EXTENDED INFORMATIVE ABOUT THE PROCESSING OF PERSONAL DATA THROUGH VIDEO SURVEILLANCE
(Under Article 13th of the European Regulation 679/2016)
The Data Controller is identified in the below brief informative located at the corporate spaces submitted to the processing through video surveillance. The Data Controller can be contacted for any information through the e-mail privacy@www.globalsolarfund.com.
Any communication will be managed as required by the GDPR, as detailed below.
Definition of personal data and information related to the activities concerning the processing
Under the GDPR, as for common personal data is intended: “any information concerning an identified or identifiable physical person; it is considered identifiable any physical person who can be identified, directly or indirectly, with particular reference to an identifier such as the name, an identification number, data concerning the localization, an online identifier, or one or more characteristic elements of their physical, physiological, genetical, psychical, economic, cultural or political identity (the “Data”).
The GDPR defines the particular categories of personal data as follows: “personal data that reveal the racial or ethnical origins, political opinions, religious or philosophical beliefs, or Union membership, as well as the processing of genetical and biometrical data meant to uniquely identify a physical person, data concerning their health or sexual life, or the person’s sexual orientation (the “Particular Data”).
The data controller manages the following categories of Data:
- Images or audiovisual footage depicting you, recorded and preserved according to the procedures outlined in the following paragraphs.
In any case, the Data Controller is engaged in making sure that the gathered and used information is appropriate regarding the finalities described in the following paragraph, and that this would not cause an invasion of your personal sphere.
Finalities and modalities of processing for which data are meant:
Your data will be processed by the Data Controller exclusively for the safeguard of the Data Controller’s properties, preventing them from damage or thefts, as well as for the safeguard of people’s security in the workplaces.
The processing of your Data, as for the aforementioned purposes, can happen even without your explicit consent, since the legal basis of the processing is made up of the legitimate interest of the owner in the security of their spaces, employees, co-workers, clients, and visitors.
Particularly, the processing will take place through the aid of cameras placed in the offices/warehouses/plants of the Data Controller.
The video surveillance system is not connected to the law enforcement authorities.
Legal basis and lawfulness of the processing
The processing of personal data, as mentioned in the above paragraph, is driven by the necessity of pursuing the legitimate interest of the Data Controller for the safeguard of the Data Controller’s properties, preventing them from damage or thefts, as well as for the safeguard of people’s security in the workplaces, as provided for in the (lett. f), art. 6 GDPR).
Communication of Data to people localized in the EU territory
Your Data will be processed by parties of whom the Data Controller makes use for the execution of activities connected to the video surveillance, who will act as authorized parties in the processing and/or as data processor, among which is Global Solar Fund Engineering S.r.l., which manages the processing for the companies owner of the plants. There is no data transfer to countries outside of the European Union.
In particular, for the purpose of reaching the finalities described in the above paragraph, your Data will be introduced to the employees, the assimilated staff, and the co-workers of the Data Controller, as parties authorized to the processing of personal data.
The content acquired by cameras can be exclusively visioned by suitably named staff, authorized to the processing by the Data Controller or parties held eligible to the processing by the Data Controller himself.
Retention period
Any data concerning you will be processed by the Data Controller, with particular reference to images and/or audiovisual footages, which will be retained for a no longer period than (i) 24 hours for the offices; (ii) no longer than seven days for the warehouses and the photovoltaic plants.
In any case, without prejudice to special needs of further retention, due to celebrations, or office and business closure, as well as in case of specific investigative request submitted by the police enforcement or the legal authority.
Your rights in capacity as interested in the processing
During the period in which the Data Controller holds or processes your Data, and if ever, your Particular Data, you can anytime exercise the following rights as interested in the processing:
- Right of access – you have the right to obtain the confirmation about the existence or non-existence of a processing of your personal data, as well as the right to receive any piece of information concerning the same processing;
- Right of rectification – you have the right to obtain the rectification of your personal data of our belongings, whenever the same ones are incomplete or unexacted;
- Right to cancel – in some circumstances, you may have the right to obtain the deletion of your personal data present in our archives, whenever they are non-relevant for the purpose of the continuation of work relation or considered necessary under obligation law;
- Right of limitation of the processing – whether some particular conditions may verify, you have the right to obtain the limitation of the processing of your personal data, whenever they are non-relevant for the purpose of the continuation of work relation or considered necessary under obligation law;
- The right to portability of Data – you have the right to obtain the transfer of your personal data of our belongings in favour of a different Data Controller;
- Right of opposition – you have the right to oppose any time for reasons regarding your particular condition, to the processing of data concerning you, based on the lawfulness of legitimate interest, or the execution of a task of public interest, or in the exercise of public functions, including the profiling, except in case there might be legitimate reasons for the owner to continue the processing, prevailing on the interests, the rights and freedom of the interested, or for the certainty, the exercise or defence of a right in a legal branch;
- Right to revoke the consent – you have the right to revoke the consent of processing your personal data anytime, without prejudice against the lawfulness of the processing based on the consent before the revoke;
- Right to file a complaint to the Authority Control – In case the Data Controller may refuse to satisfy your requests to access, the reasons for the relative refusal will be given. Whenever this may happen, you have the right to file a complaint as described in the following paragraph;
Such requests will have the possibility to be addressed to the following e-mail address privacy@www.globalsolarfund.com
Complaints
Whenever you wish to file a complaint about the modalities in which your Data and, if in case, your Particular Data have been processed by the Data Controller you have the right to file a petition directly to the Authority Control.