Privacy notice-for video surveillance

The undersigned Company, in its capacity as Data Controller, informs that closed-circuit video surveillance systems are in operation in the areas of the company structure, appropriately indicated before the relevant range of action by means of special signs, in accordance with the provisions of the GDPR (General Data Protection Regulation – EU Regulation 2016/679) and the provisions of the Privacy Guarantor.

Purpose of the processing

The collection and processing of personal data is carried out:

1. To ensure the safety of the plants, workers and/or collaborators and any visitors
2. For the protection of the Company's assets, operators and citizens
3. For organizational needs
4. In general, for the protection of public safety, prevention and detection of crimes

and will be subject to processing based on the principles of fairness, lawfulness, transparency and protection of confidentiality and personal rights.

Processing methods

The processing of data for the purposes set out takes place by means of fixed digital cameras, connected to the company's telematic network, which allow the viewing and storage of images. The storage, 24 hours a day, 365 days a year, takes place on video recorders within the company, access to which will be authorized only by the Data Processor appointed by the Data Controller. There may be workstations that will have access to some images, only for viewing and without the possibility of registration.

The presence of the cameras is indicated by special signs, which are placed before the range of action of the cameras and are large enough to be easily seen, with writings in characters that allow easy reading.

Place of processing

The data are currently processed and stored at:

1. Registered office, Via Ettore Ponti, 49, 20143 Milan
2. Secondary office Via Borgo ai Fossi, 1/3/5, 50018 Scandicci (Florence)

Personal data controller

For the management and processing of the data in question, the company Eta Sistemi Srl, Piazza Giuseppe Grandi 6, Milan, in the person of its Legal Representative, has been appointed as Data Processor.

Mandatory or optional nature of the provision of data and consequences of any refusal to provide it

The provision of data is mandatory and is strictly instrumental to access the Company's spaces subject to video surveillance. Failure to provide such data may make it impossible for the data subject to access these spaces.

Communication of data

For the purposes indicated, only the Data Processor may access the data collected through the video surveillance systems, and viewing may only be requested by personnel authorized by the Data Controller.

The data may be communicated to external parties entitled to make the request, such as the judicial or public security authorities.

Transfer of data abroad

The transfer of data to third party companies outside the European Union is not envisaged.

Data retention times

The storage period of the images will be limited to 24 hours, except for special needs for further storage in relation to internal organizational aspects (holidays, holiday closure, production flows, etc.) or in the event that a specific investigative request from the judicial or public security authorities must be adhered to.

Rights of the data subject

The data subject (identifiable data subject) may exercise, vis-à-vis the Company, the rights provided for by the GDPR and precisely:

1. Right of access to personal data and information (Art. 15 GDPR)
2. Right to object to the processing of personal data (art. 21 GDPR), without prejudice to the provisions in relation to the need for mandatory data processing in order to access company spaces.
3. Right to restriction of processing (Art. 18 GDPR)
4. Right to erasure of your data (art. 17 GDPR) except for those contained in documents that must be compulsorily kept by the Company and unless there is an overriding legitimate reason to proceed with the processing.

Data Controller and Data Processor

The data controller, who can be contacted to assert the rights transcribed above, is RENATO CORTI SRL, with registered office in MILAN VIA ETTORE PONTI, 49 20143 MILAN The Data Processor is the Pro Tempore Legal Representative. The aforementioned rights may also be exercised by you by sending communications to the following e-mail address: privacy@renatocorti.it.

Milan, 02/09/2019