In relation to the processing of personal data provided, we inform you that:
1. Data Controller
The Data Controller is Aquatech S.r.l., with registered office in Venice, Santa Maria di Sala, Via delle Industrie 16, email: email@example.com, certified email: firstname.lastname@example.org (hereinafter referred to as “the Company”).
2. Type of data processed, Purposes and legal basis of Processing
The following personal data are collected and processed: personal data of a common nature (images recorded by the video surveillance systems), referring to employees, customers, collaborators, third parties for the purpose of protecting the corporate assets of the Company and safety in the workplace. Hence, the legal basis of the processing is the Data Controller’s lawful interest.
3. Communication of data to third parties – Data recipients
The Company may communicate the processed data for the above-mentioned purposes to: i) system administrators and persons in charge of processing the data recorded by the video surveillance systems; ii) the company which manages the video surveillance systems and their maintenance; iii) Police; iv) consultants, in case of disputes; v) Piovan S.p.A..
4. Transfer of data to Third Countries
The processed data are not transferred by the Data Controller to Third Countries. However, in case of transfer to Third Countries, this shall take place in compliance with the regulations applicable from time to time in accordance with article 44 and subsequent of EU Reg. 2016/679.
5. Methods of processing, period of data storage and related criteria
Data will be processed in printed or digital format. The images will be stored for the timing specified in the agreement with the trade union representatives, unless they are stored for the protection of rights or for other legal reasons (in which case they are stored for the period required for the execution of the afore-mentioned purposes and, at the end of these, for a further period prescribed by law for defence in legal proceedings (10 years after the last use and/or event interrupting the prescription)).
6. Data provision
The provision of data is mandatory and automatic in view of the Data Controller’s lawful interest.
7. Rights of the Data Subject, Withdrawal of Consent and Complaints to the Control Authority
The Data Subjects has the right, at any time, to request access to his/her personal data, the rectification, erasure and restriction of his/her personal data, to object to processing and to exercise the right to the portability of data. In any case, the Data Subject has the right to revoke, at any time, any consent given to data processing, without prejudice to the lawfulness of processing based on consent given before revocation. In the event of any alleged breach, if the conditions are met, the Data Subject has also the right to lodge a complaint with a data protection Control Authority in the EU member state where he/she habitually resides, or in the EU state where he/she works or where the alleged breach occurred.
8. Automated decision-making and Profiling
Processing is not carried out using automated decision-making (e.g. profiling).
9. Contacts and requests
For further information on the processing of personal data, for opposing the processing or exercising the rights under the current legislation on the protection of personal data (access, rectification, cancellation, limitation, opposition, portability) and/or to know the complete list of internal and external parties in charge of the processing and/or to obtain information regarding the transfer of data to non-EU countries and related guarantees, including the mechanisms and protection of data transfer pursuant to article 44 and subsequent of GDPR, a request may be sent either by e-mail to email@example.com or by fax to +39 041 487436.