPR, the data subject (customer or employee recorded) has the right to request from the Controller:

  • Access to images concerning them (if still stored);

  • Deletion of such images (right to be forgotten);

  • Restriction of processing. To exercise these rights, you may contact the details indicated in point 1. Please note that, due to the intrinsic nature of images, the right to rectification does not apply. The data subject also has the right to lodge a complaint with the Data Protection Authority.